linux/net/ipv4/netfilter
Patrick McHardy 1bd9bef6f9 [NETFILTER]: Call POST_ROUTING hook before fragmentation
Call POST_ROUTING hook before fragmentation to get rid of the okfn use
in ip_refrag and save the useless fragmentation/defragmentation step
when NAT is used.

The patch introduces one user-visible change, the POSTROUTING chain
in the mangle table gets entire packets, not fragments, which should
simplify use of the MARK and CLASSIFY targets for queueing as a nice
side-effect.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-01-05 12:20:59 -08:00
..
arp_tables.c [NETFILTER] ip_tables: NUMA-aware allocation 2006-01-03 13:10:29 -08:00
arpt_mangle.c
arptable_filter.c
ip_conntrack_amanda.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
ip_conntrack_core.c [NETFILTER]: Fix ip_conntrack_flush abuse in ctnetlink 2005-12-05 13:33:50 -08:00
ip_conntrack_ftp.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
ip_conntrack_helper_pptp.c [NETFILTER] PPTP helper: Fix compilation of conntrack helper without NAT 2005-11-04 23:02:53 -02:00
ip_conntrack_irc.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
ip_conntrack_netbios_ns.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
ip_conntrack_netlink.c [NETFILTER]: ctnetlink: Fix dumping of helper name 2006-01-05 12:20:02 -08:00
ip_conntrack_proto_generic.c
ip_conntrack_proto_gre.c [INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h 2006-01-03 13:11:21 -08:00
ip_conntrack_proto_icmp.c [NETFILTER]: ctnetlink: Add sanity checkings for ICMP 2006-01-05 12:17:03 -08:00
ip_conntrack_proto_sctp.c [NET]: Add const markers to various variables. 2005-11-29 16:21:38 -08:00
ip_conntrack_proto_tcp.c [NETFILTER]: Fix unbalanced read_unlock_bh in ctnetlink 2005-12-05 13:37:33 -08:00
ip_conntrack_proto_udp.c [INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h 2006-01-03 13:11:21 -08:00
ip_conntrack_standalone.c [NETFILTER]: Call POST_ROUTING hook before fragmentation 2006-01-05 12:20:59 -08:00
ip_conntrack_tftp.c [NETFILTER] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768 2005-11-17 15:06:47 -08:00
ip_nat_amanda.c
ip_nat_core.c [NETFILTER] ipv4: small cleanups 2005-11-29 16:28:18 -08:00
ip_nat_ftp.c
ip_nat_helper_pptp.c [NETFILTER] PPTP helper: fix PNS-PAC expectation call id 2005-11-09 13:01:53 -08:00
ip_nat_helper.c
ip_nat_irc.c
ip_nat_proto_gre.c [NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NAT 2005-11-04 23:19:17 -02:00
ip_nat_proto_icmp.c
ip_nat_proto_tcp.c
ip_nat_proto_udp.c
ip_nat_proto_unknown.c [NETFILTER] NAT: Fix module refcount dropping too far 2005-11-05 01:23:34 -02:00
ip_nat_rule.c
ip_nat_snmp_basic.c [INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h 2006-01-03 13:11:21 -08:00
ip_nat_standalone.c [NETFILTER]: Call POST_ROUTING hook before fragmentation 2006-01-05 12:20:59 -08:00
ip_nat_tftp.c [NETFILTER]: ip_nat_tftp: Fix expectation NAT 2005-12-12 15:02:48 -08:00
ip_queue.c
ip_tables.c [NETFILTER] ip_tables: NUMA-aware allocation 2006-01-03 13:10:29 -08:00
ipt_addrtype.c [PATCH] Typo fix: dot after newline in printk strings 2005-10-30 17:37:20 -08:00
ipt_ah.c
ipt_CLASSIFY.c
ipt_CLUSTERIP.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_comment.c
ipt_connbytes.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_connmark.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_CONNMARK.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_conntrack.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_dccp.c
ipt_dscp.c
ipt_DSCP.c
ipt_ecn.c
ipt_ECN.c
ipt_esp.c
ipt_hashlimit.c
ipt_helper.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_iprange.c
ipt_length.c
ipt_limit.c
ipt_LOG.c [NETFILTER] ipv4: small cleanups 2005-11-29 16:28:18 -08:00
ipt_mac.c
ipt_mark.c
ipt_MARK.c
ipt_MASQUERADE.c [INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h 2006-01-03 13:11:21 -08:00
ipt_multiport.c
ipt_NETMAP.c
ipt_NFQUEUE.c
ipt_NOTRACK.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_owner.c
ipt_physdev.c [INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h 2006-01-03 13:11:21 -08:00
ipt_pkttype.c
ipt_realm.c
ipt_recent.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
ipt_REDIRECT.c [IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl 2005-10-03 14:35:55 -07:00
ipt_REJECT.c
ipt_SAME.c
ipt_sctp.c
ipt_state.c [NETFILTER]: Add nf_conntrack subsystem. 2005-11-09 16:38:16 -08:00
ipt_string.c
ipt_tcpmss.c
ipt_TCPMSS.c
ipt_tos.c
ipt_TOS.c
ipt_ttl.c
ipt_TTL.c
ipt_ULOG.c [NETFILTER]: Fix module_param types and permissions 2006-01-05 12:19:46 -08:00
iptable_filter.c
iptable_mangle.c
iptable_raw.c
Kconfig [NETFILTER]: Mark ctnetlink as EXPERIMENTAL 2005-12-05 13:36:25 -08:00
Makefile [NETFILTER]: Fix NAT init order 2005-12-19 13:53:09 -08:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: Call POST_ROUTING hook before fragmentation 2006-01-05 12:20:59 -08:00
nf_conntrack_proto_icmp.c [NETFILTER]: Add ctnetlink port for nf_conntrack 2006-01-05 12:19:05 -08:00