Patrick McHardy 5d0aa2ccd4 netfilter: nf_conntrack: add support for "conntrack zones"
Normally, each connection needs a unique identity. Conntrack zones allow
to specify a numerical zone using the CT target, connections in different
zones can use the same identity.

Example:

iptables -t raw -A PREROUTING -i veth0 -j CT --zone 1
iptables -t raw -A OUTPUT -o veth1 -j CT --zone 1

Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-02-15 18:13:33 +01:00
..
2009-10-18 18:52:53 -07:00
2010-02-02 07:32:29 -08:00
2009-11-13 20:46:58 -08:00
2009-06-03 02:51:04 -07:00
2010-01-17 19:16:02 -08:00
2009-11-25 15:14:13 -08:00
2009-06-03 02:51:04 -07:00
2010-01-28 06:31:06 -08:00
2010-01-17 19:16:02 -08:00
2008-10-07 08:38:24 +11:00
2010-01-23 01:21:27 -08:00
2009-09-14 17:03:01 -07:00
2009-03-02 03:00:15 -08:00
2009-03-02 03:00:15 -08:00
2010-01-17 19:16:02 -08:00
2009-05-25 22:44:59 -07:00
2009-12-23 14:13:29 -08:00
2009-09-14 17:03:01 -07:00
2010-01-17 19:16:02 -08:00
2010-01-17 19:16:02 -08:00
2009-06-03 02:51:04 -07:00
2009-06-03 02:51:04 -07:00
2009-06-03 02:51:04 -07:00