]> asedeno.scripts.mit.edu Git - linux.git/commit
netfilter: nf_tables: Add synproxy support
authorFernando Fernandez Mancera <ffmancera@riseup.net>
Wed, 26 Jun 2019 10:59:19 +0000 (12:59 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 5 Jul 2019 19:34:23 +0000 (21:34 +0200)
commitad49d86e07a497e834cb06f2b151dccd75f8e148
tree0321bfbb28d45223dfab095050b832bbf4a6a410
parent6f7b841bc939e7c811ad32427b58d54edbcfa6ed
netfilter: nf_tables: Add synproxy support

Add synproxy support for nf_tables. This behaves like the iptables
synproxy target but it is structured in a way that allows us to propose
improvements in the future.

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack_synproxy.h
include/net/netfilter/nf_synproxy.h
include/uapi/linux/netfilter/nf_synproxy.h
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/Kconfig
net/netfilter/Makefile
net/netfilter/nft_synproxy.c [new file with mode: 0644]