Arturo Borrero 8da4cc1b10 netfilter: nft_masq: register/unregister notifiers on module init/exit ...

We have to register the notifiers in the masquerade expression from
the the module _init and _exit path.

This fixes crashes when removing the masquerade rule with no
ipt_MASQUERADE support in place (which was masking the problem).

Fixes: 9ba1f72 ("netfilter: nf_tables: add new nft_masq expression")
Signed-off-by: Arturo Borrero Gonzalez <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2014-10-03 14:24:35 +02:00

..

ip6_tables.c

netfilter: Can't fail and free after table replacement

2014-04-05 17:46:22 +02:00

ip6t_ah.c

…

ip6t_eui64.c

…

ip6t_frag.c

…

ip6t_hbh.c

…

ip6t_ipv6header.c

netfilter: remove unnecessary break after return

2014-07-15 16:27:00 -07:00

ip6t_MASQUERADE.c

netfilter: nf_nat: generalize IPv6 masquerading support for nf_tables

2014-09-09 16:31:29 +02:00

ip6t_mh.c

…

ip6t_NPT.c

…

ip6t_REJECT.c

…

ip6t_rpfilter.c

net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif

2014-04-28 14:47:03 -04:00

ip6t_rt.c

…

ip6t_SYNPROXY.c

…

ip6table_filter.c

…

ip6table_mangle.c

…

ip6table_nat.c

netfilter: nat: move specific NAT IPv6 to core

2014-09-09 16:30:00 +02:00

ip6table_raw.c

…

ip6table_security.c

…

Kconfig

netfilter: move nf_send_resetX() code to nf_reject_ipvX modules

2014-10-02 18:30:49 +02:00

Makefile

netfilter: move nf_send_resetX() code to nf_reject_ipvX modules

2014-10-02 18:30:49 +02:00

nf_conntrack_l3proto_ipv6.c

…

nf_conntrack_proto_icmpv6.c

…

nf_conntrack_reasm.c

inet: frags: use kmem_cache for inet_frag_queue

2014-08-02 15:31:31 -07:00

nf_defrag_ipv6_hooks.c

netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)

2014-10-02 18:30:54 +02:00

nf_log_ipv6.c

netfilter: log: nf_log_packet() as real unified interface

2014-06-27 13:20:13 +02:00

nf_nat_l3proto_ipv6.c

netfilter: nat: move specific NAT IPv6 to core

2014-09-09 16:30:00 +02:00

nf_nat_masquerade_ipv6.c

netfilter: nf_nat: generalize IPv6 masquerading support for nf_tables

2014-09-09 16:31:29 +02:00

nf_nat_proto_icmpv6.c

…

nf_reject_ipv6.c

netfilter: move nf_send_resetX() code to nf_reject_ipvX modules

2014-10-02 18:30:49 +02:00

nf_tables_ipv6.c

netfilter: nf_tables: fix error path in the init functions

2014-01-09 23:25:48 +01:00

nft_chain_nat_ipv6.c

netfilter: nft_chain_nat_ipv6: use generic IPv6 NAT code from core

2014-09-09 16:31:09 +02:00

nft_chain_route_ipv6.c

netfilter: nf_tables: rename nft_do_chain_pktinfo() to nft_do_chain()

2014-01-09 20:17:16 +01:00

nft_masq_ipv6.c

netfilter: nft_masq: register/unregister notifiers on module init/exit

2014-10-03 14:24:35 +02:00

nft_reject_ipv6.c

netfilter: nf_tables: add reject module for NFPROTO_INET

2014-02-06 09:44:18 +01:00