Pablo Neira Ayuso df05ef874b netfilter: nf_tables: release objects on netns destruction ... We have to release the existing objects on netns removal otherwise we leak them. Chains are unregistered in first place to make sure no packets are walking on our rules and sets anymore. The object release happens by when we unregister the family via nft_release_afinfo() which is called from nft_unregister_afinfo() from the corresponding __net_exit path in every family. Reported-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2015-12-28 18:34:35 +01:00
..
Kconfig	netfilter: nf_dup: add missing dependencies with NF_CONNTRACK	2015-12-10 18:17:06 +01:00
Makefile	netfilter: nf_tables: add nft_dup expression	2015-08-07 11:49:49 +02:00
ip6_tables.c	netfilter: ip6_tables: improve if statements	2015-10-14 12:29:51 +02:00
ip6t_MASQUERADE.c	netfilter: nf_nat: generalize IPv6 masquerading support for nf_tables	2014-09-09 16:31:29 +02:00
ip6t_NPT.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-04-07 18:37:01 -04:00
ip6t_REJECT.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
ip6t_SYNPROXY.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2015-10-17 14:28:03 +02:00
ip6t_ah.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_eui64.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_frag.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_hbh.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_ipv6header.c	netfilter: remove unnecessary break after return	2014-07-15 16:27:00 -07:00
ip6t_mh.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_rpfilter.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
ip6t_rt.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6table_filter.c	netfilter: Pass priv instead of nf_hook_ops to netfilter hooks	2015-09-18 22:00:16 +02:00
ip6table_mangle.c	ipv6: Pass struct net into ip6_route_me_harder	2015-09-29 20:21:32 +02:00
ip6table_nat.c	netfilter: remove hook owner refcounting	2015-10-16 18:21:39 +02:00
ip6table_raw.c	netfilter: Pass priv instead of nf_hook_ops to netfilter hooks	2015-09-18 22:00:16 +02:00
ip6table_security.c	netfilter: Pass priv instead of nf_hook_ops to netfilter hooks	2015-09-18 22:00:16 +02:00
nf_conntrack_l3proto_ipv6.c	netfilter: remove hook owner refcounting	2015-10-16 18:21:39 +02:00
nf_conntrack_proto_icmpv6.c	netfilter: ipv6: whitespace around operators	2015-10-13 14:12:38 +02:00
nf_conntrack_reasm.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2015-12-14 20:31:16 +01:00
nf_defrag_ipv6_hooks.c	netfilter: ipv6: avoid nf_iterate recursion	2015-11-23 17:54:45 +01:00
nf_dup_ipv6.c	ipv4, ipv6: Pass net into ip_local_out and ip6_local_out	2015-10-08 04:27:02 -07:00
nf_log_ipv6.c	netfilter: Use LOGLEVEL_<FOO> defines	2015-03-25 12:09:39 +01:00
nf_nat_l3proto_ipv6.c	net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUM	2015-12-15 16:50:20 -05:00
nf_nat_masquerade_ipv6.c	netfilter: Use nf_ct_net instead of dev_net(out) in nf_nat_masquerade_ipv6	2015-09-18 22:00:28 +02:00
nf_nat_proto_icmpv6.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_reject_ipv6.c	netfilter: remove duplicate include	2015-11-23 17:54:43 +01:00
nf_tables_ipv6.c	netfilter: nf_tables: release objects on netns destruction	2015-12-28 18:34:35 +01:00
nft_chain_nat_ipv6.c	netfilter: Pass priv instead of nf_hook_ops to netfilter hooks	2015-09-18 22:00:16 +02:00
nft_chain_route_ipv6.c	netfilter: ipv6: code indentation	2015-10-13 14:12:38 +02:00
nft_dup_ipv6.c	netfilter: Pass net to nf_dup_ipv4 and nf_dup_ipv6	2015-09-18 21:59:11 +02:00
nft_masq_ipv6.c	netfilter: nf_tables: get rid of NFT_REG_VERDICT usage	2015-04-13 17:17:07 +02:00
nft_redir_ipv6.c	netfilter: nf_tables: kill nft_pktinfo.ops	2015-09-18 21:58:01 +02:00
nft_reject_ipv6.c	netfilter: nf_tables: Use pkt->net instead of computing net from the passed net_devices	2015-09-18 21:58:49 +02:00