]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: synproxy: only register hooks when needed
authorFlorian Westphal <fw@strlen.de>
Wed, 19 Apr 2017 16:14:04 +0000 (18:14 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Apr 2017 07:30:21 +0000 (09:30 +0200)
commit8c2d96b1a330b1f063c2952b22233e44dfcbddd8
tree0d3eee75eef102d294995a7ccca05bf7406c8c51
parent228d8e85075af18e31bd0877981fea92a111070b
netfilter: synproxy: only register hooks when needed

Defer registration of the synproxy hooks until the first SYNPROXY rule is
added.  Also means we only register hooks in namespaces that need it.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack_synproxy.h
net/ipv4/netfilter/ipt_SYNPROXY.c
net/ipv6/netfilter/ip6t_SYNPROXY.c