linux/net/netfilter/nft_queue.c, branch v3.16Mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
https://git.shady.money/linux/atom?h=v3.162014-02-06T10:41:38Znetfilter: nf_tables: fix log/queue expressions for NFPROTO_INET2014-02-06T10:41:38ZPatrick McHardykaber@trash.net2014-02-06T09:17:41Zurn:sha1:b8ecbee67c732ef9fc47fcf50aed6b7bb6231d98
The log and queue expressions both store the family during ->init() and
use it to deliver packets. This is wrong when used in NFPROTO_INET since
they should both deliver to the actual AF of the packet, not the dummy
NFPROTO_INET.
Use the family from the hook ops to fix this.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft: add queue module2013-12-07T22:20:46ZEric Leblonderic@regit.org2013-12-05T23:24:13Zurn:sha1:0aff078d58e1c69139189e45ba5e929c030e8056
This patch adds a new nft module named "nft_queue" which provides
a new nftables expression that allows you to enqueue packets to
userspace via the nfnetlink_queue subsystem. It provides the same
level of functionality as NFQUEUE and it shares some code with it.
Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>