[NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW

Browse source

Now, iptables show and configure different set of rules in different
netnss'. Filtering decisions are still made by consulting only
init_net's set.

Changes are identical except naming so no splitting.

P.S.: one need to remove init_net checks in nf_sockopt.c and inet_create()
      to see the effect.

Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Alexey Dobriyan 2008-01-31 04:03:23 -08:00 • committed by David S. Miller

parent 34bd137ba7

commit 9335f047fe

4 changed files with 92 additions and 36 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

41

net/ipv4/netfilter/iptable_filter.c

View file

41

net/ipv4/netfilter/iptable_mangle.c

View file

41

net/ipv4/netfilter/iptable_raw.c

View file