kernel/linux.git/include/linux/netfilter, branch v2.6.19.2

[NETFILTER]: ip6_tables: fixed conflicted optname for getsockopt

2006-11-16T05:18:49+00:00

66 and 67 for getsockopt on IPv6 socket is doubly used for IPv6 Advanced API and ip6tables. This moves numbers for ip6tables to 68 and 69. This also kills XT_SO_* because {ip,ip6,arp}_tables doesn't have so much common numbers now. The old userland tools keep to behave as ever, because old kernel always calls functions of IPv6 Advanced API for their numbers. Signed-off-by: Yasuyuki Kozakai Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Add dscp,DSCP headers to header-y

2006-09-25T02:28:47+00:00

This patch adds xt_dscp.h and xt_DSCP.h to the kernel headers which are exported via 'make headers_install'. These are necessary for userspace to add rules using dscp match and DSCP target. Signed-off-by: Yasuyuki Kozakai Signed-off-by: David S. Miller

[PATCH] fix iptables __user misannotations

2006-09-24T22:55:03+00:00

Signed-off-by: Al Viro Signed-off-by: Linus Torvalds

[NETFILTER]: x_tables: simplify compat API

2006-09-22T22:20:01+00:00

Split the xt_compat_match/xt_compat_target into smaller type-safe functions performing just one operation. Handle all alignment and size-related conversions centrally in these function instead of requiring each module to implement a full-blown conversion function. Replace ->compat callback by ->compat_from_user and ->compat_to_user callbacks, responsible for converting just a single private structure. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: TCP conntrack: improve dead connection detection

2006-09-22T22:19:57+00:00

Don't count window updates as retransmissions. Signed-off-by: George Hansper Signed-off-by: Patrick McHardy

[NETFILTER]: kill listhelp.h

2006-09-22T22:19:45+00:00

Kill listhelp.h and use the list.h functions instead. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: x_tables: add data member to struct xt_match

2006-09-22T21:55:36+00:00

Shared match functions can use this to make runtime decisions basen on the used match. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink: remove unnecessary packed attributes

2006-09-22T21:55:35+00:00

Remove unnecessary packed attributes in nfnetlink structures. Unfortunately in a few cases they have to stay to avoid changing structure sizes. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22T21:55:34+00:00

The size is verified by x_tables and isn't needed by the modules anymore. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22T21:55:33+00:00

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller