Patrick McHardy 5d0aa2ccd4 netfilter: nf_conntrack: add support for "conntrack zones" ...

Normally, each connection needs a unique identity. Conntrack zones allow
to specify a numerical zone using the CT target, connections in different
zones can use the same identity.

Example:

iptables -t raw -A PREROUTING -i veth0 -j CT --zone 1
iptables -t raw -A OUTPUT -o veth1 -j CT --zone 1

Signed-off-by: Patrick McHardy <kaber@trash.net>

2010-02-15 18:13:33 +01:00

..

Kbuild

netfilter: xtables: add CT target

2010-02-03 17:17:06 +01:00

nf_conntrack_amanda.h

…

nf_conntrack_common.h

netfilter: nf_conntrack: support conntrack templates

2010-02-03 14:40:17 +01:00

nf_conntrack_dccp.h

…

nf_conntrack_ftp.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

nf_conntrack_h323_asn1.h

…

nf_conntrack_h323_types.h

…

nf_conntrack_h323.h

…

nf_conntrack_irc.h

…

nf_conntrack_pptp.h

…

nf_conntrack_proto_gre.h

…

nf_conntrack_sane.h

…

nf_conntrack_sctp.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

nf_conntrack_sip.h

netfilter: nf_conntrack_sip: add T.38 FAX support

2010-02-11 12:30:21 +01:00

nf_conntrack_tcp.h

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6

2009-12-03 13:23:12 -08:00

nf_conntrack_tftp.h

…

nf_conntrack_tuple_common.h

…

nfnetlink_compat.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

nfnetlink_conntrack.h

netfilter: conntrack: add support for DCCP handshake sequence to ctnetlink

2009-05-27 17:50:35 +02:00

nfnetlink_log.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

nfnetlink_queue.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

nfnetlink.h

netfilter: nfnetlink: netns support

2010-01-13 16:02:14 +01:00

x_tables.h

netfilter: xtables: constify args in compat copying functions

2010-02-15 16:59:28 +01:00

xt_CLASSIFY.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_cluster.h

netfilter: xt_cluster: fix use of cluster match with 32 nodes

2009-05-05 17:46:07 +02:00

xt_comment.h

…

xt_connbytes.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_connlimit.h

…

xt_connmark.h

netfilter: xtables: remove xt_connmark v0

2009-08-10 12:25:12 +02:00

xt_CONNMARK.h

netfilter: xtables: remove xt_CONNMARK v0

2009-08-10 12:25:11 +02:00

xt_CONNSECMARK.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_conntrack.h

netfilter: xtables: remove xt_conntrack v0

2009-08-10 13:09:44 +02:00

xt_CT.h

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

xt_dccp.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_dscp.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_DSCP.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_esp.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_hashlimit.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_helper.h

…

xt_iprange.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_LED.h

netfilter: add missing linux/types.h include to xt_LED.h

2009-05-05 14:31:12 +02:00

xt_length.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_limit.h

Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip

2009-03-26 16:11:41 -07:00

xt_mac.h

…

xt_mark.h

netfilter: xtables: remove xt_mark v0

2009-08-10 13:09:45 +02:00

xt_MARK.h

netfilter: xtables: remove xt_MARK v0, v1

2009-08-10 12:25:12 +02:00

xt_multiport.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_NFLOG.h

Merge commit 'v2.6.29' into core/header-fixes

2009-03-26 18:29:40 +01:00

xt_NFQUEUE.h

netfilter: xt_NFQUEUE: queue balancing support

2009-06-05 13:24:24 +02:00

xt_osf.h

netfilter: headers_check fix: linux/netfilter/xt_osf.h

2009-06-29 14:28:27 +02:00

xt_owner.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_physdev.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_pkttype.h

…

xt_policy.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_quota.h

netfilter: xtables: avoid pointer to self

2009-03-16 15:35:29 +01:00

xt_rateest.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_RATEEST.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_realm.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_recent.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_sctp.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_SECMARK.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_socket.h

netfilter: xt_socket: added new revision of the 'socket' match supporting flags

2009-06-09 15:16:34 +02:00

xt_state.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_statistic.h

Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip

2009-03-26 16:11:41 -07:00

xt_string.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_tcpmss.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_TCPMSS.h

make netfilter use strict integer types

2009-03-26 18:14:20 +01:00

xt_TCPOPTSTRIP.h

…

xt_tcpudp.h

net: cleanup include/linux

2009-11-04 09:50:58 -08:00

xt_time.h

…

xt_TPROXY.h

…

xt_u32.h

…