Patrick McHardy 16a6677fdf [XFRM]: Netfilter IPsec output hooks ...

Call netfilter hooks before IPsec transforms. Packets visit the
FORWARD/LOCAL_OUT and POST_ROUTING hook before the first encapsulation
and the LOCAL_OUT and POST_ROUTING hook before each following tunnel mode
transform.

Patch from Herbert Xu <herbert@gondor.apana.org.au>:

Move the loop from dst_output into xfrm4_output/xfrm6_output since they're
the only ones who need to it. xfrm{4,6}_output_one() processes the first SA
all subsequent transport mode SAs and is called in a loop that calls the
netfilter hooks between each two calls.

In order to avoid the tail call issue, I've added the inline function
nf_hook which is nf_hook_slow plus the empty list check.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-07 12:57:28 -08:00

..

bluetooth

[Bluetooth]: Remove the usage of /proc completely

2005-11-08 09:57:38 -08:00

irda

[IRDA]: IrDA prototype fixes

2005-09-05 18:08:11 -07:00

netfilter

[NETFILTER]: Add ctnetlink port for nf_conntrack

2006-01-05 12:19:05 -08:00

sctp

[SCTP]: Add support for SCTP_DELAYED_ACK_TIME socket option.

2006-01-03 13:11:13 -08:00

tc_act

[PKT_SCHED]: Introduce simple actions.

2005-04-24 20:10:16 -07:00

act_api.h

[NET]: Kill skb->tc_classid

2005-08-29 15:31:18 -07:00

act_generic.h

[PKT_SCHED]: Fixup simple action define.

2005-05-19 12:42:39 -07:00

addrconf.h

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

af_unix.h

[AF_UNIX]: Convert to use a spinlock instead of rwlock

2006-01-03 14:10:46 -08:00

ah.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

arp.h

[NET]: Kill skb->real_dev

2005-08-29 15:32:25 -07:00

atmclip.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ax25.h

drivers/net: Remove pointless checks for NULL prior to calling kfree()

2005-10-28 16:53:13 -04:00

checksum.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

compat.h

[NET]: Need struct sock forward decl in net/compat.h

2005-09-08 12:32:46 -07:00

datalink.h

[NET]: Kill skb->real_dev

2005-08-29 15:32:25 -07:00

dn_dev.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

dn_fib.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

dn_neigh.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

dn_nsp.h

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

dn_route.h

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

dn.h

[DECNET]: add memory buffer settings

2005-12-05 13:42:06 -08:00

dsfield.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

dst.h

[XFRM]: Netfilter IPsec output hooks

2006-01-07 12:57:28 -08:00

esp.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

flow.h

[LSM-IPSec]: Security association restriction.

2006-01-03 13:10:24 -08:00

gen_stats.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

genetlink.h

[NETLINK] genetlink: fix cmd type in genl_ops to be consistent to u8

2006-01-03 14:13:29 -08:00

icmp.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ieee80211_crypt.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ieee80211_radiotap.h

[PATCH] ieee80211: Added ieee80211_radiotap.h

2005-09-21 23:03:55 -04:00

ieee80211.h

[PATCH] git-netdev-all-ieee80211_get_payload-warning-fix

2005-11-18 13:33:31 -05:00

if_inet6.h

[IPV6] mcast: Fix multiple issues in MLDv2 reports.

2005-12-27 14:03:00 -08:00

inet6_connection_sock.h

[IPV6]: Generalise some functions

2006-01-03 13:10:46 -08:00

inet6_hashtables.h

[IPV6]: Introduce inet6_timewait_sock

2006-01-03 13:10:47 -08:00

inet_common.h

[NET]: move struct proto_ops to const

2006-01-03 13:11:15 -08:00

inet_connection_sock.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inet_ecn.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inet_hashtables.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inet_sock.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inet_timewait_sock.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

inetpeer.h

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

ip6_checksum.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip6_fib.h

[IPV6]: V6 route events reported with wrong netlink PID and seq number

2005-06-21 13:51:04 -07:00

ip6_route.h

[TCP]: Move the tcp sock states to net/tcp_states.h

2005-08-29 15:41:54 -07:00

ip6_tunnel.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_fib.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip_mp_alg.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_vs.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ip.h

[NETFILTER]: Call POST_ROUTING hook before fragmentation

2006-01-05 12:20:59 -08:00

ipcomp.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipconfig.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipip.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipv6.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

ipx.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

iw_handler.h

[PATCH] WE-19 for kernel 2.6.13

2005-09-06 22:40:24 -04:00

lapb.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_c_ac.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_c_ev.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_c_st.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_conn.h

[PATCH] gfp flags annotations - part 1

2005-10-08 15:00:57 -07:00

llc_if.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_pdu.h

[LLC]: Fix typo

2005-11-14 21:58:18 -08:00

llc_s_ac.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_s_ev.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_s_st.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_sap.h

[LLC]: Fix the accept path

2005-09-22 07:57:21 -03:00

llc.h

[LLC]: Fix sparse warnings

2005-09-22 05:14:33 -03:00

ndisc.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

neighbour.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

netlink.h

[NETLINK]: Generic netlink receive queue processor

2005-11-10 02:26:40 +01:00

netrom.h

drivers/net: Remove pointless checks for NULL prior to calling kfree()

2005-10-28 16:53:13 -04:00

p8022.h

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

pkt_act.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

pkt_cls.h

[NET]: Remove explicit initializations of skb->input_dev

2005-08-29 15:33:26 -07:00

pkt_sched.h

[PKT_SCHED]: Cleanup qdisc creation and alignment macros

2005-07-05 14:15:09 -07:00

protocol.h

[NET]: move struct proto_ops to const

2006-01-03 13:11:15 -08:00

psnap.h

[NET]: Kill skb->real_dev

2005-08-29 15:32:25 -07:00

raw.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

rawv6.h

[IPV4/6]: Check if packet was actually delivered to a raw socket to decide whether to send an ICMP unreachable

2005-08-29 15:37:22 -07:00

red.h

[PKT_SCHED]: Generic RED layer

2005-11-05 22:02:24 +01:00

request_sock.h

[IPV6]: Generalise tcp_v6_search_req & tcp_v6_synq_add

2006-01-03 13:10:36 -08:00

rose.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

route.h

[IPV4]: Fix secondary IP addresses after promotion

2005-11-22 14:47:37 -08:00

sch_generic.h

[PKT_SCHED]: Cleanup qdisc creation and alignment macros

2005-07-05 14:15:09 -07:00

scm.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

slhc_vj.h

[NET]: Remove __ARGS from include/net/slhc_vj.h

2005-07-05 15:12:04 -07:00

snmp.h

[PATCH] smp_processor_id() cleanup

2005-06-21 18:46:13 -07:00

sock.h

[NET]: Change sk_run_filter()'s return type in net/core/filter.c

2006-01-06 13:08:20 -08:00

syncppp.h

[PATCH] drivers/net/wan/: possible cleanups

2005-09-14 08:36:54 -04:00

tcp_ecn.h

[NET]: Introduce inet_connection_sock

2005-08-29 15:43:19 -07:00

tcp_states.h

[TCP]: Move the TCPF_ enum to tcp_states.h

2006-01-03 13:10:57 -08:00

tcp.h

[TCP]: less inline's

2006-01-03 16:03:49 -08:00

timewait_sock.h

[TWSK]: Introduce struct timewait_sock_ops

2006-01-03 13:10:54 -08:00

transp_v6.h

[ICSK]: Rename struct tcp_func to struct inet_connection_sock_af_ops

2006-01-03 13:10:38 -08:00

udp.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00

x25.h

[NET]: Kill skb->real_dev

2005-08-29 15:32:25 -07:00

x25device.h

[NET]: Remove explicit initializations of skb->input_dev

2005-08-29 15:33:26 -07:00

xfrm.h

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03 13:11:21 -08:00