Commit e2a5a63a authored by David S. Miller's avatar David S. Miller

Merge davem@cheetah.davemloft.net:src/BK/net-2.6

into nuts.davemloft.net:/disk1/davem/BK/net-2.6
parents 0defd9f5 aef22e5b
...@@ -236,13 +236,15 @@ Networking ...@@ -236,13 +236,15 @@ Networking
General changes General changes
--------------- ---------------
The IP firewalling and NAT code has been replaced again. The new
netfilter software (including ipfwadm and ipchains backwards-
compatible modules) is currently distributed separately.
If you have advanced network configuration needs, you should probably If you have advanced network configuration needs, you should probably
consider using the network tools from ip-route2. consider using the network tools from ip-route2.
Packet Filter / NAT
-------------------
The packet filtering and NAT code uses the same tools like the previous 2.4.x
kernel series (iptables). It still includes backwards-compatibility modules
for 2.2.x-style ipchains and 2.0.x-style ipfwadm.
PPP PPP
--- ---
...@@ -399,11 +401,9 @@ NFS-utils ...@@ -399,11 +401,9 @@ NFS-utils
--------- ---------
o <http://sourceforge.net/project/showfiles.php?group_id=14> o <http://sourceforge.net/project/showfiles.php?group_id=14>
Netfilter Iptables
--------- --------
o <http://netfilter.filewatcher.org/iptables-1.2.tar.bz2> o <http://www.iptables.org/downloads.html>
o <http://netfilter.samba.org/iptables-1.2.tar.bz2>
o <http://netfilter.kernelnotes.org/iptables-1.2.tar.bz2>
Ip-route2 Ip-route2
--------- ---------
......
...@@ -34,12 +34,12 @@ struct sha256_ctx { ...@@ -34,12 +34,12 @@ struct sha256_ctx {
static inline u32 Ch(u32 x, u32 y, u32 z) static inline u32 Ch(u32 x, u32 y, u32 z)
{ {
return ((x & y) ^ (~x & z)); return z ^ (x & (y ^ z));
} }
static inline u32 Maj(u32 x, u32 y, u32 z) static inline u32 Maj(u32 x, u32 y, u32 z)
{ {
return ((x & y) ^ (x & z) ^ (y & z)); return (x & y) | (z & (x | y));
} }
static inline u32 RORu32(u32 x, u32 y) static inline u32 RORu32(u32 x, u32 y)
......
...@@ -34,12 +34,12 @@ struct sha512_ctx { ...@@ -34,12 +34,12 @@ struct sha512_ctx {
static inline u64 Ch(u64 x, u64 y, u64 z) static inline u64 Ch(u64 x, u64 y, u64 z)
{ {
return ((x & y) ^ (~x & z)); return z ^ (x & (y ^ z));
} }
static inline u64 Maj(u64 x, u64 y, u64 z) static inline u64 Maj(u64 x, u64 y, u64 z)
{ {
return ((x & y) ^ (x & z) ^ (y & z)); return (x & y) | (z & (x | y));
} }
static inline u64 RORu64(u64 x, u64 y) static inline u64 RORu64(u64 x, u64 y)
......
...@@ -21,6 +21,7 @@ struct ipv4_devconf ...@@ -21,6 +21,7 @@ struct ipv4_devconf
int medium_id; int medium_id;
int no_xfrm; int no_xfrm;
int no_policy; int no_policy;
int force_igmp_version;
void *sysctl; void *sysctl;
}; };
......
...@@ -50,5 +50,6 @@ static inline int ip_conntrack_confirm(struct sk_buff *skb) ...@@ -50,5 +50,6 @@ static inline int ip_conntrack_confirm(struct sk_buff *skb)
extern struct list_head *ip_conntrack_hash; extern struct list_head *ip_conntrack_hash;
extern struct list_head ip_conntrack_expect_list; extern struct list_head ip_conntrack_expect_list;
DECLARE_RWLOCK_EXTERN(ip_conntrack_lock); DECLARE_RWLOCK_EXTERN(ip_conntrack_lock);
DECLARE_RWLOCK_EXTERN(ip_conntrack_expect_tuple_lock);
#endif /* _IP_CONNTRACK_CORE_H */ #endif /* _IP_CONNTRACK_CORE_H */
...@@ -290,6 +290,37 @@ struct tc_htb_xstats ...@@ -290,6 +290,37 @@ struct tc_htb_xstats
__u32 ctokens; __u32 ctokens;
}; };
/* HFSC section */
struct tc_hfsc_qopt
{
__u16 defcls; /* default class */
};
struct tc_service_curve
{
__u32 m1; /* slope of the first segment in bps */
__u32 d; /* x-projection of the first segment in us */
__u32 m2; /* slope of the second segment in bps */
};
struct tc_hfsc_stats
{
__u64 work; /* total work done */
__u64 rtwork; /* work done by real-time criteria */
__u32 period; /* current period */
__u32 level; /* class level in hierarchy */
};
enum
{
TCA_HFSC_UNSPEC,
TCA_HFSC_RSC,
TCA_HFSC_FSC,
TCA_HFSC_USC,
TCA_HFSC_MAX = TCA_HFSC_USC
};
/* CBQ section */ /* CBQ section */
#define TC_CBQ_MAXPRIO 8 #define TC_CBQ_MAXPRIO 8
......
...@@ -360,6 +360,7 @@ enum ...@@ -360,6 +360,7 @@ enum
NET_IPV4_CONF_MEDIUM_ID=14, NET_IPV4_CONF_MEDIUM_ID=14,
NET_IPV4_CONF_NOXFRM=15, NET_IPV4_CONF_NOXFRM=15,
NET_IPV4_CONF_NOPOLICY=16, NET_IPV4_CONF_NOPOLICY=16,
NET_IPV4_CONF_FORCE_IGMP_VERSION=17,
}; };
/* /proc/sys/net/ipv4/netfilter */ /* /proc/sys/net/ipv4/netfilter */
......
...@@ -203,6 +203,7 @@ typedef long psched_tdiff_t; ...@@ -203,6 +203,7 @@ typedef long psched_tdiff_t;
#define PSCHED_GET_TIME(stamp) do_gettimeofday(&(stamp)) #define PSCHED_GET_TIME(stamp) do_gettimeofday(&(stamp))
#define PSCHED_US2JIFFIE(usecs) (((usecs)+(1000000/HZ-1))/(1000000/HZ)) #define PSCHED_US2JIFFIE(usecs) (((usecs)+(1000000/HZ-1))/(1000000/HZ))
#define PSCHED_JIFFIE2US(delay) ((delay)*(1000000/HZ))
#define PSCHED_EXPORTLIST EXPORT_SYMBOL(psched_tod_diff); #define PSCHED_EXPORTLIST EXPORT_SYMBOL(psched_tod_diff);
...@@ -251,6 +252,7 @@ extern PSCHED_WATCHER psched_time_mark; ...@@ -251,6 +252,7 @@ extern PSCHED_WATCHER psched_time_mark;
#endif #endif
#define PSCHED_US2JIFFIE(delay) (((delay)+(1<<PSCHED_JSCALE)-1)>>PSCHED_JSCALE) #define PSCHED_US2JIFFIE(delay) (((delay)+(1<<PSCHED_JSCALE)-1)>>PSCHED_JSCALE)
#define PSCHED_JIFFIE2US(delay) ((delay)<<PSCHED_JSCALE)
#elif PSCHED_CLOCK_SOURCE == PSCHED_CPU #elif PSCHED_CLOCK_SOURCE == PSCHED_CPU
...@@ -261,6 +263,7 @@ extern int psched_clock_scale; ...@@ -261,6 +263,7 @@ extern int psched_clock_scale;
EXPORT_SYMBOL(psched_clock_scale); EXPORT_SYMBOL(psched_clock_scale);
#define PSCHED_US2JIFFIE(delay) (((delay)+psched_clock_per_hz-1)/psched_clock_per_hz) #define PSCHED_US2JIFFIE(delay) (((delay)+psched_clock_per_hz-1)/psched_clock_per_hz)
#define PSCHED_JIFFIE2US(delay) ((delay)*psched_clock_per_hz)
#ifdef CONFIG_X86_TSC #ifdef CONFIG_X86_TSC
......
...@@ -1132,7 +1132,7 @@ int ipv4_doint_and_flush_strategy(ctl_table *table, int *name, int nlen, ...@@ -1132,7 +1132,7 @@ int ipv4_doint_and_flush_strategy(ctl_table *table, int *name, int nlen,
static struct devinet_sysctl_table { static struct devinet_sysctl_table {
struct ctl_table_header *sysctl_header; struct ctl_table_header *sysctl_header;
ctl_table devinet_vars[17]; ctl_table devinet_vars[18];
ctl_table devinet_dev[2]; ctl_table devinet_dev[2];
ctl_table devinet_conf_dir[2]; ctl_table devinet_conf_dir[2];
ctl_table devinet_proto_dir[2]; ctl_table devinet_proto_dir[2];
...@@ -1269,6 +1269,15 @@ static struct devinet_sysctl_table { ...@@ -1269,6 +1269,15 @@ static struct devinet_sysctl_table {
.proc_handler = &ipv4_doint_and_flush, .proc_handler = &ipv4_doint_and_flush,
.strategy = &ipv4_doint_and_flush_strategy, .strategy = &ipv4_doint_and_flush_strategy,
}, },
{
.ctl_name = NET_IPV4_CONF_FORCE_IGMP_VERSION,
.procname = "force_igmp_version",
.data = &ipv4_devconf.force_igmp_version,
.maxlen = sizeof(int),
.mode = 0644,
.proc_handler = &ipv4_doint_and_flush,
.strategy = &ipv4_doint_and_flush_strategy,
},
}, },
.devinet_dev = { .devinet_dev = {
{ {
......
...@@ -126,10 +126,14 @@ ...@@ -126,10 +126,14 @@
* contradict to specs provided this delay is small enough. * contradict to specs provided this delay is small enough.
*/ */
#define IGMP_V1_SEEN(in_dev) ((in_dev)->mr_v1_seen && \ #define IGMP_V1_SEEN(in_dev) (ipv4_devconf.force_igmp_version == 1 || \
time_before(jiffies, (in_dev)->mr_v1_seen)) (in_dev)->cnf.force_igmp_version == 1 || \
#define IGMP_V2_SEEN(in_dev) ((in_dev)->mr_v2_seen && \ ((in_dev)->mr_v1_seen && \
time_before(jiffies, (in_dev)->mr_v2_seen)) time_before(jiffies, (in_dev)->mr_v1_seen)))
#define IGMP_V2_SEEN(in_dev) (ipv4_devconf.force_igmp_version == 2 || \
(in_dev)->cnf.force_igmp_version == 2 || \
((in_dev)->mr_v2_seen && \
time_before(jiffies, (in_dev)->mr_v2_seen)))
static void igmpv3_add_delrec(struct in_device *in_dev, struct ip_mc_list *im); static void igmpv3_add_delrec(struct in_device *in_dev, struct ip_mc_list *im);
static void igmpv3_del_delrec(struct in_device *in_dev, __u32 multiaddr); static void igmpv3_del_delrec(struct in_device *in_dev, __u32 multiaddr);
......
...@@ -2,8 +2,12 @@ ...@@ -2,8 +2,12 @@
but required by, the NAT layer; it can also be used by an iptables but required by, the NAT layer; it can also be used by an iptables
extension. */ extension. */
/* (c) 1999 Paul `Rusty' Russell. Licenced under the GNU General /* (C) 1999-2001 Paul `Rusty' Russell
* Public Licence. * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 23 Apr 2001: Harald Welte <laforge@gnumonks.org> * 23 Apr 2001: Harald Welte <laforge@gnumonks.org>
* - new API and handling of conntrack/nat helpers * - new API and handling of conntrack/nat helpers
......
/* FTP extension for IP connection tracking. */ /* FTP extension for IP connection tracking. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/module.h> #include <linux/module.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/sched.h> #include <linux/sched.h>
#include <linux/timer.h> #include <linux/timer.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/sched.h> #include <linux/sched.h>
#include <linux/timer.h> #include <linux/timer.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/sched.h> #include <linux/sched.h>
#include <linux/timer.h> #include <linux/timer.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/sched.h> #include <linux/sched.h>
#include <linux/timer.h> #include <linux/timer.h>
......
...@@ -4,8 +4,13 @@ ...@@ -4,8 +4,13 @@
These are not required by the compatibility layer. These are not required by the compatibility layer.
*/ */
/* (c) 1999 Paul `Rusty' Russell. Licenced under the GNU General /* (C) 1999-2001 Paul `Rusty' Russell
Public Licence. */ * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/types.h> #include <linux/types.h>
...@@ -154,6 +159,7 @@ list_conntracks(char *buffer, char **start, off_t offset, int length) ...@@ -154,6 +159,7 @@ list_conntracks(char *buffer, char **start, off_t offset, int length)
} }
/* Now iterate through expecteds. */ /* Now iterate through expecteds. */
READ_LOCK(&ip_conntrack_expect_tuple_lock);
list_for_each(e, &ip_conntrack_expect_list) { list_for_each(e, &ip_conntrack_expect_list) {
unsigned int last_len; unsigned int last_len;
struct ip_conntrack_expect *expect struct ip_conntrack_expect *expect
...@@ -164,10 +170,12 @@ list_conntracks(char *buffer, char **start, off_t offset, int length) ...@@ -164,10 +170,12 @@ list_conntracks(char *buffer, char **start, off_t offset, int length)
len += print_expect(buffer + len, expect); len += print_expect(buffer + len, expect);
if (len > length) { if (len > length) {
len = last_len; len = last_len;
goto finished; goto finished_expects;
} }
} }
finished_expects:
READ_UNLOCK(&ip_conntrack_expect_tuple_lock);
finished: finished:
READ_UNLOCK(&ip_conntrack_lock); READ_UNLOCK(&ip_conntrack_lock);
......
/* /* (C) 2001-2002 Magnus Boden <mb@ozaba.mine.nu>
* Licensed under GNU GPL version 2 Copyright Magnus Boden <mb@ozaba.mine.nu> *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* Version: 0.0.7 * Version: 0.0.7
* *
* Thu 21 Mar 2002 Harald Welte <laforge@gnumonks.org> * Thu 21 Mar 2002 Harald Welte <laforge@gnumonks.org>
......
/* Compatibility framework for ipchains and ipfwadm support; designed /* Compatibility framework for ipchains and ipfwadm support; designed
to look as much like the 2.2 infrastructure as possible. */ to look as much like the 2.2 infrastructure as possible. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
struct notifier_block; struct notifier_block;
#include <linux/netfilter_ipv4.h> #include <linux/netfilter_ipv4.h>
......
...@@ -4,6 +4,15 @@ ...@@ -4,6 +4,15 @@
ports 61000:65095 (in 2.0 and 2.2 they get EADDRINUSE). Just DON'T ports 61000:65095 (in 2.0 and 2.2 they get EADDRINUSE). Just DON'T
DO IT. DO IT.
*/ */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/in.h> #include <linux/in.h>
#include <linux/ip.h> #include <linux/ip.h>
......
...@@ -7,6 +7,15 @@ ...@@ -7,6 +7,15 @@
FIXME: Timing is overly simplistic. If anyone complains, make it FIXME: Timing is overly simplistic. If anyone complains, make it
use conntrack. use conntrack.
*/ */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* NAT for netfilter; shared with compatibility layer. */ /* NAT for netfilter; shared with compatibility layer. */
/* (c) 1999 Paul `Rusty' Russell. Licenced under the GNU General /* (C) 1999-2001 Paul `Rusty' Russell
Public Licence. */ * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/types.h> #include <linux/types.h>
#include <linux/timer.h> #include <linux/timer.h>
......
/* FTP extension for TCP NAT alteration. */ /* FTP extension for TCP NAT alteration. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/netfilter_ipv4.h> #include <linux/netfilter_ipv4.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* ip_nat_mangle.c - generic support functions for NAT helpers /* ip_nat_helper.c - generic support functions for NAT helpers
* *
* (C) 2000-2002 by Harald Welte <laforge@gnumonks.org> * (C) 2000-2002 Harald Welte <laforge@netfilter.org>
* (C) 2003-2004 Netfilter Core Team <coreteam@netfilter.org>
* *
* distributed under the terms of GNU GPL * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 14 Jan 2002 Harald Welte <laforge@gnumonks.org>: * 14 Jan 2002 Harald Welte <laforge@gnumonks.org>:
* - add support for SACK adjustment * - add support for SACK adjustment
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/init.h> #include <linux/init.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/init.h> #include <linux/init.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/init.h> #include <linux/init.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
...@@ -2,6 +2,14 @@ ...@@ -2,6 +2,14 @@
* don't understand. It's returned by ip_ct_find_proto(). * don't understand. It's returned by ip_ct_find_proto().
*/ */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/init.h> #include <linux/init.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
/* Everything about the rules for NAT. */ /* Everything about the rules for NAT. */
#include <linux/types.h> #include <linux/types.h>
#include <linux/ip.h> #include <linux/ip.h>
......
...@@ -4,9 +4,15 @@ ...@@ -4,9 +4,15 @@
These are not required by the compatibility layer. These are not required by the compatibility layer.
*/ */
/* (c) 1999 Paul `Rusty' Russell. Licenced under the GNU General /* (C) 1999-2001 Paul `Rusty' Russell
* Public Licence. * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
* *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
/*
* 23 Apr 2001: Harald Welte <laforge@gnumonks.org> * 23 Apr 2001: Harald Welte <laforge@gnumonks.org>
* - new API and handling of conntrack/nat helpers * - new API and handling of conntrack/nat helpers
* - now capable of multiple expectations for one master * - now capable of multiple expectations for one master
......
/* /* (C) 2001-2002 Magnus Boden <mb@ozaba.mine.nu>
* Licensed under GNU GPL version 2 Copyright Magnus Boden <mb@ozaba.mine.nu> *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* Version: 0.0.7 * Version: 0.0.7
* *
* Thu 21 Mar 2002 Harald Welte <laforge@gnumonks.org> * Thu 21 Mar 2002 Harald Welte <laforge@gnumonks.org>
......
...@@ -2,7 +2,11 @@ ...@@ -2,7 +2,11 @@
* This is a module which is used for queueing IPv4 packets and * This is a module which is used for queueing IPv4 packets and
* communicating with userspace via netlink. * communicating with userspace via netlink.
* *
* (C) 2000-2002 James Morris, this code is GPL. * (C) 2000-2002 James Morris <jmorris@intercode.com.au>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 2000-03-27: Simplified code (thanks to Andi Kleen for clues). * 2000-03-27: Simplified code (thanks to Andi Kleen for clues).
* 2000-05-20: Fixed notifier problems (following Miguel Freitas' report). * 2000-05-20: Fixed notifier problems (following Miguel Freitas' report).
......
...@@ -2,7 +2,11 @@ ...@@ -2,7 +2,11 @@
* Packet matching code. * Packet matching code.
* *
* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
* Copyright (C) 2009-2002 Netfilter core team <coreteam@netfilter.org> * Copyright (C) 2000-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 19 Jan 2002 Harald Welte <laforge@gnumonks.org> * 19 Jan 2002 Harald Welte <laforge@gnumonks.org>
* - increase module usage count as soon as we have rules inside * - increase module usage count as soon as we have rules inside
......
...@@ -3,6 +3,13 @@ ...@@ -3,6 +3,13 @@
* of an skb for qdisc classification. * of an skb for qdisc classification.
*/ */
/* (C) 2001-2002 Patrick McHardy <kaber@trash.net>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* iptables module for setting the IPv4 DSCP field, Version 1.8 /* iptables module for setting the IPv4 DSCP field, Version 1.8
* *
* (C) 2002 by Harald Welte <laforge@gnumonks.org> * (C) 2002 by Harald Welte <laforge@netfilter.org>
* based on ipt_FTOS.c (C) 2000 by Matthew G. Marsh <mgm@paktronix.com> * based on ipt_FTOS.c (C) 2000 by Matthew G. Marsh <mgm@paktronix.com>
* This software is distributed under GNU GPL v2, 1991 *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* See RFC2474 for a description of the DSCP field within the IP Header. * See RFC2474 for a description of the DSCP field within the IP Header.
* *
......
/* iptables module for the IPv4 and TCP ECN bits, Version 1.5 /* iptables module for the IPv4 and TCP ECN bits, Version 1.5
* *
* (C) 2002 by Harald Welte <laforge@gnumonks.org> * (C) 2002 by Harald Welte <laforge@netfilter.org>
*
* This software is distributed under GNU GPL v2, 1991
* *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* ipt_ECN.c,v 1.5 2002/08/18 19:36:51 laforge Exp * ipt_ECN.c,v 1.5 2002/08/18 19:36:51 laforge Exp
*/ */
......
/* /*
* This is a module which is used for logging packets. * This is a module which is used for logging packets.
*/ */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/spinlock.h> #include <linux/spinlock.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* This is a module which is used for setting the NFMARK field of an skb. */ /* This is a module which is used for setting the NFMARK field of an skb. */
/* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* Masquerade. Simple mapping which alters range to a local IP address /* Masquerade. Simple mapping which alters range to a local IP address
(depending on route). */ (depending on route). */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/types.h> #include <linux/types.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* NETMAP - static NAT mapping of IP network addresses (1:1). /* NETMAP - static NAT mapping of IP network addresses (1:1).
The mapping can be applied to source (POSTROUTING), * The mapping can be applied to source (POSTROUTING),
destination (PREROUTING), or both (with separate rules). * destination (PREROUTING), or both (with separate rules).
*/
Author: Svenning Soerensen <svenning@post5.tele.dk>
*/ /* (C) 2000-2001 Svenning Soerensen <svenning@post5.tele.dk>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* Redirect. Simple mapping which alters dst to a local IP address. */ /* Redirect. Simple mapping which alters dst to a local IP address. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/types.h> #include <linux/types.h>
#include <linux/ip.h> #include <linux/ip.h>
#include <linux/timer.h> #include <linux/timer.h>
......
...@@ -3,6 +3,15 @@ ...@@ -3,6 +3,15 @@
* Added support for customized reject packets (Jozsef Kadlecsik). * Added support for customized reject packets (Jozsef Kadlecsik).
* Added support for ICMP type-3-code-13 (Maciej Soltysiak). [RFC 1812] * Added support for ICMP type-3-code-13 (Maciej Soltysiak). [RFC 1812]
*/ */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/config.h> #include <linux/config.h>
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* Same. Just like SNAT, only try to make the connections /* Same. Just like SNAT, only try to make the connections
* between client A and server B always have the same source ip. * between client A and server B always have the same source ip.
* *
* (C) 2000 Rusty Russell. GPL. * (C) 2000 Paul `Rusty' Russell
* (C) 2001 Martin Josefsson
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 010320 Martin Josefsson <gandalf@wlug.westbo.se> * 010320 Martin Josefsson <gandalf@wlug.westbo.se>
* * copied ipt_BALANCE.c to ipt_SAME.c and changed a few things. * * copied ipt_BALANCE.c to ipt_SAME.c and changed a few things.
......
/* /*
* This is a module which is used for setting the MSS option in TCP packets. * This is a module which is used for setting the MSS option in TCP packets.
* *
* Copyright (c) 2000 Marc Boucher * Copyright (C) 2000 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* This is a module which is used for setting the TOS field of a packet. */ /* This is a module which is used for setting the TOS field of a packet. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* /*
* netfilter module for userspace packet logging daemons * netfilter module for userspace packet logging daemons
* *
* (C) 2000-2002 by Harald Welte <laforge@gnumonks.org> * (C) 2000-2002 by Harald Welte <laforge@netfilter.org>
* *
* 2000/09/22 ulog-cprange feature added * 2000/09/22 ulog-cprange feature added
* 2001/01/04 in-kernel queue as proposed by Sebastian Zander * 2001/01/04 in-kernel queue as proposed by Sebastian Zander
...@@ -14,7 +14,12 @@ ...@@ -14,7 +14,12 @@
* 2002/08/29 fix shifted/unshifted nlgroup bug -HW * 2002/08/29 fix shifted/unshifted nlgroup bug -HW
* 2002/10/30 fix uninitialized mac_len field - <Anders K. Pedersen> * 2002/10/30 fix uninitialized mac_len field - <Anders K. Pedersen>
* *
* Released under the terms of the GPL * (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* This module accepts two parameters: * This module accepts two parameters:
* *
......
/* Kernel module to match AH parameters. */ /* Kernel module to match AH parameters. */
/* (C) 1999-2000 Yon Uriarte <yon@astaro.de>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* Kernel module to match connection tracking information. /* Kernel module to match connection tracking information.
* Superset of Rusty's minimalistic state match. * Superset of Rusty's minimalistic state match.
* GPL (C) 2001 Marc Boucher (marc@mbsi.ca). *
* (C) 2001 Marc Boucher (marc@mbsi.ca).
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/netfilter_ipv4/ip_conntrack.h> #include <linux/netfilter_ipv4/ip_conntrack.h>
......
...@@ -2,9 +2,11 @@ ...@@ -2,9 +2,11 @@
* *
* ipt_dscp.c,v 1.3 2002/08/05 19:00:21 laforge Exp * ipt_dscp.c,v 1.3 2002/08/05 19:00:21 laforge Exp
* *
* (C) 2002 by Harald Welte <laforge@gnumonks.org> * (C) 2002 by Harald Welte <laforge@netfilter.org>
* *
* This software is distributed under the terms GNU GPL * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
......
...@@ -4,7 +4,9 @@ ...@@ -4,7 +4,9 @@
* *
* (C) 2002 by Harald Welte <laforge@gnumonks.org> * (C) 2002 by Harald Welte <laforge@gnumonks.org>
* *
* This software is distributed under the terms GNU GPL v2 * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
......
/* Kernel module to match ESP parameters. */ /* Kernel module to match ESP parameters. */
/* (C) 1999-2000 Yon Uriarte <yon@astaro.de>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* iptables module to match on related connections */
/* /*
* iptables module to match on related connections * (C) 2001 Martin Josefsson <gandalf@wlug.westbo.se>
* (c) 2001 Martin Josefsson <gandalf@wlug.westbo.se>
* *
* Released under the terms of GNU GPLv2. * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* 19 Mar 2002 Harald Welte <laforge@gnumonks.org>: * 19 Mar 2002 Harald Welte <laforge@gnumonks.org>:
* - Port to newnat infrastructure * - Port to newnat infrastructure
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/netfilter.h> #include <linux/netfilter.h>
......
/* /*
* iptables module to match IP address ranges * iptables module to match IP address ranges
* (c) 2003 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* *
* Released under the terms of GNU GPLv2. * (C) 2003 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
* *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* Kernel module to match packet length. */ /* Kernel module to match packet length. */
/* (C) 1999-2001 James Morris <jmorros@intercode.com.au>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* Kernel module to control the rate /* Kernel module to control the rate
*
* Jrme de Vivie <devivie@info.enserb.u-bordeaux.fr>
* Herv Eychenne <eychenne@info.enserb.u-bordeaux.fr>
* *
* 2 September 1999: Changed from the target RATE to the match * 2 September 1999: Changed from the target RATE to the match
* `limit', removed logging. Did I mention that * `limit', removed logging. Did I mention that
* Alexey is a fucking genius? * Alexey is a fucking genius?
* Rusty Russell (rusty@rustcorp.com.au). */ * Rusty Russell (rusty@rustcorp.com.au). */
/* (C) 1999 Jrme de Vivie <devivie@info.enserb.u-bordeaux.fr>
* (C) 1999 Herv Eychenne <eychenne@info.enserb.u-bordeaux.fr>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/spinlock.h> #include <linux/spinlock.h>
......
/* Kernel module to match MAC address parameters. */ /* Kernel module to match MAC address parameters. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/if_ether.h> #include <linux/if_ether.h>
......
/* Kernel module to match NFMARK values. */ /* Kernel module to match NFMARK values. */
/* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* Kernel module to match one of a list of TCP/UDP ports: ports are in /* Kernel module to match one of a list of TCP/UDP ports: ports are in
the same place so we can treat them as equal. */ the same place so we can treat them as equal. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/types.h> #include <linux/types.h>
#include <linux/udp.h> #include <linux/udp.h>
......
/* Kernel module to match various things tied to sockets associated with /* Kernel module to match various things tied to sockets associated with
locally generated outgoing packets. locally generated outgoing packets. */
Copyright (C) 2000 Marc Boucher /* (C) 2000 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/file.h> #include <linux/file.h>
......
/* Kernel module to match the bridge port in and /* Kernel module to match the bridge port in and
* out device for IP packets coming into contact with a bridge. */ * out device for IP packets coming into contact with a bridge. */
/* (C) 2001-2003 Bart De Schuymer <bdschuym@pandora.be>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/netfilter_ipv4/ipt_physdev.h> #include <linux/netfilter_ipv4/ipt_physdev.h>
......
/* (C) 1999-2001 Michal Ludvig <michal@logix.cz>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/if_ether.h> #include <linux/if_ether.h>
...@@ -7,6 +14,8 @@ ...@@ -7,6 +14,8 @@
#include <linux/netfilter_ipv4/ip_tables.h> #include <linux/netfilter_ipv4/ip_tables.h>
MODULE_LICENSE("GPL"); MODULE_LICENSE("GPL");
MODULE_AUTHOR("Michal Ludvig <michal@logix.cz>");
MODULE_DESCRIPTION("IP tables match to match on linklayer packet type");
static int match(const struct sk_buff *skb, static int match(const struct sk_buff *skb,
const struct net_device *in, const struct net_device *in,
......
/* Kernel module to match connection tracking information. /* Kernel module to match connection tracking information. */
* GPL (C) 1999 Rusty Russell (rusty@rustcorp.com.au).
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/netfilter_ipv4/ip_conntrack.h> #include <linux/netfilter_ipv4/ip_conntrack.h>
......
/* Kernel module to match TCP MSS values. */ /* Kernel module to match TCP MSS values. */
/* Copyright (C) 2000 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <net/tcp.h> #include <net/tcp.h>
......
/* Kernel module to match TOS values. */ /* Kernel module to match TOS values. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
...@@ -2,9 +2,11 @@ ...@@ -2,9 +2,11 @@
* *
* ipt_ttl.c,v 1.5 2000/11/13 11:16:08 laforge Exp * ipt_ttl.c,v 1.5 2000/11/13 11:16:08 laforge Exp
* *
* (C) 2000,2001 by Harald Welte <laforge@gnumonks.org> * (C) 2000,2001 by Harald Welte <laforge@netfilter.org>
* *
* This software is distributed under the terms GNU GPL * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
...@@ -13,7 +15,7 @@ ...@@ -13,7 +15,7 @@
#include <linux/netfilter_ipv4/ipt_ttl.h> #include <linux/netfilter_ipv4/ipt_ttl.h>
#include <linux/netfilter_ipv4/ip_tables.h> #include <linux/netfilter_ipv4/ip_tables.h>
MODULE_AUTHOR("Harald Welte <laforge@gnumonks.org>"); MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
MODULE_DESCRIPTION("IP tables TTL matching module"); MODULE_DESCRIPTION("IP tables TTL matching module");
MODULE_LICENSE("GPL"); MODULE_LICENSE("GPL");
......
...@@ -2,7 +2,14 @@ ...@@ -2,7 +2,14 @@
* This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x. * This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x.
* *
* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
* Copyright (C) 2000-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/netfilter_ipv4/ip_tables.h> #include <linux/netfilter_ipv4/ip_tables.h>
......
...@@ -2,6 +2,11 @@ ...@@ -2,6 +2,11 @@
* This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x. * This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x.
* *
* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
* Copyright (C) 2000-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
* *
* Extended to all five netfilter hooks by Brad Chapman & Harald Welte * Extended to all five netfilter hooks by Brad Chapman & Harald Welte
*/ */
......
...@@ -464,7 +464,7 @@ int inet6_getname(struct socket *sock, struct sockaddr *uaddr, ...@@ -464,7 +464,7 @@ int inet6_getname(struct socket *sock, struct sockaddr *uaddr,
if (np->sndflow) if (np->sndflow)
sin->sin6_flowinfo = np->flow_label; sin->sin6_flowinfo = np->flow_label;
} else { } else {
if (ipv6_addr_type(&np->rcv_saddr) == IPV6_ADDR_ANY) if (ipv6_addr_any(&np->rcv_saddr))
ipv6_addr_copy(&sin->sin6_addr, &np->saddr); ipv6_addr_copy(&sin->sin6_addr, &np->saddr);
else else
ipv6_addr_copy(&sin->sin6_addr, &np->rcv_saddr); ipv6_addr_copy(&sin->sin6_addr, &np->rcv_saddr);
......
...@@ -111,7 +111,7 @@ int ipv6_sock_ac_join(struct sock *sk, int ifindex, struct in6_addr *addr) ...@@ -111,7 +111,7 @@ int ipv6_sock_ac_join(struct sock *sk, int ifindex, struct in6_addr *addr)
if (!capable(CAP_NET_ADMIN)) if (!capable(CAP_NET_ADMIN))
return -EPERM; return -EPERM;
if (ipv6_addr_type(addr) & IPV6_ADDR_MULTICAST) if (ipv6_addr_is_multicast(addr))
return -EINVAL; return -EINVAL;
if (ipv6_chk_addr(addr, NULL, 0)) if (ipv6_chk_addr(addr, NULL, 0))
return -EINVAL; return -EINVAL;
......
...@@ -218,7 +218,6 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp) ...@@ -218,7 +218,6 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp)
struct inet6_skb_parm *opt = (struct inet6_skb_parm *)skb->cb; struct inet6_skb_parm *opt = (struct inet6_skb_parm *)skb->cb;
struct in6_addr *addr; struct in6_addr *addr;
struct in6_addr daddr; struct in6_addr daddr;
int addr_type;
int n, i; int n, i;
struct ipv6_rt_hdr *hdr; struct ipv6_rt_hdr *hdr;
...@@ -233,7 +232,7 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp) ...@@ -233,7 +232,7 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp)
hdr = (struct ipv6_rt_hdr *) skb->h.raw; hdr = (struct ipv6_rt_hdr *) skb->h.raw;
if ((ipv6_addr_type(&skb->nh.ipv6h->daddr)&IPV6_ADDR_MULTICAST) || if (ipv6_addr_is_multicast(&skb->nh.ipv6h->daddr) ||
skb->pkt_type != PACKET_HOST) { skb->pkt_type != PACKET_HOST) {
kfree_skb(skb); kfree_skb(skb);
return -1; return -1;
...@@ -293,9 +292,7 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp) ...@@ -293,9 +292,7 @@ static int ipv6_rthdr_rcv(struct sk_buff **skbp, unsigned int *nhoffp)
addr = rthdr->addr; addr = rthdr->addr;
addr += i - 1; addr += i - 1;
addr_type = ipv6_addr_type(addr); if (ipv6_addr_is_multicast(addr)) {
if (addr_type&IPV6_ADDR_MULTICAST) {
kfree_skb(skb); kfree_skb(skb);
return -1; return -1;
} }
......
...@@ -175,7 +175,7 @@ int ipv6_sock_mc_join(struct sock *sk, int ifindex, struct in6_addr *addr) ...@@ -175,7 +175,7 @@ int ipv6_sock_mc_join(struct sock *sk, int ifindex, struct in6_addr *addr)
struct ipv6_pinfo *np = inet6_sk(sk); struct ipv6_pinfo *np = inet6_sk(sk);
int err; int err;
if (!(ipv6_addr_type(addr) & IPV6_ADDR_MULTICAST)) if (!ipv6_addr_is_multicast(addr))
return -EINVAL; return -EINVAL;
mc_lst = sock_kmalloc(sk, sizeof(struct ipv6_mc_socklist), GFP_KERNEL); mc_lst = sock_kmalloc(sk, sizeof(struct ipv6_mc_socklist), GFP_KERNEL);
...@@ -348,7 +348,7 @@ int ip6_mc_source(int add, int omode, struct sock *sk, ...@@ -348,7 +348,7 @@ int ip6_mc_source(int add, int omode, struct sock *sk,
source = &((struct sockaddr_in6 *)&pgsr->gsr_source)->sin6_addr; source = &((struct sockaddr_in6 *)&pgsr->gsr_source)->sin6_addr;
group = &((struct sockaddr_in6 *)&pgsr->gsr_group)->sin6_addr; group = &((struct sockaddr_in6 *)&pgsr->gsr_group)->sin6_addr;
if (!(ipv6_addr_type(group) & IPV6_ADDR_MULTICAST)) if (!ipv6_addr_is_multicast(group))
return -EINVAL; return -EINVAL;
idev = ip6_mc_find_dev(group, pgsr->gsr_interface); idev = ip6_mc_find_dev(group, pgsr->gsr_interface);
...@@ -457,7 +457,7 @@ int ip6_mc_msfilter(struct sock *sk, struct group_filter *gsf) ...@@ -457,7 +457,7 @@ int ip6_mc_msfilter(struct sock *sk, struct group_filter *gsf)
group = &((struct sockaddr_in6 *)&gsf->gf_group)->sin6_addr; group = &((struct sockaddr_in6 *)&gsf->gf_group)->sin6_addr;
if (!(ipv6_addr_type(group) & IPV6_ADDR_MULTICAST)) if (!ipv6_addr_is_multicast(group))
return -EINVAL; return -EINVAL;
if (gsf->gf_fmode != MCAST_INCLUDE && if (gsf->gf_fmode != MCAST_INCLUDE &&
gsf->gf_fmode != MCAST_EXCLUDE) gsf->gf_fmode != MCAST_EXCLUDE)
...@@ -529,7 +529,7 @@ int ip6_mc_msfget(struct sock *sk, struct group_filter *gsf, ...@@ -529,7 +529,7 @@ int ip6_mc_msfget(struct sock *sk, struct group_filter *gsf,
group = &((struct sockaddr_in6 *)&gsf->gf_group)->sin6_addr; group = &((struct sockaddr_in6 *)&gsf->gf_group)->sin6_addr;
if (!(ipv6_addr_type(group) & IPV6_ADDR_MULTICAST)) if (!ipv6_addr_is_multicast(group))
return -EINVAL; return -EINVAL;
idev = ip6_mc_find_dev(group, gsf->gf_interface); idev = ip6_mc_find_dev(group, gsf->gf_interface);
......
...@@ -277,25 +277,21 @@ static int ndisc_constructor(struct neighbour *neigh) ...@@ -277,25 +277,21 @@ static int ndisc_constructor(struct neighbour *neigh)
struct in6_addr *addr = (struct in6_addr*)&neigh->primary_key; struct in6_addr *addr = (struct in6_addr*)&neigh->primary_key;
struct net_device *dev = neigh->dev; struct net_device *dev = neigh->dev;
struct inet6_dev *in6_dev = in6_dev_get(dev); struct inet6_dev *in6_dev = in6_dev_get(dev);
int addr_type; int is_multicast = ipv6_addr_is_multicast(addr);
if (in6_dev == NULL) if (in6_dev == NULL)
return -EINVAL; return -EINVAL;
addr_type = ipv6_addr_type(addr);
if (in6_dev->nd_parms) if (in6_dev->nd_parms)
neigh->parms = in6_dev->nd_parms; neigh->parms = in6_dev->nd_parms;
if (addr_type&IPV6_ADDR_MULTICAST) neigh->type = is_multicast ? RTN_MULTICAST : RTN_UNICAST;
neigh->type = RTN_MULTICAST;
else
neigh->type = RTN_UNICAST;
if (dev->hard_header == NULL) { if (dev->hard_header == NULL) {
neigh->nud_state = NUD_NOARP; neigh->nud_state = NUD_NOARP;
neigh->ops = &ndisc_direct_ops; neigh->ops = &ndisc_direct_ops;
neigh->output = neigh->ops->queue_xmit; neigh->output = neigh->ops->queue_xmit;
} else { } else {
if (addr_type&IPV6_ADDR_MULTICAST) { if (is_multicast) {
neigh->nud_state = NUD_NOARP; neigh->nud_state = NUD_NOARP;
ndisc_mc_map(addr, neigh->ha, dev, 1); ndisc_mc_map(addr, neigh->ha, dev, 1);
} else if (dev->flags&(IFF_NOARP|IFF_LOOPBACK)) { } else if (dev->flags&(IFF_NOARP|IFF_LOOPBACK)) {
...@@ -355,7 +351,7 @@ ndisc_build_ll_hdr(struct sk_buff *skb, struct net_device *dev, ...@@ -355,7 +351,7 @@ ndisc_build_ll_hdr(struct sk_buff *skb, struct net_device *dev,
unsigned char *h_dest = NULL; unsigned char *h_dest = NULL;
if (dev->hard_header) { if (dev->hard_header) {
if (ipv6_addr_type(daddr) & IPV6_ADDR_MULTICAST) { if (ipv6_addr_is_multicast(daddr)) {
ndisc_mc_map(daddr, ha, dev, 1); ndisc_mc_map(daddr, ha, dev, 1);
h_dest = ha; h_dest = ha;
} else if (neigh) { } else if (neigh) {
...@@ -545,7 +541,7 @@ void ndisc_send_ns(struct net_device *dev, struct neighbour *neigh, ...@@ -545,7 +541,7 @@ void ndisc_send_ns(struct net_device *dev, struct neighbour *neigh,
} }
len = sizeof(struct icmp6hdr) + sizeof(struct in6_addr); len = sizeof(struct icmp6hdr) + sizeof(struct in6_addr);
send_llinfo = dev->addr_len && ipv6_addr_type(saddr) != IPV6_ADDR_ANY; send_llinfo = dev->addr_len && !ipv6_addr_any(saddr);
if (send_llinfo) if (send_llinfo)
len += NDISC_OPT_SPACE(dev->addr_len); len += NDISC_OPT_SPACE(dev->addr_len);
...@@ -714,7 +710,7 @@ static void ndisc_recv_ns(struct sk_buff *skb) ...@@ -714,7 +710,7 @@ static void ndisc_recv_ns(struct sk_buff *skb)
struct neighbour *neigh; struct neighbour *neigh;
int addr_type = ipv6_addr_type(saddr); int addr_type = ipv6_addr_type(saddr);
if (ipv6_addr_type(&msg->target)&IPV6_ADDR_MULTICAST) { if (ipv6_addr_is_multicast(&msg->target)) {
if (net_ratelimit()) if (net_ratelimit())
printk(KERN_WARNING "ICMP NS: target address is multicast\n"); printk(KERN_WARNING "ICMP NS: target address is multicast\n");
return; return;
...@@ -800,9 +796,7 @@ static void ndisc_recv_ns(struct sk_buff *skb) ...@@ -800,9 +796,7 @@ static void ndisc_recv_ns(struct sk_buff *skb)
} }
if (addr_type & IPV6_ADDR_UNICAST) { if (addr_type & IPV6_ADDR_UNICAST) {
int inc = ipv6_addr_type(daddr)&IPV6_ADDR_MULTICAST; if (ipv6_addr_is_multicast(daddr))
if (inc)
nd_tbl.stats.rcv_probes_mcast++; nd_tbl.stats.rcv_probes_mcast++;
else else
nd_tbl.stats.rcv_probes_ucast++; nd_tbl.stats.rcv_probes_ucast++;
...@@ -844,7 +838,7 @@ static void ndisc_recv_ns(struct sk_buff *skb) ...@@ -844,7 +838,7 @@ static void ndisc_recv_ns(struct sk_buff *skb)
} }
if (addr_type & IPV6_ADDR_UNICAST) { if (addr_type & IPV6_ADDR_UNICAST) {
int inc = ipv6_addr_type(daddr)&IPV6_ADDR_MULTICAST; int inc = ipv6_addr_is_multicast(daddr);
if (inc) if (inc)
nd_tbl.stats.rcv_probes_mcast++; nd_tbl.stats.rcv_probes_mcast++;
else else
...@@ -873,7 +867,7 @@ static void ndisc_recv_ns(struct sk_buff *skb) ...@@ -873,7 +867,7 @@ static void ndisc_recv_ns(struct sk_buff *skb)
(addr_type & IPV6_ADDR_UNICAST || (addr_type & IPV6_ADDR_UNICAST ||
addr_type == IPV6_ADDR_ANY) && addr_type == IPV6_ADDR_ANY) &&
pneigh_lookup(&nd_tbl, &msg->target, dev, 0)) { pneigh_lookup(&nd_tbl, &msg->target, dev, 0)) {
int inc = ipv6_addr_type(daddr)&IPV6_ADDR_MULTICAST; int inc = ipv6_addr_is_multicast(daddr);
if (skb->stamp.tv_sec == 0 || if (skb->stamp.tv_sec == 0 ||
skb->pkt_type == PACKET_HOST || skb->pkt_type == PACKET_HOST ||
...@@ -932,13 +926,13 @@ static void ndisc_recv_na(struct sk_buff *skb) ...@@ -932,13 +926,13 @@ static void ndisc_recv_na(struct sk_buff *skb)
return; return;
} }
if (ipv6_addr_type(&msg->target)&IPV6_ADDR_MULTICAST) { if (ipv6_addr_is_multicast(&msg->target)) {
if (net_ratelimit()) if (net_ratelimit())
printk(KERN_WARNING "NDISC NA: target address is multicast\n"); printk(KERN_WARNING "NDISC NA: target address is multicast\n");
return; return;
} }
if ((ipv6_addr_type(daddr)&IPV6_ADDR_MULTICAST) && if (ipv6_addr_is_multicast(daddr) &&
msg->icmph.icmp6_solicited) { msg->icmph.icmp6_solicited) {
ND_PRINTK0("NDISC: solicited NA is multicasted\n"); ND_PRINTK0("NDISC: solicited NA is multicasted\n");
return; return;
...@@ -1232,7 +1226,7 @@ static void ndisc_redirect_rcv(struct sk_buff *skb) ...@@ -1232,7 +1226,7 @@ static void ndisc_redirect_rcv(struct sk_buff *skb)
target = (struct in6_addr *) (icmph + 1); target = (struct in6_addr *) (icmph + 1);
dest = target + 1; dest = target + 1;
if (ipv6_addr_type(dest) & IPV6_ADDR_MULTICAST) { if (ipv6_addr_is_multicast(dest)) {
if (net_ratelimit()) if (net_ratelimit())
printk(KERN_WARNING "ICMP redirect for multicast addr\n"); printk(KERN_WARNING "ICMP redirect for multicast addr\n");
return; return;
......
...@@ -8,6 +8,10 @@ ...@@ -8,6 +8,10 @@
* Universidad Politecnica de Alcala de Henares - Alcala de H. (Madrid) - Spain * Universidad Politecnica de Alcala de Henares - Alcala de H. (Madrid) - Spain
* email: fanton@it.uc3m.es * email: fanton@it.uc3m.es
* *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* 2001-11-06: First try. Working with ip_queue.c for IPv4 and trying * 2001-11-06: First try. Working with ip_queue.c for IPv4 and trying
* to adapt it to IPv6 * to adapt it to IPv6
* HEAVILY based in ipqueue.c by James Morris. It's just * HEAVILY based in ipqueue.c by James Morris. It's just
......
...@@ -4,6 +4,10 @@ ...@@ -4,6 +4,10 @@
* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
* Copyright (C) 2000-2002 Netfilter core team <coreteam@netfilter.org> * Copyright (C) 2000-2002 Netfilter core team <coreteam@netfilter.org>
* *
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* 19 Jan 2002 Harald Welte <laforge@gnumonks.org> * 19 Jan 2002 Harald Welte <laforge@gnumonks.org>
* - increase module usage count as soon as we have rules inside * - increase module usage count as soon as we have rules inside
* a table * a table
......
/* /*
* This is a module which is used for logging packets. * This is a module which is used for logging packets.
*/ */
/* (C) 2001 Jan Rekorajski <baggins@pld.org.pl>
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* This is a module which is used for setting the NFMARK field of an skb. */ /* This is a module which is used for setting the NFMARK field of an skb. */
/* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ip.h> #include <linux/ip.h>
......
/* Kernel module to match AH parameters. */ /* Kernel module to match AH parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Kernel module to match Hop-by-Hop and Destination parameters. */ /* Kernel module to match Hop-by-Hop and Destination parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Kernel module to match ESP parameters. */ /* Kernel module to match ESP parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Kernel module to match EUI64 address parameters. */ /* Kernel module to match EUI64 address parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Kernel module to match FRAG parameters. */ /* Kernel module to match FRAG parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Kernel module to match Hop-by-Hop and Destination parameters. */ /* Kernel module to match Hop-by-Hop and Destination parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* /* Hop Limit matching module */
* Hop Limit matching module
* Maciej Soltysiak <solt@dns.toxicfilms.tv> /* (C) 2001-2002 Maciej Soltysiak <solt@dns.toxicfilms.tv>
* Based on HW's ttl module * Based on HW's ttl module
* *
* This software is distributed under the terms GNU GPL * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
......
/* ipv6header match - matches IPv6 packets based /* ipv6header match - matches IPv6 packets based
on whether they contain certain headers */ on whether they contain certain headers */
/* Original idea: Brad Chapman /* Original idea: Brad Chapman
* Rewritten by: Andras Kis-Szabo <kisza@sch.bme.hu> */ * Rewritten by: Andras Kis-Szabo <kisza@sch.bme.hu> */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
/* Length Match - IPv6 Port */ /* Length Match - IPv6 Port */
/* (C) 1999-2001 James Morris <jmorros@intercode.com.au>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/netfilter_ipv6/ip6t_length.h> #include <linux/netfilter_ipv6/ip6t_length.h>
......
/* Kernel module to control the rate /* Kernel module to control the rate
*
* Jrme de Vivie <devivie@info.enserb.u-bordeaux.fr>
* Herv Eychenne <eychenne@info.enserb.u-bordeaux.fr>
* *
* 2 September 1999: Changed from the target RATE to the match * 2 September 1999: Changed from the target RATE to the match
* `limit', removed logging. Did I mention that * `limit', removed logging. Did I mention that
* Alexey is a fucking genius? * Alexey is a fucking genius?
* Rusty Russell (rusty@rustcorp.com.au). */ * Rusty Russell (rusty@rustcorp.com.au). */
/* (C) 1999 Jrme de Vivie <devivie@info.enserb.u-bordeaux.fr>
* (C) 1999 Herv Eychenne <eychenne@info.enserb.u-bordeaux.fr>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/spinlock.h> #include <linux/spinlock.h>
......
/* Kernel module to match MAC address parameters. */ /* Kernel module to match MAC address parameters. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/if_ether.h> #include <linux/if_ether.h>
......
/* Kernel module to match NFMARK values. */ /* Kernel module to match NFMARK values. */
/* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
......
/* Kernel module to match one of a list of TCP/UDP ports: ports are in /* Kernel module to match one of a list of TCP/UDP ports: ports are in
the same place so we can treat them as equal. */ the same place so we can treat them as equal. */
/* (C) 1999-2001 Paul `Rusty' Russell
* (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/types.h> #include <linux/types.h>
#include <linux/udp.h> #include <linux/udp.h>
......
/* Kernel module to match various things tied to sockets associated with /* Kernel module to match various things tied to sockets associated with
locally generated outgoing packets. locally generated outgoing packets. */
Copyright (C) 2000,2001 Marc Boucher /* (C) 2000-2001 Marc Boucher <marc@mbsi.ca>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/file.h> #include <linux/file.h>
......
/* Kernel module to match ROUTING parameters. */ /* Kernel module to match ROUTING parameters. */
/* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/
#include <linux/module.h> #include <linux/module.h>
#include <linux/skbuff.h> #include <linux/skbuff.h>
#include <linux/ipv6.h> #include <linux/ipv6.h>
......
...@@ -2,7 +2,13 @@ ...@@ -2,7 +2,13 @@
* This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x. * This is the 1999 rewrite of IP Firewalling, aiming for kernel 2.3.x.
* *
* Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
* Copyright (C) 2000-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/netfilter_ipv6/ip6_tables.h> #include <linux/netfilter_ipv6/ip6_tables.h>
......
...@@ -2,6 +2,13 @@ ...@@ -2,6 +2,13 @@
* IPv6 packet mangling table, a port of the IPv4 mangle table to IPv6 * IPv6 packet mangling table, a port of the IPv4 mangle table to IPv6
* *
* Copyright (C) 2000-2001 by Harald Welte <laforge@gnumonks.org> * Copyright (C) 2000-2001 by Harald Welte <laforge@gnumonks.org>
* Copyright (C) 2000-2004 Netfilter Core Team <coreteam@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* Extended to all five netfilter hooks by Brad Chapman & Harald Welte
*/ */
#include <linux/module.h> #include <linux/module.h>
#include <linux/netfilter_ipv6/ip6_tables.h> #include <linux/netfilter_ipv6/ip6_tables.h>
......
...@@ -81,7 +81,7 @@ struct sock *__raw_v6_lookup(struct sock *sk, unsigned short num, ...@@ -81,7 +81,7 @@ struct sock *__raw_v6_lookup(struct sock *sk, unsigned short num,
struct in6_addr *loc_addr, struct in6_addr *rmt_addr) struct in6_addr *loc_addr, struct in6_addr *rmt_addr)
{ {
struct hlist_node *node; struct hlist_node *node;
int addr_type = ipv6_addr_type(loc_addr); int is_multicast = ipv6_addr_is_multicast(loc_addr);
sk_for_each_from(sk, node) sk_for_each_from(sk, node)
if (inet_sk(sk)->num == num) { if (inet_sk(sk)->num == num) {
...@@ -94,7 +94,7 @@ struct sock *__raw_v6_lookup(struct sock *sk, unsigned short num, ...@@ -94,7 +94,7 @@ struct sock *__raw_v6_lookup(struct sock *sk, unsigned short num,
if (!ipv6_addr_any(&np->rcv_saddr)) { if (!ipv6_addr_any(&np->rcv_saddr)) {
if (!ipv6_addr_cmp(&np->rcv_saddr, loc_addr)) if (!ipv6_addr_cmp(&np->rcv_saddr, loc_addr))
goto found; goto found;
if ((addr_type & IPV6_ADDR_MULTICAST) && if (is_multicast &&
inet6_mc_check(sk, loc_addr, rmt_addr)) inet6_mc_check(sk, loc_addr, rmt_addr))
goto found; goto found;
continue; continue;
......
...@@ -658,7 +658,7 @@ static int udpv6_rcv(struct sk_buff **pskb, unsigned int *nhoffp) ...@@ -658,7 +658,7 @@ static int udpv6_rcv(struct sk_buff **pskb, unsigned int *nhoffp)
/* /*
* Multicast receive code * Multicast receive code
*/ */
if (ipv6_addr_type(daddr) & IPV6_ADDR_MULTICAST) { if (ipv6_addr_is_multicast(daddr)) {
udpv6_mcast_deliver(uh, saddr, daddr, skb); udpv6_mcast_deliver(uh, saddr, daddr, skb);
return 0; return 0;
} }
......
...@@ -39,6 +39,16 @@ config NET_SCH_HTB ...@@ -39,6 +39,16 @@ config NET_SCH_HTB
To compile this code as a module, choose M here: the To compile this code as a module, choose M here: the
module will be called sch_htb. module will be called sch_htb.
config NET_SCH_HFSC
tristate "HFSC packet scheduler"
depends on NET_SCHED
---help---
Say Y here if you want to use the Hierarchical Fair Service Curve
(HFSC) packet scheduling algorithm for some of your network devices.
To compile this code as a module, choose M here: the
module will be called sch_hfsc.
config NET_SCH_CSZ config NET_SCH_CSZ
tristate "CSZ packet scheduler" tristate "CSZ packet scheduler"
depends on NET_SCHED depends on NET_SCHED
...@@ -55,7 +65,6 @@ config NET_SCH_CSZ ...@@ -55,7 +65,6 @@ config NET_SCH_CSZ
module will be called sch_csz. module will be called sch_csz.
#tristate ' H-PFQ packet scheduler' CONFIG_NET_SCH_HPFQ #tristate ' H-PFQ packet scheduler' CONFIG_NET_SCH_HPFQ
#tristate ' H-FSC packet scheduler' CONFIG_NET_SCH_HFCS
config NET_SCH_ATM config NET_SCH_ATM
tristate "ATM pseudo-scheduler" tristate "ATM pseudo-scheduler"
depends on NET_SCHED && ATM depends on NET_SCHED && ATM
......
This diff is collapsed.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment