Jan Engelhardt
3bf45b60b2
IPMARK: misc cleanups
...
- order #include lists
- const annotations, removal of casts
- add ipt_IPMARK alias
- make symbol names distinct
2008-04-09 13:10:00 +02:00
Jan Engelhardt
e037035bd4
IPMARK: rebuild parameter structure (fixed-size types)
...
Rebuild the parameter structure to have fixed-size members only.
2008-04-09 13:09:45 +02:00
Jan Engelhardt
d432d8041a
IPMARK: import 20080304 code base
...
With truly minimal changes to make it compile.
2008-04-08 20:37:59 +02:00
Jan Engelhardt
05359d1ab2
Merge reworked "ipp2p" match
2008-04-08 20:34:23 +02:00
Jan Engelhardt
29139c1414
ipp2p: add missing MODULE_ALIAS(ipt_ipp2p)
2008-04-08 20:34:06 +02:00
Jan Engelhardt
585cfd49ab
ipp2p: use c99 initializers in getopt structure
2008-04-08 20:34:05 +02:00
Jan Engelhardt
54f78ac3ef
ipp2p: use param_act() for parameter validation
2008-04-08 20:34:05 +02:00
Jan Engelhardt
376d41618c
ipp2p: use OR in flag settings in libxt_ipp2p
2008-04-08 20:34:05 +02:00
Jan Engelhardt
01df89eb8b
ipp2p: enable experimental data stream analyzers
...
(get rid of "function unused" warnings)
2008-04-08 20:34:05 +02:00
Jan Engelhardt
a1d307e336
ipp2p: internally simplify selecting protocol searches
2008-04-08 20:34:05 +02:00
Jan Engelhardt
0712d0fdca
ipp2p: guard against potential unaligned access
...
get_u16() and get_u32() may get passed unaligned pointers;
let's play it safe.
2008-04-08 20:34:05 +02:00
Jan Engelhardt
3c8131b976
ipp2p: use auxiliary skb functions
2008-04-08 20:34:04 +02:00
Jan Engelhardt
569643ac8c
ipp2p: static and const annotations, type usage
2008-04-08 20:34:04 +02:00
Jan Engelhardt
cc23d0a2e7
ipp2p: fix match function signature
2008-04-08 20:34:04 +02:00
Jan Engelhardt
c237fe2486
ipp2p: adhere to codingstyle
2008-04-08 20:34:04 +02:00
Jan Engelhardt
edcbcee84e
ipp2p: remove compat and obsolete code
2008-04-08 20:34:04 +02:00
Jan Engelhardt
44d6f47ad6
ipp2p: import 20080304 code base
2008-04-08 20:34:03 +02:00
Jan Engelhardt
20f6e47525
Merge reworked "condition" match
2008-04-08 20:33:32 +02:00
Jan Engelhardt
e304252f4b
condition: greatly improve processing speed
...
Replace the loop over all possible condvars by a simple deref. This
changes the runtime from O(n) to O(1) at the expense of only 8 bytes
for rule.
2008-04-08 11:58:35 +02:00
Jan Engelhardt
32f06cbedf
condition: squash variables
2008-04-08 11:58:35 +02:00
Jan Engelhardt
75f6f14aaf
condition: remove support for nonstandard inversion
2008-04-08 11:58:34 +02:00
Jan Engelhardt
7dd8b1a678
condition: reenable IPv6 support in userspace extension
2008-04-08 11:58:34 +02:00
Jan Engelhardt
f5f17a27c5
condition: style cleanup
2008-04-08 11:58:34 +02:00
Jan Engelhardt
c9579115c3
condition: rework condvar name check
...
Use memchr() instead of a for loop to detect '/' in the condvar name.
Also unconditionally disallow names starting with a dot.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
586353342f
condition: use appropriate types and return values
2008-04-08 11:58:34 +02:00
Jan Engelhardt
317a944fec
condition: use unique symbol names and rewrite init function
...
Use an array of xt_match for the match vtable.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
24dad368dd
condition: use new structure type
...
Use __u8 for the invert flag instead of int. Reduce CONDITION_NAME_LEN
from 32 to 31 so that the entire structure can fit into a cacheline.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
7d0efafdb3
condition: remove casts, add const qualifiers
2008-04-08 11:58:33 +02:00
Jan Engelhardt
330c1fe783
condition: remove version #ifs and compat selectors
2008-04-08 11:58:33 +02:00
Jan Engelhardt
72dc73e6a5
condition: import 20080125 code base
2008-04-08 11:58:33 +02:00
Jan Engelhardt
d7c5473cf6
LOGMARK: fix comma output in ctstatus= list
2008-04-08 11:51:24 +02:00
Jan Engelhardt
0ee80e4147
LOGMARK: add hook= and ctdir= fields
2008-04-08 11:49:45 +02:00
Jan Engelhardt
9778022c37
compat: add ipv6_hdr
2008-04-08 11:33:26 +02:00
Jan Engelhardt
2f6bc4c8cb
TEE: reenable header_ops check
2008-04-07 08:44:25 +02:00
Jan Engelhardt
5fbc01b991
compat: add check for pskb relocation
...
The Xtables-addons compat layer does not support pskb relocation
(result of possible memory allocation in kernels before 2.6.24) and
we just assume it does not happen. Add a check to warn if relocation
did happen and packet loss is to be expected.
2008-04-01 09:12:38 +02:00
Jan Engelhardt
b749916313
ECHO: Catch skb_linearize out-of-memory condition
2008-03-31 06:40:29 +02:00
Jan Engelhardt
818cd3b47e
Makefile: support building multiple files with one config option
2008-03-26 08:11:04 +01:00
Jan Engelhardt
8302faad44
TEE: fix address copying bug
2008-03-24 16:56:18 +01:00
Jan Engelhardt
8fa47480f8
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
Jan Engelhardt
463dceb709
Xtables-addons 1.5.3
v1.5.3
2008-03-22 05:17:04 +01:00
Jan Engelhardt
cd323565d7
Merge reworked geoip extension
2008-03-22 05:16:53 +01:00
Jan Engelhardt
a39bfdf98e
Add xt_ECHO sample target
2008-03-22 05:16:47 +01:00
Jan Engelhardt
cd7c8fc4fa
geoip: minor cleanups in help, opts and logic
2008-03-22 03:59:58 +01:00
Jan Engelhardt
5d431b45f1
geoip: use simpler, preprocessed integer vector lists and fix endian issue
...
The old database format was in unknown byteorder -- if you run the
converter program yourself, you got a host order file, but if you
downloaded the preprocessed DB file (geoipdb.bin), you got a
little-endian file.
Use a new database format. Instead of having an index and a DB file,
do away with the index and let the filesystem do the indexing, using
one file per country. Also access the database files with a known
endianess type. The converter script now produces two distinct
variants (especially needed for IA-64).
All of this reduces the touched code by half.
2008-03-22 03:59:57 +01:00
Jan Engelhardt
f4c4208e75
geoip: use appropriate and normal types
...
For the header file, we need __u32 and so on because they are exported
to userspace and rather constitute a kernel header.
Use normal types instead of uintXX_t in the main code.
2008-03-22 03:59:57 +01:00
Jan Engelhardt
52a0ed7f15
geoip: use rcu to reduce time spinlocks are held
...
spin_lock_bh does not look safe (only disables preempt on current
CPU?). Change to spin_lock, that also avoids the management overhead
of spin_lock_bh. to spin_lock to avoid management overhead.
Use rcu in match and destroy function.
2008-03-22 03:59:57 +01:00
Jan Engelhardt
000d813171
geoip: use real atomic_t and remove casts from uint32_t
2008-03-22 03:59:57 +01:00
Jan Engelhardt
e45cb21ad6
geoip: use struct list_head instead of self-cooked list
2008-03-22 03:59:57 +01:00
Jan Engelhardt
7aae90da5a
geoip: use local-portable aligned_u64 pointer values
...
A 64-bit kernel will interpret the pointer with 64 bits width, while
a 32-bit userspace filled in only 32 of it, leaving the other 32
undefined. This must be avoided.
2008-03-22 03:59:56 +01:00
Jan Engelhardt
fd5321c7d8
geoip: split user/kernel-visible parts of struct geoip_info
2008-03-22 03:59:56 +01:00