Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | print mark & mark mask in hex rather then decimal | Vytas Dauksa | 2014-01-23 | 1 | -1/+1 |
| | | | | | | | modified ipset_print_mark to print in hex rather then decimal and altered accordingly test cases. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | add markmask for hash:ip,mark data type | Vytas Dauksa | 2014-01-23 | 1 | -1/+1 |
| | | | | | | | | | Introduce packet mark mask for hash:ip,mark data type. This allows to set mark bit filter for the ip set. Change-Id: Id8dd9ca7e64477c4f7b022a1d9c1a5b187f1c96e Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | add hash:ip,mark data type to ipset | Vytas Dauksa | 2014-01-08 | 1 | -0/+6 |
Introduce packet mark support with new ip,mark hash set. This includes userspace and kernelspace code, hash:ip,mark set tests and man page updates. The intended use of ip,mark set is similar to the ip:port type, but for protocols which don't use a predictable port number. Instead of port number it matches a firewall mark determined by a layer 7 filtering program like opendpi. As well as allowing or blocking traffic it will also be used for accounting packets and bytes sent for each protocol. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> |