linux.git/net/netfilter/xt_hashlimit.c, branch v3.5

netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bits

2012-05-16T22:56:31+00:00

David Miller says:
     The canonical way to validate if the set bits are in a valid
     range is to have a "_ALL" macro, and test:
     if (val & ~XT_HASHLIMIT_ALL)
         goto err;"

make it so.

Signed-off-by: Florian Westphal 
Signed-off-by: Pablo Neira Ayuso

net: Convert net_ratelimit uses to net__ratelimited

2012-05-15T17:45:03+00:00

Standardize the net core ratelimited logging functions.

Coalesce formats, align arguments.
Change a printk then vprintk sequence to use printf extension %pV.

Signed-off-by: Joe Perches 
Signed-off-by: David S. Miller

netfilter: hashlimit: byte-based limit mode

2012-05-09T11:04:57+00:00

can be used e.g. for ingress traffic policing or
to detect when a host/port consumes more bandwidth than expected.

This is done by optionally making cost to mean
"cost per 16-byte-chunk-of-data" instead of "cost per packet".

Signed-off-by: Florian Westphal 
Signed-off-by: Pablo Neira Ayuso

netfilter: hashlimit: move rateinfo initialization to helper

2012-05-09T10:54:06+00:00

followup patch would bloat main match function too much.

Signed-off-by: Florian Westphal 
Signed-off-by: Pablo Neira Ayuso

netfilter: limit, hashlimit: avoid duplicated inline

2012-05-09T10:54:06+00:00

credit_cap can be set to credit, which avoids inlining user2credits
twice. Also, remove inline keyword and let compiler decide.

old:
    684     192       0     876     36c net/netfilter/xt_limit.o
   4927     344      32    5303    14b7 net/netfilter/xt_hashlimit.o
now:
    668     192       0     860     35c net/netfilter/xt_limit.o
   4793     344      32    5169    1431 net/netfilter/xt_hashlimit.o

Signed-off-by: Florian Westphal 
Signed-off-by: Pablo Neira Ayuso

netfilter: xt_hashlimit: fix unused variable warning if IPv6 disabled

2012-01-16T12:40:54+00:00

Fixes this warning when CONFIG_IP6_NF_IPTABLES is not enabled:

net/netfilter/xt_hashlimit.c: In function ‘hashlimit_init_dst’:
net/netfilter/xt_hashlimit.c:448:9: warning: unused variable ‘frag_off’ [-Wunused-variable]

Signed-off-by: Stephen Rothwell 
Signed-off-by: Pablo Neira Ayuso

net:netfilter: use IS_ENABLED

2011-12-16T20:49:52+00:00

Use IS_ENABLED(CONFIG_FOO)
instead of defined(CONFIG_FOO) || defined (CONFIG_FOO_MODULE)

Signed-off-by: Igor Maravić 
Signed-off-by: David S. Miller

ipv6: Add fragment reporting to ipv6_skip_exthdr().

2011-12-03T17:35:10+00:00

While parsing through IPv6 extension headers, fragment headers are
skipped making them invisible to the caller.  This reports the
fragment offset of the last header in order to make it possible to
determine whether the packet is fragmented and, if so whether it is
a first or last fragment.

Signed-off-by: Jesse Gross

netfilter: Remove unnecessary OOM logging messages

2011-11-01T08:19:49+00:00

Site specific OOM messages are duplications of a generic MM
out of memory message and aren't really useful, so just
delete them.

Signed-off-by: Joe Perches 
Signed-off-by: Patrick McHardy 
Signed-off-by: Pablo Neira Ayuso

netfilter: xt_hashlimit: use proto_ports_offset() to support AH message

2010-08-20T00:16:25+00:00

Signed-off-by: Changli Gao 
Signed-off-by: David S. Miller