Jan Engelhardt
f931e34365
compat: resolve missing tcp_hdr and udp_hdr for xt_ipp2p
2008-04-09 20:16:33 +02:00
Jan Engelhardt
f34be8445f
TEE: make skb writable before attempting checksum update
...
This also adds the compat function xtnu_skb_make_writable().
2008-04-09 20:06:17 +02:00
Jan Engelhardt
37e51dc44d
condition: resolve typesize compiler warning
...
Fix warning: field precision should have type "int", but argument 2
has type "long unsigned int".
2008-04-09 19:56:11 +02:00
Jan Engelhardt
1060138f77
IPMARK: redo ipmark_tg_parse()
...
- check for illegal inversion on flags
- use param_act() and strtonum() instead of open-coded checks
2008-04-09 19:24:24 +02:00
Jan Engelhardt
03eeabb4bd
IPMARK: style cleanup
2008-04-09 19:24:23 +02:00
Jan Engelhardt
2c7b1d5330
IPMARK: IPv6 support
2008-04-09 19:24:01 +02:00
Jan Engelhardt
b63ac3be45
IPMARK: print --addr flag the usual way
2008-04-09 19:24:01 +02:00
Jan Engelhardt
4b8ec990b8
IPMARK: omit printing unset mask
2008-04-09 19:23:45 +02:00
Jan Engelhardt
59ef68fecc
IPMARK: remove incorrect --and/--or check
...
It is perfectly valid for no --and-mask and also no --or-mask to
appear, in which case the IP(v4) address is taken as mark without
modification.
2008-04-09 19:23:08 +02:00
Jan Engelhardt
3bf45b60b2
IPMARK: misc cleanups
...
- order #include lists
- const annotations, removal of casts
- add ipt_IPMARK alias
- make symbol names distinct
2008-04-09 13:10:00 +02:00
Jan Engelhardt
e037035bd4
IPMARK: rebuild parameter structure (fixed-size types)
...
Rebuild the parameter structure to have fixed-size members only.
2008-04-09 13:09:45 +02:00
Jan Engelhardt
d432d8041a
IPMARK: import 20080304 code base
...
With truly minimal changes to make it compile.
2008-04-08 20:37:59 +02:00
Jan Engelhardt
29139c1414
ipp2p: add missing MODULE_ALIAS(ipt_ipp2p)
2008-04-08 20:34:06 +02:00
Jan Engelhardt
585cfd49ab
ipp2p: use c99 initializers in getopt structure
2008-04-08 20:34:05 +02:00
Jan Engelhardt
54f78ac3ef
ipp2p: use param_act() for parameter validation
2008-04-08 20:34:05 +02:00
Jan Engelhardt
376d41618c
ipp2p: use OR in flag settings in libxt_ipp2p
2008-04-08 20:34:05 +02:00
Jan Engelhardt
01df89eb8b
ipp2p: enable experimental data stream analyzers
...
(get rid of "function unused" warnings)
2008-04-08 20:34:05 +02:00
Jan Engelhardt
a1d307e336
ipp2p: internally simplify selecting protocol searches
2008-04-08 20:34:05 +02:00
Jan Engelhardt
0712d0fdca
ipp2p: guard against potential unaligned access
...
get_u16() and get_u32() may get passed unaligned pointers;
let's play it safe.
2008-04-08 20:34:05 +02:00
Jan Engelhardt
3c8131b976
ipp2p: use auxiliary skb functions
2008-04-08 20:34:04 +02:00
Jan Engelhardt
569643ac8c
ipp2p: static and const annotations, type usage
2008-04-08 20:34:04 +02:00
Jan Engelhardt
cc23d0a2e7
ipp2p: fix match function signature
2008-04-08 20:34:04 +02:00
Jan Engelhardt
c237fe2486
ipp2p: adhere to codingstyle
2008-04-08 20:34:04 +02:00
Jan Engelhardt
edcbcee84e
ipp2p: remove compat and obsolete code
2008-04-08 20:34:04 +02:00
Jan Engelhardt
44d6f47ad6
ipp2p: import 20080304 code base
2008-04-08 20:34:03 +02:00
Jan Engelhardt
e304252f4b
condition: greatly improve processing speed
...
Replace the loop over all possible condvars by a simple deref. This
changes the runtime from O(n) to O(1) at the expense of only 8 bytes
for rule.
2008-04-08 11:58:35 +02:00
Jan Engelhardt
32f06cbedf
condition: squash variables
2008-04-08 11:58:35 +02:00
Jan Engelhardt
75f6f14aaf
condition: remove support for nonstandard inversion
2008-04-08 11:58:34 +02:00
Jan Engelhardt
7dd8b1a678
condition: reenable IPv6 support in userspace extension
2008-04-08 11:58:34 +02:00
Jan Engelhardt
f5f17a27c5
condition: style cleanup
2008-04-08 11:58:34 +02:00
Jan Engelhardt
c9579115c3
condition: rework condvar name check
...
Use memchr() instead of a for loop to detect '/' in the condvar name.
Also unconditionally disallow names starting with a dot.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
586353342f
condition: use appropriate types and return values
2008-04-08 11:58:34 +02:00
Jan Engelhardt
317a944fec
condition: use unique symbol names and rewrite init function
...
Use an array of xt_match for the match vtable.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
24dad368dd
condition: use new structure type
...
Use __u8 for the invert flag instead of int. Reduce CONDITION_NAME_LEN
from 32 to 31 so that the entire structure can fit into a cacheline.
2008-04-08 11:58:34 +02:00
Jan Engelhardt
7d0efafdb3
condition: remove casts, add const qualifiers
2008-04-08 11:58:33 +02:00
Jan Engelhardt
330c1fe783
condition: remove version #ifs and compat selectors
2008-04-08 11:58:33 +02:00
Jan Engelhardt
72dc73e6a5
condition: import 20080125 code base
2008-04-08 11:58:33 +02:00
Jan Engelhardt
d7c5473cf6
LOGMARK: fix comma output in ctstatus= list
2008-04-08 11:51:24 +02:00
Jan Engelhardt
0ee80e4147
LOGMARK: add hook= and ctdir= fields
2008-04-08 11:49:45 +02:00
Jan Engelhardt
9778022c37
compat: add ipv6_hdr
2008-04-08 11:33:26 +02:00
Jan Engelhardt
2f6bc4c8cb
TEE: reenable header_ops check
2008-04-07 08:44:25 +02:00
Jan Engelhardt
5fbc01b991
compat: add check for pskb relocation
...
The Xtables-addons compat layer does not support pskb relocation
(result of possible memory allocation in kernels before 2.6.24) and
we just assume it does not happen. Add a check to warn if relocation
did happen and packet loss is to be expected.
2008-04-01 09:12:38 +02:00
Jan Engelhardt
b749916313
ECHO: Catch skb_linearize out-of-memory condition
2008-03-31 06:40:29 +02:00
Jan Engelhardt
818cd3b47e
Makefile: support building multiple files with one config option
2008-03-26 08:11:04 +01:00
Jan Engelhardt
8302faad44
TEE: fix address copying bug
2008-03-24 16:56:18 +01:00
Jan Engelhardt
8fa47480f8
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
Jan Engelhardt
cd323565d7
Merge reworked geoip extension
2008-03-22 05:16:53 +01:00
Jan Engelhardt
a39bfdf98e
Add xt_ECHO sample target
2008-03-22 05:16:47 +01:00
Jan Engelhardt
cd7c8fc4fa
geoip: minor cleanups in help, opts and logic
2008-03-22 03:59:58 +01:00
Jan Engelhardt
5d431b45f1
geoip: use simpler, preprocessed integer vector lists and fix endian issue
...
The old database format was in unknown byteorder -- if you run the
converter program yourself, you got a host order file, but if you
downloaded the preprocessed DB file (geoipdb.bin), you got a
little-endian file.
Use a new database format. Instead of having an index and a DB file,
do away with the index and let the filesystem do the indexing, using
one file per country. Also access the database files with a known
endianess type. The converter script now produces two distinct
variants (especially needed for IA-64).
All of this reduces the touched code by half.
2008-03-22 03:59:57 +01:00
