Pablo Neira Ayuso 6ee584be3e netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute ... This patch adds the NFQA_CAP_LEN attribute that allows us to know what is the real packet size from user-space (even if we decided to retrieve just a few bytes from the packet instead of all of it). Security software that inspects packets should always check for this new attribute to make sure that it is inspecting the entire packet. This also helps to provide a workaround for the problem described in: http://marc.info/?l=netfilter-devel&m=134519473212536&w=2 Original idea from Florian Westphal. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2012-09-24 15:10:29 +02:00
..
ipset	netfilter: ipset: Support to match elements marked with "nomatch"	2012-09-22 22:44:34 +02:00
Kbuild	netfilter: add user-space connection tracking helper infrastructure	2012-06-16 15:40:02 +02:00
nf_conntrack_amanda.h	netfilter: nf_nat: add protoff argument to packet mangling functions	2012-08-30 03:00:13 +02:00
nf_conntrack_common.h	netfilter: nf_conntrack: fix explicit helper attachment and NAT	2012-05-08 19:44:42 +02:00
nf_conntrack_dccp.h
nf_conntrack_ftp.h	netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries	2012-09-24 14:29:40 +02:00
nf_conntrack_h323_asn1.h
nf_conntrack_h323_types.h	net: cleanup unsigned to unsigned int	2012-04-15 12:44:40 -04:00
nf_conntrack_h323.h	netfilter: nf_nat: add protoff argument to packet mangling functions	2012-08-30 03:00:13 +02:00
nf_conntrack_irc.h	netfilter: nf_nat: add protoff argument to packet mangling functions	2012-08-30 03:00:13 +02:00
nf_conntrack_pptp.h	netfilter: nf_nat: add protoff argument to packet mangling functions	2012-08-30 03:00:13 +02:00
nf_conntrack_proto_gre.h
nf_conntrack_sane.h
nf_conntrack_sctp.h
nf_conntrack_sip.h	netfilter: nf_nat: support IPv6 in SIP NAT helper	2012-08-30 03:00:22 +02:00
nf_conntrack_snmp.h
nf_conntrack_tcp.h	netfilter: nf_ct_tcp: move retransmission and unacknowledged timeout to array	2012-03-07 17:41:15 +01:00
nf_conntrack_tftp.h
nf_conntrack_tuple_common.h
nf_nat.h	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nfnetlink_acct.h
nfnetlink_compat.h
nfnetlink_conntrack.h	netfilter: ipv6: add IPv6 NAT support	2012-08-30 03:00:17 +02:00
nfnetlink_cthelper.h	netfilter: add user-space connection tracking helper infrastructure	2012-06-16 15:40:02 +02:00
nfnetlink_cttimeout.h	netfilter: add cttimeout infrastructure for fine timeout tuning	2012-03-07 17:41:22 +01:00
nfnetlink_log.h
nfnetlink_queue.h	netfilter: nfnetlink_queue: add NFQA_CAP_LEN attribute	2012-09-24 15:10:29 +02:00
nfnetlink.h	netfilter: add user-space connection tracking helper infrastructure	2012-06-16 15:40:02 +02:00
x_tables.h
xt_addrtype.h
xt_AUDIT.h
xt_CHECKSUM.h
xt_CLASSIFY.h
xt_cluster.h
xt_comment.h
xt_connbytes.h
xt_connlimit.h	netfilter: xt_connlimit: remove revision 0	2012-06-07 14:58:39 +02:00
xt_connmark.h
xt_CONNMARK.h
xt_CONNSECMARK.h
xt_conntrack.h
xt_cpu.h
xt_CT.h	netfilter: xt_CT: allow to attach timeout policy + glue code	2012-03-07 17:41:28 +01:00
xt_dccp.h
xt_devgroup.h
xt_dscp.h
xt_DSCP.h
xt_ecn.h	netfilter: xtables: give xt_ecn its own name	2011-12-27 20:31:38 +01:00
xt_esp.h
xt_hashlimit.h	netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bits	2012-05-17 00:56:31 +02:00
xt_helper.h
xt_HMARK.h	netfilter: xt_HMARK: fix endianness and provide consistent hashing	2012-06-07 14:53:01 +02:00
xt_IDLETIMER.h
xt_iprange.h
xt_ipvs.h
xt_LED.h
xt_length.h
xt_limit.h
xt_LOG.h	netfilter: merge ipt_LOG and ip6_LOG into xt_LOG	2012-03-07 17:40:49 +01:00
xt_mac.h
xt_mark.h
xt_MARK.h
xt_multiport.h
xt_nfacct.h
xt_NFLOG.h
xt_NFQUEUE.h
xt_osf.h
xt_owner.h
xt_physdev.h
xt_pkttype.h
xt_policy.h
xt_quota.h
xt_rateest.h
xt_RATEEST.h
xt_realm.h
xt_recent.h	netfilter: xt_recent: add address masking option	2012-06-07 14:58:42 +02:00
xt_rpfilter.h
xt_sctp.h
xt_SECMARK.h
xt_set.h	netfilter: ipset: avoid use of kernel-only types	2012-03-26 21:06:30 +02:00
xt_socket.h
xt_state.h
xt_statistic.h
xt_string.h
xt_tcpmss.h
xt_TCPMSS.h
xt_TCPOPTSTRIP.h
xt_tcpudp.h
xt_TEE.h
xt_time.h	netfilter: xt_time: add support to ignore day transition	2012-09-24 14:29:01 +02:00
xt_TPROXY.h
xt_u32.h