1 of 3 for patch-o-matic-ng
PATCH 1/1 1 of 3 for patch-o-matic-ng
This is the first of 3 patches for patch-o-matic-ng that I would like to submit. It contains a general purpose hash table that is used by the match filters in the next 2 patches.
I have tested these filters from the tip of the patch-o-matic-ng CVS tree as of this morning. I have noticed that there appear to be 2 deficiencies:
1) Dependencies in the info file appear to be ignored.
2) The iptables/extension test file, e.g., .foo-test, does not get copied when updating the iptables extension library.
Both of these match filters have been in use for about 6 weeks on over a thousand units. PSDP on my primary firewall catches sometimes several thousand attacks from unique IP source addresses in a 24 hour period.
Signature · 2 lines
Tim Gardner - [email protected] www.tpi.com 406-443-5357
hash/help +2 -0
@@ -0,0 +1,2 @@ +This module adds general purpose hash table functionality. In particular, the +filters psdp and fuzzyp depend on this module.
hash/info +4 -0
@@ -0,0 +1,4 @@ +Title: General pupose hash table API. +Author: Tim Gardner <[email protected]> +Status: Stable +Repository: extra
hash/linux/net/ipv4/netfilter/Config.in.ladd +2 -0
@@ -0,0 +1,2 @@ +# The simple matches. +dep_tristate ' Hash table support for some filters.' CONFIG_IP_NF_HASH $CONFIG_IP_NF_IPTABLES
hash/linux/net/ipv4/netfilter/ipt_hash.c +433 -0
433 lines not on this page · raw message
hash/linux/net/ipv4/netfilter/ipt_hash.h +129 -0
129 lines not on this page · raw message
hash/linux/net/ipv4/netfilter/Kconfig.ladd +5 -0
@@ -0,0 +1,5 @@ +config IP_NF_HASH + tristate "IP tables hash support. (required for some filters.)" + help + These hash functions are required for some filters. If unsure, say Y. +
hash/linux/net/ipv4/netfilter/Makefile.ladd +2 -0
@@ -0,0 +1,2 @@ +# the three instances of ip_tables +obj-$(CONFIG_IP_NF_HASH) += ipt_hash.o