linux.git/include/linux/netfilter_ipv4, branch v4.1

netfilter: Pass nf_hook_state through ipt_do_table().

2015-04-04T16:47:04+00:00

Signed-off-by: David S. Miller

UAPI: Remove empty non-UAPI Kbuild files

2012-10-17T11:31:15+00:00

Remove non-UAPI Kbuild files that have become empty as a result of UAPI
disintegration.  They used to have only header-y lines in them and those have
now moved to the Kbuild files in the corresponding uapi/ directories.

Possibly these should not be removed but rather have a comment inserted to say
they are intentionally left blank.  This would make it easier to add generated
header lines in future without having to restore the infrastructure.

Note that at this point not all the UAPI disintegration parts have been merged,
so it is likely that more empty Kbuild files will turn up.

It is probably necessary to make the files non-empty to prevent the patch
program from automatically deleting them when it reduces them to nothing.

Signed-off-by: David Howells

UAPI: (Scripted) Disintegrate include/linux/netfilter_ipv4

2012-10-09T08:48:59+00:00

Signed-off-by: David Howells 
Acked-by: Arnd Bergmann 
Acked-by: Thomas Gleixner 
Acked-by: Michael Kerrisk 
Acked-by: Paul E. McKenney 
Acked-by: Dave Jones

netfilter: remove include/linux/netfilter_ipv4/ipt_addrtype.h

2012-06-07T12:58:38+00:00

It was scheduled to be removed.

Acked-by: Florian Westphal 
Signed-off-by: Cong Wang 
Signed-off-by: Pablo Neira Ayuso

netfilter: remove ip_queue support

2012-05-08T18:25:42+00:00

This patch removes ip_queue support which was marked as obsolete
years ago. The nfnetlink_queue modules provides more advanced
user-space packet queueing mechanism.

This patch also removes capability code included in SELinux that
refers to ip_queue. Otherwise, we break compilation.

Several warning has been sent regarding this to the mailing list
in the past month without anyone rising the hand to stop this
with some strong argument.

Signed-off-by: Pablo Neira Ayuso

netfilter: remove ipt_SAME.h and ipt_realm.h

2012-03-07T16:40:56+00:00

These two headers are not required anymore, they have been
replaced by xt_SAME.h and xt_realm.h.

Florian Westphal pointed out this.

Cc: "David S. Miller" 
Cc: Florian Westphal 
Signed-off-by: WANG Cong

netfilter: merge ipt_LOG and ip6_LOG into xt_LOG

2012-03-07T16:40:49+00:00

ipt_LOG and ip6_LOG have a lot of common code, merge them
to reduce duplicate code.

Signed-off-by: Richard Weinberger 
Signed-off-by: Pablo Neira Ayuso

netfilter: xtables: give xt_ecn its own name

2011-12-27T19:31:38+00:00

Use the new macro and struct names in xt_ecn.h, and put the old
definitions into a definition-forwarding ipt_ecn.h.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Pablo Neira Ayuso

netfilter: xtables: move ipt_ecn to xt_ecn

2011-12-27T19:31:31+00:00

Prepare the ECN match for augmentation by an IPv6 counterpart. Since
no symbol dependencies to ipv6.ko are added, having a single ecn match
module is the more so welcome.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Pablo Neira Ayuso

netfilter: nf_nat: export NAT definitions to userspace

2011-12-23T13:36:43+00:00

Export the NAT definitions to userspace. So far userspace (specifically,
iptables) has been copying the headers files from include/net. Also
rename some structures and definitions in preparation for IPv6 NAT.
Since these have never been officially exported, this doesn't affect
existing userspace code.

Signed-off-by: Patrick McHardy 
Signed-off-by: Pablo Neira Ayuso