Florian Westphal 974292defe netfilter: nf_tables: only allow in/output for arp packets ... arp packets cannot be forwarded. They can be bridged, but then they can be filtered using either ebtables or nftables bridge family. The bridge netfilter exposes a "call-arptables" switch which pushes packets into arptables, but lets not expose this for nftables, so better close this asap. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-07-17 17:02:44 +02:00
..
arp_tables.c	netfilter: Remove unnecessary cast on void pointer	2017-04-07 17:29:17 +02:00
arpt_mangle.c
arptable_filter.c
ip_tables.c	netfilter: Remove unnecessary cast on void pointer	2017-04-07 17:29:17 +02:00
ipt_ah.c
ipt_CLUSTERIP.c	netfilter: ipt_CLUSTERIP: do not hold dev	2017-06-19 19:06:20 +02:00
ipt_ECN.c
ipt_MASQUERADE.c	netfilter: nat: add dependencies on conntrack module	2016-12-04 21:16:51 +01:00
ipt_REJECT.c	netfilter: x_tables: move hook state into xt_action_param structure	2016-11-03 10:56:21 +01:00
ipt_rpfilter.c	netfilter: rpfilter: fix incorrect loopback packet judgment	2017-01-16 14:23:01 +01:00
ipt_SYNPROXY.c	networking: make skb_put & friends return void pointers	2017-06-16 11:48:39 -04:00
iptable_filter.c
iptable_mangle.c
iptable_nat.c
iptable_raw.c
iptable_security.c
Kconfig	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
Makefile	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
nf_conntrack_l3proto_ipv4.c	netfilter: don't track fragmented packets	2017-03-08 18:02:12 +01:00
nf_conntrack_proto_icmp.c	netfilter: add and use nf_ct_set helper	2017-02-02 14:31:54 +01:00
nf_defrag_ipv4.c	skbuff: add and use skb_nfct helper	2017-02-02 14:31:53 +01:00
nf_dup_ipv4.c	netfilter: kill the fake untracked conntrack objects	2017-04-15 11:47:57 +02:00
nf_log_arp.c	lib/vsprintf.c: remove %Z support	2017-02-27 18:43:47 -08:00
nf_log_ipv4.c	netfilter: allow logging from non-init namespaces	2017-02-02 14:31:58 +01:00
nf_nat_h323.c
nf_nat_l3proto_ipv4.c	netfilter: don't attach a nat extension by default	2017-04-26 09:30:22 +02:00
nf_nat_masquerade_ipv4.c	netfilter: conntrack: rename nf_ct_iterate_cleanup	2017-05-29 12:46:08 +02:00
nf_nat_pptp.c	netfilter: pptp: attach nat extension when needed	2017-04-26 09:30:22 +02:00
nf_nat_proto_gre.c	netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter	2016-09-07 10:36:52 +02:00
nf_nat_proto_icmp.c
nf_nat_snmp_basic.c	netfilter: snmp: avoid stack size warning	2017-05-01 11:43:58 +02:00
nf_reject_ipv4.c	networking: make skb_put & friends return void pointers	2017-06-16 11:48:39 -04:00
nf_socket_ipv4.c	netfilter: remove nf_ct_is_untracked	2017-04-15 11:51:33 +02:00
nf_tables_arp.c	netfilter: nf_tables: only allow in/output for arp packets	2017-07-17 17:02:44 +02:00
nf_tables_ipv4.c	netfilter: Add the missed return value check of nft_register_chain_type	2016-09-12 19:54:45 +02:00
nft_chain_nat_ipv4.c
nft_chain_route_ipv4.c	netfilter: nft_chain_route: re-route before skb is queued to userspace	2016-09-06 18:02:37 +02:00
nft_dup_ipv4.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-11-15 10:54:36 -05:00
nft_fib_ipv4.c	netfilter: Remove exceptional & on function name	2017-04-07 18:24:47 +02:00
nft_masq_ipv4.c	netfilter: nf_tables: fix mismatch in big-endian system	2017-03-13 13:30:28 +01:00
nft_redir_ipv4.c	netfilter: nf_tables: fix mismatch in big-endian system	2017-03-13 13:30:28 +01:00
nft_reject_ipv4.c	netfilter: nf_tables: use hook state from xt_action_param structure	2016-11-03 11:52:34 +01:00