Files
kernel_arpi/include/uapi/linux
Florian Westphal 694a0055f0 netfilter: nft_ct: allow to set ctnetlink event types of a connection
By default the kernel emits all ctnetlink events for a connection.
This allows to select the types of events to generate.

This can be used to e.g. only send DESTROY events but no NEW/UPDATE ones
and will work even if sysctl net.netfilter.nf_conntrack_events is set to 0.

This was already possible via iptables' CT target, but the nft version has
the advantage that it can also be used with already-established conntracks.

The added nf_ct_is_template() check isn't a bug fix as we only support
mark and labels (and unlike ecache the conntrack core doesn't copy those).

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2017-04-19 17:55:16 +02:00
..
2017-01-05 13:02:25 +00:00
2016-11-29 09:00:30 +01:00
2016-10-18 10:05:42 -06:00
2017-04-01 12:45:57 -07:00
2016-10-01 07:32:32 +02:00
2017-03-25 20:11:19 -07:00
2017-01-10 14:05:11 -05:00
2017-02-03 15:16:45 -05:00
2016-11-03 15:41:11 -04:00
2016-11-03 15:41:11 -04:00
2017-01-17 14:38:43 -05:00
2017-02-20 11:13:37 -05:00
2017-02-09 15:17:30 +01:00
2017-02-15 11:56:07 -06:00
2017-02-17 12:08:05 -05:00
2016-09-27 21:52:00 -04:00
2016-09-27 21:52:00 -04:00
2017-03-28 22:32:42 -07:00
2017-01-09 16:07:38 -05:00
2017-03-16 20:33:56 -07:00
2017-01-29 19:17:23 -05:00
2017-01-10 18:31:55 -08:00
2016-11-17 08:33:20 -07:00
2016-12-16 00:13:38 +02:00
2016-12-16 00:13:32 +02:00