linux-stable.git/include/linux/netfilter/ipset, branch v3.13

netfilter: ipset: Use netlink callback dump args only

2013-10-22T08:13:59+00:00

Instead of cb->data, use callback dump args only and introduce symbolic
names instead of plain numbers at accessing the argument members.

Signed-off-by: Jozsef Kadlecsik 
Signed-off-by: Pablo Neira Ayuso

netfiler: ipset: Add net namespace for ipset

2013-09-30T19:42:52+00:00

This patch adds netns support for ipset.

Major changes were made in ip_set_core.c and ip_set.h.
Global variables are moved to per net namespace.
Added initialization code and the destruction of the network namespace ipset subsystem.
In the prototypes of public functions ip_set_* added parameter "struct net*".

The remaining corrections related to the change prototypes of public functions ip_set_*.

The patch for git://git.netfilter.org/ipset.git commit 6a4ec96c0b8caac5c35474e40e319704d92ca347

Signed-off-by: Vitaly Lavrov 
Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Use a common function at listing the extensions

2013-09-30T19:42:36+00:00

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Support comments for ipset entries in the core.

2013-09-30T19:33:28+00:00

This adds the core support for having comments on ipset entries.

The comments are stored as standard null-terminated strings in
dynamically allocated memory after being passed to the kernel. As a
result of this, code has been added to the generic destroy function to
iterate all extensions and call that extension's destroy task if the set
has that extension activated, and if such a task is defined.

Signed-off-by: Oliver Smith 
Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Support extensions which need a per data destroy function

2013-09-30T19:33:27+00:00

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Generalize extensions support

2013-09-30T19:33:27+00:00

Get rid of the structure based extensions and introduce a blob for
the extensions. Thus we can support more extension types easily.

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Move extension data to set structure

2013-09-30T19:33:27+00:00

Default timeout and extension offsets are moved to struct set, because
all set types supports all extensions and it makes possible to generalize
extension support.

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Rename extension offset ids to extension ids

2013-09-30T19:33:27+00:00

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Prepare ipset to support multiple networks for hash types

2013-09-30T19:33:26+00:00

In order to support hash:net,net, hash:net,port,net etc. types,
arrays are introduced for the book-keeping of existing cidr sizes
and network numbers in a set.

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Use fix sized type for timeout in the extension part

2013-09-30T19:33:26+00:00

Signed-off-by: Jozsef Kadlecsik