tree 7200b38dfecbc1a7c21f39a62c88f4e154de2777
parent 34bd137ba744c2e3a320ff50ac64ae51556cdfae
author Alexey Dobriyan <adobriyan@sw.ru> 1201781003 -0800
committer David S. Miller <davem@davemloft.net> 1201836458 -0800

[NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW

Now, iptables show and configure different set of rules in different
netnss'. Filtering decisions are still made by consulting only
init_net's set.

Changes are identical except naming so no splitting.

P.S.: one need to remove init_net checks in nf_sockopt.c and inet_create()
      to see the effect.

Signed-off-by: Alexey Dobriyan <adobriyan@sw.ru>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>