summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* extensions: Add string filter to ebtablesBernie Harris2018-04-272-1/+320
| | | | | | | | | | | | | | | | | | | | This patch is part of a proposal to add a string filter to ebtables, which would be similar to the string filter in iptables. Like iptables, the ebtables filter uses the xt_string module, however some modifications have been made for this to work correctly. Currently ebtables assumes that the revision number of all match modules is 0. The xt_string module doesn't register a match with revision 0 so the solution is to modify ebtables to allow extensions to specify a revision number, similar to iptables. This gets passed down to the kernel, which is then able to find the match module correctly. Signed-off-by: Bernie Harris <bernie.harris@alliedtelesis.co.nz> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* ebt_ip: add support for matching IGMP typeMatthias Schiffer2018-04-111-1/+43
| | | | | | | | | | | | We already have ICMPv6 type/code matches (which can be used to distinguish different types of MLD packets). Add support for IPv4 IGMP matches in the same way. To reuse as much code as possible, the ICMP type/code handling functions are extended to allow passing a NULL code range. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* ebt_ip: add support for matching ICMP type and codeMatthias Schiffer2018-04-111-2/+94
| | | | | | | | We already have ICMPv6 type/code matches. This adds support for IPv4 ICMP matches in the same way. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Move ICMP type handling functions from ebt_ip6 to useful_functions.cMatthias Schiffer2018-04-111-156/+9
| | | | | | | Allow using these functions for ebt_ip as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* ebtables: extensions: Constify option structGargi Sharma2017-03-2818-20/+20
| | | | | | | | | The struct of the type option is only used to initialise a field inside the ebt_u_watcher or ebt_u_target or ebt_u_match struct and is not modified anywhere. Signed-off-by: Gargi Sharma <gs051095@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* extensions: Use stdint typesFelix Janda2015-05-212-7/+7
| | | | | Signed-off-by: Felix Janda <felix.janda@posteo.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* don't print IPv6 mask if it's all ones (based on patch by Mariusz Mazur ↵Bart De Schuymer2014-04-141-2/+2
| | | | <mmazur at axeos.com>)
* workaround for kernel regression bug: IPv6 source/destination addresses are ↵Luis Fernando2013-07-031-0/+4
| | | | potentially not matched correctly
* respect LDFLAGS (Peter Volkov)Bart De Schuymer2011-08-111-1/+1
|
* small changes to remove warnings when optimization is on (thanks to Peter ↵Bart De Schuymer2011-08-111-4/+4
| | | | Volkov)
* remove irrelevant negative value check for the result of strtoul, found by ↵Bart De Schuymer2011-06-231-7/+0
| | | | Coverity static analysis (thanks to Jiri Popelka)
* free possible memory leak found by Coverity static analysis (Jiri Popelka)Bart De Schuymer2011-06-231-0/+2
|
* extend ebt_ip6 to allow matching on ipv6-icmp types/codes (by Florian Westphal)Bart De Schuymer2011-01-181-2/+225
|
* put include of ebtables_u.h higher so that __EXPORTED_HEADERS__ is definedBart De Schuymer2010-12-183-3/+3
|
* fix --among-dst-file, which translated into --among-src (reported by Thierry ↵Bart De Schuymer2010-04-221-1/+1
| | | | Watelet)
* add LDFLAGS (Peter Volkov)Bart De Schuymer2010-03-161-1/+1
|
* fix simple regressionBart De Schuymer2009-06-211-1/+1
|
* prevent source code corruption with static build (reported by Tino Keitel)Bart De Schuymer2009-02-121-2/+2
|
* make string_to_number() staticBart De Schuymer2009-02-121-1/+1
|
* add nflog to the build processBart De Schuymer2009-02-121-1/+1
|
* add ebtables nflog support (Peter Warasin)Bart De Schuymer2008-03-171-0/+179
|
* fix for x86-64 (reported by Pavel Emelyanov)Bart De Schuymer2008-03-041-11/+13
|
* Kuo-Lang Tseng et al: add ipv6 supportBart De Schuymer2008-02-213-1/+353
|
* Jan Engelhardt: remove unneedd macroBart De Schuymer2008-02-0316-17/+17
|
* add gratuitous arp filteringBart De Schuymer2007-03-281-3/+18
|
* *** empty log message ***Bart De Schuymer2006-12-221-0/+1
|
* add --snat-arpBart De Schuymer2006-12-151-5/+18
|
* remove magic number -16Bart De Schuymer2006-12-151-7/+7
|
* shared libraries need fPICBart De Schuymer2006-12-141-2/+2
|
* always show targetBart De Schuymer2006-10-121-2/+0
|
* add --mark-or, --mark-xor and --mark-and support for mark targetBart De Schuymer2006-10-031-12/+62
|
* allow list taken from a file for among matchBart De Schuymer2006-08-171-4/+43
|
* deal with multiple declaration of _initBart De Schuymer2006-08-171-2/+2
|
* remove unsigned char * warning with gcc 4.0Bart De Schuymer2006-01-234-10/+14
|
* allow SCTP/DCCP (Patrick McHardy)Bart De Schuymer2006-01-231-5/+8
|
* disallow "Bart De Schuymer2005-09-261-0/+2
|
* make array of chainsBart De Schuymer2005-08-271-2/+1
|
* fix --ulogBart De Schuymer2005-07-241-1/+1
|
* use ebt_check_option2Bart De Schuymer2005-02-141-1/+1
|
* general cleanup + add -C and -cBart De Schuymer2005-02-0820-501/+435
|
* add ebtablesu scheme, along with general cleanupBart De Schuymer2005-01-193-16/+13
|
* make range specification like -pBart De Schuymer2004-12-211-52/+77
|
* prefer mark-set over set-markBart De Schuymer2004-12-051-2/+5
|
* add ulog watcherBart De Schuymer2004-11-202-1/+185
|
* fix -D --arp-mac-srcBart De Schuymer2004-09-041-4/+4
|
* add shared librariesBart De Schuymer2004-01-2119-152/+157
|
* Make ebtables library functionsBart De Schuymer2004-01-1418-219/+102
|
* *** empty log message ***Bart De Schuymer2003-11-021-1/+3
|
* *** empty log message ***Bart De Schuymer2003-10-121-2/+2
|
* *** empty log message ***Bart De Schuymer2003-10-121-1/+1
|