Re: Multiple end-points behind same NAT

2006-12-02 Thread Michal Ruzicka
Hi, although I'm not a kernel guru I think I've got something to say to this. I am wondering if 26sec supports NAT-Traversal for multiple endpoints behind the same NAT. In looking at xfrm_tmpl it's not obvious to me that it's supported, ... You are looking at the rignt place indeed. Just to

AF_KEY extended xfrm_state selector handling

2006-10-19 Thread Michal Ruzicka
. (The procedure required a manual insertion of certain SPD entries during the connection establishment but this will hopefuly be handled by the L2TP daemon automatically soon.) Here comes the patch (it is against 2.6.17.11): Signed-off-by: Michal Ruzicka <[EMAIL PROTECTED]> diff

multicast group memberships purge on interface delete

2006-08-23 Thread Michal Ruzicka
in one more detail. - The suggested "list of sockets that have a multicast group joined on the interface" could also probably be of some help when maintaining the per interface multicast source filter list or per-interface multicast reception state as per RFC 3376 (IGMPv3) section 3.2. T

Re: Possible leak of multicast source filter sctructure #4

2006-08-18 Thread Michal Ruzicka
pX interface > > Michal PS: During the writing of this post I realized a bug in my code: The second ip_mc_find_dev() lookup on lines 42-43 should be done irrespective of the prior value of in_dev. And came up with an enhancement to what I had previously done in ip_mc_find_dev(): In case an inte

Re: Possible leak of multicast source filter sctructure

2006-08-17 Thread Michal Ruzicka
Hello David, > Michal, > I believe the patch I submitted yesterday fixes this > problem, and in a simpler way. Somehow I've missed that e-mail (It did not appear on the thread's list at MARC archives). Sorry for that. > > +-DLS I've reviewed your

Re: Possible leak of multicast source filter sctructure #3a

2006-08-16 Thread Michal Ruzicka
The same patch as in previous e-mail with a few typos in comments corrected: Signed-off-by: Michal Ruzicka <[EMAIL PROTECTED]> --- linux-2.6.17.8/net/ipv4/igmp.c.orig 2006-08-11 11:50:46.0 +0200 +++ linux-2.6.17.8/net/ipv4/igmp.c 2006-08-16 16:53:08.0 +0200 @@ -1

Re: Possible leak of multicast source filter sctructure #3

2006-08-16 Thread Michal Ruzicka
erface index and there is a match (or more) by the address I leave the group on the interface corresponding to the first match by the address. This certainly could produce weird results but such results could be produced by the original algorithm as well with the additional problem that there was n

Re: Possible leak of multicast source filter sctructure

2006-08-14 Thread Michal Ruzicka
st any more. This patch fixes it: Signed-off-by: Michal Ruzicka <[EMAIL PROTECTED]> --- linux-2.6.17.8/net/ipv4/igmp.c.orig 2006-08-11 11:45:56.0 +0200 +++ linux-2.6.17.8/net/ipv4/igmp.c 2006-08-11 11:51:56.0 +0200 @@ -2202,13 +2202,13 @@ struct

Re: Possible leak of multicast source filter sctructure

2006-08-11 Thread Michal Ruzicka
> Michal, > This looks correct, but I think a better way to do it is: > > in_dev = inetdev_by_index(...) > (void) ip_mc_leave_src() > if (in_dev) { > ip_mc_dec_group() > in_dev_put() > } > > That way, sflist internal

Possible leak of multicast source filter sctructure #2

2006-08-10 Thread Michal Ruzicka
group is joined on does not exist any more. Thanks Michal Ruzicka - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html

Possible leak of multicast source filter sctructure

2006-08-10 Thread Michal Ruzicka
led in this scenario because the interface that the multicast group is joined on does not exist any more. Thanks Michal Ruzicka linux-2.6.17.8-mc_sf_leak.patch Description: Binary data