linux.git/net/netfilter/xt_TRACE.c, branch v5.0

netfilter: xt_TRACE: add explicitly nf_logger_find_get call

2016-06-23T11:26:49+00:00

Consider such situation, if nf_log_ipv4 kernel module is not installed,
and the user add a following iptables rule:
  # iptables -t raw -I PREROUTING -j TRACE

There will be no trace log generated until the user install nf_log_ipv4
module manully. So we should add request related nf_log module
appropriately here.

Signed-off-by: Liping Zhang 
Acked-by: Florian Westphal 
Signed-off-by: Pablo Neira Ayuso

netfilter: xtables: substitute temporary defines by final name

2010-05-11T16:31:17+00:00

Signed-off-by: Jan Engelhardt

netfilter: xtables: move extension arguments into compound structure (4/6)

2008-10-08T09:35:19+00:00

This patch does this for target extensions' target functions.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions

2008-10-08T09:35:01+00:00

When a match or target is looked up using xt_find_{match,target},
Xtables will also search the NFPROTO_UNSPEC module list. This allows
for protocol-independent extensions (like xt_time) to be reused from
other components (e.g. arptables, ebtables).

Extensions that take different codepaths depending on match->family
or target->family of course cannot use NFPROTO_UNSPEC within the
registration structure (e.g. xt_pkttype).

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

netfilter: x_tables: use NFPROTO_* in extensions

2008-10-08T09:35:01+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

[NETFILTER]: Update modules' descriptions

2008-01-28T23:02:26+00:00

Updates the MODULE_DESCRIPTION() tags for all Netfilter modules,
actually describing what the module does and not just
"netfilter XYZ target".

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: x_tables: consistent and unique symbol names

2008-01-28T22:55:53+00:00

Give all Netfilter modules consistent and unique symbol names.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15T19:26:29+00:00

With all the users of the double pointers removed, this patch mops up by
finally replacing all occurances of sk_buff ** in the netfilter API by
sk_buff *.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: x_tables: mark matches and targets __read_mostly

2007-07-11T05:17:15+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: x_tables: add TRACE target

2007-07-11T05:17:14+00:00

The TRACE target can be used to follow IP and IPv6 packets through
the ruleset.

Signed-off-by: Jozsef Kadlecsik 
Signed-off-by: Patrick NcHardy 
Signed-off-by: David S. Miller