linux-stable-rt/net/ipv6/netfilter
Yasuyuki Kozakai 8ca31ce52a netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion
The current code ignores rules for internal options in HBH/DST options
header in packet processing if 'Not strict' mode is specified (which is not
implemented). Clearly it is not expected by user.

Kernel should reject HBH/DST rule insertion with 'Not strict' mode
in the first place.

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-09-24 15:53:39 -07:00
..
Kconfig netfilter: make security table depend on NETFILTER_ADVANCED 2008-07-23 16:42:42 -07:00
Makefile
ip6_queue.c netns: Use net_eq() to compare net-namespaces for optimization. 2008-07-19 22:34:43 -07:00
ip6_tables.c
ip6t_HL.c
ip6t_LOG.c
ip6t_REJECT.c
ip6t_ah.c
ip6t_eui64.c
ip6t_frag.c
ip6t_hbh.c netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion 2008-09-24 15:53:39 -07:00
ip6t_hl.c
ip6t_ipv6header.c
ip6t_mh.c
ip6t_rt.c
ip6table_filter.c netfilter: ip6table_filter in netns for real 2008-07-08 02:36:18 -07:00
ip6table_mangle.c netfilter: ip6table_mangle: don't reroute in LOCAL_IN 2008-06-24 13:30:45 -07:00
ip6table_raw.c
ip6table_security.c netfilter: ip{,6}tables_security: fix future section mismatch 2008-07-26 17:48:38 -07:00
nf_conntrack_l3proto_ipv6.c
nf_conntrack_proto_icmpv6.c
nf_conntrack_reasm.c net: convert BUG_TRAP to generic WARN_ON 2008-07-25 21:43:18 -07:00