| commit | 00028aa37098168048728acc32ab0206687f2920 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <edumazet@google.com> | Wed May 22 11:01:06 2013 +0000 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu May 23 11:09:53 2013 +0200 |
| tree | 2b05baf2eade229d2c82e0c78f798fd123af7673 | |
| parent | 27e7190efd5b2f728686a8293af6d9bd34c4e562 [diff] |
netfilter: xt_socket: use IP early demux With IP early demux added in linux-3.6, we perform TCP lookup in IP layer before iptables hooks. We can avoid doing a second lookup in xt_socket. Signed-off-by: Eric Dumazet <edumazet@google.com> Acked-by: David S. Miller <davem@davemloft.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>