Patrick McHardy b05e106698 [IPV4/6]: Netfilter IPsec input hooks ...

When the innermost transform uses transport mode the decapsulated packet
is not visible to netfilter. Pass the packet through the PRE_ROUTING and
LOCAL_IN hooks again before handing it to upper layer protocols to make
netfilter-visibility symetrical to the output path.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-07 12:57:31 -08:00

..

netfilter

[NETFILTER]: Export ip6_masked_addrcmp, don't pass IPv6 addresses on stack

2006-01-05 12:21:34 -08:00

addrconf.c

[IPV6]: Introduce inet6_timewait_sock

2006-01-03 13:10:47 -08:00

af_inet6.c

[NET]: Add a dev_ioctl() fallback to sock_ioctl()

2006-01-03 14:18:33 -08:00

ah6.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

anycast.c

[IPV6]: V6 route events reported with wrong netlink PID and seq number

2005-06-21 13:51:04 -07:00

datagram.c

[IPV6]: Fix calculation of AH length during filling ancillary data.

2005-11-20 12:21:59 +09:00

esp6.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

exthdrs_core.c

[SELINUX]: Fix ipv6_skip_exthdr() invocation causing OOPS.

2005-04-24 20:16:19 -07:00

exthdrs.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

icmp.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

inet6_connection_sock.c

[IPV6]: Generalise some functions

2006-01-03 13:10:46 -08:00

inet6_hashtables.c

[INET6]: Generalise tcp_v6_hash_connect

2006-01-03 13:10:56 -08:00

ip6_fib.c

[IPV6]: Put addr_diff() into common header for future use.

2005-11-08 09:37:56 -08:00

ip6_flowlabel.c

[IPV6]: Export some symbols for DCCPv6

2006-01-03 13:10:48 -08:00

ip6_input.c

[IPV4/6]: Netfilter IPsec input hooks

2006-01-07 12:57:31 -08:00

ip6_output.c

[IPV6]: Export some symbols for DCCPv6

2006-01-03 13:10:48 -08:00

ip6_tunnel.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

ipcomp6.c

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipv6_sockglue.c

[IP_SOCKGLUE]: Remove most of the tcp specific calls

2006-01-03 13:10:58 -08:00

ipv6_syms.c

[IPV6]: Make ipv6_addr_type() more generic so that we can use it for source address selection.

2005-11-08 09:38:12 -08:00

Kconfig

[NET]: Make ipip/ip6_tunnel independant of XFRM

2005-07-19 14:03:34 -07:00

Makefile

[IPV6]: Generalise tcp_v6_search_req & tcp_v6_synq_add

2006-01-03 13:10:36 -08:00

mcast.c

[IPV6]: Use macro for rwlock_t initialization.

2006-01-04 13:56:31 -08:00

ndisc.c

[IPV6]: Fix NS handing for proxy/anycast address

2005-10-05 12:11:41 -07:00

netfilter.c

[NET]: Make NETDEBUG pure printk wrappers

2005-08-29 15:56:08 -07:00

proc.c

[NET]: Wider use of for_each_*cpu()

2005-10-25 23:54:01 -02:00

protocol.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

raw.c

[IP]: Simplify and consolidate MSG_PEEK error handling

2006-01-03 13:10:41 -08:00

reassembly.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

route.c

[IPV6]: Flag RTF_ANYCAST for anycast routes.

2005-12-21 22:56:42 +09:00

sit.c

[NET]: Change 1500 to ETH_DATA_LEN in some files

2006-01-05 16:48:56 -08:00

sysctl_net_ipv6.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

tcp_ipv6.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

udp.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00

xfrm6_input.c

[IPV4/6]: Netfilter IPsec input hooks

2006-01-07 12:57:31 -08:00

xfrm6_output.c

[XFRM]: Netfilter IPsec output hooks

2006-01-07 12:57:28 -08:00

xfrm6_policy.c

[XFRM]: Handle DCCP in xfrm{4,6}_decode_session

2005-12-19 14:03:46 -08:00

xfrm6_state.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

xfrm6_tunnel.c

[IPV6]: Move nextheader offset to the IP6CB

2006-01-07 12:57:29 -08:00