Pablo Neira Ayuso bc01befdcf
netfilter: ctnetlink: add support for user-space expectation helpers ...
This patch adds the basic infrastructure to support user-space
expectation helpers via ctnetlink and the netfilter queuing
infrastructure NFQUEUE. Basically, this patch:
* adds NF_CT_EXPECT_USERSPACE flag to identify user-space
created expectations. I have also added a sanity check in
__nf_ct_expect_check() to avoid that kernel-space helpers
may create an expectation if the master conntrack has no
helper assigned.
* adds some branches to check if the master conntrack helper
exists, otherwise we skip the code that refers to kernel-space
helper such as the local expectation list and the expectation
policy.
* allows to set the timeout for user-space expectations with
no helper assigned.
* a list of expectations created from user-space that depends
on ctnetlink (if this module is removed, they are deleted).
* includes USERSPACE in the /proc output for expectations
that have been created by a user-space helper.
This patch also modifies ctnetlink to skip including the helper
name in the Netlink messages if no kernel-space helper is set
(since no user-space expectation has not kernel-space kernel
assigned).
You can access an example user-space FTP conntrack helper at:
http://people.netfilter.org/pablo/userspace-conntrack-helpers/nf-ftp-helper-userspace-POC.tar.bz
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org >
Signed-off-by: Patrick McHardy <kaber@trash.net >
2010-09-28 21:06:34 +02:00
2010-08-17 22:15:09 +01:00
2010-08-14 22:26:51 +02:00
2010-08-14 22:26:51 +02:00
2010-08-14 21:08:49 +02:00
2010-08-12 10:01:30 -07:00
2010-08-24 14:57:09 -07:00
2010-08-12 08:43:30 -07:00
2010-08-08 21:19:42 +01:00
2010-09-28 21:06:34 +02:00
2010-08-14 22:26:51 +02:00
2010-08-14 22:26:51 +02:00
2010-08-14 22:26:51 +02:00
2010-08-14 22:26:51 +02:00
2010-08-14 22:26:51 +02:00
2010-08-12 06:38:24 +10:00
2010-08-11 11:38:01 +01:00
2010-09-09 22:27:33 -07:00
2010-08-24 16:28:11 -04:00
2010-08-14 22:26:51 +02:00
2010-08-20 01:42:59 -07:00
2010-08-24 14:48:10 -07:00
2010-08-28 13:55:31 -07:00
2010-08-24 13:44:40 -07:00
2010-08-07 18:23:12 +02:00
2010-08-09 00:13:34 +02:00
2010-08-12 08:43:30 -07:00
2010-08-17 18:07:43 -07:00
2010-08-07 18:53:10 +02:00
2010-08-12 08:43:30 -07:00
2010-08-12 08:43:30 -07:00
2010-08-07 18:26:29 +02:00
2010-08-18 01:09:01 -04:00
2010-09-05 17:01:37 +03:00
2010-08-07 18:53:13 +02:00
2010-08-13 16:53:13 -07:00
2010-08-09 20:45:04 -07:00
2010-08-10 13:47:42 -07:00
2010-08-06 15:36:47 -05:00
2010-08-08 14:55:26 -04:00
2010-08-09 20:45:04 -07:00
2010-08-11 00:29:47 -04:00
2010-08-12 04:14:10 +01:00
2010-08-12 04:14:05 +01:00
2010-08-13 12:03:24 -07:00
2010-08-07 18:53:57 +02:00
2010-08-07 18:53:57 +02:00
2010-08-26 22:03:08 -07:00
2010-08-10 11:26:52 -07:00
2010-08-27 19:54:09 -04:00
2010-08-10 13:47:40 -07:00
2010-08-06 09:23:07 -07:00
2010-08-09 20:45:09 -07:00
2010-08-18 08:35:46 -04:00
2010-08-18 08:35:48 -04:00
2010-08-22 20:28:16 -04:00
2010-08-12 14:23:04 -07:00
2010-08-09 20:44:58 -07:00
2010-08-11 09:23:22 +02:00
2010-08-11 09:22:46 +02:00
2010-08-11 18:21:02 +02:00
2010-08-11 18:21:02 +02:00
2010-08-24 14:46:53 -07:00
2010-08-22 21:15:39 -07:00
2010-08-22 21:15:39 -07:00
2010-08-16 21:06:25 -07:00
2010-08-22 22:37:04 -07:00
2010-08-22 21:03:33 -07:00
2010-08-29 21:57:55 -07:00
2010-08-19 17:16:23 -07:00
2010-09-07 11:16:43 +01:00
2010-08-12 11:47:50 +10:00
2010-08-09 20:45:05 -07:00
2010-09-21 17:35:41 +02:00
2010-08-22 21:15:39 -07:00
2010-08-10 13:47:40 -07:00
2010-08-07 13:03:53 -07:00
2010-08-10 11:49:21 -07:00
2010-08-12 11:27:58 +02:00
2010-09-08 18:16:52 -07:00
2010-08-12 09:51:35 -07:00
2010-08-20 09:34:54 -07:00
2010-08-23 18:12:46 -07:00
2010-08-23 18:12:46 -07:00
2010-08-09 20:44:58 -07:00
2010-08-18 08:35:48 -04:00
2010-08-09 16:48:45 -04:00
2010-08-11 08:59:19 -07:00
2010-08-09 20:44:56 -07:00
2010-08-21 00:37:40 -07:00
2010-08-21 08:49:21 -07:00
2010-08-28 14:01:03 -07:00
2010-08-09 20:44:58 -07:00
2010-08-09 20:45:00 -07:00
2010-08-11 23:04:41 +09:30
2010-08-11 00:29:47 -04:00
2010-08-22 21:15:39 -07:00
2010-08-22 21:15:39 -07:00
2010-09-01 10:57:55 -07:00
2010-08-10 16:24:41 -07:00
2010-08-07 13:19:36 -07:00
2010-08-06 13:41:39 -04:00
2010-08-27 13:27:07 -04:00
2010-08-08 10:02:59 -07:00
2010-08-11 08:59:19 -07:00
2010-08-12 10:15:10 -07:00
2010-08-11 00:29:47 -04:00
2010-09-09 22:27:33 -07:00
2010-08-13 16:19:59 -07:00
2010-08-09 20:44:58 -07:00
2010-08-07 14:20:53 +02:00
2010-08-06 09:39:22 -07:00
2010-08-22 21:15:39 -07:00
2010-09-02 10:12:05 -07:00
2010-08-21 23:40:14 -07:00
2010-08-11 09:21:15 +02:00
2010-08-18 23:30:42 -07:00
2010-08-09 20:44:59 -07:00
2010-09-08 18:16:55 -07:00
2010-08-09 16:47:27 -04:00
2010-08-10 11:26:52 -07:00
2010-08-22 21:15:39 -07:00
2010-08-12 10:15:10 -07:00
2010-09-08 14:15:32 -07:00
2010-08-17 18:07:43 -07:00
2010-08-10 12:07:51 -07:00
2010-08-10 13:47:46 -07:00
2010-09-03 17:29:04 -07:00
2010-08-10 13:47:46 -07:00
2010-08-10 13:47:46 -07:00
2010-09-03 17:29:04 -07:00
2010-08-09 20:44:58 -07:00
2010-09-02 19:06:22 -07:00
2010-08-11 08:59:21 -07:00
2010-08-11 08:59:21 -07:00
2010-08-22 10:08:52 -07:00
2010-08-09 16:48:44 -04:00
2010-08-25 16:30:51 -07:00
2010-08-11 08:59:19 -07:00
2010-08-17 18:07:43 -07:00
2010-08-23 18:12:46 -07:00
2010-08-21 00:34:45 -07:00
2010-08-11 08:59:22 -07:00
2010-08-30 13:23:33 -07:00
2010-08-13 16:53:13 -07:00
2010-08-09 20:44:57 -07:00
2010-08-18 08:35:47 -04:00
2010-08-21 00:37:40 -07:00
2010-08-10 14:35:44 -07:00
2010-08-27 09:10:44 +10:00
2010-08-08 23:43:01 -03:00
2010-08-11 08:59:02 -07:00
2010-08-12 09:09:41 -07:00
2010-08-10 13:47:44 -07:00
2010-08-25 10:33:56 +02:00
2010-08-12 08:43:29 -07:00
bc01befdcf