Florian Westphal 9a08ecfe74 netfilter: don't attach a nat extension by default ...

nowadays the NAT extension only stores the interface index
(used to purge connections that got masqueraded when interface goes down)
and pptp nat information.

Previous patches moved nf_ct_nat_ext_add to those places that need it.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2017-04-26 09:30:22 +02:00

..

ipv4

netfilter: udplite: Remove duplicated udplite4/6 declaration

2017-04-09 00:08:22 +02:00

ipv6

netfilter: udplite: Remove duplicated udplite4/6 declaration

2017-04-09 00:08:22 +02:00

br_netfilter.h

netfilter: bridge: add and use br_nf_hook_thresh

2016-09-24 21:25:48 +02:00

nf_conntrack_acct.h

netfilter: introduce nf_conn_acct structure

2013-11-03 21:48:49 +01:00

nf_conntrack_core.h

netfilter: remove nf_ct_is_untracked

2017-04-15 11:51:33 +02:00

nf_conntrack_ecache.h

nefilter: eache: reduce struct size from 32 to 24 byte

2017-04-19 17:55:17 +02:00

nf_conntrack_expect.h

netfilter: nf_ct_expect: Add nf_ct_remove_expect()

2017-04-06 18:39:40 +02:00

nf_conntrack_extend.h

netfilter: conntrack: mark extension structs as const

2017-04-26 09:30:22 +02:00

nf_conntrack_helper.h

netfilter: helpers: remove data_len usage for inkernel helpers

2017-04-19 17:55:17 +02:00

nf_conntrack_l3proto.h

netfilter: conntrack: add nf_conntrack_default_on sysctl

2016-12-04 21:17:25 +01:00

nf_conntrack_l4proto.h

netfilter: allow early drop of assured conntracks

2017-04-19 17:55:17 +02:00

nf_conntrack_labels.h

netfilter: conntrack: avoid excess memory allocation

2016-10-27 18:29:02 +02:00

nf_conntrack_seqadj.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_synproxy.h

netfilter: synproxy: only register hooks when needed

2017-04-26 09:30:21 +02:00

nf_conntrack_timeout.h

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

nf_conntrack_timestamp.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_tuple.h

netfilter: nf_nat: export NAT definitions to userspace

2011-12-23 14:36:43 +01:00

nf_conntrack_zones.h

netfilter: move zone info into struct nf_conn

2016-06-23 13:33:12 +02:00

nf_conntrack.h

netfilter: conntrack: move helper struct to nf_conntrack_helper.h

2017-04-19 17:55:16 +02:00

nf_dup_netdev.h

netfilter: add and use nf_fwd_netdev_egress

2016-12-06 21:48:22 +01:00

nf_log.h

netfilter: allow logging from non-init namespaces

2017-02-02 14:31:58 +01:00

nf_nat_core.h

netfilter: Pass net into nf_xfrm_me_harder

2015-09-18 22:00:22 +02:00

nf_nat_helper.h

netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean

2017-04-06 22:01:38 +02:00

nf_nat_l3proto.h

netfilter: Pass priv instead of nf_hook_ops to netfilter hooks

2015-09-18 22:00:16 +02:00

nf_nat_l4proto.h

netfilter: built-in NAT support for UDPlite

2016-12-04 20:45:32 +01:00

nf_nat_redirect.h

netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module

2014-11-27 13:08:42 +01:00

nf_nat.h

netfilter: don't attach a nat extension by default

2017-04-26 09:30:22 +02:00

nf_queue.h

netfilter: remove hook_entries field from nf_hook_state

2016-11-03 11:52:58 +01:00

nf_socket.h

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_tables_core.h

netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields

2016-12-06 21:47:54 +01:00

nf_tables_ipv4.h

netfilter: merge fixup for "nf_tables_netdev: remove redundant ip_hdr assignment"

2016-10-05 20:25:48 -04:00

nf_tables_ipv6.h

netfilter: nf_tables: set pktinfo->thoff at AH header if found

2017-03-08 18:35:27 +01:00

nf_tables.h

netfilter: nf_tables: add nft_is_base_chain() helper

2017-04-06 18:32:04 +02:00

nfnetlink_log.h

netfilter: log: netns NULL ptr bug when calling from conntrack

2013-05-15 14:11:07 +02:00

nft_dup.h

netfilter: nf_tables: add nft_dup expression

2015-08-07 11:49:49 +02:00

nft_fib.h

netfilter: nft_fib: Support existence check

2017-03-13 13:45:36 +01:00

nft_masq.h

netfilter: nft_masq: support port range

2016-03-02 20:05:27 +01:00

nft_meta.h

netfilter: nft_meta: improve the validity check of pkttype set expr

2016-08-25 13:12:03 +02:00

nft_redir.h

netfilter: nf_tables: add new expression nft_redir

2014-10-27 22:49:39 +01:00

nft_reject.h

netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT

2016-08-25 12:55:34 +02:00

xt_rateest.h

net_sched: gen_estimator: complete rewrite of rate estimators

2016-12-05 15:21:59 -05:00