linux.git/net/netfilter/xt_iprange.c, branch v2.6.28

netfilter: xt_iprange: fix range inversion match

2008-10-20T10:32:21+00:00

Inverted IPv4 v1 and IPv6 v0 matches don't match anything since 2.6.25-rc1!

Signed-off-by: Alexey Dobriyan 
Acked-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

netfilter: xtables: move extension arguments into compound structure (1/6)

2008-10-08T09:35:18+00:00

The function signatures for Xtables extensions have grown over time.
It involves a lot of typing/replication, and also a bit of stack space
even if they are not used. Realize an NFWS2008 idea and pack them into
structs. The skb remains outside of the struct so gcc can continue to
apply its optimizations.

This patch does this for match extensions' match functions.

A few ambiguities have also been addressed. The "offset" parameter for
example has been renamed to "fragoff" (there are so many different
offsets already) and "protoff" to "thoff" (there is more than just one
protocol here, so clarify).

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

netfilter: x_tables: use NFPROTO_* in extensions

2008-10-08T09:35:01+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

netfilter: xt_iprange: module aliases for xt_iprange

2008-05-14T06:27:48+00:00

Using iptables 1.3.8 with kernel 2.6.25, rules which include '-m
iprange' don't automatically pull in xt_iprange module.  Below patch
adds module aliases to fix that.  Patch against latest -git, but seems
like a good candidate for -stable also.

Signed-off-by: Phil Oester 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: xt_iprange: fix subtraction-based comparison

2008-02-20T01:20:06+00:00

The host address parts need to be converted to host-endian first
before arithmetic makes any sense on them.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: xt_iprange: add missing #include

2008-02-08T01:57:11+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: xt_iprange: fix typo in address family

2008-02-08T01:56:49+00:00

The family for iprange_mt4 should be AF_INET, not AF_INET6.
Noticed by Jiri Moravec .

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: xt_iprange: fix sparse warnings

2008-02-01T03:28:16+00:00

  CHECK   net/netfilter/xt_iprange.c
net/netfilter/xt_iprange.c:104:19: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:37: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:19: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:37: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:19: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:37: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:19: warning: restricted degrades to integer
net/netfilter/xt_iprange.c:104:37: warning: restricted degrades to integer

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: xt_iprange match, revision 1

2008-01-28T23:02:28+00:00

Adds IPv6 support to xt_iprange, making it possible to match on IPv6
address ranges with ip6tables.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Rename ipt_iprange to xt_iprange

2008-01-28T23:02:27+00:00

This patch moves ipt_iprange to xt_iprange, in preparation for adding
IPv6 support to xt_iprange.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller