Lorenzo Colitti e110861f86 net: add a sysctl to reflect the fwmark on replies ... Kernel-originated IP packets that have no user socket associated with them (e.g., ICMP errors and echo replies, TCP RSTs, etc.) are emitted with a mark of zero. Add a sysctl to make them have the same mark as the packet they are replying to. This allows an administrator that wishes to do so to use mark-based routing, firewalling, etc. for these replies by marking the original packets inbound. Tested using user-mode linux: - ICMP/ICMPv6 echo replies and errors. - TCP RST packets (IPv4 and IPv6). Signed-off-by: Lorenzo Colitti <lorenzo@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-05-13 18:35:08 -04:00
..
conntrack.h	netfilter: conntrack: remove central spinlock nf_conntrack_lock	2014-03-07 11:41:13 +01:00
core.h	percpu: add __percpu sparse annotations to net	2010-02-16 23:05:38 -08:00
dccp.h	[NETNS][DCCPV6]: Move the dccp_v6_ctl_sk on the struct net.	2008-04-13 22:32:25 -07:00
generic.h	BUG: headers with BUG/BUG_ON etc. need linux/bug.h	2012-03-04 17:54:34 -05:00
hash.h	net: cleanup unsigned to unsigned int	2012-04-15 12:44:40 -04:00
ieee802154_6lowpan.h	6lowpan: handling 6lowpan fragmentation via inet_frag api	2014-02-28 17:05:22 -05:00
ipv4.h	net: add a sysctl to reflect the fwmark on replies	2014-05-13 18:35:08 -04:00
ipv6.h	net: add a sysctl to reflect the fwmark on replies	2014-05-13 18:35:08 -04:00
mib.h	net: use IS_ENABLED(CONFIG_IPV6)	2011-12-11 18:25:16 -05:00
netfilter.h	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nftables.h	netfilter: nf_tables: add "inet" table for IPv4/IPv6	2014-01-07 23:57:25 +01:00
packet.h	packet: fix broken build.	2012-08-23 09:29:45 -07:00
sctp.h	Revert "net: sctp: convert sctp_checksum_disable module param into sctp sysctl"	2013-08-09 13:09:41 -07:00
unix.h
x_tables.h	netfilter: {ipt,ebt}_ULOG: rise warning on deprecation	2013-05-23 14:23:16 +02:00
xfrm.h	flowcache: restore a single flow_cache kmem_cache	2014-03-10 21:45:11 -04:00