kernel/linux.git/include/net/netns/ipv4.h, branch linux-2.6.28.y

netfilter: netns nat: per-netns bysource hash

2008-10-08T09:35:11+00:00

Signed-off-by: Alexey Dobriyan Signed-off-by: Patrick McHardy

netfilter: netns nat: per-netns NAT table

2008-10-08T09:35:10+00:00

Same story as with iptable_filter, iptables_raw tables. Signed-off-by: Alexey Dobriyan Signed-off-by: Patrick McHardy

netns: place rt_genid into struct net

2008-07-06T02:04:32+00:00

Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller

netns: make rt_secret_rebuild timer per namespace

2008-07-06T02:02:59+00:00

Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller

netns: register net.ipv4.route.flush in each namespace

2008-07-06T02:02:33+00:00

Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller

netfilter: ip_tables: add iptables security table for mandatory access control rules

2008-06-09T22:57:24+00:00

The following patch implements a new "security" table for iptables, so that MAC (SELinux etc.) networking rules can be managed separately to standard DAC rules. This is to help with distro integration of the new secmark-based network controls, per various previous discussions. The need for a separate table arises from the fact that existing tools and usage of iptables will likely clash with centralized MAC policy management. The SECMARK and CONNSECMARK targets will still be valid in the mangle table to prevent breakage of existing users. Signed-off-by: James Morris Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETNS]: Create tcp control socket in the each namespace.

2008-04-03T21:31:33+00:00

Signed-off-by: Denis V. Lunev Signed-off-by: David S. Miller

[NETNS][ICMP]: Make ctl tables for ICMP sysctls per-net.

2008-03-26T08:56:24+00:00

Add some flesh to ipv4_sysctl_init_net and ipv4_sysctl_exit_net, i.e. copy the table, alter .data pointers and register it per-net. Other ipv4_table's sysctls are now global, but this is going to change once sysctl permissions patches migrate from -mm tree to mainline in 2.6.26 merge window :) Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

[NETNS][ICMP]: Move ICMP sysctls on struct net.

2008-03-26T08:55:37+00:00

Initialization is moved to icmp_sk_init, all the places, that refer to them use init_net for now. Signed-off-by: Pavel Emelyanov Signed-off-by: David S. Miller

[NETNS]: Make icmp_sk per namespace.

2008-02-29T19:19:58+00:00

All preparations are done. Now just add a hook to perform an initialization on namespace startup and replace icmp_sk macro with proper inline call. Signed-off-by: Denis V. Lunev Acked-by: Daniel Lezcano Signed-off-by: David S. Miller