kernel-ark/net/ipv4/netfilter
Pablo Neira Ayuso 91c46e2e60 [NETFILTER]: Don't increase master refcount on expectations
As it's been discussed [1][2]. We shouldn't increase the master conntrack
refcount for non-fulfilled conntracks. During the conntrack destruction,
the expectations are always killed before the conntrack itself, this
guarantees that there won't be any orphan expectation.

[1]https://lists.netfilter.org/pipermail/netfilter-devel/2005-August/020783.html
[2]https://lists.netfilter.org/pipermail/netfilter-devel/2005-August/020904.html

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2005-09-06 15:10:23 -07:00
..
arp_tables.c
arpt_mangle.c
arptable_filter.c
ip_conntrack_amanda.c [NETFILTER]: Add support for permanent expectations 2005-09-06 15:06:42 -07:00
ip_conntrack_core.c [NETFILTER]: Don't increase master refcount on expectations 2005-09-06 15:10:23 -07:00
ip_conntrack_ftp.c [NETFILTER]: Add support for permanent expectations 2005-09-06 15:06:42 -07:00
ip_conntrack_irc.c [NETFILTER]: Add support for permanent expectations 2005-09-06 15:06:42 -07:00
ip_conntrack_netbios_ns.c [NETFILTER]: Add NetBIOS name service helper 2005-09-06 15:08:51 -07:00
ip_conntrack_netlink.c [NETFILTER]: Add support for permanent expectations 2005-09-06 15:06:42 -07:00
ip_conntrack_proto_generic.c
ip_conntrack_proto_icmp.c
ip_conntrack_proto_sctp.c
ip_conntrack_proto_tcp.c
ip_conntrack_proto_udp.c
ip_conntrack_standalone.c
ip_conntrack_tftp.c [NETFILTER]: Add support for permanent expectations 2005-09-06 15:06:42 -07:00
ip_nat_amanda.c
ip_nat_core.c
ip_nat_ftp.c
ip_nat_helper.c
ip_nat_irc.c
ip_nat_proto_icmp.c
ip_nat_proto_tcp.c
ip_nat_proto_udp.c
ip_nat_proto_unknown.c
ip_nat_rule.c [NETFILTER]: Handle NAT module load race 2005-09-06 15:09:43 -07:00
ip_nat_snmp_basic.c
ip_nat_standalone.c [NETFILTER]: Handle NAT module load race 2005-09-06 15:09:43 -07:00
ip_nat_tftp.c
ip_queue.c [NETLINK]: Add "groups" argument to netlink_kernel_create 2005-08-29 16:01:11 -07:00
ip_tables.c [NETFILTER]: Add goto target 2005-08-29 16:04:18 -07:00
ipt_addrtype.c
ipt_ah.c
ipt_CLASSIFY.c
ipt_CLUSTERIP.c [NETFILTER]: CLUSTERIP: fix memcpy() length typo 2005-09-01 17:44:06 -07:00
ipt_comment.c
ipt_connbytes.c [NETFILTER]: Nicer names for ipt_connbytes constants 2005-08-29 15:58:17 -07:00
ipt_connmark.c
ipt_CONNMARK.c
ipt_conntrack.c
ipt_dccp.c [NETFILTER]: New iptables DCCP protocol header match 2005-08-29 15:54:28 -07:00
ipt_dscp.c
ipt_DSCP.c
ipt_ecn.c
ipt_ECN.c
ipt_esp.c
ipt_hashlimit.c [NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers 2005-08-29 16:11:18 -07:00
ipt_helper.c
ipt_iprange.c
ipt_length.c
ipt_limit.c
ipt_LOG.c
ipt_mac.c
ipt_mark.c
ipt_MARK.c
ipt_MASQUERADE.c [NETFILTER]: Don't exclude local packets from MASQUERADING 2005-08-29 15:58:36 -07:00
ipt_multiport.c
ipt_NETMAP.c [NETFILTER]: Make NETMAP target usable in OUTPUT 2005-08-29 15:58:41 -07:00
ipt_NFQUEUE.c
ipt_NOTRACK.c
ipt_owner.c [NETFILTER]: Remove tasklist_lock abuse in ipt{,6}owner 2005-08-29 15:59:07 -07:00
ipt_physdev.c
ipt_pkttype.c
ipt_realm.c
ipt_recent.c
ipt_REDIRECT.c
ipt_REJECT.c
ipt_SAME.c
ipt_sctp.c
ipt_state.c
ipt_string.c [NETFILTER]: Add string match 2005-08-29 16:04:07 -07:00
ipt_tcpmss.c
ipt_TCPMSS.c
ipt_tos.c
ipt_TOS.c
ipt_ttl.c
ipt_TTL.c [NETFILTER]: Add new iptables TTL target 2005-08-29 16:13:22 -07:00
ipt_ULOG.c [NETLINK]: Add "groups" argument to netlink_kernel_create 2005-08-29 16:01:11 -07:00
iptable_filter.c
iptable_mangle.c
iptable_raw.c
Kconfig [NETFILTER]: Fix CONNMARK Kconfig dependency 2005-09-06 15:09:20 -07:00
Makefile [NETFILTER]: Add NetBIOS name service helper 2005-09-06 15:08:51 -07:00