Mailing List Archive

hlen-check?
can anyone explain the function/significance of the hlen-check patch?
i can't seem to find it elsewhere in my local archive.

-tcl.


On Thu, 8 Feb 2001, Wensong Zhang wrote:

>
>
> Hi,
>
> The ipvs-1.0.5 for kernel 2.2.18 is available at the LVS web site. This
> is minor bugfix release.
>
>
> Virtual Server patch for Linux 2.2.18 - Version 1.0.5 - February 8, 2001
>
> Changes:
> * Fixed the IP_MASQ_DEBUG using uninitialized port pointer bug in
> the ip_fw_demasq_icmp, the bug was there for a long time. It would
> lead to serious problem if the IP_MASQ_DEBUG option is up in
> kernel compilation.
>
> * Julian fixed that dest (instead of least destination) must be
> checked for availability after nextstage in the ip_vs_dest_set_min.
>
>
> The ipvs-1.0.5-2.2.18.tar.gz also include Julian's protocol header
> length checking patch (hlen-check-1.0.4-2.2.18.patch). It can be applied
> after ipvs-1.0.5-2.2.18.patch is applied to the kernel source.
>
> Thanks,
>
> Wensong
>
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>
Re: hlen-check? [ In reply to ]
Hello,

On Thu, 1 Mar 2001, tc lewis wrote:

>
> can anyone explain the function/significance of the hlen-check patch?
> i can't seem to find it elsewhere in my local archive.

This patch is already in 2.2.19pre8. Because the IPVS patch is
against 2.2.18 the hlen-check patch is provided for the LVS users.
It fixes some holes in the masquerading and in the transparent proxy
that can crash the deMASQ server (portfw/mfw) or the LVS server. You
will not need it for 2.2.19. If you suspect your LVS server crashes
unexpectedly then apply this patch :) If you are just upgrading to
2.2.18 include it. You can make a new kernel just to feel better :)

> -tcl.


Regards

--
Julian Anastasov <ja@ssi.bg>