Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | extensions: Add string filter to ebtables | Bernie Harris | 2018-04-27 | 2 | -1/+320 |
| | | | | | | | | | | | | | | | | | | | | This patch is part of a proposal to add a string filter to ebtables, which would be similar to the string filter in iptables. Like iptables, the ebtables filter uses the xt_string module, however some modifications have been made for this to work correctly. Currently ebtables assumes that the revision number of all match modules is 0. The xt_string module doesn't register a match with revision 0 so the solution is to modify ebtables to allow extensions to specify a revision number, similar to iptables. This gets passed down to the kernel, which is then able to find the match module correctly. Signed-off-by: Bernie Harris <bernie.harris@alliedtelesis.co.nz> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | ebt_ip: add support for matching IGMP type | Matthias Schiffer | 2018-04-11 | 1 | -1/+43 |
| | | | | | | | | | | | | We already have ICMPv6 type/code matches (which can be used to distinguish different types of MLD packets). Add support for IPv4 IGMP matches in the same way. To reuse as much code as possible, the ICMP type/code handling functions are extended to allow passing a NULL code range. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | ebt_ip: add support for matching ICMP type and code | Matthias Schiffer | 2018-04-11 | 1 | -2/+94 |
| | | | | | | | | We already have ICMPv6 type/code matches. This adds support for IPv4 ICMP matches in the same way. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | Move ICMP type handling functions from ebt_ip6 to useful_functions.c | Matthias Schiffer | 2018-04-11 | 1 | -156/+9 |
| | | | | | | | Allow using these functions for ebt_ip as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | ebtables: extensions: Constify option struct | Gargi Sharma | 2017-03-28 | 18 | -20/+20 |
| | | | | | | | | | The struct of the type option is only used to initialise a field inside the ebt_u_watcher or ebt_u_target or ebt_u_match struct and is not modified anywhere. Signed-off-by: Gargi Sharma <gs051095@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | extensions: Use stdint types | Felix Janda | 2015-05-21 | 2 | -7/+7 |
| | | | | | Signed-off-by: Felix Janda <felix.janda@posteo.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | don't print IPv6 mask if it's all ones (based on patch by Mariusz Mazur ↵ | Bart De Schuymer | 2014-04-14 | 1 | -2/+2 |
| | | | | <mmazur at axeos.com>) | ||||
* | workaround for kernel regression bug: IPv6 source/destination addresses are ↵ | Luis Fernando | 2013-07-03 | 1 | -0/+4 |
| | | | | potentially not matched correctly | ||||
* | respect LDFLAGS (Peter Volkov) | Bart De Schuymer | 2011-08-11 | 1 | -1/+1 |
| | |||||
* | small changes to remove warnings when optimization is on (thanks to Peter ↵ | Bart De Schuymer | 2011-08-11 | 1 | -4/+4 |
| | | | | Volkov) | ||||
* | remove irrelevant negative value check for the result of strtoul, found by ↵ | Bart De Schuymer | 2011-06-23 | 1 | -7/+0 |
| | | | | Coverity static analysis (thanks to Jiri Popelka) | ||||
* | free possible memory leak found by Coverity static analysis (Jiri Popelka) | Bart De Schuymer | 2011-06-23 | 1 | -0/+2 |
| | |||||
* | extend ebt_ip6 to allow matching on ipv6-icmp types/codes (by Florian Westphal) | Bart De Schuymer | 2011-01-18 | 1 | -2/+225 |
| | |||||
* | put include of ebtables_u.h higher so that __EXPORTED_HEADERS__ is defined | Bart De Schuymer | 2010-12-18 | 3 | -3/+3 |
| | |||||
* | fix --among-dst-file, which translated into --among-src (reported by Thierry ↵ | Bart De Schuymer | 2010-04-22 | 1 | -1/+1 |
| | | | | Watelet) | ||||
* | add LDFLAGS (Peter Volkov) | Bart De Schuymer | 2010-03-16 | 1 | -1/+1 |
| | |||||
* | fix simple regression | Bart De Schuymer | 2009-06-21 | 1 | -1/+1 |
| | |||||
* | prevent source code corruption with static build (reported by Tino Keitel) | Bart De Schuymer | 2009-02-12 | 1 | -2/+2 |
| | |||||
* | make string_to_number() static | Bart De Schuymer | 2009-02-12 | 1 | -1/+1 |
| | |||||
* | add nflog to the build process | Bart De Schuymer | 2009-02-12 | 1 | -1/+1 |
| | |||||
* | add ebtables nflog support (Peter Warasin) | Bart De Schuymer | 2008-03-17 | 1 | -0/+179 |
| | |||||
* | fix for x86-64 (reported by Pavel Emelyanov) | Bart De Schuymer | 2008-03-04 | 1 | -11/+13 |
| | |||||
* | Kuo-Lang Tseng et al: add ipv6 support | Bart De Schuymer | 2008-02-21 | 3 | -1/+353 |
| | |||||
* | Jan Engelhardt: remove unneedd macro | Bart De Schuymer | 2008-02-03 | 16 | -17/+17 |
| | |||||
* | add gratuitous arp filtering | Bart De Schuymer | 2007-03-28 | 1 | -3/+18 |
| | |||||
* | *** empty log message *** | Bart De Schuymer | 2006-12-22 | 1 | -0/+1 |
| | |||||
* | add --snat-arp | Bart De Schuymer | 2006-12-15 | 1 | -5/+18 |
| | |||||
* | remove magic number -16 | Bart De Schuymer | 2006-12-15 | 1 | -7/+7 |
| | |||||
* | shared libraries need fPIC | Bart De Schuymer | 2006-12-14 | 1 | -2/+2 |
| | |||||
* | always show target | Bart De Schuymer | 2006-10-12 | 1 | -2/+0 |
| | |||||
* | add --mark-or, --mark-xor and --mark-and support for mark target | Bart De Schuymer | 2006-10-03 | 1 | -12/+62 |
| | |||||
* | allow list taken from a file for among match | Bart De Schuymer | 2006-08-17 | 1 | -4/+43 |
| | |||||
* | deal with multiple declaration of _init | Bart De Schuymer | 2006-08-17 | 1 | -2/+2 |
| | |||||
* | remove unsigned char * warning with gcc 4.0 | Bart De Schuymer | 2006-01-23 | 4 | -10/+14 |
| | |||||
* | allow SCTP/DCCP (Patrick McHardy) | Bart De Schuymer | 2006-01-23 | 1 | -5/+8 |
| | |||||
* | disallow " | Bart De Schuymer | 2005-09-26 | 1 | -0/+2 |
| | |||||
* | make array of chains | Bart De Schuymer | 2005-08-27 | 1 | -2/+1 |
| | |||||
* | fix --ulog | Bart De Schuymer | 2005-07-24 | 1 | -1/+1 |
| | |||||
* | use ebt_check_option2 | Bart De Schuymer | 2005-02-14 | 1 | -1/+1 |
| | |||||
* | general cleanup + add -C and -c | Bart De Schuymer | 2005-02-08 | 20 | -501/+435 |
| | |||||
* | add ebtablesu scheme, along with general cleanup | Bart De Schuymer | 2005-01-19 | 3 | -16/+13 |
| | |||||
* | make range specification like -p | Bart De Schuymer | 2004-12-21 | 1 | -52/+77 |
| | |||||
* | prefer mark-set over set-mark | Bart De Schuymer | 2004-12-05 | 1 | -2/+5 |
| | |||||
* | add ulog watcher | Bart De Schuymer | 2004-11-20 | 2 | -1/+185 |
| | |||||
* | fix -D --arp-mac-src | Bart De Schuymer | 2004-09-04 | 1 | -4/+4 |
| | |||||
* | add shared libraries | Bart De Schuymer | 2004-01-21 | 19 | -152/+157 |
| | |||||
* | Make ebtables library functions | Bart De Schuymer | 2004-01-14 | 18 | -219/+102 |
| | |||||
* | *** empty log message *** | Bart De Schuymer | 2003-11-02 | 1 | -1/+3 |
| | |||||
* | *** empty log message *** | Bart De Schuymer | 2003-10-12 | 1 | -2/+2 |
| | |||||
* | *** empty log message *** | Bart De Schuymer | 2003-10-12 | 1 | -1/+1 |
| |