From 1d1ad90494bf909871c233e76036b18841949c9e Mon Sep 17 00:00:00 2001 From: Patrick McHardy Date: Wed, 5 Sep 2007 13:58:58 +0000 Subject: Build ipv6header match unconditionally --- extensions/.ipv6header-test6 | 2 -- extensions/Makefile | 2 +- include/linux/netfilter_ipv6/ip6t_ipv6header.h | 27 ++++++++++++++++++++++++++ 3 files changed, 28 insertions(+), 3 deletions(-) delete mode 100755 extensions/.ipv6header-test6 create mode 100644 include/linux/netfilter_ipv6/ip6t_ipv6header.h diff --git a/extensions/.ipv6header-test6 b/extensions/.ipv6header-test6 deleted file mode 100755 index 47f6f06c..00000000 --- a/extensions/.ipv6header-test6 +++ /dev/null @@ -1,2 +0,0 @@ -#!/bin/sh -[ -f $KERNEL_DIR/net/ipv6/netfilter/ip6t_ipv6header.c -a -f $KERNEL_DIR/include/linux/netfilter_ipv6/ip6t_ipv6header.h ] && echo ipv6header diff --git a/extensions/Makefile b/extensions/Makefile index 13e84ab5..214a45e8 100644 --- a/extensions/Makefile +++ b/extensions/Makefile @@ -6,7 +6,7 @@ # package (HW) # PF_EXT_SLIB:=ah addrtype conntrack ecn icmp iprange owner policy realm recent tos ttl unclean CLUSTERIP DNAT ECN LOG MASQUERADE MIRROR NETMAP REDIRECT REJECT SAME SNAT TOS TTL ULOG -PF6_EXT_SLIB:=ah eui64 frag hl icmp6 mh owner policy HL LOG REJECT +PF6_EXT_SLIB:=ah eui64 frag hl icmp6 ipv6header mh owner policy HL LOG REJECT PFX_EXT_SLIB:=connbytes connmark connlimit comment dccp dscp esp hashlimit helper length limit mac mark multiport physdev pkttype quota sctp state statistic standard string tcp tcpmss udp CLASSIFY CONNMARK DSCP MARK NFLOG NFQUEUE NOTRACK TCPMSS TRACE ifeq ($(DO_SELINUX), 1) diff --git a/include/linux/netfilter_ipv6/ip6t_ipv6header.h b/include/linux/netfilter_ipv6/ip6t_ipv6header.h new file mode 100644 index 00000000..51c53fc9 --- /dev/null +++ b/include/linux/netfilter_ipv6/ip6t_ipv6header.h @@ -0,0 +1,27 @@ +/* ipv6header match - matches IPv6 packets based +on whether they contain certain headers */ + +/* Original idea: Brad Chapman + * Rewritten by: Andras Kis-Szabo */ + + +#ifndef __IPV6HEADER_H +#define __IPV6HEADER_H + +struct ip6t_ipv6header_info +{ + u_int8_t matchflags; + u_int8_t invflags; + u_int8_t modeflag; +}; + +#define MASK_HOPOPTS 128 +#define MASK_DSTOPTS 64 +#define MASK_ROUTING 32 +#define MASK_FRAGMENT 16 +#define MASK_AH 8 +#define MASK_ESP 4 +#define MASK_NONE 2 +#define MASK_PROTO 1 + +#endif /* __IPV6HEADER_H */ -- cgit v1.2.3