Commits · 6c44e6b7ab500d7e3e3f406c83325671be51a752 · nexedi / linux

22 Sep, 2006 40 commits

[XFRM] STATE: Add source address list. · 6c44e6b7

Masahide NAKAMURA authored Aug 23, 2006

Support source address based searching.
Mobile IPv6 will use it.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

6c44e6b7

[XFRM]: Expand XFRM_MAX_DEPTH for route optimization. · 622dc828

Masahide NAKAMURA authored Aug 23, 2006

XFRM_MAX_DEPTH is a limit of transformation states to be applied to the same
flow. Two more extension headers are used by Mobile IPv6 transformation.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

622dc828

[XFRM] STATE: Allow non IPsec protocol. · dc00a525

Masahide NAKAMURA authored Aug 23, 2006

It will be added two more transformation protocols (routing header
and destination options header) for Mobile IPv6.
xfrm_id_proto_match() can be handle zero as all, IPSEC_PROTO_ANY as
all IPsec and otherwise as exact one.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

dc00a525

[XFRM]: Introduce a helper to compare id protocol. · 5794708f

Masahide NAKAMURA authored Sep 22, 2006

Put the helper to header for future use.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

5794708f

[XFRM]: Add XFRM_MODE_xxx for future use. · 7e49e6de

Masahide NAKAMURA authored Sep 22, 2006

Transformation mode is used as either IPsec transport or tunnel.
It is required to add two more items, route optimization and inbound trigger
for Mobile IPv6.
Based on MIPL2 kernel patch.

This patch was also written by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

7e49e6de

[IPV6] ROUTE: Unify RT6_F_xxx and RT6_SELECT_F_xxx flags · 77d16f45

YOSHIFUJI Hideaki authored Aug 23, 2006

Unify RT6_F_xxx and RT6_SELECT_F_xxx flags into
RT6_LOOKUP_F_xxx flags, and put them into ip6_route.h
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Ville Nuorvala <vnuorval@tcs.hut.fi
Signed-off-by: David S. Miller <davem@davemloft.net>

77d16f45

[IPV6] KCONFIG: Add subtrees support. · 4e96c2b4

YOSHIFUJI Hideaki authored Aug 23, 2006

This is for developers only.
Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi
Signed-off-by: David S. Miller <davem@davemloft.net>

4e96c2b4

[IPV6] ROUTE: Add credits about subtree fixes. · c0bece9f

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

c0bece9f

[IPV6] NDISC: Search subtrees when backtracking on receipt of redirects. · cb15d9c2

YOSHIFUJI Hideaki authored Aug 23, 2006

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Ville Nuorvala <vnuorval@tcs.hut.fi
Signed-off-by: David S. Miller <davem@davemloft.net>

cb15d9c2

[IPV6] ROUTE: Purge clones on other trees when deleting a route. · 150730d5

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi
Signed-off-by: David S. Miller <davem@davemloft.net>

150730d5

[IPV6] ROUTE: Search subtree when backtracking. · 982f56f3

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

982f56f3

[IPV6] ROUTE: Put SUBTREE() as FIB6_SUBTREE() into ip6_fib.h for future use. · 7fc33165

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

7fc33165

[IPV6] ROUTE: Allow searching subtree only. · fefc2a6c

YOSHIFUJI Hideaki authored Aug 23, 2006

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

fefc2a6c

[IPV6] ROUTE: Make sure we do not exceed args in fib6_lookup_1(). · 825e288e

YOSHIFUJI Hideaki authored Aug 23, 2006

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

825e288e

[IPV6] ROUTE: Fix looking up a route on subtree. · 3fc5e044

YOSHIFUJI Hideaki authored Aug 23, 2006

Even on RTN_ROOT node, we need to process its subtree first.
Fix NULL pointer dereference in fib6_locate().

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

3fc5e044

[IPV6] ROUTE: Prune clones from main tree as well. · 2285adc1

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

2285adc1

[IPV6] ROUTE: Make sure we have fn->leaf when adding a node on subtree. · 66729e18

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

66729e18

[IPV6]: Cache source address as well in ipv6_pinfo{}. · 8e1ef0a9

YOSHIFUJI Hideaki authored Aug 29, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

8e1ef0a9

[IPV6] ROUTE: Introduce a helper to check route validity. · cf6b1982

YOSHIFUJI Hideaki authored Aug 23, 2006

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Acked-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

cf6b1982

[IPV6] NDISC: Initialize fl with outbound interface to lookup rules properly. · af184765

YOSHIFUJI Hideaki authored Aug 23, 2006

Based on MIPL2 kernel patch.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

af184765

[IPV6] NDISC: Search over all possible rules on receipt of redirect. · a6279458

YOSHIFUJI Hideaki authored Aug 23, 2006

Split up function for finding routes for redirects.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

a6279458

[IPV6] NDISC: Take source address into account for redirects. · 5e032e32

YOSHIFUJI Hideaki authored Aug 23, 2006

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>

5e032e32

[RTNETLINK]: Don't return error on no-metrics. · a57d27fc

David S. Miller authored Aug 22, 2006

Instead just cancel the nested attribute and return 0.
Signed-off-by: David S. Miller <davem@davemloft.net>

a57d27fc

[NETFILTER]: x_tables: Fix typos after conversion to use mass registation helper · 28094864
Thomas Graf authored Aug 22, 2006
```
Signed-off-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
28094864

[SCTP]: Remove multiple levels of msecs to jiffies conversions. · 3fd091e7

Vladislav Yasevich authored Aug 22, 2006

The SCTP sysctl entries are displayed in milliseconds, but stored
internally in jiffies. This results in multiple levels of msecs to
jiffies conversion and as a result produces a truncation error. This
patch makes things consistent in that we store and display defaults
in milliseconds and only convert once for use by association.
This patch also adds some sane min/max values so that we don't go off
the deep end.
Signed-off-by: Vladislav Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

3fd091e7

[NETFILTER]: xt_tcpmss: minor cleanups · ce556b3a

Patrick McHardy authored Aug 22, 2006

- remove unused define
- remove useless wrapper function
- use new line for expression after condition
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

ce556b3a

[NETFILTER]: ip6_tables: consolidate dst and hbh matches · 5fa2a760

Patrick McHardy authored Aug 22, 2006

The matches are identical besides one looking for NEXTHDR_HOP, the other
for NEXTHDR_DEST. Remove ip6t_dst.c and handle both in ip6t_hbh.c.
Signed-off-by: Patrick McHardy <kaber@trash,net>
Signed-off-by: David S. Miller <davem@davemloft.net>

5fa2a760

[NETFILTER]: x_tables: add data member to struct xt_match · 91270cf8

Patrick McHardy authored Aug 22, 2006

Shared match functions can use this to make runtime decisions basen on the
used match.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

91270cf8

[NETFILTER]: nfnetlink: remove unnecessary packed attributes · 53e26658

Patrick McHardy authored Aug 22, 2006

Remove unnecessary packed attributes in nfnetlink structures. Unfortunately
in a few cases they have to stay to avoid changing structure sizes.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

53e26658

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions · efa74165

Patrick McHardy authored Aug 22, 2006

The size is verified by x_tables and isn't needed by the modules anymore.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

efa74165

[NETFILTER]: x_tables: remove unused argument to target functions · fe1cb108
Patrick McHardy authored Aug 22, 2006
```
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
fe1cb108
[NETFILTER]: x_tables: make use of mass registation helpers · 4470bbc7
Patrick McHardy authored Aug 22, 2006
```
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
4470bbc7
[NETFILTER]: x_tables: add helpers for mass match/target registration · 52d9c42e
Patrick McHardy authored Aug 22, 2006
```
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
52d9c42e

[NETFILTER]: xt_CONNMARK: use tabs for indentation · 90528e6f

Patrick McHardy authored Aug 22, 2006

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

90528e6f

[NETFILTER]: replace open coded checksum updates · da878c8e

Patrick McHardy authored Aug 22, 2006

Replace open coded checksum update by nf_csum_update calls and clean up
the surrounding code a bit.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

da878c8e

[NETFILTER]: nfnetlink_queue: fix typo in error message · 1158ba27
Patrick McHardy authored Aug 22, 2006
```
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
1158ba27

[NETFILTER]: ctnetlink: remove impossible events tests for updates · 1a31526b

Pablo Neira Ayuso authored Aug 22, 2006

IPCT_HELPER and IPCT_NATINFO bits are never set on updates.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

1a31526b

[NETFILTER]: ctnetlink: check for listeners before sending expectation events · b3a27bfb

Pablo Neira Ayuso authored Aug 22, 2006

This patch uses nfnetlink_has_listeners to check for listeners in
userspace.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

b3a27bfb

[NETFILTER]: ctnetlink: dump connection mark · b9a37e0c

Pablo Neira Ayuso authored Aug 22, 2006

ctnetlink dumps the mark iif the event mark happened
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

b9a37e0c

[NETFILTER]: conntrack: introduce connection mark event · 2521c12c

Pablo Neira Ayuso authored Aug 22, 2006

This patch introduces the mark event. ctnetlink can use this to know if
the mark needs to be dumped.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2521c12c