conntrack-tools.git - conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git)

Age	Commit message (Collapse)	Author
2008-12-11	netlink: fix EILSEQ error messages due to process race condition	Pablo Neira Ayuso
	This patch fixes a race condition that triggers EILSEQ errors (wrong sequence message). The problems is triggered when the child process resets the timers at the same time that the parent process requests a resync. Since both the child and the parent process use the same descriptors, the sequence tracking code in libnfnetlink gets confused as it considers that it is receiving out of sequence netlink messages. This patch introduces internal handlers to commit and reset timers so that the parent and the child do not use the same descriptors to operate with the kernel. This patch changes the prototype of all nf_*_conntrack() functions. Now, the nfct handler is passed as first parameter, this change is required to fix this problem. The rest of the changes on the API is done for consistency. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2008-04-16	add more verbose error notification when the injection of a conntrack fails	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org

2008-04-08	fix asymmetric path support (still some open concerns)	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org

2008-03-08	revert relicensing... still we use linux_list.h code which seems to be GPLv2 ↵	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	only which is incompatible AFAIK
2008-03-08	relicense conntrack-tools as GPLv3+, so far the most significant contributor ↵	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	has been Max Kellermann and has no issues with relicensing their contributions.
2008-01-17	Max Kellermann <max@duempel.org>:	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	import only required C headers and put local headers on top to check
2008-01-15	Max Kellermann <max@duempel.org>:	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	Fix tons of gcc warnings
2008-01-15	Max Kellermann <max@duempel.org>:	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	add missing function prototypes
2007-11-25	Add CacheWriteThrough clause: external cache write through policy. This ↵	/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org
	feature is particularly useful for active-active setup without connection persistency, ie. you cannot know which firewall would filter a packet that belongs to a connection.