1. 29 9月, 2006 1 次提交
  2. 06 1月, 2006 1 次提交
  3. 04 1月, 2006 3 次提交
  4. 30 11月, 2005 1 次提交
  5. 15 9月, 2005 2 次提交
    • J
      [IPVS]: ip_vs_ftp breaks connections using persistence · 87375ab4
      Julian Anastasov 提交于
      ip_vs_ftp when loaded can create NAT connections with unknown client
      port for passive FTP. For such expectations we lookup with cport=0 on
      incoming packet but it matches the format of the persistence templates
      causing packets to other persistent virtual servers to be forwarded to
      real server without creating connection. Later the reply packets are
      treated as foreign and not SNAT-ed.
      
      This patch changes the connection lookup for packets from clients:
      
      * introduce IP_VS_CONN_F_TEMPLATE connection flag to mark the
        connection as template
      
      * create new connection lookup function just for templates -
        ip_vs_ct_in_get
      
      * make sure ip_vs_conn_in_get hits only connections with
        IP_VS_CONN_F_NO_CPORT flag set when s_port is 0. By this way
        we avoid returning template when looking for cport=0 (ftp)
      Signed-off-by: NJulian Anastasov <ja@ssi.bg>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      87375ab4
    • J
      [IPVS]: Really invalidate persistent templates · f5e229db
      Julian Anastasov 提交于
      Agostino di Salle noticed that persistent templates are not
      invalidated due to buggy optimization.
      Signed-off-by: NJulian Anastasov <ja@ssi.bg>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      f5e229db
  6. 30 8月, 2005 1 次提交
  7. 12 7月, 2005 1 次提交
  8. 29 6月, 2005 1 次提交
    • N
      [IPVS]: Close race conditions on ip_vs_conn_tab list modification · fb3d8949
      Neil Horman 提交于
      In an smp system, it is possible for an connection timer to expire, calling
      ip_vs_conn_expire while the connection table is being flushed, before
      ct_write_lock_bh is acquired.
      
      Since the list iterator loop in ip_vs_con_flush releases and re-acquires the
      spinlock (even though it doesn't re-enable softirqs), it is possible for the
      expiration function to modify the connection list, while it is being traversed
      in ip_vs_conn_flush.
      
      The result is that the next pointer gets set to NULL, and subsequently
      dereferenced, resulting in an oops.
      Signed-off-by: NNeil Horman <nhorman@redhat.com>
      Acked-by: JulianAnastasov
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      fb3d8949
  9. 17 4月, 2005 1 次提交
    • L
      Linux-2.6.12-rc2 · 1da177e4
      Linus Torvalds 提交于
      Initial git repository build. I'm not bothering with the full history,
      even though we have it. We can create a separate "historical" git
      archive of that later if we want to, and in the meantime it's about
      3.2GB when imported into git - space that would just make the early
      git days unnecessarily complicated, when we don't have a lot of good
      infrastructure for it.
      
      Let it rip!
      1da177e4