Alexey Dobriyan 9335f047fe [NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW ...

Now, iptables show and configure different set of rules in different
netnss'. Filtering decisions are still made by consulting only
init_net's set.

Changes are identical except naming so no splitting.

P.S.: one need to remove init_net checks in nf_sockopt.c and inet_create()
      to see the effect.

Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-01-31 19:27:38 -08:00

..

9p

Use helpers to obtain task pid in printks

2007-10-19 11:53:43 -07:00

bluetooth

[NET]: Remove FASTCALL macro

2008-01-28 14:57:23 -08:00

irda

[IrDA]: Irport removal - part 1

2008-01-28 15:08:10 -08:00

iucv

…

netfilter

[NETFILTER]: nf_log: add netfilter gcc printf format checking

2008-01-31 19:27:32 -08:00

netns

[NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW

2008-01-31 19:27:38 -08:00

sctp

[NET] CORE: Introducing new memory accounting interface.

2008-01-28 15:00:18 -08:00

tc_act

…

tipc

…

act_api.h

[NET_SCHED]: act_api: use PTR_ERR in tcf_action_init/tcf_action_get

2008-01-28 15:11:17 -08:00

addrconf.h

[IPV4]: Enable use of 240/4 address space.

2008-01-28 15:08:44 -08:00

af_rxrpc.h

…

af_unix.h

[AF_UNIX]: Remove unused declaration of sysctl_unix_max_dgram_qlen.

2008-01-28 14:57:13 -08:00

ah.h

…

arp.h

[NETFILTER]: ebtables: remove casts, use consts

2008-01-31 19:27:33 -08:00

atmclip.h

…

ax25.h

[NET] include/net/: Spelling fixes

2007-12-20 13:56:32 -08:00

ax88796.h

…

cfg80211.h

cfg80211/nl80211: implement station attribute retrieval

2008-01-28 14:59:52 -08:00

checksum.h

[NET]: Move netfilter checksum helpers to net/core/utils.c

2008-01-28 14:55:14 -08:00

cipso_ipv4.h

…

compat.h

…

datalink.h

…

dn_dev.h

…

dn_fib.h

…

dn_neigh.h

…

dn_nsp.h

…

dn_route.h

…

dn.h

…

dsfield.h

[NET]: Constify include/net/dsfield.h

2008-01-28 14:55:58 -08:00

dst.h

[DST]: shrinks sizeof(struct rtable) by 64 bytes on x86_64

2008-01-28 15:10:41 -08:00

esp.h

[IPSEC]: Use crypto_aead and authenc in ESP

2008-01-31 19:27:02 -08:00

fib_rules.h

[NETNS]: Process FIB rule action in the context of the namespace.

2008-01-28 15:08:14 -08:00

flow.h

[IPV4]: Remove unused multipath cached routing defintion in net/flow.h

2008-01-28 15:00:20 -08:00

gen_stats.h

[NET_SCHED]: Convert packet schedulers from rtnetlink to new netlink API

2008-01-28 15:11:10 -08:00

genetlink.h

…

icmp.h

…

ieee80211_crypt.h

…

ieee80211_radiotap.h

…

ieee80211.h

ieee80211: fix misannotations

2008-01-28 15:08:48 -08:00

ieee80211softmac_wx.h

…

ieee80211softmac.h

…

if_inet6.h

IPoIB: improve IPv4/IPv6 to IB mcast mapping functions

2008-01-25 14:15:37 -08:00

inet6_connection_sock.h

…

inet6_hashtables.h

…

inet_common.h

[INET]: Remove leftover prototypes from include/net/inet_common.h

2007-11-12 21:02:51 -08:00

inet_connection_sock.h

…

inet_ecn.h

[INET]: Give outer DSCP directly to ip*_copy_dscp

2008-01-28 14:53:45 -08:00

inet_frag.h

[NETNS][FRAGS]: Make the pernet subsystem for fragments.

2008-01-28 15:10:40 -08:00

inet_hashtables.h

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

inet_sock.h

[UDP]: Make use of inet_iif() when doing socket lookups.

2007-10-25 18:54:46 -07:00

inet_timewait_sock.h

[INET]: Uninline the inet_twsk_put function.

2008-01-28 14:59:28 -08:00

inetpeer.h

[INET]: Use list_head-s in inetpeer.c

2007-11-12 21:27:28 -08:00

ip6_checksum.h

…

ip6_fib.h

[XFRM] IPv6: Fix dst/routing check at transformation.

2008-01-28 14:59:36 -08:00

ip6_route.h

[NETNS][IPV6]: Make sysctls route per namespace.

2008-01-28 15:01:20 -08:00

ip6_tunnel.h

[NET] include/net/: Spelling fixes

2007-12-20 13:56:32 -08:00

ip_fib.h

[NETNS]: Add netns parameter to fib_select_default.

2008-01-28 15:11:03 -08:00

ip_vs.h

[IPVS]: Switch to using ctl_paths.

2008-01-28 15:01:08 -08:00

ip.h

[NETNS][FRAGS]: Make the mem counter per-namespace.

2008-01-28 15:10:36 -08:00

ipcomp.h

…

ipconfig.h

…

ipip.h

[IPV4]: Add ip_local_out

2008-01-28 14:53:47 -08:00

ipv6.h

[NETNS][FRAGS]: Make the mem counter per-namespace.

2008-01-28 15:10:36 -08:00

ipx.h

…

iw_handler.h

…

lapb.h

…

llc_c_ac.h

…

llc_c_ev.h

…

llc_c_st.h

…

llc_conn.h

…

llc_if.h

…

llc_pdu.h

…

llc_s_ac.h

…

llc_s_ev.h

…

llc_s_st.h

…

llc_sap.h

…

llc.h

…

mac80211.h

mac80211: add unified BSS configuration

2008-01-28 15:09:43 -08:00

mip6.h

…

ndisc.h

…

neighbour.h

[ARP]: neigh_parms_put(destroy) are essentially local to core/neighbour.c.

2008-01-28 15:02:11 -08:00

net_namespace.h

[NETFILTER]: x_tables: per-netns xt_tables

2008-01-31 19:27:35 -08:00

netdma.h

…

netevent.h

[NET]: Remove unnecessary inclusion of dst.h

2008-01-28 14:53:38 -08:00

netlabel.h

NetLabel: Introduce static network labels for unlabeled connections

2008-01-30 08:17:28 +11:00

netlink.h

[NETLINK]: Add nla_append()

2008-01-28 15:11:09 -08:00

netrom.h

…

nexthop.h

…

p8022.h

…

pkt_cls.h

[NET_SCHED]: Convert classifiers from rtnetlink to new netlink API

2008-01-28 15:11:11 -08:00

pkt_sched.h

[NET_SCHED]: Convert packet schedulers from rtnetlink to new netlink API

2008-01-28 15:11:10 -08:00

protocol.h

[IPV6]: make inet6_register_protosw to return an error code

2008-01-28 14:57:12 -08:00

psnap.h

…

raw.h

[RAW]: Wrong content of the /proc/net/raw6.

2008-01-31 19:27:26 -08:00

rawv6.h

[IPv6] RAW: Compact the API for the kernel

2008-01-28 14:54:29 -08:00

red.h

…

request_sock.h

[INET]: Fix potential kfree on vmalloc-ed area of request_sock_queue

2007-11-15 02:57:06 -08:00

rose.h

…

route.h

[NET]: Introducing socket mark socket option.

2008-01-31 19:27:19 -08:00

rtnetlink.h

…

sch_generic.h

[NET_SCHED]: Convert classifiers from rtnetlink to new netlink API

2008-01-28 15:11:11 -08:00

scm.h

pid namespaces: changes to show virtual ids to user

2007-10-19 11:53:40 -07:00

slhc_vj.h

…

snmp.h

[XFRM]: Define packet dropping statistics.

2008-01-28 14:59:38 -08:00

sock.h

[NET]: Introducing socket mark socket option.

2008-01-31 19:27:19 -08:00

syncppp.h

…

tcp_states.h

…

tcp.h

[TCP]: Uninline tcp_is_cwnd_limited

2008-01-28 15:01:48 -08:00

timewait_sock.h

…

transp_v6.h

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

udp.h

[NET]: prot_inuse cleanups and optimizations

2008-01-28 15:00:36 -08:00

udplite.h

[UDP]: Restore missing inDatagrams increments

2008-01-28 14:56:33 -08:00

wext.h

…

wireless.h

…

x25.h

…

x25device.h

…

xfrm.h

[XFRM]: constify 'struct xfrm_type'

2008-01-31 19:27:20 -08:00