linux.git/net/ipv6/netfilter.c, branch v2.6.28 Linux kernel source tree netns: correct mib stats in ip6_route_me_harder() 2008-10-15T05:55:21+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-15T05:55:21+00:00 eef9d90dcde7bb4d029b67ed36457efc4970d5a2 Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netns: add net parameter to IP6_INC_STATS 2008-10-08T17:54:51+00:00 Denis V. Lunev den@openvz.org 2008-10-08T17:54:51+00:00 3bd653c8455bc7991bae77968702b31c8f5df883 Signed-off-by: Denis V. Lunev <den@openvz.org> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Denis V. Lunev <den@openvz.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
netfilter: netns: fix {ip,6}_route_me_harder() in netns 2008-10-08T09:35:03+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:03+00:00 b21f89019399ff75d9c239010e38b840eb6e01e7 Take netns from skb->dst->dev. It should be safe because, they are called from LOCAL_OUT hook where dst is valid (though, I'm not exactly sure about IPVS and queueing packets to userspace). [Patrick: its safe everywhere since they already expect skb->dst to be set] Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> 
Take netns from skb->dst->dev. It should be safe because, they are called
from LOCAL_OUT hook where dst is valid (though, I'm not exactly sure about
IPVS and queueing packets to userspace).

[Patrick: its safe everywhere since they already expect skb->dst to be set]

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
[NETFILTER]: Add partial checksum validation helper 2008-04-14T09:15:49+00:00 Patrick McHardy kaber@trash.net 2008-03-20T14:15:53+00:00 d63a650736f566a1f9e9434725d2089597c0d2cc Move the UDP-Lite conntrack checksum validation to a generic helper similar to nf_checksum() and make it fall back to nf_checksum() in case the full packet is to be checksummed and hardware checksums are available. This is to be used by DCCP conntrack, which also needs to verify partial checksums. Signed-off-by: Patrick McHardy <kaber@trash.net> 
Move the UDP-Lite conntrack checksum validation to a generic helper
similar to nf_checksum() and make it fall back to nf_checksum()
in case the full packet is to be checksummed and hardware checksums
are available. This is to be used by DCCP conntrack, which also
needs to verify partial checksums.

Signed-off-by: Patrick McHardy <kaber@trash.net>
[NETNS][IPV6] route6 - add netns parameter to ip6_route_output 2008-03-05T18:48:10+00:00 Daniel Lezcano dlezcano@fr.ibm.com 2008-03-05T18:48:10+00:00 4591db4f37618f37a9f1f25d291c3c7a43a15a21 Add an netns parameter to ip6_route_output. That will allow to access to the right routing table for outgoing traffic. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com> Signed-off-by: Benjamin Thery <benjamin.thery@bull.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Add an netns parameter to ip6_route_output. That will allow to access
to the right routing table for outgoing traffic.

Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Signed-off-by: Benjamin Thery <benjamin.thery@bull.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: constify nf_afinfo 2008-01-28T22:59:05+00:00 Patrick McHardy kaber@trash.net 2007-12-18T06:42:27+00:00 1e796fda00f06bac584f0e4ad8750ab9430d79d3 Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info 2008-01-28T22:56:14+00:00 Patrick McHardy kaber@trash.net 2007-12-05T09:26:33+00:00 02f014d88831f73b895c1fe09badb66c88e932d3 Move common fields for queue management to struct nf_info and rename it to struct nf_queue_entry. The avoids one allocation/free per packet and simplifies the code a bit. Alternatively we could add some private room at the tail, but since all current users use identical structs this seems easier. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Move common fields for queue management to struct nf_info and rename it
to struct nf_queue_entry. The avoids one allocation/free per packet and
simplifies the code a bit.

Alternatively we could add some private room at the tail, but since
all current users use identical structs this seems easier.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: nf_queue: move queueing related functions/struct to seperate header 2008-01-28T22:56:10+00:00 Patrick McHardy kaber@trash.net 2007-12-05T09:24:48+00:00 c01cd429fc118c5db92475c5f08b307718aa4efc Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: nf_ct_h323: remove ipv6 module dependency 2008-01-28T22:56:05+00:00 Patrick McHardy kaber@trash.net 2007-12-05T09:22:05+00:00 1841a4c7ae106b7a3e2521db55f4d8bb8a0988d5 nf_conntrack_h323 needs ip6_route_output for the call forwarding filter. Add a ->route function to nf_afinfo and use that to avoid pulling in the ipv6 module. Fix the #ifdef for the IPv6 code while I'm at it - the IPv6 support is only needed when IPv6 conntrack is enabled. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
nf_conntrack_h323 needs ip6_route_output for the call forwarding filter.
Add a ->route function to nf_afinfo and use that to avoid pulling in the
ipv6 module.

Fix the #ifdef for the IPv6 code while I'm at it - the IPv6 support is
only needed when IPv6 conntrack is enabled.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: Introduce NF_INET_ hook values 2008-01-28T22:53:55+00:00 Patrick McHardy kaber@trash.net 2007-11-20T02:53:30+00:00 6e23ae2a48750bda407a4a58f52a4865d7308bf5 The IPv4 and IPv6 hook values are identical, yet some code tries to figure out the "correct" value by looking at the address family. Introduce NF_INET_* values for both IPv4 and IPv6. The old values are kept in a #ifndef __KERNEL__ section for userspace compatibility. Signed-off-by: Patrick McHardy <kaber@trash.net> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net> 
The IPv4 and IPv6 hook values are identical, yet some code tries to figure
out the "correct" value by looking at the address family. Introduce NF_INET_*
values for both IPv4 and IPv6. The old values are kept in a #ifndef __KERNEL__
section for userspace compatibility.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>