linux.git/net/bridge/netfilter, branch v2.6.25

[NETFILTER]: fix ebtable targets return

2008-02-24T04:22:27+00:00

The function ebt_do_table doesn't take NF_DROP as a verdict from the targets.

Signed-off-by: Joonwoo Park 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Fix incorrect use of skb_make_writable

2008-02-20T01:18:47+00:00

http://bugzilla.kernel.org/show_bug.cgi?id=9920
The function skb_make_writable returns true or false.

Signed-off-by: Joonwoo Park 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ebtables: mark matches, targets and watchers __read_mostly

2008-02-01T03:27:34+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ebtables: Update modules' descriptions

2008-02-01T03:27:33+00:00

Update the MODULES_DESCRIPTION() tags for all Ebtables modules.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ebtables: remove casts, use consts

2008-02-01T03:27:33+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETNS]: Consolidate kernel netlink socket destruction.

2008-01-28T23:08:07+00:00

Create a specific helper for netlink kernel socket disposal. This just
let the code look better and provides a ground for proper disposal
inside a namespace.

Signed-off-by: Denis V. Lunev 
Tested-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

[BRIDGE]: Remove unused include of a header file in ebtables.c

2008-01-28T23:02:48+00:00

In net/bridge/netfilter/ebtables.c,
- remove unused include of a header file (linux/tty.h) and remove the
  corresponding comment above it.

Signed-off-by: Rami Rosen 
Signed-off-by: David S. Miller

[BRIDGE]: Remove unused macros from ebt_vlan.c

2008-01-28T23:01:11+00:00

Remove two unused macros, INV_FLAG and SET_BITMASK
from net/bridge/netfilter/ebt_vlan.c.

Signed-off-by: Rami Rosen 
Signed-off-by: David S. Miller

[NETFILTER]: Add CONFIG_NETFILTER_ADVANCED option

2008-01-28T22:59:12+00:00

The NETFILTER_ADVANCED option hides lots of the rather obscure netfilter
options when disabled and provides defaults (M) that should allow to
run a distribution firewall without further thinking.

Defaults to 'y' to avoid breaking current configurations.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_log: constify struct nf_logger and nf_log_packet loginfo arg

2008-01-28T22:58:59+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller