linux.git/include/net/netfilter, branch v2.6.24

[NETFILTER]: nf_conntrack_ipv4: fix module parameter compatibility

2007-12-27T03:36:33+00:00

Some users do "modprobe ip_conntrack hashsize=...". Since we have the
module aliases this loads nf_conntrack_ipv4 and nf_conntrack, the
hashsize parameter is unknown for nf_conntrack_ipv4 however and makes
it fail.

Allow to specify hashsize= for both nf_conntrack and nf_conntrack_ipv4.

Note: the nf_conntrack message in the ringbuffer will display an
incorrect hashsize since nf_conntrack is first pulled in as a
dependency and calculates the size itself, then it gets changed
through a call to nf_conntrack_set_hashsize().

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[INET]: Collect common frag sysctl variables together

2007-10-15T19:26:40+00:00

Some sysctl variables are used to tune the frag queues
management and it will be useful to work with them in
a common way in the future, so move them into one
structure, moreover they are the same for all the frag
management codes.

I don't place them in the existing inet_frags object,
introduced in the previous patch for two reasons:

 1. to keep them in the __read_mostly section;
 2. not to export the whole inet_frags objects outside.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15T19:26:29+00:00

With all the users of the double pointers removed, this patch mops up by
finally replacing all occurances of sk_buff ** in the netfilter API by
sk_buff *.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack_expect: kill unique ID

2007-10-10T23:53:36+00:00

Similar to the conntrack ID, the per-expectation ID is not needed
anymore, kill it.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack: kill unique ID

2007-10-10T23:53:36+00:00

Remove the per-conntrack ID, its not necessary anymore for dumping.
For compatiblity reasons we send the address of the conntrack to
userspace as ID.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ctnetlink: use netlink policy

2007-10-10T23:53:35+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: rename functions containing 'nfattr'

2007-10-10T23:53:32+00:00

There is no struct nfattr anymore, rename functions to 'nlattr'.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: convert to generic netlink attribute functions

2007-10-10T23:53:31+00:00

Get rid of the duplicated rtnetlink macros and use the generic netlink
attribute functions. The old duplicated stuff is moved to a new header
file that exists just for userspace.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_nat: add symbolic dependency on IPv4 conntrack

2007-08-08T01:12:01+00:00

Loading nf_nat causes the conntrack core to be loaded, but we need IPv4 as
well.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Make nf_ct_ipv6_skip_exthdr() static.

2007-07-31T09:28:26+00:00

nf_ct_ipv6_skip_exthdr() can now become static.

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller