| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2013-04-29 | netfilter: ipset: Introduce extensions to elements in the core | Jozsef Kadlecsik | |
| Introduce extensions to elements in the core and prepare timeout as the first one. This patch also modifies the em_ipset classifier to use the new extension struct layout. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |||
| 2012-07-12 | net: sched: add ipset ematch | Florian Westphal | |
| Can be used to match packets against netfilter ip sets created via ipset(8). skb->sk_iif is used as 'incoming interface', skb->dev is 'outgoing interface'. Since ipset is usually called from netfilter, the ematch initializes a fake xt_action_param, pulls the ip header into the linear area and also sets skb->data to the IP header (otherwise matching Layer 4 set types doesn't work). Tested-by: Mr Dash Four <mr.dash.four@googlemail.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net> | |||
 |
index : linux | |
| NXP/Freescale LSDK linux tree with Scalys patches | www-data |
| summaryrefslogtreecommitdiff |