linux.git/include/linux/netfilter_bridge, branch v2.6.27

netfilter: ebtables: add IPv6 support

2008-06-09T22:55:45+00:00

It implements matching functions for IPv6 address & traffic class
(merged from the patch sent by Jan Engelhardt [jengelh@computergmbh.de]
http://marc.info/?l=netfilter-devel&m=120182168424052&w=2), protocol,
and layer-4 port id. Corresponding watcher logging function is also
added for IPv6.

Signed-off-by: Kuo-lang Tseng 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: bridge: add ebt_nflog watcher

2008-04-14T09:15:54+00:00

This patch adds the ebtables nflog watcher to the kernel in order to
allow ebtables log through the nfnetlink_log backend.

Signed-off-by: Peter Warasin 
Signed-off-by: Patrick McHardy

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15T19:26:29+00:00

With all the users of the double pointers removed, this patch mops up by
finally replacing all occurances of sk_buff ** in the netfilter API by
sk_buff *.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NETFILTER]: ebt_arp: add gratuitous arp filtering

2007-04-26T05:28:58+00:00

The attached patch adds gratuitous arp filtering, more precisely: it
allows checking that the IPv4 source address matches the IPv4
destination address inside the ARP header. It also adds a check for the
hardware address type when matching MAC addresses (nothing critical,
just for better consistency).

Signed-off-by: Bart De Schuymer 
Acked-by: Carl-Daniel Hailfinger 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[SK_BUFF]: Introduce skb_mac_header()

2007-04-26T05:24:41+00:00

For the places where we need a pointer to the mac header, it is still legal to
touch skb->mac.raw directly if just adding to, subtracting from or setting it
to another layer header.

This one also converts some more cases to skb_reset_mac_header() that my
regex missed as it had no spaces before nor after '=', ugh.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[EBTABLES]: Split ebt_replace into user and kernel variants, annotate.

2006-12-03T05:32:05+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER]: ebtables: add --snap-arp option

2006-12-03T05:31:32+00:00

The attached patch adds --snat-arp support, which makes it possible to
change the source mac address in both the mac header and the arp header
with one rule.

Signed-off-by: Bart De Schuymer 
Signed-off-by: Patrick McHardy

[BRIDGE]: Annotations.

2006-12-03T05:22:56+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER]: ebt_mark: add or/and/xor action support to mark target

2006-10-04T07:30:57+00:00

The following patch adds or/and/xor functionality for the mark target,
while staying backwards compatible.

Signed-off-by: Bart De Schuymer 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[HEADERS] One line per header in Kbuild files to reduce conflicts

2006-09-19T11:43:58+00:00

Signed-off-by: David Woodhouse