diff options
| author | Alexey Dobriyan <adobriyan@sw.ru> | 2008-01-31 13:04:13 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-02-01 04:27:39 +0100 |
| commit | 8280aa6182f03c4e27dc235ce0440bc94927dc28 (patch) | |
| tree | aff3a05fabf07b8bb17d0e0867a48fdcf4921045 /include/net | |
| parent | [NETFILTER]: ip6_tables: netns preparation (diff) | |
| download | linux-8280aa6182f03c4e27dc235ce0440bc94927dc28.tar.xz linux-8280aa6182f03c4e27dc235ce0440bc94927dc28.zip | |
[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW
Now it's possible to list and manipulate per-netns ip6tables rules.
Filtering decisions are based on init_net's table so far.
P.S.: remove init_net check in inet6_create() to see the effect
Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/net')
| -rw-r--r-- | include/net/netns/ipv6.h | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/include/net/netns/ipv6.h b/include/net/netns/ipv6.h index 187c4248df22..1dd7de4e4195 100644 --- a/include/net/netns/ipv6.h +++ b/include/net/netns/ipv6.h @@ -31,5 +31,10 @@ struct netns_ipv6 { struct ipv6_devconf *devconf_all; struct ipv6_devconf *devconf_dflt; struct netns_frags frags; +#ifdef CONFIG_NETFILTER + struct xt_table *ip6table_filter; + struct xt_table *ip6table_mangle; + struct xt_table *ip6table_raw; +#endif }; #endif |