diff options
author | Patrick McHardy <kaber@trash.net> | 2010-02-03 17:17:06 +0100 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2010-02-03 17:17:06 +0100 |
commit | 84f3bb9ae9db90f7fb15d98b55279a58ab1b2363 (patch) | |
tree | 7fe7b882f027ee138edbc0f189e21532dad6531a /net/netfilter/nf_conntrack_helper.c | |
parent | b2a15a604d379af323645e330638e2cfcc696aff (diff) | |
download | kernel_samsung_espresso10-84f3bb9ae9db90f7fb15d98b55279a58ab1b2363.zip kernel_samsung_espresso10-84f3bb9ae9db90f7fb15d98b55279a58ab1b2363.tar.gz kernel_samsung_espresso10-84f3bb9ae9db90f7fb15d98b55279a58ab1b2363.tar.bz2 |
netfilter: xtables: add CT target
Add a new target for the raw table, which can be used to specify conntrack
parameters for specific connections, f.i. the conntrack helper.
The target attaches a "template" connection tracking entry to the skb, which
is used by the conntrack core when initializing a new conntrack.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/netfilter/nf_conntrack_helper.c')
-rw-r--r-- | net/netfilter/nf_conntrack_helper.c | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/net/netfilter/nf_conntrack_helper.c b/net/netfilter/nf_conntrack_helper.c index 8144b0d..a74a576 100644 --- a/net/netfilter/nf_conntrack_helper.c +++ b/net/netfilter/nf_conntrack_helper.c @@ -83,6 +83,25 @@ __nf_conntrack_helper_find(const char *name, u16 l3num, u8 protonum) } EXPORT_SYMBOL_GPL(__nf_conntrack_helper_find); +struct nf_conntrack_helper * +nf_conntrack_helper_try_module_get(const char *name, u16 l3num, u8 protonum) +{ + struct nf_conntrack_helper *h; + + h = __nf_conntrack_helper_find(name, l3num, protonum); +#ifdef CONFIG_MODULES + if (h == NULL) { + if (request_module("nfct-helper-%s", name) == 0) + h = __nf_conntrack_helper_find(name, l3num, protonum); + } +#endif + if (h != NULL && !try_module_get(h->me)) + h = NULL; + + return h; +} +EXPORT_SYMBOL_GPL(nf_conntrack_helper_try_module_get); + struct nf_conn_help *nf_ct_helper_ext_add(struct nf_conn *ct, gfp_t gfp) { struct nf_conn_help *help; |