Patrick McHardy 5c901daaea [NETFILTER]: Redo policy lookups after NAT when neccessary ...

When NAT changes the key used for the xfrm lookup it needs to be done
again. If a new policy is returned in POST_ROUTING the packet needs
to be passed to xfrm4_output_one manually after all hooks were called
because POST_ROUTING is called with fixed okfn (ip_finish_output).

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-07 12:57:35 -08:00

..

ipvs

[NET]: Endian-annotate struct iphdr

2006-01-06 13:24:29 -08:00

netfilter

[NETFILTER]: Redo policy lookups after NAT when neccessary

2006-01-07 12:57:35 -08:00

af_inet.c

[NET]: Add a dev_ioctl() fallback to sock_ioctl()

2006-01-03 14:18:33 -08:00

ah4.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

arp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

datagram.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

devinet.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

esp4.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

fib_frontend.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

fib_hash.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

fib_lookup.h

[IPV4]: Prepare FIB core for RCU.

2005-08-29 16:08:31 -07:00

fib_rules.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

fib_semantics.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

fib_trie.c

[IPV4] fib_trie: build fix

2006-01-03 14:38:34 -08:00

icmp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

igmp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inet_connection_sock.c

[ICSK]: Move v4_addr2sockaddr from TCP to icsk

2006-01-03 13:10:39 -08:00

inet_diag.c

[IPV6]: Introduce inet6_timewait_sock

2006-01-03 13:10:47 -08:00

inet_hashtables.c

[INET]: Generalise tcp_v4_hash_connect

2006-01-03 13:10:55 -08:00

inet_timewait_sock.c

[TWSK]: Introduce struct timewait_sock_ops

2006-01-03 13:10:54 -08:00

inetpeer.c

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

ip_forward.c

[IPV4]: Remove some dead code from ip_forward()

2005-08-29 16:03:06 -07:00

ip_fragment.c

[NET]: Endian-annotate struct iphdr

2006-01-06 13:24:29 -08:00

ip_gre.c

[NETFILTER]: Fix xfrm lookup in ip_route_me_harder/ip6_route_me_harder

2006-01-07 12:57:33 -08:00

ip_input.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_options.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_output.c

[NETFILTER]: Redo policy lookups after NAT when neccessary

2006-01-07 12:57:35 -08:00

ip_sockglue.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipcomp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipconfig.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipip.c

[NETFILTER]: Fix xfrm lookup in ip_route_me_harder/ip6_route_me_harder

2006-01-07 12:57:33 -08:00

ipmr.c

[NET]: Change 1500 to ETH_DATA_LEN in some files

2006-01-05 16:48:56 -08:00

Kconfig

[TCP] BIC: CUBIC window growth (2.0)

2006-01-03 13:10:28 -08:00

Makefile

[TCP] BIC: CUBIC window growth (2.0)

2006-01-03 13:10:28 -08:00

multipath_drr.c

[IPV4]: possible cleanups

2005-08-29 15:33:20 -07:00

multipath_random.c

[IPV4]: Multipath modules need a license to prevent kernel tainting.

2005-06-13 14:29:06 -07:00

multipath_rr.c

[IPV4]: Multipath modules need a license to prevent kernel tainting.

2005-06-13 14:29:06 -07:00

multipath_wrandom.c

[NET]: kfree cleanup

2005-11-08 09:41:34 -08:00

multipath.c

…

netfilter.c

[NETFILTER]: Fix xfrm lookup in ip_route_me_harder/ip6_route_me_harder

2006-01-07 12:57:33 -08:00

proc.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

protocol.c

[TCP]: Move the tcp sock states to net/tcp_states.h

2005-08-29 15:41:54 -07:00

raw.c

[PATCH] raw_sendmsg DoS on 2.6

2005-09-19 18:45:42 -07:00

route.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

syncookies.c

[ICSK]: Rename struct tcp_func to struct inet_connection_sock_af_ops

2006-01-03 13:10:38 -08:00

sysctl_net_ipv4.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

tcp_bic.c

[TCP] BIC: spelling and whitespace

2006-01-03 13:10:27 -08:00

tcp_cong.c

[TCP]: less inline's

2006-01-03 16:03:49 -08:00

tcp_cubic.c

[TCP] cubic: use Newton-Raphson

2006-01-03 13:11:09 -08:00

tcp_diag.c

[INET_DIAG]: Move the tcp_diag interface to the proper place

2005-08-29 15:57:54 -07:00

tcp_highspeed.c

[TCP]: TCP highspeed build error

2005-11-17 14:11:18 -08:00

tcp_htcp.c

[TCP]: add tcp_slow_start helper

2005-11-10 17:07:24 -08:00

tcp_hybla.c

[TCP]: fix congestion window update when using TSO deferal

2005-11-10 16:53:30 -08:00

tcp_input.c

[TCP]: less inline's

2006-01-03 16:03:49 -08:00

tcp_ipv4.c

[TCP]: syn_flood_warning is only needed if CONFIG_SYN_COOKIES is selected

2006-01-04 01:58:06 -02:00

tcp_minisocks.c

[IPV6]: Introduce inet6_timewait_sock

2006-01-03 13:10:47 -08:00

tcp_output.c

[TCP]: less inline's

2006-01-03 16:03:49 -08:00

tcp_scalable.c

[TCP]: add tcp_slow_start helper

2005-11-10 17:07:24 -08:00

tcp_timer.c

[TCP]: spelling fixes

2005-11-10 17:13:47 -08:00

tcp_vegas.c

[TCP] tcp_vegas: Fix slow start

2006-01-04 13:59:32 -08:00

tcp_westwood.c

[INET_DIAG]: Rename tcp_diag.[ch] to inet_diag.[ch]

2005-08-29 15:57:48 -07:00

tcp.c

[IP_SOCKGLUE]: Remove most of the tcp specific calls

2006-01-03 13:10:58 -08:00

udp.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

xfrm4_input.c

[IPV4/6]: Netfilter IPsec input hooks

2006-01-07 12:57:31 -08:00

xfrm4_output.c

[NETFILTER]: Redo policy lookups after NAT when neccessary

2006-01-07 12:57:35 -08:00

xfrm4_policy.c

[XFRM]: Handle DCCP in xfrm{4,6}_decode_session

2005-12-19 14:03:46 -08:00

xfrm4_state.c

[IPV4]: possible cleanups

2005-08-29 15:33:20 -07:00

xfrm4_tunnel.c

[NET]: Make ipip/ip6_tunnel independant of XFRM

2005-07-19 14:03:34 -07:00