libvirt/src/util
Laszlo Ersek ccca5dc3a2 util/viriptables: add/remove rules that short-circuit masquerading
The functions
- iptablesAddForwardDontMasquerade(),
- iptablesRemoveForwardDontMasquerade
handle exceptions in the masquerading implemented in the POSTROUTING chain
of the "nat" table. Such exceptions should be added as chronologically
latest, logically top-most rules.

The bridge driver will call these functions beginning with the next patch:
some special destination IP addresses always refer to the local
subnetwork, even though they don't match any practical subnetwork's
netmask. Packets from virbrN targeting such IP addresses are never routed
outwards, but the current rules treat them as non-virbrN-destined packets
and masquerade them. This causes problems for some receivers on virbrN.

Signed-off-by: Laszlo Ersek <lersek@redhat.com>
2013-09-25 08:24:09 -04:00
..
iohelper.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
keymaps.csv
viralloc.c Fix reporting of errors in OOM injection code 2013-09-24 10:52:26 +01:00
viralloc.h viralloc: Report OOM error on failure 2013-07-10 11:07:31 +02:00
virarch.c Add ARM v7 big-endian architecture (armv7b) 2013-09-09 10:39:28 +01:00
virarch.h Add ARM v7 big-endian architecture (armv7b) 2013-09-09 10:39:28 +01:00
viratomic.c
viratomic.h
viraudit.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
viraudit.h
virauth.c virAuth: Don't require virConnectPtr to retrieve authentication creds 2013-07-12 09:22:38 +02:00
virauth.h virAuth: Don't require virConnectPtr to retrieve authentication creds 2013-07-12 09:22:38 +02:00
virauthconfig.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virauthconfig.h
virbitmap.c virBitmapParse: Fix behavior in case of error and fix up callers 2013-08-22 11:38:36 +02:00
virbitmap.h
virbuffer.c viralloc: Report OOM error on failure 2013-07-10 11:07:31 +02:00
virbuffer.h util: switch virBufferTrim to void 2013-06-19 09:21:09 +02:00
vircgroup.c cgroup: Move [qemu|lxc]GetCpuBWStatus to vicgroup.c and refactor it 2013-09-16 11:32:49 +02:00
vircgroup.h cgroup: Move [qemu|lxc]GetCpuBWStatus to vicgroup.c and refactor it 2013-09-16 11:32:49 +02:00
vircgrouppriv.h Track symlinks for co-mounted cgroup controllers 2013-04-15 17:35:32 +01:00
virclosecallbacks.c lxc: switch to virCloseCallbacks API 2013-07-18 14:16:54 +02:00
virclosecallbacks.h lxc: switch to virCloseCallbacks API 2013-07-18 14:16:54 +02:00
vircommand.c Don't ignore allocation failure in virCommandAddEnvPassCommon 2013-09-24 10:52:58 +01:00
vircommand.h Merge virCommandPreserveFD / virCommandTransferFD 2013-07-18 12:18:24 +01:00
virconf.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virconf.h
virdbus.c DBus: introduce virDBusIsServiceEnabled 2013-09-11 13:45:25 +01:00
virdbus.h DBus: introduce virDBusIsServiceEnabled 2013-09-11 13:45:25 +01:00
virdbuspriv.h Introduce virDBusCallMethod & virDBusMessageRead methods 2013-07-22 13:09:58 +01:00
virdnsmasq.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virdnsmasq.h
virebtables.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virebtables.h Adapt to VIR_STRDUP and VIR_STRNDUP in src/util/* 2013-05-24 10:10:03 +02:00
virendian.h
virerror.c Add a colon after 'internal error' 2013-07-24 15:59:44 +02:00
virerror.h Add helpers for dealing with system errors 2013-07-22 13:09:58 +01:00
virevent.c docs: fix virEventAddHandle return details 2013-09-18 13:06:13 -06:00
virevent.h
vireventpoll.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
vireventpoll.h
virfile.c cleanup: Kill usage of access(PATH, F_OK) in favor of virFileExists() 2013-09-16 10:37:39 +02:00
virfile.h Introduce virFilePrintf() as a portable fprintf() 2013-05-31 10:51:33 -06:00
virhash.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virhash.h
virhashcode.c
virhashcode.h
virhook.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virhook.h virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
viridentity.c Ensure system identity includes process start time 2013-09-18 15:04:27 +01:00
viridentity.h Also store user & group ID values in virIdentity 2013-09-18 15:04:27 +01:00
virinitctl.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virinitctl.h
viriptables.c util/viriptables: add/remove rules that short-circuit masquerading 2013-09-25 08:24:09 -04:00
viriptables.h util/viriptables: add/remove rules that short-circuit masquerading 2013-09-25 08:24:09 -04:00
virjson.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virjson.h json: support removing a value from an object 2013-05-13 15:15:54 -06:00
virkeycode-mapgen.py
virkeycode.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virkeycode.h cleanup: Don't include libvirt/libvirt.h 2013-04-17 15:50:53 +08:00
virkeyfile.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virkeyfile.h
virlockspace.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virlockspace.h
virlog.c Stop free'ing 'const char *' strings 2013-09-05 11:28:01 +01:00
virlog.h Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virmacaddr.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virmacaddr.h
virnetdev.c BSD: implement virNetDev(Set|Clear)IPv4Address 2013-08-21 15:49:40 -06:00
virnetdev.h netdev: accept NULL in virNetDevSetupControl 2013-06-21 20:22:07 +02:00
virnetdevbandwidth.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virnetdevbandwidth.h
virnetdevbridge.c build: fix build with latest rawhide kernel headers 2013-09-16 09:24:12 -06:00
virnetdevbridge.h
virnetdevmacvlan.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virnetdevmacvlan.h
virnetdevopenvswitch.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virnetdevopenvswitch.h virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
virnetdevtap.c qemu: Handle huge number of queues correctly 2013-09-03 13:38:35 +02:00
virnetdevtap.h qemu: Adapt qemuBuildInterfaceCommandLine to to multiqueue net 2013-05-22 17:24:27 +02:00
virnetdevveth.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virnetdevveth.h
virnetdevvlan.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virnetdevvlan.h Configure native vlan modes on Open vSwitch ports 2013-06-25 00:22:36 -04:00
virnetdevvportprofile.c maint: fix typo for 'switch' 2013-08-15 16:54:06 -06:00
virnetdevvportprofile.h
virnetlink.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virnetlink.h maint: don't use config.h in .h files 2013-06-05 05:53:25 -06:00
virnodesuspend.c Separate internal node suspend APIs from public API 2013-05-08 10:47:47 +01:00
virnodesuspend.h Separate internal node suspend APIs from public API 2013-05-08 10:47:47 +01:00
virnuma.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virnuma.h
virobject.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virobject.h
virpci.c cleanup: Kill usage of access(PATH, F_OK) in favor of virFileExists() 2013-09-16 10:37:39 +02:00
virpci.h pci: new iommu_group functions 2013-06-26 14:10:09 -04:00
virpidfile.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
virpidfile.h
virportallocator.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virportallocator.h
virprocess.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virprocess.h Include process start time when doing polkit checks 2013-05-08 10:47:45 +01:00
virrandom.c random: don't mix RAND_MAX with random_r 2013-08-30 06:24:28 -06:00
virrandom.h
virscsi.c cleanup: Kill usage of access(PATH, F_OK) in favor of virFileExists() 2013-09-16 10:37:39 +02:00
virscsi.h utils: Add a helper to get the device name that sg device mapped to 2013-05-16 23:50:00 +08:00
virsexpr.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virsexpr.h
virsocketaddr.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virsocketaddr.h virsocket: Introduce virSocketAddrIsWildcard 2013-06-07 15:21:57 +02:00
virstatslinux.c virutil: Move string related functions to virstring.c 2013-05-02 16:56:55 +02:00
virstatslinux.h
virstoragefile.c qemu: add helper functions for diskchain checking 2013-08-01 13:26:27 +08:00
virstoragefile.h qemu: add helper functions for diskchain checking 2013-08-01 13:26:27 +08:00
virstring.c util: Non-existent string array does not contain any string 2013-07-19 17:59:47 +02:00
virstring.h virAsprintf: correctly check return value 2013-07-18 14:05:46 +02:00
virsysinfo.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virsysinfo.h
virsystemd.c Free slicename in virSystemdCreateMachine 2013-09-16 19:26:21 +02:00
virsystemd.h Add APIs for formatting systemd slice/scope names 2013-07-31 19:24:53 +01:00
virthread.c
virthread.h build: avoid non-portable cast of pthread_t 2013-05-03 06:30:22 -06:00
virthreadpool.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virthreadpool.h
virthreadpthread.c viralloc: Report OOM error on failure 2013-07-10 11:07:31 +02:00
virthreadpthread.h
virthreadwin32.c build: fix virthread build on mingw 2013-07-29 08:56:48 -06:00
virthreadwin32.h Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virtime.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virtime.h
virtpm.c Adapt to VIR_ALLOC and virAsprintf in src/util/* 2013-07-10 11:07:33 +02:00
virtpm.h
virtypedparam.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
virtypedparam.h Introduce virTypedParamsCopy internal API 2013-06-25 00:38:25 +02:00
viruri.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
viruri.h
virusb.c util: add rebase fix that was accidentally omitted from previous patch 2013-07-10 23:06:43 -04:00
virusb.h
virutil.c cleanup: Kill usage of access(PATH, F_OK) in favor of virFileExists() 2013-09-16 10:37:39 +02:00
virutil.h util: add virGetUserDirectoryByUID 2013-07-30 15:25:59 -06:00
viruuid.c Convert 'int i' to 'size_t i' in src/util/ files 2013-07-10 17:40:13 +01:00
viruuid.h
virxml.c conf: allow to add XML metadata using the virDomainSetMetadata api 2013-09-17 09:42:49 +02:00
virxml.h conf: allow to add XML metadata using the virDomainSetMetadata api 2013-09-17 09:42:49 +02:00