summaryrefslogtreecommitdiffstats
path: root/kernel/net/netfilter/ipset/Kbuild
Commit message (Collapse)AuthorAgeFilesLines
* hash:mac type added to ipsetJozsef Kadlecsik2014-09-151-1/+1
|
* add hash:ip,mark data type to ipsetVytas Dauksa2014-01-081-1/+1
| | | | | | | | | | | | | | | | Introduce packet mark support with new ip,mark hash set. This includes userspace and kernelspace code, hash:ip,mark set tests and man page updates. The intended use of ip,mark set is similar to the ip:port type, but for protocols which don't use a predictable port number. Instead of port number it matches a firewall mark determined by a layer 7 filtering program like opendpi. As well as allowing or blocking traffic it will also be used for accounting packets and bytes sent for each protocol. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* Avoid clashing with configured kernel in [CONFIG_]IP_SET_MAXJozsef Kadlecsik2013-10-081-1/+1
|
* netfilter: ipset: Add hash:net,port,net module to kernel.Oliver Smith2013-09-301-1/+1
| | | | | | | | | This adds a new set that provides similar functionality to ip,port,net but permits arbitrary size subnets for both the first and last parameter. Signed-off-by: Oliver Smith <oliver@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* netfilter: ipset: Add hash:net,net module to kernel.Oliver Smith2013-09-201-0/+1
| | | | | | | | | | This adds a new set that provides the ability to configure pairs of subnets. A small amount of additional handling code has been added to the generic hash header file - this code is conditionally activated by a preprocessor definition. Signed-off-by: Oliver Smith <oliver@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* Reorder modules a little bit in KbuildJozsef Kadlecsik2013-04-091-2/+2
| | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* Invert the logic to include version.h in ip_set_core.cJozsef Kadlecsik2011-09-151-1/+1
|
* Fix compiling ipset as external kernel modulesJozsef Kadlecsik2011-09-061-1/+1
|
* hash:net,iface type introducedJozsef Kadlecsik2011-05-301-0/+1
| | | | | | | | | | The hash:net,iface type makes possible to store network address and interface name pairs in a set. It's mostly suitable for egress and ingress filtering. Examples: # ipset create test hash:net,iface # ipset add test 192.168.0.0/16,eth0 # ipset add test 192.168.0.0/24,eth1
* Reorganized kernel/ subdirJozsef Kadlecsik2011-02-031-0/+13
The kernel/ subdirectory is reorganized to follow the kernel directory structure.