Tim Gardner 0079c5aee3 netfilter: xt_recent: add an entry reaper ... One of the problems with the way xt_recent is implemented is that there is no efficient way to remove expired entries. Of course, one can write a rule '-m recent --remove', but you have to know beforehand which entry to delete. This commit adds reaper logic which checks the head of the LRU list when a rule is invoked that has a '--seconds' value and XT_RECENT_REAP set. If an entry ceases to accumulate time stamps, then it will eventually bubble to the top of the LRU list where it is then reaped. Signed-off-by: Tim Gardner <tim.gardner@canonical.com> Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net>		2010-03-17 15:53:12 +01:00
..
Kbuild	netfilter: xtables: add CT target	2010-02-03 17:17:06 +01:00
nf_conntrack_amanda.h
nf_conntrack_common.h	netfilter: nf_conntrack: support conntrack templates	2010-02-03 14:40:17 +01:00
nf_conntrack_dccp.h
nf_conntrack_ftp.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
nf_conntrack_h323.h
nf_conntrack_h323_asn1.h
nf_conntrack_h323_types.h
nf_conntrack_irc.h
nf_conntrack_pptp.h
nf_conntrack_proto_gre.h
nf_conntrack_sane.h
nf_conntrack_sctp.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
nf_conntrack_sip.h	netfilter: nf_conntrack_sip: add T.38 FAX support	2010-02-11 12:30:21 +01:00
nf_conntrack_tcp.h	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6	2009-12-03 13:23:12 -08:00
nf_conntrack_tftp.h
nf_conntrack_tuple_common.h
nfnetlink.h	netfilter: nfnetlink: netns support	2010-01-13 16:02:14 +01:00
nfnetlink_compat.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
nfnetlink_conntrack.h	netfilter: ctnetlink: add zone support	2010-02-15 18:14:57 +01:00
nfnetlink_log.h
nfnetlink_queue.h
x_tables.h	netfilter: xtables: replace XT_MATCH_ITERATE macro	2010-02-24 18:34:48 +01:00
xt_CLASSIFY.h
xt_cluster.h
xt_comment.h
xt_connbytes.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_connlimit.h
xt_CONNMARK.h	netfilter: xtables: merge xt_CONNMARK into xt_connmark	2010-03-17 15:48:36 +01:00
xt_connmark.h	netfilter: xtables: merge xt_CONNMARK into xt_connmark	2010-03-17 15:48:36 +01:00
xt_CONNSECMARK.h
xt_conntrack.h	netfilter: xtables: remove xt_conntrack v0	2009-08-10 13:09:44 +02:00
xt_CT.h	netfilter: nf_conntrack: add support for "conntrack zones"	2010-02-15 18:13:33 +01:00
xt_dccp.h
xt_dscp.h
xt_DSCP.h
xt_esp.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_hashlimit.h
xt_helper.h
xt_iprange.h
xt_LED.h
xt_length.h
xt_limit.h
xt_mac.h
xt_mark.h	netfilter: xtables: merge xt_MARK into xt_mark	2010-03-17 15:48:36 +01:00
xt_MARK.h	netfilter: xtables: merge xt_MARK into xt_mark	2010-03-17 15:48:36 +01:00
xt_multiport.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_NFLOG.h
xt_NFQUEUE.h	netfilter: xt_NFQUEUE: queue balancing support	2009-06-05 13:24:24 +02:00
xt_osf.h	netfilter: headers_check fix: linux/netfilter/xt_osf.h	2009-06-29 14:28:27 +02:00
xt_owner.h
xt_physdev.h
xt_pkttype.h
xt_policy.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_quota.h
xt_rateest.h
xt_RATEEST.h
xt_realm.h
xt_recent.h	netfilter: xt_recent: add an entry reaper	2010-03-17 15:53:12 +01:00
xt_sctp.h
xt_SECMARK.h
xt_socket.h	netfilter: xt_socket: added new revision of the 'socket' match supporting flags	2009-06-09 15:16:34 +02:00
xt_state.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_statistic.h
xt_string.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_tcpmss.h
xt_TCPMSS.h
xt_TCPOPTSTRIP.h
xt_tcpudp.h	net: cleanup include/linux	2009-11-04 09:50:58 -08:00
xt_time.h
xt_TPROXY.h
xt_u32.h