linux.git/net/ipv4/netfilter.c, branch v2.6.27

[NETFILTER]: Add partial checksum validation helper

2008-04-14T09:15:49+00:00

Move the UDP-Lite conntrack checksum validation to a generic helper
similar to nf_checksum() and make it fall back to nf_checksum()
in case the full packet is to be checksummed and hardware checksums
are available. This is to be used by DCCP conntrack, which also
needs to verify partial checksums.

Signed-off-by: Patrick McHardy

[NETNS]: Add namespace parameter to ip_route_output_key.

2008-01-28T23:11:07+00:00

Needed to propagate it down to the ip_route_output_flow.

Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

[NETFILTER]: kill nf_sysctl.c

2008-01-28T23:02:40+00:00

Since there now is generic support for shared sysctl paths, the only
remains are the net/netfilter and net/ipv4/netfilter paths. Move them
to net/netfilter/core.c and net/ipv4/netfilter.c and kill nf_sysctl.c.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETNS]: Add netns parameter to inet_(dev_)add_type.

2008-01-28T23:01:27+00:00

The patch extends the inet_addr_type and inet_dev_addr_type with the
network namespace pointer. That allows to access the different tables
relatively to the network namespace.

The modification of the signature function is reported in all the
callers of the inet_addr_type using the pointer to the well known
init_net.

Acked-by: Benjamin Thery 
Acked-by: Daniel Lezcano 
Signed-off-by: Eric W. Biederman 
Signed-off-by: David S. Miller

[NETFILTER]: constify nf_afinfo

2008-01-28T22:59:05+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info

2008-01-28T22:56:14+00:00

Move common fields for queue management to struct nf_info and rename it
to struct nf_queue_entry. The avoids one allocation/free per packet and
simplifies the code a bit.

Alternatively we could add some private room at the tail, but since
all current users use identical structs this seems easier.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_queue: move queueing related functions/struct to seperate header

2008-01-28T22:56:10+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_ct_h323: remove ipv6 module dependency

2008-01-28T22:56:05+00:00

nf_conntrack_h323 needs ip6_route_output for the call forwarding filter.
Add a ->route function to nf_afinfo and use that to avoid pulling in the
ipv6 module.

Fix the #ifdef for the IPv6 code while I'm at it - the IPv6 support is
only needed when IPv6 conntrack is enabled.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28T22:53:55+00:00

The IPv4 and IPv6 hook values are identical, yet some code tries to figure
out the "correct" value by looking at the address family. Introduce NF_INET_*
values for both IPv4 and IPv6. The old values are kept in a #ifndef __KERNEL__
section for userspace compatibility.

Signed-off-by: Patrick McHardy 
Acked-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15T19:26:29+00:00

With all the users of the double pointers removed, this patch mops up by
finally replacing all occurances of sk_buff ** in the netfilter API by
sk_buff *.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller