linux.git/net/ipv4/netfilter.c, branch v2.6.39

netfilter: af_info: add 'strict' parameter to limit lookup to .oif

2011-04-04T15:00:54+00:00

ipv6 fib lookup can set RT6_LOOKUP_F_IFACE flag to restrict search
to an interface, but this flag cannot be set via struct flowi.

Also, it cannot be set via ip6_route_output: this function uses the
passed sock struct to determine if this flag is required
(by testing for nonzero sk_bound_dev_if).

Work around this by passing in an artificial struct sk in case
'strict' argument is true.

This is required to replace the rt6_lookup call in xt_addrtype.c with
nf_afinfo->route().

Signed-off-by: Florian Westphal 
Acked-by: David S. Miller 
Signed-off-by: Patrick McHardy

netfilter: af_info: add network namespace parameter to route hook

2011-04-04T14:56:29+00:00

This is required to eventually replace the rt6_lookup call in
xt_addrtype.c with nf_afinfo->route().

Signed-off-by: Florian Westphal 
Acked-by: David S. Miller 
Signed-off-by: Patrick McHardy

ipv4: Use flowi4 in public route lookup interfaces.

2011-03-12T23:08:48+00:00

Signed-off-by: David S. Miller

net: Put flowi_* prefix on AF independent members of struct flowi

2011-03-12T23:08:44+00:00

I intend to turn struct flowi into a union of AF specific flowi
structs.  There will be a common structure that each variant includes
first, much like struct sock_common.

This is the first step to move in that direction.

Signed-off-by: David S. Miller

ipv4: Make output route lookup return rtable directly.

2011-03-02T22:31:35+00:00

Instead of on the stack.

Signed-off-by: David S. Miller

xfrm: Return dst directly from xfrm_lookup()

2011-03-02T21:27:41+00:00

Instead of on the stack.

Signed-off-by: David S. Miller

net: use the macros defined for the members of flowi

2010-11-17T20:27:45+00:00

Use the macros defined for the members of flowi to clean the code up.

Signed-off-by: Changli Gao 
Signed-off-by: David S. Miller

Merge branch 'master' of /repos/git/net-next-2.6

2010-06-15T15:31:06+00:00

Conflicts:
	include/net/netfilter/xt_rateest.h
	net/bridge/br_netfilter.c
	net/netfilter/nf_conntrack_core.c

Signed-off-by: Patrick McHardy

netfilter: kill redundant check code in which setting ip_summed value

2010-06-14T14:20:02+00:00

If the returned csum value is 0, We has set ip_summed with
CHECKSUM_UNNECESSARY flag in __skb_checksum_complete_head().

So this patch kills the check and changes to return to upper
caller directly.

Signed-off-by: Shan Wei 
Signed-off-by: Patrick McHardy

net-next: remove useless union keyword

2010-06-11T06:31:35+00:00

remove useless union keyword in rtable, rt6_info and dn_route.

Since there is only one member in a union, the union keyword isn't useful.

Signed-off-by: Changli Gao 
Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller