git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 336b517) | patch
[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW
authorAlexey Dobriyan <adobriyan@sw.ru>
Thu, 31 Jan 2008 12:04:13 +0000 (04:04 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 1 Feb 2008 03:27:39 +0000 (19:27 -0800)
commit8280aa6182f03c4e27dc235ce0440bc94927dc28
treeaff3a05fabf07b8bb17d0e0867a48fdcf4921045tree | snapshot
parent336b517fdc0f92f54a3f77a2d0933f9556aa79adcommit | diff
[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW

Now it's possible to list and manipulate per-netns ip6tables rules.
Filtering decisions are based on init_net's table so far.

P.S.: remove init_net check in inet6_create() to see the effect

Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/netns/ipv6.h diff | blob | history
net/ipv6/netfilter/ip6table_filter.c diff | blob | history
net/ipv6/netfilter/ip6table_mangle.c diff | blob | history
net/ipv6/netfilter/ip6table_raw.c diff | blob | history
Full containers within linux kernel