netfilter: move tee_active to core

Browse source

This prepares for a TEE like expression in nftables.
We want to ensure only one duplicate is sent, so both will
use the same percpu variable to detect duplication.

The other use case is detection of recursive call to xtables, but since
we don't want dependency from nft to xtables core its put into core.c
instead of the x_tables core.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florian Westphal 2015-07-14 17:51:07 +02:00 • committed by Pablo Neira Ayuso

parent 98d1bd802c

commit e7c8899f3e

3 changed files with 20 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

include/linux/netfilter.h

View file

3

net/netfilter/core.c

View file

13

net/netfilter/xt_TEE.c

View file