linux.git/net/ipv6/netfilter.c, branch v2.6.30 Linux kernel source tree Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6 2008-11-28T10:19:15+00:00 David S. Miller davem@davemloft.net 2008-11-28T10:19:15+00:00 ed77a89c30fa03dcb234a84ddea710b3fb7b62da Conflicts: net/netfilter/nf_conntrack_netlink.c 
Conflicts:

	net/netfilter/nf_conntrack_netlink.c
netns xfrm: lookup in netns 2008-11-26T01:35:18+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-11-26T01:35:18+00:00 52479b623d3d41df84c499325b6a8c7915413032 Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns to flow_cache_lookup() and resolver callback. Take it from socket or netdevice. Stub DECnet to init_net. Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns
to flow_cache_lookup() and resolver callback.

Take it from socket or netdevice. Stub DECnet to init_net.

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netfilter: nfmark IPV6 routing in OUTPUT, mangle, NFQUEUE 2008-11-25T11:18:11+00:00 Eric Leblond eric@inl.fr 2008-11-25T11:18:11+00:00 9f40ac713c49fb6ca655550b620edc85c445d743 This patch let nfmark to be evaluated for routing decision for OUTPUT packet, in mangle table, when process paquet in NFQUEUE. This patch is an IPv6 port of Laurent Licour IPv4 one. Signed-off-by: Eric Leblond <eric@inl.fr> Signed-off-by: Patrick McHardy <kaber@trash.net> 
This patch let nfmark to be evaluated for routing decision for OUTPUT
packet, in mangle table, when process paquet in NFQUEUE. This patch is
an IPv6 port of Laurent Licour IPv4 one.

Signed-off-by: Eric Leblond <eric@inl.fr>
Signed-off-by: Patrick McHardy <kaber@trash.net>
netns: correct mib stats in ip6_route_me_harder() 2008-10-15T05:55:21+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-15T05:55:21+00:00 eef9d90dcde7bb4d029b67ed36457efc4970d5a2 Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netns: add net parameter to IP6_INC_STATS 2008-10-08T17:54:51+00:00 Denis V. Lunev den@openvz.org 2008-10-08T17:54:51+00:00 3bd653c8455bc7991bae77968702b31c8f5df883 Signed-off-by: Denis V. Lunev <den@openvz.org> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Denis V. Lunev <den@openvz.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
netfilter: netns: fix {ip,6}_route_me_harder() in netns 2008-10-08T09:35:03+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:03+00:00 b21f89019399ff75d9c239010e38b840eb6e01e7 Take netns from skb->dst->dev. It should be safe because, they are called from LOCAL_OUT hook where dst is valid (though, I'm not exactly sure about IPVS and queueing packets to userspace). [Patrick: its safe everywhere since they already expect skb->dst to be set] Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> 
Take netns from skb->dst->dev. It should be safe because, they are called
from LOCAL_OUT hook where dst is valid (though, I'm not exactly sure about
IPVS and queueing packets to userspace).

[Patrick: its safe everywhere since they already expect skb->dst to be set]

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
[NETFILTER]: Add partial checksum validation helper 2008-04-14T09:15:49+00:00 Patrick McHardy kaber@trash.net 2008-03-20T14:15:53+00:00 d63a650736f566a1f9e9434725d2089597c0d2cc Move the UDP-Lite conntrack checksum validation to a generic helper similar to nf_checksum() and make it fall back to nf_checksum() in case the full packet is to be checksummed and hardware checksums are available. This is to be used by DCCP conntrack, which also needs to verify partial checksums. Signed-off-by: Patrick McHardy <kaber@trash.net> 
Move the UDP-Lite conntrack checksum validation to a generic helper
similar to nf_checksum() and make it fall back to nf_checksum()
in case the full packet is to be checksummed and hardware checksums
are available. This is to be used by DCCP conntrack, which also
needs to verify partial checksums.

Signed-off-by: Patrick McHardy <kaber@trash.net>
[NETNS][IPV6] route6 - add netns parameter to ip6_route_output 2008-03-05T18:48:10+00:00 Daniel Lezcano dlezcano@fr.ibm.com 2008-03-05T18:48:10+00:00 4591db4f37618f37a9f1f25d291c3c7a43a15a21 Add an netns parameter to ip6_route_output. That will allow to access to the right routing table for outgoing traffic. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com> Signed-off-by: Benjamin Thery <benjamin.thery@bull.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Add an netns parameter to ip6_route_output. That will allow to access
to the right routing table for outgoing traffic.

Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Signed-off-by: Benjamin Thery <benjamin.thery@bull.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: constify nf_afinfo 2008-01-28T22:59:05+00:00 Patrick McHardy kaber@trash.net 2007-12-18T06:42:27+00:00 1e796fda00f06bac584f0e4ad8750ab9430d79d3 Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info 2008-01-28T22:56:14+00:00 Patrick McHardy kaber@trash.net 2007-12-05T09:26:33+00:00 02f014d88831f73b895c1fe09badb66c88e932d3 Move common fields for queue management to struct nf_info and rename it to struct nf_queue_entry. The avoids one allocation/free per packet and simplifies the code a bit. Alternatively we could add some private room at the tail, but since all current users use identical structs this seems easier. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> 
Move common fields for queue management to struct nf_info and rename it
to struct nf_queue_entry. The avoids one allocation/free per packet and
simplifies the code a bit.

Alternatively we could add some private room at the tail, but since
all current users use identical structs this seems easier.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>