linux.git/net/ipv6/netfilter.c, branch v2.6.26

[NETFILTER]: Add partial checksum validation helper

2008-04-14T09:15:49+00:00

Move the UDP-Lite conntrack checksum validation to a generic helper
similar to nf_checksum() and make it fall back to nf_checksum()
in case the full packet is to be checksummed and hardware checksums
are available. This is to be used by DCCP conntrack, which also
needs to verify partial checksums.

Signed-off-by: Patrick McHardy

[NETNS][IPV6] route6 - add netns parameter to ip6_route_output

2008-03-05T18:48:10+00:00

Add an netns parameter to ip6_route_output. That will allow to access
to the right routing table for outgoing traffic.

Signed-off-by: Daniel Lezcano 
Signed-off-by: Benjamin Thery 
Signed-off-by: David S. Miller

[NETFILTER]: constify nf_afinfo

2008-01-28T22:59:05+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info

2008-01-28T22:56:14+00:00

Move common fields for queue management to struct nf_info and rename it
to struct nf_queue_entry. The avoids one allocation/free per packet and
simplifies the code a bit.

Alternatively we could add some private room at the tail, but since
all current users use identical structs this seems easier.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_queue: move queueing related functions/struct to seperate header

2008-01-28T22:56:10+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_ct_h323: remove ipv6 module dependency

2008-01-28T22:56:05+00:00

nf_conntrack_h323 needs ip6_route_output for the call forwarding filter.
Add a ->route function to nf_afinfo and use that to avoid pulling in the
ipv6 module.

Fix the #ifdef for the IPv6 code while I'm at it - the IPv6 support is
only needed when IPv6 conntrack is enabled.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28T22:53:55+00:00

The IPv4 and IPv6 hook values are identical, yet some code tries to figure
out the "correct" value by looking at the address family. Introduce NF_INET_*
values for both IPv4 and IPv6. The old values are kept in a #ifndef __KERNEL__
section for userspace compatibility.

Signed-off-by: Patrick McHardy 
Acked-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15T19:26:29+00:00

With all the users of the double pointers removed, this patch mops up by
finally replacing all occurances of sk_buff ** in the netfilter API by
sk_buff *.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[SK_BUFF]: Introduce ipv6_hdr(), remove skb->nh.ipv6h

2007-04-26T05:25:14+00:00

Now the skb->nh union has just one member, .raw, i.e. it is just like the
skb->mac union, strange, no? I'm just leaving it like that till the transport
layer is done with, when we'll rename skb->mac.raw to skb->mac_header (or
->mac_header_offset?), ditto for ->{h,nh}.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[NETFILTER]: ip6_route_me_harder should take into account mark

2007-03-05T21:25:27+00:00

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller