Jan Engelhardt e3eaa9910b netfilter: xtables: generate initial table on-demand ...

The static initial tables are pretty large, and after the net
namespace has been instantiated, they just hang around for nothing.
This commit removes them and creates tables on-demand at runtime when
needed.

Size shrinks by 7735 bytes (x86_64).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

2010-02-10 17:50:47 +01:00

..

ipvs

Merge branch 'master' of /repos/git/net-next-2.6

2010-02-10 14:17:10 +01:00

core.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

Kconfig

netfilter: xtables: add CT target

2010-02-03 17:17:06 +01:00

Makefile

netfilter: xtables: add CT target

2010-02-03 17:17:06 +01:00

nf_conntrack_acct.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

nf_conntrack_amanda.c

…

nf_conntrack_core.c

Merge branch 'master' of /repos/git/net-next-2.6

2010-02-10 14:17:10 +01:00

nf_conntrack_ecache.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

nf_conntrack_expect.c

netfilter: nf_conntrack: fix hash resizing with namespaces

2010-02-08 11:18:07 -08:00

nf_conntrack_extend.c

nf_conntrack: Use rcu_barrier()

2009-06-25 16:32:52 +02:00

nf_conntrack_ftp.c

netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq()

2010-01-07 18:33:18 +01:00

nf_conntrack_h323_asn1.c

…

nf_conntrack_h323_main.c

…

nf_conntrack_h323_types.c

…

nf_conntrack_helper.c

Merge branch 'master' of /repos/git/net-next-2.6

2010-02-10 14:17:10 +01:00

nf_conntrack_irc.c

…

nf_conntrack_l3proto_generic.c

…

nf_conntrack_netbios_ns.c

…

nf_conntrack_netlink.c

Merge branch 'master' of /repos/git/net-next-2.6

2010-02-10 14:17:10 +01:00

nf_conntrack_pptp.c

…

nf_conntrack_proto_dccp.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6

2009-12-08 07:55:01 -08:00

nf_conntrack_proto_generic.c

sysctl net: Remove unused binary sysctl code

2009-11-12 02:05:06 -08:00

nf_conntrack_proto_gre.c

netfilter: nf_conntrack: split up IPCT_STATUS event

2010-02-03 13:48:53 +01:00

nf_conntrack_proto_sctp.c

netfilter: nf_conntrack: split up IPCT_STATUS event

2010-02-03 13:48:53 +01:00

nf_conntrack_proto_tcp.c

netfilter: nf_conntrack: split up IPCT_STATUS event

2010-02-03 13:48:53 +01:00

nf_conntrack_proto_udp.c

netfilter: nf_conntrack: split up IPCT_STATUS event

2010-02-03 13:48:53 +01:00

nf_conntrack_proto_udplite.c

netfilter: nf_conntrack: split up IPCT_STATUS event

2010-02-03 13:48:53 +01:00

nf_conntrack_proto.c

…

nf_conntrack_sane.c

…

nf_conntrack_sip.c

netfilter: nf_conntrack_sip: fix off-by-one in compact header parsing

2010-01-19 19:06:59 +01:00

nf_conntrack_standalone.c

netfilter: nf_conntrack: fix hash resizing with namespaces

2010-02-08 11:18:07 -08:00

nf_conntrack_tftp.c

…

nf_internals.h

…

nf_log.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/sysctl-2.6

2009-12-08 07:38:50 -08:00

nf_queue.c

…

nf_sockopt.c

net: Make setsockopt() optlen be unsigned.

2009-09-30 16:12:20 -07:00

nf_tproxy_core.c

…

nfnetlink_log.c

netfilter: nfnetlink: netns support

2010-01-13 16:02:14 +01:00

nfnetlink_queue.c

netfilter: nfnetlink_queue: simplify warning message

2010-01-18 09:44:39 +01:00

nfnetlink.c

netfilter: nfnetlink: netns support

2010-01-13 16:02:14 +01:00

x_tables.c

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

xt_CLASSIFY.c

…

xt_cluster.c

netfilter: fix some sparse endianess warnings

2009-06-22 14:15:02 +02:00

xt_comment.c

…

xt_connbytes.c

…

xt_connlimit.c

netfilter: xt_connlimit: netns support

2010-01-18 08:07:50 +01:00

xt_connmark.c

netfilter: xtables: remove xt_connmark v0

2009-08-10 12:25:12 +02:00

xt_CONNMARK.c

netfilter: xtables: remove xt_CONNMARK v0

2009-08-10 12:25:11 +02:00

xt_CONNSECMARK.c

…

xt_conntrack.c

netfilter: xtables: fix conntrack match v1 ipt-save output

2009-11-23 10:43:57 +01:00

xt_CT.c

netfilter: xtables: add CT target

2010-02-03 17:17:06 +01:00

xt_dccp.c

…

xt_dscp.c

netfilter: xtables: remove xt_TOS v0

2009-08-10 12:25:11 +02:00

xt_DSCP.c

netfilter: xtables: remove xt_TOS v0

2009-08-10 12:25:11 +02:00

xt_esp.c

…

xt_hashlimit.c

netfilter: xt_hashlimit: fix race condition and simplify locking

2010-02-03 13:24:54 +01:00

xt_helper.c

…

xt_hl.c

…

xt_HL.c

…

xt_iprange.c

netfilter: xtables: remove xt_iprange v0

2009-08-10 13:09:44 +02:00

xt_LED.c

…

xt_length.c

…

xt_limit.c

netfilter: xt_limit: fix invalid return code in limit_mt_check()

2009-11-23 13:37:23 +01:00

xt_mac.c

…

xt_mark.c

netfilter: xtables: remove xt_mark v0

2009-08-10 13:09:45 +02:00

xt_MARK.c

netfilter: xtables: remove xt_MARK v0, v1

2009-08-10 12:25:12 +02:00

xt_multiport.c

…

xt_NFLOG.c

…

xt_NFQUEUE.c

netfilter: xtables: do not grab random bytes at __init

2010-01-04 16:27:25 +01:00

xt_NOTRACK.c

…

xt_osf.c

netfilter: xt_osf: change %pi4 to %pI4

2010-01-11 11:55:36 +01:00

xt_owner.c

netfilter: xtables: remove xt_owner v0

2009-08-10 13:32:30 +02:00

xt_physdev.c

…

xt_pkttype.c

…

xt_policy.c

…

xt_quota.c

netfilter: xt_quota: fix wrong return value (error case)

2009-08-23 19:09:23 -07:00

xt_rateest.c

netfilter: xt_rateest: fix comparison with self

2009-06-22 14:17:12 +02:00

xt_RATEEST.c

netfilter: xtables: do not grab random bytes at __init

2010-01-04 16:27:25 +01:00

xt_realm.c

…

xt_recent.c

netfilter: xt_recent: netns support

2010-01-18 08:31:00 +01:00

xt_repldata.h

netfilter: xtables: generate initial table on-demand

2010-02-10 17:50:47 +01:00

xt_sctp.c

…

xt_SECMARK.c

…

xt_socket.c

netfilter: xt_socket: make module available for INPUT chain

2009-10-29 15:35:10 +01:00

xt_state.c

…

xt_statistic.c

…

xt_string.c

…

xt_tcpmss.c

…

xt_TCPMSS.c

netfilter: xt_TCPMSS: SYN packets are allowed to contain data

2010-02-02 15:33:38 +01:00

xt_TCPOPTSTRIP.c

…

xt_tcpudp.c

…

xt_time.c

…

xt_TPROXY.c

…

xt_TRACE.c

…

xt_u32.c

…