Florian Westphal 1fefe14725 netfilter: synproxy: only register hooks when needed ...

Defer registration of the synproxy hooks until the first SYNPROXY rule is
added.  Also means we only register hooks in namespaces that need it.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2017-04-26 09:30:21 +02:00

..

arp_tables.c

netfilter: Remove unnecessary cast on void pointer

2017-04-07 17:29:17 +02:00

arpt_mangle.c

…

arptable_filter.c

…

ip_tables.c

netfilter: Remove unnecessary cast on void pointer

2017-04-07 17:29:17 +02:00

ipt_ah.c

…

ipt_CLUSTERIP.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ipt_ECN.c

…

ipt_MASQUERADE.c

netfilter: nat: add dependencies on conntrack module

2016-12-04 21:16:51 +01:00

ipt_REJECT.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ipt_rpfilter.c

netfilter: rpfilter: fix incorrect loopback packet judgment

2017-01-16 14:23:01 +01:00

ipt_SYNPROXY.c

netfilter: synproxy: only register hooks when needed

2017-04-26 09:30:21 +02:00

iptable_filter.c

…

iptable_mangle.c

…

iptable_nat.c

…

iptable_raw.c

…

iptable_security.c

…

Kconfig

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

Makefile

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_conntrack_l3proto_ipv4.c

netfilter: don't track fragmented packets

2017-03-08 18:02:12 +01:00

nf_conntrack_proto_icmp.c

netfilter: add and use nf_ct_set helper

2017-02-02 14:31:54 +01:00

nf_defrag_ipv4.c

skbuff: add and use skb_nfct helper

2017-02-02 14:31:53 +01:00

nf_dup_ipv4.c

netfilter: kill the fake untracked conntrack objects

2017-04-15 11:47:57 +02:00

nf_log_arp.c

lib/vsprintf.c: remove %Z support

2017-02-27 18:43:47 -08:00

nf_log_ipv4.c

netfilter: allow logging from non-init namespaces

2017-02-02 14:31:58 +01:00

nf_nat_h323.c

…

nf_nat_l3proto_ipv4.c

netfilter: remove nf_ct_is_untracked

2017-04-15 11:51:33 +02:00

nf_nat_masquerade_ipv4.c

…

nf_nat_pptp.c

netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean

2017-04-06 22:01:38 +02:00

nf_nat_proto_gre.c

…

nf_nat_proto_icmp.c

…

nf_nat_snmp_basic.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-04-06 08:24:51 -07:00

nf_reject_ipv4.c

netfilter: nf_reject: remove unused variable

2017-03-08 19:02:17 +01:00

nf_socket_ipv4.c

netfilter: remove nf_ct_is_untracked

2017-04-15 11:51:33 +02:00

nf_tables_arp.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nf_tables_ipv4.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_chain_nat_ipv4.c

…

nft_chain_route_ipv4.c

…

nft_dup_ipv4.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-11-15 10:54:36 -05:00

nft_fib_ipv4.c

netfilter: Remove exceptional & on function name

2017-04-07 18:24:47 +02:00

nft_masq_ipv4.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_redir_ipv4.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_reject_ipv4.c

netfilter: nf_tables: use hook state from xt_action_param structure

2016-11-03 11:52:34 +01:00