linux.git/net/netfilter/xt_iprange.c, branch v4.13 Linux kernel source tree Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2011-02-04T22:28:58+00:00 David S. Miller davem@davemloft.net 2011-02-04T22:28:58+00:00 bd4a6974cc9090ef3851e5b0a2071e5383565c7c 






netfilter: xt_iprange: add IPv6 match debug print code
2011-01-28T18:33:13+00:00

Thomas Jacob
jacob@internet24.de

2011-01-28T18:33:13+00:00

6a4ddef2a3805d5b0664a94579b7a651bc202266

Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>





Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>







netfilter: xt_iprange: typo in IPv4 match debug print code
2011-01-27T09:56:32+00:00

Thomas Jacob
jacob@internet24.de

2011-01-27T09:56:32+00:00

705ca147176090203afd7503392e6e770637499b

Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>





Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>







netfilter: xt_iprange: Incorrect xt_iprange boundary check for IPv6
2011-01-24T20:35:36+00:00

Thomas Jacob
jacob@internet24.de

2011-01-24T20:35:36+00:00

08b5194b5d6485d12ebf24cf6ee389fc55691122

iprange_ipv6_sub was substracting 2 unsigned ints and then casting
the result to int to find out whether they are lt, eq or gt each
other, this doesn't work if the full 32 bits of each part
can be used in IPv6 addresses. Patch should remedy that without
significant performance penalties. Also number of ntohl
calls can be reduced this way (Jozsef Kadlecsik).

Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>





iprange_ipv6_sub was substracting 2 unsigned ints and then casting
the result to int to find out whether they are lt, eq or gt each
other, this doesn't work if the full 32 bits of each part
can be used in IPv6 addresses. Patch should remedy that without
significant performance penalties. Also number of ntohl
calls can be reduced this way (Jozsef Kadlecsik).

Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>







netfilter: xtables: deconstify struct xt_action_param for matches
2010-05-11T16:33:37+00:00

Jan Engelhardt
jengelh@medozas.de

2009-07-07T18:42:08+00:00

62fc8051083a334578c3f4b3488808f210b4565f

In future, layer-3 matches will be an xt module of their own, and
need to set the fragoff and thoff fields. Adding more pointers would
needlessy increase memory requirements (esp. so for 64-bit, where
pointers are wider).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>





In future, layer-3 matches will be an xt module of their own, and
need to set the fragoff and thoff fields. Adding more pointers would
needlessy increase memory requirements (esp. so for 64-bit, where
pointers are wider).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>







netfilter: xtables: substitute temporary defines by final name
2010-05-11T16:31:17+00:00

Jan Engelhardt
jengelh@medozas.de

2009-07-05T17:43:26+00:00

4b560b447df83368df44bd3712c0c39b1d79ba04

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>





Signed-off-by: Jan Engelhardt <jengelh@medozas.de>







netfilter: xt extensions: use pr_<level> (2)
2010-03-25T14:00:04+00:00

Jan Engelhardt
jengelh@medozas.de

2010-03-19T20:08:16+00:00

ff67e4e42bd178b1179c4d8e5c1fde18758ce84f

Supplement to 1159683ef48469de71dc26f0ee1a9c30d131cf89.

Downgrade the log level to INFO for most checkentry messages as they
are, IMO, just an extra information to the -EINVAL code that is
returned as part of a parameter "constraint violation". Leave errors
to real errors, such as being unable to create a LED trigger.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>





Supplement to 1159683ef48469de71dc26f0ee1a9c30d131cf89.

Downgrade the log level to INFO for most checkentry messages as they
are, IMO, just an extra information to the -EINVAL code that is
returned as part of a parameter "constraint violation". Leave errors
to real errors, such as being unable to create a LED trigger.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>







netfilter: xtables: remove xt_iprange v0
2009-08-10T11:09:44+00:00

Jan Engelhardt
jengelh@medozas.de

2009-06-12T16:58:19+00:00

36d4084dc8eb7a9a3655a2041097a46aff3061e9

Superseded by xt_iprange v1 (v2.6.24-2928-g1a50c5a1).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>





Superseded by xt_iprange v1 (v2.6.24-2928-g1a50c5a1).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>







net: replace NIPQUAD() in net/netfilter/
2008-10-31T07:54:29+00:00

Harvey Harrison
harvey.harrison@gmail.com

2008-10-31T07:54:29+00:00

14d5e834f6b36667c7da56374645f99b6cf30814

Using NIPQUAD() with NIPQUAD_FMT, %d.%d.%d.%d or %u.%u.%u.%u
can be replaced with %pI4

Signed-off-by: Harvey Harrison <harvey.harrison@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>





Using NIPQUAD() with NIPQUAD_FMT, %d.%d.%d.%d or %u.%u.%u.%u
can be replaced with %pI4

Signed-off-by: Harvey Harrison <harvey.harrison@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>







netfilter: xt_iprange: fix range inversion match
2008-10-20T10:32:21+00:00

Alexey Dobriyan
adobriyan@gmail.com

2008-10-20T10:32:21+00:00

6def1eb48101600884ebed56de03041fadc7a985

Inverted IPv4 v1 and IPv6 v0 matches don't match anything since 2.6.25-rc1!

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Acked-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>





Inverted IPv4 v1 and IPv6 v0 matches don't match anything since 2.6.25-rc1!

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Acked-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>