Florian Westphal 2843fb6998 netfilter: conntrack: add nf_ct_iterate_destroy ...

sledgehammer to be used on module unload (to remove affected conntracks
from all namespaces).

It will also flag all unconfirmed conntracks as dying, i.e. they will
not be committed to main table.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2017-05-29 12:46:10 +02:00

..

ipv4

netfilter: udplite: Remove duplicated udplite4/6 declaration

2017-04-09 00:08:22 +02:00

ipv6

netfilter: udplite: Remove duplicated udplite4/6 declaration

2017-04-09 00:08:22 +02:00

br_netfilter.h

netfilter: bridge: add and use br_nf_hook_thresh

2016-09-24 21:25:48 +02:00

nf_conntrack_acct.h

netfilter: introduce nf_conn_acct structure

2013-11-03 21:48:49 +01:00

nf_conntrack_core.h

netfilter: remove nf_ct_is_untracked

2017-04-15 11:51:33 +02:00

nf_conntrack_ecache.h

nefilter: eache: reduce struct size from 32 to 24 byte

2017-04-19 17:55:17 +02:00

nf_conntrack_expect.h

netfilter: nf_ct_expect: Add nf_ct_remove_expect()

2017-04-06 18:39:40 +02:00

nf_conntrack_extend.h

netfilter: nf_ct_ext: invoke destroy even when ext is not attached

2017-05-01 11:48:49 +02:00

nf_conntrack_helper.h

netfilter: nfnl_cthelper: reject del request if helper obj is in use

2017-05-15 12:42:29 +02:00

nf_conntrack_l3proto.h

netfilter: conntrack: add nf_conntrack_default_on sysctl

2016-12-04 21:17:25 +01:00

nf_conntrack_l4proto.h

netfilter: allow early drop of assured conntracks

2017-04-19 17:55:17 +02:00

nf_conntrack_labels.h

netfilter: conntrack: avoid excess memory allocation

2016-10-27 18:29:02 +02:00

nf_conntrack_seqadj.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_synproxy.h

netfilter: synproxy: only register hooks when needed

2017-04-26 09:30:21 +02:00

nf_conntrack_timeout.h

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

nf_conntrack_timestamp.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_tuple.h

netfilter: nf_nat: export NAT definitions to userspace

2011-12-23 14:36:43 +01:00

nf_conntrack_zones.h

netfilter: move zone info into struct nf_conn

2016-06-23 13:33:12 +02:00

nf_conntrack.h

netfilter: conntrack: add nf_ct_iterate_destroy

2017-05-29 12:46:10 +02:00

nf_dup_netdev.h

netfilter: add and use nf_fwd_netdev_egress

2016-12-06 21:48:22 +01:00

nf_log.h

netfilter: allow logging from non-init namespaces

2017-02-02 14:31:58 +01:00

nf_nat_core.h

netfilter: Pass net into nf_xfrm_me_harder

2015-09-18 22:00:22 +02:00

nf_nat_helper.h

netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean

2017-04-06 22:01:38 +02:00

nf_nat_l3proto.h

netfilter: Pass priv instead of nf_hook_ops to netfilter hooks

2015-09-18 22:00:16 +02:00

nf_nat_l4proto.h

netfilter: built-in NAT support for UDPlite

2016-12-04 20:45:32 +01:00

nf_nat_redirect.h

netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module

2014-11-27 13:08:42 +01:00

nf_nat.h

netfilter: don't attach a nat extension by default

2017-04-26 09:30:22 +02:00

nf_queue.h

netfilter: nf_queue: only call synchronize_net twice if nf_queue is active

2017-05-01 11:19:12 +02:00

nf_socket.h

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_tables_core.h

netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields

2016-12-06 21:47:54 +01:00

nf_tables_ipv4.h

netfilter: merge fixup for "nf_tables_netdev: remove redundant ip_hdr assignment"

2016-10-05 20:25:48 -04:00

nf_tables_ipv6.h

netfilter: nf_tables: set pktinfo->thoff at AH header if found

2017-03-08 18:35:27 +01:00

nf_tables.h

netfilter: nf_tables: revisit chain/object refcounting from elements

2017-05-15 12:51:41 +02:00

nfnetlink_log.h

netfilter: log: netns NULL ptr bug when calling from conntrack

2013-05-15 14:11:07 +02:00

nft_dup.h

netfilter: nf_tables: add nft_dup expression

2015-08-07 11:49:49 +02:00

nft_fib.h

netfilter: nft_fib: Support existence check

2017-03-13 13:45:36 +01:00

nft_masq.h

netfilter: nft_masq: support port range

2016-03-02 20:05:27 +01:00

nft_meta.h

netfilter: nft_meta: improve the validity check of pkttype set expr

2016-08-25 13:12:03 +02:00

nft_redir.h

netfilter: nf_tables: add new expression nft_redir

2014-10-27 22:49:39 +01:00

nft_reject.h

netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT

2016-08-25 12:55:34 +02:00

xt_rateest.h

net_sched: gen_estimator: complete rewrite of rate estimators

2016-12-05 15:21:59 -05:00