3 commits

Author	SHA1	Message	Date
Cyrill Gorcunov	291aa3f6d6	headers: Add extern specificator to functions ... We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2013-11-15 17:00:58 +04:00
Cyrill Gorcunov	830d92b0f0	headers: Unify include guards (in comments) and a few fixes ... - fix names in comments - add empty lines where needed - fix rbtree.h - fix syscall-types.h Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-12-25 22:40:24 +04:00
Pavel Emelyanov	64c64e4f2c	net: Add code for locking a tcp connection with netfilter ... Between dump and restore of a tcp conn we have to keep the connection blocked, since the socket doesn't exists in the kernel at this time and any packet from peer will result in RST. Thus, add the -j DROP rule for every connection we're about to repair. Later, when we support containers, this will be extended to stop the whole networking in a CT instead of cherry-peeking connections. It does system("iptables ...") for this, but I'd prefer using the libnetfilter-devel sometime in the future. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>	2012-04-28 17:59:21 +04:00