linux.git/include/linux/netfilter_ipv6, branch v2.6.23

[NETFILTER]: ip6_tables: fix explanation of valid upper protocol number

2007-07-11T05:16:55+00:00

This explains the allowed upper protocol numbers. IP6T_F_NOPROTO was
introduced to use 0 as Hop-by-Hop option header, not wildcard. But that
seemed to be forgotten. 0 has been used as wildcard since 2002-08-23.

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Clean up table initialization

2007-05-11T06:47:43+00:00

- move arp_tables initial table structure definitions to arp_tables.h
  similar to ip_tables and ip6_tables

- use C99 initializers

- use initializer macros where possible

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ip6_tables: remove redundant structure definitions

2007-02-08T20:39:23+00:00

Move ip6t_standard/ip6t_error_target/ip6t_error definitions to ip6_tables.h
instead of defining them in each table individually.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ip6_tables: support MH match

2007-02-08T20:39:21+00:00

This introduces match for Mobility Header (MH) described by Mobile IPv6
specification (RFC3775). User can specify the MH type or its range to be
matched.

Signed-off-by: Masahide NAKAMURA 
Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: {ip,ip6}_tables: use struct xt_table instead of redefined structure names

2007-02-08T20:39:20+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions

2007-02-08T20:39:19+00:00

Use the x_tables functions directly to make it better visible which
parts are shared between ip_tables and ip6_tables.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: x_tables: add NFLOG target

2006-12-03T05:31:31+00:00

Add new NFLOG target to allow use of nfnetlink_log for both IPv4 and IPv6.
Currently we have two (unsupported by userspace) hacks in the LOG and ULOG
targets to optionally call to the nflog API. They lack a few features,
namely the IPv4 and IPv6 LOG targets can not specify a number of arguments
related to nfnetlink_log, while the ULOG target is only available for IPv4.
Remove those hacks and add a clean way to use nfnetlink_log.

Signed-off-by: Patrick McHardy

[NETFILTER]: ip6_tables: fixed conflicted optname for getsockopt

2006-11-16T05:18:49+00:00

66 and 67 for getsockopt on IPv6 socket is doubly used for IPv6 Advanced
API and ip6tables. This moves numbers for ip6tables to 68 and 69.
This also kills XT_SO_* because {ip,ip6,arp}_tables doesn't have so much
common numbers now.

The old userland tools keep to behave as ever, because old kernel always
calls functions of IPv6 Advanced API for their numbers.

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22T21:55:33+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[HEADERS] One line per header in Kbuild files to reduce conflicts

2006-09-19T11:43:58+00:00

Signed-off-by: David Woodhouse