netfilter: remove xt_NOTRACK · tjh.dev/kernel@9655050

-8

Documentation/feature-removal-schedule.txt

··· 353 353 354 354 Who: Wey-Yi Guy <wey-yi.w.guy@intel.com> 355 355 356 - --------------------------- 357 - 358 - What: xt_NOTRACK 359 - Files: net/netfilter/xt_NOTRACK.c 360 - When: April 2011 361 - Why: Superseded by xt_CT 362 - Who: Netfilter developer team <netfilter-devel@vger.kernel.org> 363 - 364 356 ---------------------------- 365 357 366 358 What: IRQF_DISABLED

-1

arch/m68k/configs/amiga_defconfig

··· 67 67 CONFIG_NETFILTER_XT_TARGET_MARK=m 68 68 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 69 69 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 70 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 71 70 CONFIG_NETFILTER_XT_TARGET_TRACE=m 72 71 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 73 72 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/apollo_defconfig

··· 67 67 CONFIG_NETFILTER_XT_TARGET_MARK=m 68 68 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 69 69 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 70 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 71 70 CONFIG_NETFILTER_XT_TARGET_TRACE=m 72 71 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 73 72 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/atari_defconfig

··· 65 65 CONFIG_NETFILTER_XT_TARGET_MARK=m 66 66 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 67 67 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 68 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 69 68 CONFIG_NETFILTER_XT_TARGET_TRACE=m 70 69 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 71 70 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/bvme6000_defconfig

··· 65 65 CONFIG_NETFILTER_XT_TARGET_MARK=m 66 66 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 67 67 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 68 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 69 68 CONFIG_NETFILTER_XT_TARGET_TRACE=m 70 69 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 71 70 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/hp300_defconfig

··· 66 66 CONFIG_NETFILTER_XT_TARGET_MARK=m 67 67 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 68 68 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 69 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 70 69 CONFIG_NETFILTER_XT_TARGET_TRACE=m 71 70 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 72 71 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/mac_defconfig

··· 61 61 CONFIG_NETFILTER_XT_TARGET_MARK=m 62 62 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 63 63 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 64 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 65 64 CONFIG_NETFILTER_XT_TARGET_TRACE=m 66 65 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 67 66 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/multi_defconfig

··· 80 80 CONFIG_NETFILTER_XT_TARGET_MARK=m 81 81 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 82 82 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 83 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 84 83 CONFIG_NETFILTER_XT_TARGET_TRACE=m 85 84 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 86 85 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/mvme147_defconfig

··· 64 64 CONFIG_NETFILTER_XT_TARGET_MARK=m 65 65 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 66 66 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 67 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 68 67 CONFIG_NETFILTER_XT_TARGET_TRACE=m 69 68 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 70 69 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/mvme16x_defconfig

··· 65 65 CONFIG_NETFILTER_XT_TARGET_MARK=m 66 66 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 67 67 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 68 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 69 68 CONFIG_NETFILTER_XT_TARGET_TRACE=m 70 69 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 71 70 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/q40_defconfig

··· 61 61 CONFIG_NETFILTER_XT_TARGET_MARK=m 62 62 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 63 63 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 64 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 65 64 CONFIG_NETFILTER_XT_TARGET_TRACE=m 66 65 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 67 66 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/sun3_defconfig

··· 62 62 CONFIG_NETFILTER_XT_TARGET_MARK=m 63 63 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 64 64 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 65 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 66 65 CONFIG_NETFILTER_XT_TARGET_TRACE=m 67 66 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 68 67 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/m68k/configs/sun3x_defconfig

··· 62 62 CONFIG_NETFILTER_XT_TARGET_MARK=m 63 63 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 64 64 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 65 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 66 65 CONFIG_NETFILTER_XT_TARGET_TRACE=m 67 66 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 68 67 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/mips/configs/ar7_defconfig

··· 56 56 CONFIG_NF_CONNTRACK_FTP=m 57 57 CONFIG_NF_CONNTRACK_IRC=m 58 58 CONFIG_NF_CONNTRACK_TFTP=m 59 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 60 59 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 61 60 CONFIG_NETFILTER_XT_MATCH_LIMIT=m 62 61 CONFIG_NETFILTER_XT_MATCH_MAC=m

-1

arch/mips/configs/bcm47xx_defconfig

··· 96 96 CONFIG_NETFILTER_XT_TARGET_MARK=m 97 97 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 98 98 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 99 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 100 99 CONFIG_NETFILTER_XT_TARGET_TRACE=m 101 100 CONFIG_NETFILTER_XT_TARGET_SECMARK=m 102 101 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m

-1

arch/mips/configs/ip22_defconfig

··· 87 87 CONFIG_NETFILTER_XT_TARGET_MARK=m 88 88 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 89 89 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 90 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 91 90 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 92 91 CONFIG_NETFILTER_XT_TARGET_TRACE=m 93 92 CONFIG_NETFILTER_XT_TARGET_SECMARK=m

-1

arch/mips/configs/jazz_defconfig

··· 60 60 CONFIG_NETFILTER_XT_TARGET_MARK=m 61 61 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 62 62 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 63 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 64 63 CONFIG_NETFILTER_XT_TARGET_SECMARK=m 65 64 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 66 65 CONFIG_NETFILTER_XT_MATCH_COMMENT=m

-1

arch/mips/configs/malta_defconfig

··· 86 86 CONFIG_NETFILTER_XT_TARGET_MARK=m 87 87 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 88 88 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 89 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 90 89 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 91 90 CONFIG_NETFILTER_XT_TARGET_TRACE=m 92 91 CONFIG_NETFILTER_XT_TARGET_SECMARK=m

-1

arch/mips/configs/markeins_defconfig

··· 59 59 CONFIG_NETFILTER_XT_TARGET_MARK=m 60 60 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 61 61 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 62 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 63 62 CONFIG_NETFILTER_XT_TARGET_SECMARK=m 64 63 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 65 64 CONFIG_NETFILTER_XT_MATCH_COMMENT=m

-1

arch/mips/configs/nlm_xlp_defconfig

··· 108 108 CONFIG_NETFILTER_XT_TARGET_MARK=m 109 109 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 110 110 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 111 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 112 111 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 113 112 CONFIG_NETFILTER_XT_TARGET_TRACE=m 114 113 CONFIG_NETFILTER_XT_TARGET_SECMARK=m

-1

arch/mips/configs/nlm_xlr_defconfig

··· 109 109 CONFIG_NETFILTER_XT_TARGET_MARK=m 110 110 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 111 111 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 112 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 113 112 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 114 113 CONFIG_NETFILTER_XT_TARGET_TRACE=m 115 114 CONFIG_NETFILTER_XT_TARGET_SECMARK=m

-1

arch/mips/configs/rm200_defconfig

··· 68 68 CONFIG_NETFILTER_XT_TARGET_MARK=m 69 69 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 70 70 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 71 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 72 71 CONFIG_NETFILTER_XT_TARGET_SECMARK=m 73 72 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 74 73 CONFIG_NETFILTER_XT_MATCH_COMMENT=m

-1

arch/powerpc/configs/pmac32_defconfig

··· 55 55 CONFIG_NETFILTER_XT_TARGET_MARK=m 56 56 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 57 57 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 58 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 59 58 CONFIG_NETFILTER_XT_TARGET_TRACE=m 60 59 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m 61 60 CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m

-1

arch/powerpc/configs/ppc64_defconfig

··· 92 92 CONFIG_NETFILTER_XT_TARGET_MARK=m 93 93 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 94 94 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 95 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 96 95 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 97 96 CONFIG_NETFILTER_XT_TARGET_TRACE=m 98 97 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m

-1

arch/powerpc/configs/ppc64e_defconfig

··· 66 66 CONFIG_NETFILTER_XT_TARGET_MARK=m 67 67 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 68 68 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 69 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 70 69 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 71 70 CONFIG_NETFILTER_XT_TARGET_TRACE=m 72 71 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m

-1

arch/powerpc/configs/ppc6xx_defconfig

··· 167 167 CONFIG_NETFILTER_XT_TARGET_MARK=m 168 168 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 169 169 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 170 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 171 170 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 172 171 CONFIG_NETFILTER_XT_TARGET_TRACE=m 173 172 CONFIG_NETFILTER_XT_TARGET_SECMARK=m

-1

arch/tile/configs/tilegx_defconfig

··· 134 134 CONFIG_NETFILTER_XT_TARGET_MARK=m 135 135 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 136 136 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 137 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 138 137 CONFIG_NETFILTER_XT_TARGET_TEE=m 139 138 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 140 139 CONFIG_NETFILTER_XT_TARGET_TRACE=m

-1

arch/tile/configs/tilepro_defconfig

··· 132 132 CONFIG_NETFILTER_XT_TARGET_MARK=m 133 133 CONFIG_NETFILTER_XT_TARGET_NFLOG=m 134 134 CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m 135 - CONFIG_NETFILTER_XT_TARGET_NOTRACK=m 136 135 CONFIG_NETFILTER_XT_TARGET_TEE=m 137 136 CONFIG_NETFILTER_XT_TARGET_TPROXY=m 138 137 CONFIG_NETFILTER_XT_TARGET_TRACE=m

-13

net/netfilter/Kconfig

··· 670 670 671 671 To compile it as a module, choose M here. If unsure, say N. 672 672 673 - config NETFILTER_XT_TARGET_NOTRACK 674 - tristate '"NOTRACK" target support' 675 - depends on IP_NF_RAW || IP6_NF_RAW 676 - depends on NF_CONNTRACK 677 - help 678 - The NOTRACK target allows a select rule to specify 679 - which packets *not* to enter the conntrack/NAT 680 - subsystem with all the consequences (no ICMP error tracking, 681 - no protocol helpers for the selected packets). 682 - 683 - If you want to compile it as a module, say M here and read 684 - <file:Documentation/kbuild/modules.txt>. If unsure, say `N'. 685 - 686 673 config NETFILTER_XT_TARGET_RATEEST 687 674 tristate '"RATEEST" target support' 688 675 depends on NETFILTER_ADVANCED

-1

net/netfilter/Makefile

··· 85 85 obj-$(CONFIG_NETFILTER_XT_TARGET_LOG) += xt_LOG.o 86 86 obj-$(CONFIG_NETFILTER_XT_TARGET_NFLOG) += xt_NFLOG.o 87 87 obj-$(CONFIG_NETFILTER_XT_TARGET_NFQUEUE) += xt_NFQUEUE.o 88 - obj-$(CONFIG_NETFILTER_XT_TARGET_NOTRACK) += xt_NOTRACK.o 89 88 obj-$(CONFIG_NETFILTER_XT_TARGET_RATEEST) += xt_RATEEST.o 90 89 obj-$(CONFIG_NETFILTER_XT_TARGET_SECMARK) += xt_SECMARK.o 91 90 obj-$(CONFIG_NETFILTER_XT_TARGET_TPROXY) += xt_TPROXY.o

-53

net/netfilter/xt_NOTRACK.c

··· 1 - /* This is a module which is used for setting up fake conntracks 2 - * on packets so that they are not seen by the conntrack/NAT code. 3 - */ 4 - #include <linux/module.h> 5 - #include <linux/skbuff.h> 6 - 7 - #include <linux/netfilter/x_tables.h> 8 - #include <net/netfilter/nf_conntrack.h> 9 - 10 - MODULE_DESCRIPTION("Xtables: Disabling connection tracking for packets"); 11 - MODULE_LICENSE("GPL"); 12 - MODULE_ALIAS("ipt_NOTRACK"); 13 - MODULE_ALIAS("ip6t_NOTRACK"); 14 - 15 - static unsigned int 16 - notrack_tg(struct sk_buff *skb, const struct xt_action_param *par) 17 - { 18 - /* Previously seen (loopback)? Ignore. */ 19 - if (skb->nfct != NULL) 20 - return XT_CONTINUE; 21 - 22 - /* Attach fake conntrack entry. 23 - If there is a real ct entry correspondig to this packet, 24 - it'll hang aroun till timing out. We don't deal with it 25 - for performance reasons. JK */ 26 - skb->nfct = &nf_ct_untracked_get()->ct_general; 27 - skb->nfctinfo = IP_CT_NEW; 28 - nf_conntrack_get(skb->nfct); 29 - 30 - return XT_CONTINUE; 31 - } 32 - 33 - static struct xt_target notrack_tg_reg __read_mostly = { 34 - .name = "NOTRACK", 35 - .revision = 0, 36 - .family = NFPROTO_UNSPEC, 37 - .target = notrack_tg, 38 - .table = "raw", 39 - .me = THIS_MODULE, 40 - }; 41 - 42 - static int __init notrack_tg_init(void) 43 - { 44 - return xt_register_target(&notrack_tg_reg); 45 - } 46 - 47 - static void __exit notrack_tg_exit(void) 48 - { 49 - xt_unregister_target(&notrack_tg_reg); 50 - } 51 - 52 - module_init(notrack_tg_init); 53 - module_exit(notrack_tg_exit);