linux.git/net/ipv6/netfilter.c, branch v2.6.39

netfilter: af_info: add 'strict' parameter to limit lookup to .oif

2011-04-04T15:00:54+00:00

ipv6 fib lookup can set RT6_LOOKUP_F_IFACE flag to restrict search
to an interface, but this flag cannot be set via struct flowi.

Also, it cannot be set via ip6_route_output: this function uses the
passed sock struct to determine if this flag is required
(by testing for nonzero sk_bound_dev_if).

Work around this by passing in an artificial struct sk in case
'strict' argument is true.

This is required to replace the rt6_lookup call in xt_addrtype.c with
nf_afinfo->route().

Signed-off-by: Florian Westphal 
Acked-by: David S. Miller 
Signed-off-by: Patrick McHardy

netfilter: af_info: add network namespace parameter to route hook

2011-04-04T14:56:29+00:00

This is required to eventually replace the rt6_lookup call in
xt_addrtype.c with nf_afinfo->route().

Signed-off-by: Florian Westphal 
Acked-by: David S. Miller 
Signed-off-by: Patrick McHardy

ipv6: Convert to use flowi6 where applicable.

2011-03-12T23:08:54+00:00

Signed-off-by: David S. Miller

net: Put flowi_* prefix on AF independent members of struct flowi

2011-03-12T23:08:44+00:00

I intend to turn struct flowi into a union of AF specific flowi
structs.  There will be a common structure that each variant includes
first, much like struct sock_common.

This is the first step to move in that direction.

Signed-off-by: David S. Miller

xfrm: Return dst directly from xfrm_lookup()

2011-03-02T21:27:41+00:00

Instead of on the stack.

Signed-off-by: David S. Miller

net: use the macros defined for the members of flowi

2010-11-17T20:27:45+00:00

Use the macros defined for the members of flowi to clean the code up.

Signed-off-by: Changli Gao 
Signed-off-by: David S. Miller

netfilter: kill redundant check code in which setting ip_summed value

2010-06-14T14:20:02+00:00

If the returned csum value is 0, We has set ip_summed with
CHECKSUM_UNNECESSARY flag in __skb_checksum_complete_head().

So this patch kills the check and changes to return to upper
caller directly.

Signed-off-by: Shan Wei 
Signed-off-by: Patrick McHardy

netfilter: ipv6: move xfrm_lookup at end of ip6_route_me_harder

2010-04-15T10:37:18+00:00

xfrm_lookup should be called after ip6_route_output skb_dst_set,
otherwise skb_dst_set of xfrm_lookup is pointless

Signed-off-by: Ulrich Weber 
Signed-off-by: Patrick McHardy

net: skb->dst accessors

2009-06-03T09:51:04+00:00

Define three accessors to get/set dst attached to a skb

struct dst_entry *skb_dst(const struct sk_buff *skb)

void skb_dst_set(struct sk_buff *skb, struct dst_entry *dst)

void skb_dst_drop(struct sk_buff *skb)
This one should replace occurrences of :
dst_release(skb->dst)
skb->dst = NULL;

Delete skb->dst field

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6

2008-11-28T10:19:15+00:00

Conflicts:

	net/netfilter/nf_conntrack_netlink.c