linux.git/include/linux/netfilter_ipv4, branch v2.6.39

netfilter: xtables: add missing header inclusions for headers_check

2011-01-20T16:50:17+00:00

Resolve these warnings on `make headers_check`:

usr/include/linux/netfilter/xt_CT.h:7: found __[us]{8,16,32,64} type
without #include 
...

Signed-off-by: Jan Engelhardt

netfilter: xtables: use __uXX guarded types for userspace exports

2011-01-18T06:33:09+00:00

Signed-off-by: Jan Engelhardt

netfilter: xtables: remove unused defines

2010-10-13T16:00:51+00:00

Signed-off-by: Jan Engelhardt

netfilter: xtables: unify {ip,ip6,arp}t_error_target

2010-10-13T16:00:50+00:00

Unification of struct *_error_target was forgotten in
v2.6.16-1689-g1e30a01.

Signed-off-by: Jan Engelhardt

netfilter: xtables: resolve indirect macros 3/3

2010-10-13T16:00:46+00:00

netfilter: xtables: resolve indirect macros 2/3

2010-10-13T16:00:41+00:00

Signed-off-by: Jan Engelhardt

netfilter: xtables: resolve indirect macros 1/3

2010-10-13T16:00:36+00:00

Many of the used macros are just there for userspace compatibility.
Substitute the in-kernel code to directly use the terminal macro
and stuff the defines into #ifndef __KERNEL__ sections.

Signed-off-by: Jan Engelhardt

include: replace unifdef-y with header-y

2010-08-14T20:26:51+00:00

unifdef-y and header-y has same semantic.
So there is no need to have both.

Drop the unifdef-y variant and sort all lines again

Signed-off-by: Sam Ravnborg

netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header

2010-06-28T12:16:08+00:00

The LOG targets print the entire MAC header as one long string, which is not
readable very well:

IN=eth0 OUT= MAC=00:15:f2:24:91:f8:00:1b:24:dc:61:e6:08:00 ...

Add an option to decode known header formats (currently just ARPHRD_ETHER devices)
in their individual fields:

IN=eth0 OUT= MACSRC=00:1b:24:dc:61:e6 MACDST=00:15:f2:24:91:f8 MACPROTO=0800 ...
IN=eth0 OUT= MACSRC=00:1b:24:dc:61:e6 MACDST=00:15:f2:24:91:f8 MACPROTO=86dd ...

The option needs to be explicitly enabled by userspace to avoid breaking
existing parsers.

Signed-off-by: Patrick McHardy

netfilter: xtables: replace XT_MATCH_ITERATE macro

2010-02-24T17:34:48+00:00

The macro is replaced by a list.h-like foreach loop. This makes
the code more inspectable.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy