Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Manpage typing error correction (reported by Husnu Demir) | Jozsef Kadlecsik | 2013-05-02 | 1 | -2/+2 |
| | |||||
* | Update testsuite as the trailing space was eliminated at listings | Jozsef Kadlecsik | 2013-05-02 | 86 | -108/+108 |
| | |||||
* | Use fix sized type for timeout in the extension part | Jozsef Kadlecsik | 2013-05-02 | 1 | -1/+1 |
| | |||||
* | Add sparse checking support to userspace | Jozsef Kadlecsik | 2013-05-02 | 5 | -3/+26 |
| | |||||
* | Improve XML output: add element tag and root element (suggested by Lucas Hamie) | Jozsef Kadlecsik | 2013-05-01 | 1 | -33/+38 |
| | |||||
* | Make sure kernel configured properly for sparse checkings | Jozsef Kadlecsik | 2013-05-01 | 1 | -0/+6 |
| | |||||
* | Fix "may be used uninitialized" warnings | Jozsef Kadlecsik | 2013-05-01 | 9 | -12/+12 |
| | | | | Reported-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | Rename simple macro names to avoid namespace issues. | Jozsef Kadlecsik | 2013-05-01 | 14 | -162/+169 |
| | | | | Reported-by: David Laight <David.Laight@ACULAB.COM> | ||||
* | Fix sparse warnings due to missing rcu annotations | Jozsef Kadlecsik | 2013-04-30 | 1 | -32/+55 |
| | | | | Reported-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | Sparse warning about shadowed variable fixed | Jozsef Kadlecsik | 2013-04-30 | 1 | -1/+1 |
| | | | | | net/netfilter/ipset/ip_set_hash_ipportnet.c:275:20: warning: symbol 'cidr' shadows an earlier one | ||||
* | Don't call ip_nest_end needlessly in the error path | Jozsef Kadlecsik | 2013-04-27 | 3 | -3/+3 |
| | | | | Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org> | ||||
* | Manpage updates | Jozsef Kadlecsik | 2013-04-09 | 1 | -52/+79 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Add new testsuite entries to verify counters and the new type implementations | Jozsef Kadlecsik | 2013-04-09 | 24 | -8/+1156 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Introduce the new set type revisions with counter support | Jozsef Kadlecsik | 2013-04-09 | 11 | -103/+1560 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Support counters in the ipset library | Jozsef Kadlecsik | 2013-04-09 | 10 | -8/+128 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | set match: add support to match the counters | Jozsef Kadlecsik | 2013-04-09 | 6 | -9/+120 |
| | | | | | | | | | | The new revision of the set match supports to match the counters and to suppress updating the counters at matching too. At the set:list types, the updating of the subcounters can be suppressed as well. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | The list:set type with counter support | Jozsef Kadlecsik | 2013-04-09 | 1 | -6/+67 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | The hash types with counter support | Jozsef Kadlecsik | 2013-04-09 | 8 | -19/+381 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | The bitmap types with counter support | Jozsef Kadlecsik | 2013-04-09 | 4 | -15/+186 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Introduce the counter extension in the core | Jozsef Kadlecsik | 2013-04-09 | 3 | -4/+86 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | list:set type using the extension interface | Jozsef Kadlecsik | 2013-04-09 | 1 | -246/+301 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Hash types using the unified code base | Jozsef Kadlecsik | 2013-04-09 | 7 | -1865/+610 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Unified hash type generation | Jozsef Kadlecsik | 2013-04-09 | 2 | -1241/+1039 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Bitmap types using the unified code base | Jozsef Kadlecsik | 2013-04-09 | 3 | -954/+316 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Unified bitmap type generation | Jozsef Kadlecsik | 2013-04-09 | 2 | -0/+271 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Introduce extensions to elements in the core | Jozsef Kadlecsik | 2013-04-09 | 4 | -110/+86 |
| | | | | | | | Introduce extensions to elements in the core and prepare timeout as the first one. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Move often used IPv6 address masking function to header file | Jozsef Kadlecsik | 2013-04-09 | 6 | -45/+9 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Make possible to test elements marked with nomatch, from userspace | Jozsef Kadlecsik | 2013-04-09 | 5 | -24/+40 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | netfilter ipset: Use ipv6_addr_equal() where appropriate. | YOSHIFUJI Hideaki | 2013-04-09 | 7 | -9/+9 |
| | | | | | | Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Add a compatibility header file for easier maintenance | Jozsef Kadlecsik | 2013-04-09 | 6 | -78/+101 |
| | | | | | | | Unfortunately not everything could be moved there, there are still compatibility ifdefs in some other files. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | The uapi include split in the package itself | Jozsef Kadlecsik | 2013-04-09 | 15 | -294/+338 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Reorder modules a little bit in Kbuild | Jozsef Kadlecsik | 2013-04-09 | 1 | -2/+2 |
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | hash:*net*: nomatch flag not excluded on set resize | Jozsef Kadlecsik | 2013-04-09 | 5 | -11/+99 |
| | | | | | | | If a resize is triggered the nomatch flag is not excluded at hashing, which leads to the element missed at lookup in the resized set. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | list:set: update reference counter when last element pushed off | Jozsef Kadlecsik | 2013-04-09 | 1 | -3/+7 |
| | | | | | | | The last element can be replaced or pushed off and in both cases the reference counter must be updated. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | ipset 6.17 releasedv6.17 | Jozsef Kadlecsik | 2013-02-21 | 4 | -1/+22 |
| | |||||
* | The ipset_list tool is added | Jozsef Kadlecsik | 2013-02-21 | 3 | -0/+1096 |
| | | | | Source: http://sourceforge.net/projects/ipset-list | ||||
* | The ipset_bash_completion tool is added | Jozsef Kadlecsik | 2013-02-21 | 2 | -0/+418 |
| | | | | Source: http://sourceforge.net/projects/ipset-bashcompl | ||||
* | Interactive mode error after syntax error (reported by Mart Frauenlob) | Jozsef Kadlecsik | 2013-02-21 | 1 | -3/+8 |
| | | | | | | | | | | | | ipset> list foo ipset v6.16.1: The set with the given name does not exist ipset> -t No command specified ipset> list ipset v6.16.1: Internal protocol error In interactive mode the state was not cleaned up properly after a syntax error, fixed. | ||||
* | "Directory not empty" error message (reported by John Brendler) | Jozsef Kadlecsik | 2013-02-21 | 1 | -1/+2 |
| | | | | | | | | | When an entry flagged with "nomatch" was tested by ipset, it returned the error message "Kernel error received: Directory not empty" instead of "<element> is NOT in set <setname>". The internal error code was not properly transformed before returning to userspace, fixed. | ||||
* | netfilter: ipset: timeout values corrupted on set resize | Josh Hunt | 2013-02-21 | 1 | -1/+3 |
| | | | | | | | | | | | If a resize is triggered on a set with timeouts enabled, the timeout values will get corrupted when copying them to the new set. This occured b/c the wrong timeout value is supplied to type_pf_elem_tadd(). This also adds simple debug statement similar to the one in type_pf_resize(). Signed-off-by: Josh Hunt <johunt@akamai.com> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Fix error path when protocol number is used with port range | Jozsef Kadlecsik | 2013-01-09 | 1 | -1/+3 |
| | |||||
* | Correct "Suspicious condition (assignment + comparison)" (Thomas Jarosch) | Jozsef Kadlecsik | 2013-01-09 | 1 | -4/+3 |
| | | | | | cppcheck (vaguely) reported: [lib/parse.c:448]: (style) Suspicious condition (assignment + comparison); Clarify expression with parentheses. | ||||
* | Fix revision printing in XML mode (reported by Mart Frauenlob) | Jozsef Kadlecsik | 2013-01-09 | 1 | -1/+1 |
| | |||||
* | Make sure ip_set_max isn't set to IPSET_INVALID_ID | Jozsef Kadlecsik | 2012-11-27 | 1 | -1/+1 |
| | |||||
* | ipset 6.16.1 releasedv6.16.1 | Jozsef Kadlecsik | 2012-11-27 | 2 | -1/+5 |
| | |||||
* | Add ipset package version to external module description | Jozsef Kadlecsik | 2012-11-27 | 2 | -1/+8 |
| | |||||
* | Backport RCU handling up to 2.6.32.x | Jozsef Kadlecsik | 2012-11-27 | 1 | -0/+8 |
| | | | | __rcu and rcu_dereference_protected is missing from older kernel releases. | ||||
* | ipset 6.16 releasedv6.16 | Jozsef Kadlecsik | 2012-11-26 | 3 | -1/+10 |
| | |||||
* | Netlink pid is renamed to portid in kernel 3.7.0 | Jozsef Kadlecsik | 2012-11-26 | 1 | -10/+16 |
| | | | | | | Handle the renaming of the netlink_skb_parms structure member. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | ||||
* | Fix RCU handling when the number of maximal sets are increased | Jozsef Kadlecsik | 2012-11-26 | 1 | -83/+117 |
| | | | | | | Eric Dumazet spotted that RCU handling was far incomplete in the patch which added the support of increasing the number of maximal sets automatically. This patch completes the RCU handling of the ip_set_list array of the sets. |