23 Jun, 2016

1 commit

• 36f959c49   netfilter: xt_TRACE: add explicitly nf_logger_find_get call ... Browse Code »

  Consider such situation, if nf_log_ipv4 kernel module is not installed,
  and the user add a following iptables rule:
  # iptables -t raw -I PREROUTING -j TRACE

  There will be no trace log generated until the user install nf_log_ipv4
  module manully. So we should add request related nf_log module
  appropriately here.

  Signed-off-by: Liping Zhang
  Acked-by: Florian Westphal
  Signed-off-by: Pablo Neira Ayuso

  Liping Zhang

  2016-06-23 19:26:49 +0800  

12 May, 2010

1 commit

• 4b560b447   netfilter: xtables: substitute temporary defines by final name ... Browse Code »

  Signed-off-by: Jan Engelhardt

  Jan Engelhardt

  2010-05-12 00:31:17 +0800  

08 Oct, 2008

3 commits

• 7eb355865   netfilter: xtables: move extension arguments into compound structure (4/6) ... Browse Code »

  This patch does this for target extensions' target functions.

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy

  Jan Engelhardt

  2008-10-08 17:35:19 +0800  
• 55b69e910   netfilter: implement NFPROTO_UNSPEC as a wildcard for extensions ... Browse Code »

  When a match or target is looked up using xt_find_{match,target},
  Xtables will also search the NFPROTO_UNSPEC module list. This allows
  for protocol-independent extensions (like xt_time) to be reused from
  other components (e.g. arptables, ebtables).

  Extensions that take different codepaths depending on match->family
  or target->family of course cannot use NFPROTO_UNSPEC within the
  registration structure (e.g. xt_pkttype).

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy

  Jan Engelhardt

  2008-10-08 17:35:01 +0800  
• ee999d8b9   netfilter: x_tables: use NFPROTO_* in extensions ... Browse Code »

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy

  Jan Engelhardt

  2008-10-08 17:35:01 +0800  

29 Jan, 2008

2 commits

• 2ae15b64e   [NETFILTER]: Update modules' descriptions ... Browse Code »

  Updates the MODULE_DESCRIPTION() tags for all Netfilter modules,
  actually describing what the module does and not just
  "netfilter XYZ target".

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Jan Engelhardt

  2008-01-29 07:02:26 +0800  
• d3c5ee6d5   [NETFILTER]: x_tables: consistent and unique symbol names ... Browse Code »

  Give all Netfilter modules consistent and unique symbol names.

  Signed-off-by: Jan Engelhardt
  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Jan Engelhardt

  2008-01-29 06:55:53 +0800  

16 Oct, 2007

1 commit

• 3db05fea5   [NETFILTER]: Replace sk_buff ** with sk_buff * ... Browse Code »

  With all the users of the double pointers removed, this patch mops up by
  finally replacing all occurances of sk_buff ** in the netfilter API by
  sk_buff *.

  Signed-off-by: Herbert Xu
  Signed-off-by: David S. Miller

  Herbert Xu

  2007-10-16 03:26:29 +0800  

11 Jul, 2007

2 commits

• 9f15c5302   [NETFILTER]: x_tables: mark matches and targets __read_mostly ... Browse Code »

  Signed-off-by: Patrick McHardy
  Signed-off-by: David S. Miller

  Patrick McHardy

  2007-07-11 13:17:15 +0800  
• ba9dda3ab   [NETFILTER]: x_tables: add TRACE target ... Browse Code »

  The TRACE target can be used to follow IP and IPv6 packets through
  the ruleset.

  Signed-off-by: Jozsef Kadlecsik
  Signed-off-by: Patrick NcHardy
  Signed-off-by: David S. Miller

  Jozsef Kadlecsik

  2007-07-11 13:17:14 +0800