Julian Anastasov 42c1edd345 netfilter: nf_nat: avoid double seq_adjust for loopback ... Avoid double seq adjustment for loopback traffic because it causes silent repetition of TCP data. One example is passive FTP with DNAT rule and difference in the length of IP addresses. This patch adds check if packet is sent and received via loopback device. As the same conntrack is used both for outgoing and incoming direction, we restrict seq adjustment to happen only in POSTROUTING. Signed-off-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: Patrick McHardy <kaber@trash.net>		2011-06-16 17:29:22 +02:00
..
arp_tables.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6	2011-04-19 11:24:06 -07:00
arpt_mangle.c	netfilter: arpt_mangle: fix return values of checkentry	2011-02-01 16:03:46 +01:00
arptable_filter.c
ip_queue.c	netfilter: fix looped (broad|multi)cast's MAC handling	2011-06-16 17:27:04 +02:00
ip_tables.c	netfilter: ip_tables: fix compile with debug	2011-06-16 17:16:37 +02:00
ipt_ah.c
ipt_CLUSTERIP.c	netfilter: add more values to enum ip_conntrack_info	2011-06-06 01:35:10 +02:00
ipt_ecn.c	netfilter: ipt_ecn: fix inversion for IP header ECN match	2011-06-16 17:24:55 +02:00
ipt_ECN.c
ipt_LOG.c
ipt_MASQUERADE.c	netfilter: add more values to enum ip_conntrack_info	2011-06-06 01:35:10 +02:00
ipt_NETMAP.c
ipt_REDIRECT.c
ipt_REJECT.c	ipv4: Don't pre-seed hoplimit metric.	2010-12-12 22:08:17 -08:00
ipt_ULOG.c
iptable_filter.c
iptable_mangle.c	netfilter: do not omit re-route check on NF_QUEUE verdict	2011-01-20 10:23:26 +01:00
iptable_raw.c
iptable_security.c
Kconfig	netfilter: ipt_addrtype: rename to xt_addrtype	2011-03-15 20:16:20 +01:00
Makefile	netfilter: ipt_addrtype: rename to xt_addrtype	2011-03-15 20:16:20 +01:00
nf_conntrack_l3proto_ipv4.c	netfilter: nf_nat: avoid double seq_adjust for loopback	2011-06-16 17:29:22 +02:00
nf_conntrack_l3proto_ipv4_compat.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6 into HEAD	2011-01-13 10:29:21 +09:00
nf_conntrack_proto_icmp.c	netfilter: nf_conntrack: fix ct refcount leak in l4proto->error()	2011-06-06 01:37:02 +02:00
nf_defrag_ipv4.c
nf_nat_amanda.c
nf_nat_core.c	netfilter: add more values to enum ip_conntrack_info	2011-06-06 01:35:10 +02:00
nf_nat_ftp.c
nf_nat_h323.c
nf_nat_helper.c	netfilter: nf_nat: fix crash in nf_nat_csum	2011-06-06 01:36:46 +02:00
nf_nat_irc.c
nf_nat_pptp.c
nf_nat_proto_common.c
nf_nat_proto_dccp.c
nf_nat_proto_gre.c
nf_nat_proto_icmp.c
nf_nat_proto_sctp.c
nf_nat_proto_tcp.c
nf_nat_proto_udp.c
nf_nat_proto_udplite.c
nf_nat_proto_unknown.c
nf_nat_rule.c	netfilter: add more values to enum ip_conntrack_info	2011-06-06 01:35:10 +02:00
nf_nat_sip.c
nf_nat_snmp_basic.c	netfilter: nf_conntrack: nf_conntrack snmp helper	2011-01-18 18:12:24 +01:00
nf_nat_standalone.c	netfilter: add more values to enum ip_conntrack_info	2011-06-06 01:35:10 +02:00
nf_nat_tftp.c