Vytas Dauksa 3b02b56cd5 netfilter: ipset: add hash:ip,mark data type to ipset ...

Introduce packet mark support with new ip,mark hash set. This includes
userspace and kernelspace code, hash:ip,mark set tests and man page
updates.

The intended use of ip,mark set is similar to the ip:port type, but for
protocols which don't use a predictable port number. Instead of port
number it matches a firewall mark determined by a layer 7 filtering
program like opendpi.

As well as allowing or blocking traffic it will also be used for
accounting packets and bytes sent for each protocol.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>

2014-03-06 09:31:42 +01:00

..

ip_set_bitmap_gen.h

netfilter: ipset: Use netlink callback dump args only

2013-10-22 10:13:59 +02:00

ip_set_bitmap_ip.c

netfiler: ipset: Add net namespace for ipset

2013-09-30 21:42:52 +02:00

ip_set_bitmap_ipmac.c

netfiler: ipset: Add net namespace for ipset

2013-09-30 21:42:52 +02:00

ip_set_bitmap_port.c

netfilter:ipset: Fix memory allocation for bitmap:port

2013-10-27 19:24:39 +01:00

ip_set_core.c

netfilter: ipset: Follow manual page behavior for SET target on list:set

2014-03-06 09:31:41 +01:00

ip_set_getport.c

netfilter: ipset: Support package fragments for IPv4 protos without ports

2013-09-30 21:33:26 +02:00

ip_set_hash_gen.h

netfilter: ipset: remove duplicate define

2013-10-27 19:24:45 +01:00

ip_set_hash_ip.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_ipmark.c

netfilter: ipset: add hash:ip,mark data type to ipset

2014-03-06 09:31:42 +01:00

ip_set_hash_ipport.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_ipportip.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_ipportnet.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_net.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_netiface.c

net/netfilter/ipset/ip_set_hash_netiface.c: use rbtree postorder iteration instead of opencoding

2014-01-23 16:37:03 -08:00

ip_set_hash_netnet.c

netfilter: ipset: Add hash: fix coccinelle warnings

2014-03-06 09:31:42 +01:00

ip_set_hash_netport.c

netfilter: ipset: Support comments in hash-type ipsets.

2013-09-30 21:33:29 +02:00

ip_set_hash_netportnet.c

netfilter: ipset: The unnamed union initialization may lead to compilation error

2013-10-22 10:14:01 +02:00

ip_set_list_set.c

netfilter: ipset: Use netlink callback dump args only

2013-10-22 10:13:59 +02:00

Kconfig

netfilter: ipset: add hash:ip,mark data type to ipset

2014-03-06 09:31:42 +01:00

Makefile

netfilter: ipset: add hash:ip,mark data type to ipset

2014-03-06 09:31:42 +01:00

pfxlen.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00