leandrof/linux
1
0
Fork 0
forked from Minki/linux
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4de6f16b9e
linux/net/netfilter
History
Alexey Dobriyan 4de6f16b9e netfilter: enable netfilter in netns 
From kernel perspective, allow entrance in nf_hook_slow().

Stuff which uses nf_register_hook/nf_register_hooks, but otherwise not netns-ready:

	DECnet netfilter
	ipt_CLUSTERIP
	nf_nat_standalone.c together with XFRM (?)
	IPVS
	several individual match modules (like hashlimit)
	ctnetlink
	NOTRACK
	all sorts of queueing and reporting to userspace
	L3 and L4 protocol sysctls, bridge sysctls
	probably something else

Anyway critical mass has been achieved, there is no reason to hide netfilter any longer.

From userspace perspective, allow to manipulate all sorts of
iptables/ip6tables/arptables rules.

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2008-10-08 11:35:11 +02:00
..
core.c netfilter: enable netfilter in netns 2008-10-08 11:35:11 +02:00
Kconfig netfilter: xt_recent: IPv6 support 2008-10-08 11:35:00 +02:00
Makefile netfilter: rename ipt_recent to xt_recent 2008-10-08 11:35:00 +02:00
nf_conntrack_acct.c netfilter: netns nf_conntrack: per-netns conntrack accounting 2008-10-08 11:35:09 +02:00
nf_conntrack_amanda.c [NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors 2008-04-14 11:15:52 +02:00
nf_conntrack_core.c netfilter: netns nf_conntrack: final netns tweaks 2008-10-08 11:35:09 +02:00
nf_conntrack_ecache.c netfilter: netns nf_conntrack: per-netns event cache 2008-10-08 11:35:07 +02:00
nf_conntrack_expect.c netfilter: netns nf_conntrack: final netns tweaks 2008-10-08 11:35:09 +02:00
nf_conntrack_extend.c netfilter: nf_conntrack_extend: avoid unnecessary "ct->ext" dereferences 2008-07-26 17:50:05 -07:00
nf_conntrack_ftp.c netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb 2008-10-08 11:35:07 +02:00
nf_conntrack_h323_asn1.c [NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper 2008-01-31 19:28:07 -08:00
nf_conntrack_h323_main.c netfilter: netns nf_conntrack: H323 conntracking in netns 2008-10-08 11:35:09 +02:00
nf_conntrack_h323_types.c [NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper 2008-01-31 19:28:07 -08:00
nf_conntrack_helper.c netfilter: netns nf_conntrack: unregister helper in every netns 2008-10-08 11:35:06 +02:00
nf_conntrack_irc.c netfilter: nf_conntrack_irc: make sure string is terminated before calling simple_strtoul 2008-09-07 18:21:24 -07:00
nf_conntrack_l3proto_generic.c [NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l3proto 2008-04-14 11:15:52 +02:00
nf_conntrack_netbios_ns.c [NETFILTER]: nf_conntrack: introduce expectation classes and policies 2008-03-25 20:09:15 -07:00
nf_conntrack_netlink.c netfilter: netns nf_conntrack: per-netns expectations 2008-10-08 11:35:03 +02:00
nf_conntrack_pptp.c netfilter: netns nf_conntrack: PPTP conntracking in netns 2008-10-08 11:35:10 +02:00
nf_conntrack_proto_dccp.c netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08 11:35:08 +02:00
nf_conntrack_proto_generic.c netfilter: Use unsigned types for hooknum and pf vars 2008-10-08 11:35:00 +02:00
nf_conntrack_proto_gre.c netfilter: netns nf_conntrack: GRE conntracking in netns 2008-10-08 11:35:10 +02:00
nf_conntrack_proto_sctp.c netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb 2008-10-08 11:35:07 +02:00
nf_conntrack_proto_tcp.c netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08 11:35:08 +02:00
nf_conntrack_proto_udp.c netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08 11:35:08 +02:00
nf_conntrack_proto_udplite.c netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08 11:35:08 +02:00
nf_conntrack_proto.c netfilter: netns nf_conntrack: cleanup after L3 and L4 proto unregister in every netns 2008-10-08 11:35:07 +02:00
nf_conntrack_sane.c [NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call 2008-04-14 11:15:54 +02:00
nf_conntrack_sip.c netfilter: netns nf_conntrack: SIP conntracking in netns 2008-10-08 11:35:09 +02:00
nf_conntrack_standalone.c netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08 11:35:08 +02:00
nf_conntrack_tftp.c [NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call 2008-04-14 11:15:54 +02:00
nf_internals.h netfilter: Use unsigned types for hooknum and pf vars 2008-10-08 11:35:00 +02:00
nf_log.c netfilter: Introduce NFPROTO_* constants 2008-10-08 11:35:00 +02:00
nf_queue.c netfilter: Introduce NFPROTO_* constants 2008-10-08 11:35:00 +02:00
nf_sockopt.c netfilter: enable netfilter in netns 2008-10-08 11:35:11 +02:00
nfnetlink_log.c netfilter: Use unsigned types for hooknum and pf vars 2008-10-08 11:35:00 +02:00
nfnetlink_queue.c netns: Use net_eq() to compare net-namespaces for optimization. 2008-07-19 22:34:43 -07:00
nfnetlink.c [NETNS]: Consolidate kernel netlink socket destruction. 2008-01-28 15:08:07 -08:00
x_tables.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_CLASSIFY.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_comment.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_connbytes.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_connlimit.c netfilter: netns nf_conntrack: per-netns conntrack hash 2008-10-08 11:35:03 +02:00
xt_connmark.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_CONNMARK.c netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb 2008-10-08 11:35:07 +02:00
xt_CONNSECMARK.c netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb 2008-10-08 11:35:07 +02:00
xt_conntrack.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_dccp.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_dscp.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_DSCP.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_esp.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_hashlimit.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_helper.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_iprange.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_length.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_limit.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_mac.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_mark.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_MARK.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_multiport.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_NFLOG.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_NFQUEUE.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_NOTRACK.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_owner.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_physdev.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_pkttype.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_policy.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_quota.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_rateest.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_RATEEST.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_realm.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_recent.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_sctp.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_SECMARK.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_state.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_statistic.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_string.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_tcpmss.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_TCPMSS.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_TCPOPTSTRIP.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_tcpudp.c netfilter: x_tables: use NFPROTO_* in extensions 2008-10-08 11:35:01 +02:00
xt_time.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_TRACE.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00
xt_u32.c netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions 2008-10-08 11:35:01 +02:00