]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: Add fail-open support
authorKrishna Kumar <krkumar2@in.ibm.com>
Thu, 24 May 2012 03:56:44 +0000 (03:56 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 7 Jun 2012 12:58:39 +0000 (14:58 +0200)
commit10b199e13ac38fde1e81961a0ecef39d69d03b2c
tree4da135c27f582e3a3f6891a4bc4bf4abb6a57829
parent497d5cc83fa38b00f352d436501b2b8a2b24c010
netfilter: Add fail-open support

Implement a new "fail-open" mode where packets are not dropped
upon queue-full condition. This mode can be enabled/disabled per
queue using netlink NFQA_CFG_FLAGS & NFQA_CFG_MASK attributes.

Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
Signed-off-by: Vivek Kashyap <vivk@us.ibm.com>
Signed-off-by: Sridhar Samudrala <samudrala@us.ibm.com>
include/linux/netfilter/nfnetlink_queue.h
net/netfilter/nfnetlink_queue.c