[NETFILTER]: ipt_addrtype: limit address type checking to an interface

Browse source

Addrtype match has a new revision (1), which lets address type checking
limited to the interface the current packet belongs to. Either incoming
or outgoing interface can be used depending on the current hook. In the
FORWARD hook two maches should be used if both interfaces have to be checked.
The new structure is ipt_addrtype_info_v1.

Revision 0 lets older userspace programs use the match as earlier.
ipt_addrtype_info is used.

Signed-off-by: Laszlo Attila Toth <panther@balabit.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Laszlo Attila Toth 2007-12-04 23:30:18 -08:00 • committed by David S. Miller

parent 0553811612

commit e2cf5ecbea

2 changed files with 102 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

14

include/linux/netfilter_ipv4/ipt_addrtype.h

View file

104

net/ipv4/netfilter/ipt_addrtype.c

View file