1. 01 6月, 2007 7 次提交
  2. 31 5月, 2007 12 次提交
  3. 30 5月, 2007 5 次提交
  4. 29 5月, 2007 8 次提交
  5. 26 5月, 2007 4 次提交
  6. 25 5月, 2007 4 次提交
    • D
      [XFRM]: Allow packet drops during larval state resolution. · 14e50e57
      David S. Miller 提交于
      The current IPSEC rule resolution behavior we have does not work for a
      lot of people, even though technically it's an improvement from the
      -EAGAIN buisness we had before.
      
      Right now we'll block until the key manager resolves the route.  That
      works for simple cases, but many folks would rather packets get
      silently dropped until the key manager resolves the IPSEC rules.
      
      We can't tell these folks to "set the socket non-blocking" because
      they don't have control over the non-block setting of things like the
      sockets used to resolve DNS deep inside of the resolver libraries in
      libc.
      
      With that in mind I coded up the patch below with some help from
      Herbert Xu which provides packet-drop behavior during larval state
      resolution, controllable via sysctl and off by default.
      
      This lays the framework to either:
      
      1) Make this default at some point or...
      
      2) Move this logic into xfrm{4,6}_policy.c and implement the
         ARP-like resolution queue we've all been dreaming of.
         The idea would be to queue packets to the policy, then
         once the larval state is resolved by the key manager we
         re-resolve the route and push the packets out.  The
         packets would timeout if the rule didn't get resolved
         in a certain amount of time.
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      14e50e57
    • J
      [NETFILTER]: nf_conntrack_h323: fix ASN.1 types · d0529186
      Jing Min Zhao 提交于
      1. Add support for decoding IPv6 address. I know it was manually added in
         the header file, but not in the template file. That wouldn't work.
      2. Add missing support for decoding T.120 address in OLCA.
      3. Remove unnecessary decoding of Information signal.
      Signed-off-by: NJing Min Zhao <zhaojingmin@vivecode.com>
      Signed-off-by: NPatrick McHardy <kaber@trash.net>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      d0529186
    • P
      [NETFILTER]: nf_conntrack_ftp: fix newline sequence number calculation · 25b86e05
      Patrick McHardy 提交于
      When the packet size is changed by the FTP NAT helper, the connection
      tracking helper adjusts the sequence number of the newline character
      by the size difference. This is wrong because NAT sequence number
      adjustment happens after helpers are called, so the unadjusted number
      is compared to the already adjusted one.
      
      Based on report by YU, Haitao <yuhaitao@tsinghua.org.cn>
      Signed-off-by: NPatrick McHardy <kaber@trash.net>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      25b86e05
    • V
      [IA64] Cleanup acpi header to reuse the generic _PDC defines · 35729449
      Venki Pallipadi 提交于
      ia64 _PDC setup is defined similar to i386. So, cleanup the header to use
      generic _PDC defines than using specific defines in ia64.
      Signed-off-by: NVenkatesh Pallipadi <venkatesh.pallipadi@intel.com>
      Signed-off-by: NTony Luck <tony.luck@intel.com>
      35729449