diff options
| author | Alexey Dobriyan <adobriyan@sw.ru> | 2008-01-31 04:04:13 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-01-31 19:27:39 -0800 |
| commit | 8280aa6182f03c4e27dc235ce0440bc94927dc28 (patch) | |
| tree | aff3a05fabf07b8bb17d0e0867a48fdcf4921045 /include | |
| parent | 336b517fdc0f92f54a3f77a2d0933f9556aa79ad (diff) | |
| download | op-kernel-dev-8280aa6182f03c4e27dc235ce0440bc94927dc28.zip op-kernel-dev-8280aa6182f03c4e27dc235ce0440bc94927dc28.tar.gz | |
[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW
Now it's possible to list and manipulate per-netns ip6tables rules.
Filtering decisions are based on init_net's table so far.
P.S.: remove init_net check in inet6_create() to see the effect
Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
| -rw-r--r-- | include/net/netns/ipv6.h | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/include/net/netns/ipv6.h b/include/net/netns/ipv6.h index 187c424..1dd7de4 100644 --- a/include/net/netns/ipv6.h +++ b/include/net/netns/ipv6.h @@ -31,5 +31,10 @@ struct netns_ipv6 { struct ipv6_devconf *devconf_all; struct ipv6_devconf *devconf_dflt; struct netns_frags frags; +#ifdef CONFIG_NETFILTER + struct xt_table *ip6table_filter; + struct xt_table *ip6table_mangle; + struct xt_table *ip6table_raw; +#endif }; #endif |
