linux.git/net/ipv4/netfilter.c, branch v2.6.20

[NETFILTER]: Fix routing of REJECT target generated packets in output chain

2007-01-04T20:15:34+00:00

Packets generated by the REJECT target in the output chain have a local
destination address and a foreign source address. Make sure not to use
the foreign source address for the output route lookup.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NET]: Annotate __skb_checksum_complete() and friends.

2006-12-03T05:23:38+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NET]: Annotate callers of csum_fold() in net/*

2006-12-03T05:23:27+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NET]: Rethink mark field in struct flowi

2006-12-03T05:21:39+00:00

Now that all protocols have been made aware of the mark
field it can be moved out of the union thus simplyfing
its usage.

The config options in the IPv4/IPv6/DECnet subsystems
to enable respectively disable mark based routing only
obfuscate the code with ifdefs, the cost for the
additional comparison in the flow key is insignificant,
and most distributions have all these options enabled
by default anyway. Therefore it makes sense to remove
the config options and enable mark based routing by
default.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NET]: Turn nfmark into generic mark

2006-12-03T05:21:38+00:00

nfmark is being used in various subsystems and has become
the defacto mark field for all kinds of packets. Therefore
it makes sense to rename it to `mark' and remove the
dependency on CONFIG_NETFILTER.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NETFILTER]: add type parameter to ip_route_me_harder

2006-10-04T07:30:54+00:00

By adding a type parameter to ip_route_me_harder() the
expensive call to inet_addr_type() can be avoided in some cases.
A followup patch where ip_route_me_harder() is called from within
ip_vs_out() is one such example.

Signed-off-By: Simon Horman 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: netfilter misc annotations

2006-09-29T01:02:59+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NET]: Replace CHECKSUM_HW by CHECKSUM_PARTIAL/CHECKSUM_COMPLETE

2006-09-22T21:53:53+00:00

Replace CHECKSUM_HW by CHECKSUM_PARTIAL (for outgoing packets, whose
checksum still needs to be completed) and CHECKSUM_COMPLETE (for
incoming packets, device supplied full checksum).

Patch originally from Herbert Xu, updated by myself for 2.6.18-rc3.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Add address family specific checksum helpers

2006-04-10T05:25:41+00:00

Add checksum operation which takes care of verifying the checksum and
dealing with HW checksum errors and avoids multiple checksum
operations by setting ip_summed to CHECKSUM_UNNECESSARY after
successful verification.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Introduce infrastructure for address family specific operations

2006-04-10T05:25:40+00:00

Change the queue rerouter intrastructure to a generic usable
infrastructure for address family specific operations as a base for
some cleanups.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller