]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blob - include/net/netns/ipv4.h
netfilter: ip_tables: add iptables security table for mandatory access control rules
[mirror_ubuntu-artful-kernel.git] / include / net / netns / ipv4.h
1 /*
2 * ipv4 in net namespaces
3 */
4
5 #ifndef __NETNS_IPV4_H__
6 #define __NETNS_IPV4_H__
7
8 #include <net/inet_frag.h>
9
10 struct ctl_table_header;
11 struct ipv4_devconf;
12 struct fib_rules_ops;
13 struct hlist_head;
14 struct sock;
15
16 struct netns_ipv4 {
17 #ifdef CONFIG_SYSCTL
18 struct ctl_table_header *forw_hdr;
19 struct ctl_table_header *frags_hdr;
20 struct ctl_table_header *ipv4_hdr;
21 #endif
22 struct ipv4_devconf *devconf_all;
23 struct ipv4_devconf *devconf_dflt;
24 #ifdef CONFIG_IP_MULTIPLE_TABLES
25 struct fib_rules_ops *rules_ops;
26 #endif
27 struct hlist_head *fib_table_hash;
28 struct sock *fibnl;
29
30 struct sock **icmp_sk;
31 struct sock *tcp_sock;
32
33 struct netns_frags frags;
34 #ifdef CONFIG_NETFILTER
35 struct xt_table *iptable_filter;
36 struct xt_table *iptable_mangle;
37 struct xt_table *iptable_raw;
38 struct xt_table *arptable_filter;
39 struct xt_table *iptable_security;
40 #endif
41
42 int sysctl_icmp_echo_ignore_all;
43 int sysctl_icmp_echo_ignore_broadcasts;
44 int sysctl_icmp_ignore_bogus_error_responses;
45 int sysctl_icmp_ratelimit;
46 int sysctl_icmp_ratemask;
47 int sysctl_icmp_errors_use_inbound_ifaddr;
48 };
49 #endif