linux/net/ipv6/netfilter.c, branch v2.6.32.7

net: skb->dst accessors

2009-06-03T09:51:04Z

Define three accessors to get/set dst attached to a skb struct dst_entry *skb_dst(const struct sk_buff *skb) void skb_dst_set(struct sk_buff *skb, struct dst_entry *dst) void skb_dst_drop(struct sk_buff *skb) This one should replace occurrences of : dst_release(skb->dst) skb->dst = NULL; Delete skb->dst field Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6

2008-11-28T10:19:15Z

Conflicts: net/netfilter/nf_conntrack_netlink.c

netns xfrm: lookup in netns

2008-11-26T01:35:18Z

Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns to flow_cache_lookup() and resolver callback. Take it from socket or netdevice. Stub DECnet to init_net. Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netfilter: nfmark IPV6 routing in OUTPUT, mangle, NFQUEUE

2008-11-25T11:18:11Z

This patch let nfmark to be evaluated for routing decision for OUTPUT packet, in mangle table, when process paquet in NFQUEUE. This patch is an IPv6 port of Laurent Licour IPv4 one. Signed-off-by: Eric Leblond Signed-off-by: Patrick McHardy

netns: correct mib stats in ip6_route_me_harder()

2008-10-15T05:55:21Z

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns: add net parameter to IP6_INC_STATS

2008-10-08T17:54:51Z

Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller

netfilter: netns: fix {ip,6}_route_me_harder() in netns

2008-10-08T09:35:03Z

Take netns from skb->dst->dev. It should be safe because, they are called from LOCAL_OUT hook where dst is valid (though, I'm not exactly sure about IPVS and queueing packets to userspace). [Patrick: its safe everywhere since they already expect skb->dst to be set] Signed-off-by: Alexey Dobriyan Signed-off-by: Patrick McHardy

[NETFILTER]: Add partial checksum validation helper

2008-04-14T09:15:49Z

Move the UDP-Lite conntrack checksum validation to a generic helper similar to nf_checksum() and make it fall back to nf_checksum() in case the full packet is to be checksummed and hardware checksums are available. This is to be used by DCCP conntrack, which also needs to verify partial checksums. Signed-off-by: Patrick McHardy

[NETNS][IPV6] route6 - add netns parameter to ip6_route_output

2008-03-05T18:48:10Z

Add an netns parameter to ip6_route_output. That will allow to access to the right routing table for outgoing traffic. Signed-off-by: Daniel Lezcano Signed-off-by: Benjamin Thery Signed-off-by: David S. Miller

[NETFILTER]: constify nf_afinfo

2008-01-28T22:59:05Z

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller