iptables branch, iptables-next, updated. v1.4.8-12-g9d1b111
Patrick McHardy
netfilter-cvslog-bounces at lists.netfilter.org
Thu Jul 15 17:24:32 CEST 2010
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "iptables".
The branch, iptables-next has been updated
via 9d1b11102b53103c00b7fddf4658a4d2bdee1338 (commit)
from 67195a8c8a03d12994e91315e49e3d78c51a385a (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 9d1b11102b53103c00b7fddf4658a4d2bdee1338
Author: Michael S. Tsirkin <mst at redhat.com>
Date: Thu Jul 15 17:23:24 2010 +0200
extensions: libxt_CHECKSUM extension
This adds a `CHECKSUM' target, which can be used in the iptables mangle
table.
You can use this target to compute and fill in the checksum in
a packet that lacks a checksum. This is particularly useful,
if you need to work around old applications such as dhcp clients,
that do not work well with checksum offloads, but don't want to disable
checksum offload in your device.
The problem happens in the field with virtualized applications.
For reference, see Red Hat bz 605555, as well as
http://www.spinics.net/lists/kvm/msg37660.html
Typical expected use (helps old dhclient binary running in a VM):
iptables -A POSTROUTING -t mangle -p udp --dport bootpc \
-j CHECKSUM --checksum-fill
Includes fixes by Jan Engelhardt <jengelh at medozas.de>
Signed-off-by: Michael S. Tsirkin <mst at redhat.com>
Signed-off-by: Patrick McHardy <kaber at trash.net>
-----------------------------------------------------------------------
Summary of changes:
extensions/libxt_CHECKSUM.c | 96 +++++++++++++++++++++++++++++++++++++++++
extensions/libxt_CHECKSUM.man | 8 +++
2 files changed, 104 insertions(+), 0 deletions(-)
create mode 100644 extensions/libxt_CHECKSUM.c
create mode 100644 extensions/libxt_CHECKSUM.man
hooks/post-receive
--
iptables
More information about the netfilter-cvslog
mailing list