Patrick McHardy
5d0aa2ccd4
netfilter: nf_conntrack: add support for "conntrack zones"
...
Normally, each connection needs a unique identity. Conntrack zones allow
to specify a numerical zone using the CT target, connections in different
zones can use the same identity.
Example:
iptables -t raw -A PREROUTING -i veth0 -j CT --zone 1
iptables -t raw -A OUTPUT -o veth1 -j CT --zone 1
Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-02-15 18:13:33 +01:00
..
2010-02-15 18:13:33 +01:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-11-25 15:48:41 -08:00
2010-01-17 19:16:02 -08:00
2009-11-02 03:42:41 -08:00
2009-11-25 15:48:41 -08:00
2010-01-13 17:27:37 -08:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-10-20 18:55:45 -07:00
2009-12-08 20:17:51 -08:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-09-14 17:03:05 -07:00
2010-01-06 20:37:01 -08:00
2010-01-17 19:16:02 -08:00
2009-10-29 01:13:53 -07:00
2010-01-28 06:31:06 -08:00
2009-10-27 01:03:26 -07:00
2009-10-07 14:50:30 -07:00
2010-01-17 19:16:02 -08:00
2009-06-23 04:31:07 -07:00
2010-01-17 19:16:02 -08:00
2009-06-03 02:51:04 -07:00
2010-01-23 01:21:27 -08:00
2009-09-14 17:03:05 -07:00
2010-01-17 19:16:02 -08:00
2010-02-10 14:17:10 +01:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-12-23 14:13:30 -08:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-09-14 17:03:05 -07:00
2009-09-30 16:12:20 -07:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-06-03 02:51:04 -07:00
2009-06-03 02:51:04 -07:00
2010-01-24 22:47:53 -08:00
2010-01-28 06:31:05 -08:00