Ralph Sennhauser
a8af97b8fa
build: support for Linux 4.10
...
Commit 613dbd95723aee7abd16860745691b6c7bda20dc (netfilter:
x_tables: move hook state into xt_action_param structure) changes the
struct xt_action_param, accommodate for it.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2017-01-04 02:40:41 +01:00
Andreas Schultz
e3114d60d5
xt_ACCOUNT: make it namespace aware
...
xt_ACCOUNTing objects create in one network namespace could be
read from all namespaces. Also object with the same name in
different namespaces would collide.
Signed-off-by: Andreas Schultz <aschultz@tpip.net >
2016-04-05 13:30:57 +02:00
Jan Engelhardt
1dc2a1c2de
xt_ACCOUNT: remove redundant braces
...
For single-line statements, the {} are not strictly needed.
2015-11-09 22:33:49 +01:00
Jan Engelhardt
60b6b1dbef
xt_ACCOUNT: indent reduction
...
Invert early terminating conditions so the rest of the block can be
de-indented.
2015-11-09 22:33:49 +01:00
Neil P. Murphy
f89f10bbe9
xt_ACCOUNT: call free_pages(x,2)
...
Below is the patch with the *rest* of the free_page(X) calls changed
to free_pages(X, 2). xt_ACCOUNT should always allocate memory in page
pairs. And always *free* memory in page pairs.
References: http://www.spinics.net/lists/netfilter-devel/msg39025.html
2015-11-09 22:25:16 +01:00
Jan Engelhardt
5e22c9c592
xt_ACCOUNT: avoid implicit padding in struct ipt_acc_handle_ip
...
Make the structure size so that an ILP32 environment has no problem
taking the raw bytes from an LP64 one.
2015-06-05 13:52:45 +02:00
Jan Engelhardt
01f97bfdd1
iptaccount: cast from uint64_t to please printf
...
%llu wants an "unsigned long long", which is not necessarily
the same as uint64_t.
2015-06-05 13:51:56 +02:00
Neal P. Murphy
1324442bce
xt_ACCOUNT: make counters 64-bit wide
...
The Smoothwall Express traffic stats collector (traffiClogger) does
not handle counter rollovers well and does not perform read&flush.
(Yes, the code is somewhat aged.) To change it to perform read&flush
is non-trivial. Then, it occurred to me that it might be easier to
change ipt_ACCOUNT in xtables-addons to use 64-bit counters,
considering it was designed around single kernel pages.
The following submission counts to at least 100 GB, produces no
obvious kernel gripes, and adjacent counters do not seem to interfere
with each other. Yes, it uses more memory, but RAM costs much less
than bugs that grown out of complex software.
The theory:
- Use two kernel pages for the counters for each group of 256
addresses.
- Change counters to 64-bit.
- Change to __get_free_pages/free_pages, using order=2
(two consecutive pages), and zero both pages.
- Change "%u" to "%llu" as needed.
- Everything else pretty much stays the same.
I also changed tmpbuf to two pages (Justin Case's idea), but I
do not know if that's really necessary.
2015-06-05 13:51:55 +02:00
Jan Engelhardt
991c0cf4cf
compat_xtables: remove no longer needed target API redirection
...
Function signature for targets stayed the same since 3.7.
2014-01-09 10:24:32 +01:00
Jan Engelhardt
aceca54912
iptaccount: fix being a no-op program
...
A PPC system has been observed where "char" is unsigned; with that,
the getopt loop will never terminate because optchar != -1 could not
happen.
2013-03-31 21:11:24 +02:00
Jan Engelhardt
5e020d380c
build: remove support for Linux 2.6.26
2012-10-16 04:16:57 +02:00
Jan Engelhardt
f830dbd34e
Remove unused Kconfig files
2012-03-14 01:32:33 +01:00
Frank Reppin
6ef91897b2
build: fix compilation after missing libxtables_CFLAGS in submodules
2011-08-21 13:56:42 +02:00
Jan Engelhardt
3dd33dfe93
doc: move iptaccount(8) option overview to its own manpage
2011-05-31 23:05:31 +02:00
Jan Engelhardt
1edc9b943b
build: do not forget including path for compat_user.h
2011-02-02 05:15:09 +01:00
Jan Engelhardt
ebfa77795a
build: preliminary support for iptables 1.4.11
2011-02-02 05:09:58 +01:00
Jan Engelhardt
0edb572f6e
ACCOUNT: update to 1.16
...
There are no changes to integrate from ipt_ACCOUNT because xt_ACCOUT
already, by way of the compat_xtables layer, supports multiple kernel
versions.
2011-01-22 17:34:06 +01:00
Jan Engelhardt
cf9b60a57e
ACCOUNT: remove uses of obsolete IPT_CONTINUE
...
And replace by XT_CONTINUE, to avoid compilation errors in 2.6.37.
2010-10-16 15:45:31 +02:00
Jan Engelhardt
2d36632d4a
build: add workaround for beoken linux-glibc-devel (2)
2010-09-29 02:51:26 +02:00
Jan Engelhardt
5b472be9bb
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
Jan Engelhardt
ad146dbeef
compat_xtables: move to 2.6.35 API for targets
2010-04-05 02:15:20 +02:00
Jan Engelhardt
48327605c6
modules: replace AF/PF with NFPROTO
2010-03-17 02:25:40 +01:00
Jan Engelhardt
414e95ffb1
extensions: replace AF/PF with NFPROTO
...
Needs one update of netfilter.h to something recent, too.
2010-03-17 02:20:39 +01:00
Jan Engelhardt
351b040f4a
ACCOUNT: avoid collision with arp_tables setsockopt numbers
2009-11-29 20:35:39 +01:00
Jan Engelhardt
d5ff452ea5
iptaccount: fix a compile warning
...
iptaccount.c: In function 'addr_to_dotted':
iptaccount.c:42: warning: implicit declaration of function 'htonl'
2009-11-09 16:00:25 +01:00
Jan Engelhardt
359ecc7a8c
ACCOUNT: transfer table data in host order
...
Make compatibility happy.
2009-11-04 23:37:34 +01:00
Jan Engelhardt
6ee71ed485
ACCOUNT: remove extra intrapositional negation check
2009-11-03 20:31:49 +01:00
Jan Engelhardt
df7168bb4d
ACCOUNT: use more precise types and fix minor tidbits
2009-10-30 18:48:04 +01:00
Jan Engelhardt
0aa7be2f1d
ACCOUNT: annotate source where BE is used
2009-10-30 18:42:40 +01:00
Jan Engelhardt
8bd6ef78f9
ACCOUNT: correctly account for network-order addresses on BE arches
2009-10-30 18:36:47 +01:00
Jan Engelhardt
578af6f726
ACCOUNT: move private struct declarations into .c file
2009-10-27 11:04:23 +01:00
Jan Engelhardt
96f501ab89
ACCOUNT: move Kconfig file
2009-10-06 23:56:38 +02:00
Jan Engelhardt
3c1bf73e8e
ACCOUNT: mark reg structure __read_mostly
2009-10-06 23:42:48 +02:00
Jan Engelhardt
0541154a5e
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
Jan Engelhardt
7ab033e64c
Update .gitignore files
2009-09-26 00:13:15 +02:00
Jan Engelhardt
46f9ddbf59
ACCOUNT: move manpage into ACCOUNT/ directory
2009-09-24 01:52:42 +02:00
Jan Engelhardt
e37985b527
ACCOUNT/userspace: use bool type
2009-09-24 01:48:16 +02:00
Jan Engelhardt
0ccd55abd9
ACCOUNT/userspace: remove pointless casts
2009-09-24 01:46:56 +02:00
Jan Engelhardt
60123a8c07
ACCOUNT/userspace: remove static zero initializers
2009-09-24 01:46:56 +02:00
Jan Engelhardt
504f1089fb
ACCOUNT/userspace: simple reformat, use tabs instead of spaces
2009-09-24 01:46:55 +02:00
Jan Engelhardt
e119350000
ACCOUNT/userspace: remove trailing whitespace
2009-09-24 01:35:45 +02:00
Jan Rafaj
a260e3349f
ACCOUNT: import userspace utilities
2009-09-24 01:27:11 +02:00
Jan Engelhardt
5cb36ed213
ACCOUNT: move xt_ACCOUNT into its own subdirectory
...
Will be adding related userspace programs shortly, and an extra
directory for the same reason it is for ipset/.
2009-09-24 01:00:15 +02:00
