a8af97b8fa
build: support for Linux 4.10
...
Commit 613dbd95723aee7abd16860745691b6c7bda20dc (netfilter:
x_tables: move hook state into xt_action_param structure) changes the
struct xt_action_param, accommodate for it.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2017-01-04 02:40:41 +01:00
e3114d60d5
xt_ACCOUNT: make it namespace aware
...
xt_ACCOUNTing objects create in one network namespace could be
read from all namespaces. Also object with the same name in
different namespaces would collide.
Signed-off-by: Andreas Schultz <aschultz@tpip.net >
2016-04-05 13:30:57 +02:00
1dc2a1c2de
xt_ACCOUNT: remove redundant braces
...
For single-line statements, the {} are not strictly needed.
2015-11-09 22:33:49 +01:00
60b6b1dbef
xt_ACCOUNT: indent reduction
...
Invert early terminating conditions so the rest of the block can be
de-indented.
2015-11-09 22:33:49 +01:00
f89f10bbe9
xt_ACCOUNT: call free_pages(x,2)
...
Below is the patch with the *rest* of the free_page(X) calls changed
to free_pages(X, 2). xt_ACCOUNT should always allocate memory in page
pairs. And always *free* memory in page pairs.
References: http://www.spinics.net/lists/netfilter-devel/msg39025.html
2015-11-09 22:25:16 +01:00
5e22c9c592
xt_ACCOUNT: avoid implicit padding in struct ipt_acc_handle_ip
...
Make the structure size so that an ILP32 environment has no problem
taking the raw bytes from an LP64 one.
2015-06-05 13:52:45 +02:00
01f97bfdd1
iptaccount: cast from uint64_t to please printf
...
%llu wants an "unsigned long long", which is not necessarily
the same as uint64_t.
2015-06-05 13:51:56 +02:00
1324442bce
xt_ACCOUNT: make counters 64-bit wide
...
The Smoothwall Express traffic stats collector (traffiClogger) does
not handle counter rollovers well and does not perform read&flush.
(Yes, the code is somewhat aged.) To change it to perform read&flush
is non-trivial. Then, it occurred to me that it might be easier to
change ipt_ACCOUNT in xtables-addons to use 64-bit counters,
considering it was designed around single kernel pages.
The following submission counts to at least 100 GB, produces no
obvious kernel gripes, and adjacent counters do not seem to interfere
with each other. Yes, it uses more memory, but RAM costs much less
than bugs that grown out of complex software.
The theory:
- Use two kernel pages for the counters for each group of 256
addresses.
- Change counters to 64-bit.
- Change to __get_free_pages/free_pages, using order=2
(two consecutive pages), and zero both pages.
- Change "%u" to "%llu" as needed.
- Everything else pretty much stays the same.
I also changed tmpbuf to two pages (Justin Case's idea), but I
do not know if that's really necessary.
2015-06-05 13:51:55 +02:00
991c0cf4cf
compat_xtables: remove no longer needed target API redirection
...
Function signature for targets stayed the same since 3.7.
2014-01-09 10:24:32 +01:00
aceca54912
iptaccount: fix being a no-op program
...
A PPC system has been observed where "char" is unsigned; with that,
the getopt loop will never terminate because optchar != -1 could not
happen.
2013-03-31 21:11:24 +02:00
5e020d380c
build: remove support for Linux 2.6.26
2012-10-16 04:16:57 +02:00
f830dbd34e
Remove unused Kconfig files
2012-03-14 01:32:33 +01:00
6ef91897b2
build: fix compilation after missing libxtables_CFLAGS in submodules
2011-08-21 13:56:42 +02:00
3dd33dfe93
doc: move iptaccount(8) option overview to its own manpage
2011-05-31 23:05:31 +02:00
1edc9b943b
build: do not forget including path for compat_user.h
2011-02-02 05:15:09 +01:00
ebfa77795a
build: preliminary support for iptables 1.4.11
2011-02-02 05:09:58 +01:00
0edb572f6e
ACCOUNT: update to 1.16
...
There are no changes to integrate from ipt_ACCOUNT because xt_ACCOUT
already, by way of the compat_xtables layer, supports multiple kernel
versions.
2011-01-22 17:34:06 +01:00
cf9b60a57e
ACCOUNT: remove uses of obsolete IPT_CONTINUE
...
And replace by XT_CONTINUE, to avoid compilation errors in 2.6.37.
2010-10-16 15:45:31 +02:00
2d36632d4a
build: add workaround for beoken linux-glibc-devel (2)
2010-09-29 02:51:26 +02:00
5b472be9bb
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
ad146dbeef
compat_xtables: move to 2.6.35 API for targets
2010-04-05 02:15:20 +02:00
48327605c6
modules: replace AF/PF with NFPROTO
2010-03-17 02:25:40 +01:00
414e95ffb1
extensions: replace AF/PF with NFPROTO
...
Needs one update of netfilter.h to something recent, too.
2010-03-17 02:20:39 +01:00
351b040f4a
ACCOUNT: avoid collision with arp_tables setsockopt numbers
2009-11-29 20:35:39 +01:00
d5ff452ea5
iptaccount: fix a compile warning
...
iptaccount.c: In function 'addr_to_dotted':
iptaccount.c:42: warning: implicit declaration of function 'htonl'
2009-11-09 16:00:25 +01:00
359ecc7a8c
ACCOUNT: transfer table data in host order
...
Make compatibility happy.
2009-11-04 23:37:34 +01:00
6ee71ed485
ACCOUNT: remove extra intrapositional negation check
2009-11-03 20:31:49 +01:00
df7168bb4d
ACCOUNT: use more precise types and fix minor tidbits
2009-10-30 18:48:04 +01:00
0aa7be2f1d
ACCOUNT: annotate source where BE is used
2009-10-30 18:42:40 +01:00
8bd6ef78f9
ACCOUNT: correctly account for network-order addresses on BE arches
2009-10-30 18:36:47 +01:00
578af6f726
ACCOUNT: move private struct declarations into .c file
2009-10-27 11:04:23 +01:00
96f501ab89
ACCOUNT: move Kconfig file
2009-10-06 23:56:38 +02:00
3c1bf73e8e
ACCOUNT: mark reg structure __read_mostly
2009-10-06 23:42:48 +02:00
0541154a5e
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
7ab033e64c
Update .gitignore files
2009-09-26 00:13:15 +02:00
46f9ddbf59
ACCOUNT: move manpage into ACCOUNT/ directory
2009-09-24 01:52:42 +02:00
e37985b527
ACCOUNT/userspace: use bool type
2009-09-24 01:48:16 +02:00
0ccd55abd9
ACCOUNT/userspace: remove pointless casts
2009-09-24 01:46:56 +02:00
60123a8c07
ACCOUNT/userspace: remove static zero initializers
2009-09-24 01:46:56 +02:00
504f1089fb
ACCOUNT/userspace: simple reformat, use tabs instead of spaces
2009-09-24 01:46:55 +02:00
e119350000
ACCOUNT/userspace: remove trailing whitespace
2009-09-24 01:35:45 +02:00
a260e3349f
ACCOUNT: import userspace utilities
2009-09-24 01:27:11 +02:00
5cb36ed213
ACCOUNT: move xt_ACCOUNT into its own subdirectory
...
Will be adding related userspace programs shortly, and an extra
directory for the same reason it is for ipset/.
2009-09-24 01:00:15 +02:00
Ralph Sennhauser