- 11 Jul, 2007 40 commits
-
-
Yasuyuki Kozakai authored
This kills the global 'destroy' operation which was used by NAT. Instead it uses the extension infrastructure so that multiple extensions can register own operations. Signed-off-by:
Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp> Signed-off-by:
Patrick McHardy <kaber@trash.net> Signed-off-by:
David S. Miller <davem@davemloft.net>
-
Yasuyuki Kozakai authored
Now memory space for help and NAT are allocated by extension infrastructure. Signed-off-by:
-
Yasuyuki Kozakai authored
Signed-off-by:
-
Yasuyuki Kozakai authored
Signed-off-by:
-
Yasuyuki Kozakai authored
I will split 'struct nf_nat_info' out from conntrack. So I cannot use 'offsetof' to get the pointer to conntrack from it. Signed-off-by:
-
Yasuyuki Kozakai authored
Signed-off-by:
-
Yasuyuki Kozakai authored
Old space allocator of conntrack had problems about extensibility. - It required slab cache per combination of extensions. - It expected what extensions would be assigned, but it was impossible to expect that completely, then we allocated bigger memory object than really required. - It needed to search helper twice due to lock issue. Now basic informations of a connection are stored in 'struct nf_conn'. And a storage for extension (helper, NAT) is allocated by kmalloc. Signed-off-by:
-
Yasuyuki Kozakai authored
Signed-off-by:
-
Patrick McHardy authored
Signed-off-by:
-
Jozsef Kadlecsik authored
The TRACE target can be used to follow IP and IPv6 packets through the ruleset. Signed-off-by:
Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by:
-
Jan Engelhardt authored
Along comes... xt_u32, a revamped ipt_u32 from POM-NG, Plus: * 2007-06-02: added ipv6 support * 2007-06-05: uses kmalloc for the big buffer * 2007-06-05: added inversion * 2007-06-20: use skb_copy_bits() and get rid of the big buffer and lock (suggested by Pablo Neira Ayuso) Signed-off-by:Jan Engelhardt <jengelh@gmx.de> Signed-off-by:
-
Jerome Borsboom authored
DNAT of the the RTP session is only necessary if the SIP session has been SNATed. Signed-off-by:
Jerome Borsboom <j.borsboom@erasmusmc.nl> Signed-off-by:
-
Jan Engelhardt authored
Removes redundant parentheses and braces (And add one pair in a xt_tcpudp.c macro). Signed-off-by:
-
Jan Engelhardt authored
device_cmp: the function's address is taken (call to nf_ct_iterate_cleanup) alloc_null_binding: referenced externally Signed-off-by:
-
Jan Engelhardt authored
Make a number of variables const and/or remove unneeded casts. Signed-off-by:
-
Jan Engelhardt authored
Switch the return type of target checkentry functions to boolean. Signed-off-by:
-
Jan Engelhardt authored
Switch the return type of match functions to boolean Signed-off-by:
-
Jan Engelhardt authored
Switch the return type of match functions to boolean Signed-off-by:
-
Jan Engelhardt authored
Switch the "hotdrop" variables to boolean Signed-off-by:
-
Yasuyuki Kozakai authored
This explains the allowed upper protocol numbers. IP6T_F_NOPROTO was introduced to use 0 as Hop-by-Hop option header, not wildcard. But that seemed to be forgotten. 0 has been used as wildcard since 2002-08-23. Signed-off-by:
Yasuyuki Kozakai <yasuyuki@netfilter.org> Signed-off-by:
-
Jing Min Zhao authored
Check range before checking STOP flag. This optimization may save a nanosecond or less :) Signed-off-by:
Jing Min Zhao <zhaojingmin@vivecode.com> Signed-off-by:
-
James Chapman authored
This cleanup fell out after adding L2TP support where a new encap_rcv funcptr was added to struct udp_sock. Have XFRM use the new encap_rcv funcptr, which allows us to move the XFRM encap code from udp.c into xfrm4_input.c. Make xfrm4_rcv_encap() static since it is no longer called externally. Signed-off-by:
James Chapman <jchapman@katalix.com> Acked-by:
-
G. Liakhovetski authored
This patch extracts common code from irttp_open_tsap() and irttp_dup() into a new function to 1) avoid code duplication, 2) help avoid forgetting object initialization in the tsap duplication path in the future. Signed-off-by:
G. Liakhovetski <gl@dsa-ac.de> Signed-off-by:
Samuel Ortiz <samuel@sortiz.org> Signed-off-by:
-
Samuel Ortiz authored
Signed-off-by:
-
Samuel Ortiz authored
Through the IrDA netlink set mode command, we switch to IrDA monitor mode, where one IrLAP instance receives all the packets on the media, without ever responding to them. Signed-off-by:
-
Samuel Ortiz authored
First IrDA configuration netlink layer implementation. Currently, we only support the set/get mode commands. Signed-off-by:
-
Guido Guenther authored
Introduce a new syscall TUNSETGROUP for group ownership setting of tap devices. The user now is allowed to send packages if either his euid or his egid matches the one specified via tunctl (via -u or -g respecitvely). If both, gid and uid, are set via tunctl, both have to match. Signed-off-by:
Guido Guenther <agx@sigxcpu.org> Signed-off-by:
Jeff Dike <jdike@linux.intel.com> Signed-off-by:
-
Patrick McHardy authored
Signed-off-by:
-
Patrick McHardy authored
Use the generic estimator instead of reimplementing (parts of) it. For compatibility always create a default estimator for new classes. Signed-off-by:
-
Patrick McHardy authored
Remove stats_lock pointers from qdisc-internal structures, in all cases it points to dev->queue_lock. The only case where it is necessary is for top-level qdiscs, where it might also point to dev->ingress_lock in case of the ingress qdisc. Also remove it from actions completely, it always points to the actions internal lock. Signed-off-by:
-
Patrick McHardy authored
The generic estimator is always built in anways and all the config options does is prevent including a minimal amount of code for setting it up. Additionally the option is already automatically selected for most cases. Signed-off-by:
-
Jamal Hadi Salim authored
Added transport mode ESP support for starters. I will send more of these modes and types once i have resolved the tunnel mode isses. Signed-off-by:
Jamal Hadi Salim <hadi@cyberus.ca> Signed-off-by:
Robert Olsson <robert.olsson@its.uu.se> Signed-off-by:
-
Jamal Hadi Salim authored
This allows other in-kernel functions to do SAD lookups. The only known user at the moment is pktgen. Signed-off-by:
-
Jamal Hadi Salim authored
By default all flows in pktgen are randomly selected. This patch introduces ability to have all defined flows to be sent sequentially. Robert defined randomness to be the default behavior. Signed-off-by:
-
Jamal Hadi Salim authored
Track the extra packet overhead for VLAN tags, MPLS, IPSEC etc Signed-off-by:
-
Larry Finger authored
The initial rate for STA's using rc80211_simple is set to the last rate in the rate table. For situations for which the signal is weak, the rate may be too high for authentication and association. Although the rc80211_simple module will adjust the speed, the response may not be fast enough for a successful connection. This modification sets the initial rate to the lowest supported value. Signed-off-by:
Larry Finger <Larry.Finger@lwfinger.net> Signed-off-by:
Johannes Berg <johannes@sipsolutions.net> Signed-off-by:
John W. Linville <linville@tuxdriver.com> Signed-off-by:
-
Ilpo Järvinen authored
Do same adjustment to SACK fastpath counters provided that they're valid. Signed-off-by:
Ilpo Järvinen <ilpo.jarvinen@helsinki.fi> Signed-off-by:
-
Patrick McHardy authored
When a reference to an existing address is increased or decreased without hitting zero, the address count is incorrectly adjusted. Signed-off-by:
-
Peter P Waskiewicz Jr authored
Add the new sch_rr qdisc for multiqueue network device support. Allow sch_prio and sch_rr to be compiled with or without multiqueue hardware support. sch_rr is part of sch_prio, and is referenced from MODULE_ALIAS. This was done since sch_prio and sch_rr only differ in their dequeue routine. Signed-off-by:
Peter P Waskiewicz Jr <peter.p.waskiewicz.jr@intel.com> Signed-off-by:
-
Peter P Waskiewicz Jr authored
Add the multiqueue hardware device support API to the core network stack. Allow drivers to allocate multiple queues and manage them at the netdev level if they choose to do so. Added a new field to sk_buff, namely queue_mapping, for drivers to know which tx_ring to select based on OS classification of the flow. Signed-off-by:
-
