: Add IPv6 REJECT target
Subsystems (2)
PATCH 3/4 : Add IPv6 REJECT target
[NETFILTER]: Add IPv6 REJECT target
Originally written by Yasuyuki Kozakai <[email protected]>, taken from netfilter patch-o-matic and fixed up to work with current kernels.
Signed-off-by Patrick McHardy <[email protected]>
---
commit a0a72e7c68dee59a8345cdffbe0da7085deec867
tree 1ec3459fad9d07ebc718fb964b5008f3cc76e05d
parent d5329f7baf82fbc6339fa9c7a167bd5728be46ea
author Patrick McHardy <[email protected]> Sun, 21 Aug 2005 21:56:31 +0200 committer Patrick McHardy <[email protected]> Sun, 21 Aug 2005 21:56:31 +0200
include/linux/netfilter_ipv6/ip6t_REJECT.h | 18 ++ net/ipv6/netfilter/Kconfig | 10 + net/ipv6/netfilter/Makefile | 1 net/ipv6/netfilter/ip6t_REJECT.c | 284 ++++++++++++++++++++++++++++ 4 files changed, 313 insertions(+), 0 deletions(-)
include/linux/netfilter_ipv6/ip6t_REJECT.h new file +18 -0
@@ -0,0 +1,18 @@ +#ifndef _IP6T_REJECT_H +#define _IP6T_REJECT_H + +enum ip6t_reject_with { +IP6T_ICMP6_NO_ROUTE , +IP6T_ICMP6_ADM_PROHIBITED , +IP6T_ICMP6_NOT_NEIGHBOUR , +IP6T_ICMP6_ADDR_UNREACH , +IP6T_ICMP6_PORT_UNREACH , +IP6T_ICMP6_ECHOREPLY , +IP6T_TCP_RESET +}; + +struct ip6t_reject_info { +u_int32_t with;/* reject type */ +}; + +#endif /*_IP6T_REJECT_H*/
net/ipv6/netfilter/Kconfig +10 -0
@@ -199,6 +199,16 @@ config IP6_NF_TARGET_LOG To compile it as a module, choose M here. If unsure, say N. +config IP6_NF_TARGET_REJECT + tristate "REJECT target support" + depends on IP6_NF_FILTER + help + The REJECT target allows a filtering rule to specify that an ICMPv6 + error should be issued in response to an incoming packet, rather + than silently being dropped. + + To compile it as a module, choose M here. If unsure, say N. + # if [ "$CONFIG_IP6_NF_FILTER" != "n" ]; then # dep_tristate ' REJECT target support' CONFIG_IP6_NF_TARGET_REJECT $CONFIG_IP6_NF_FILTER # if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then
net/ipv6/netfilter/Makefile +1 -0
@@ -24,4 +24,5 @@ obj-$(CONFIG_IP6_NF_QUEUE) += ip6_queue. obj-$(CONFIG_IP6_NF_TARGET_LOG) += ip6t_LOG.o obj-$(CONFIG_IP6_NF_RAW) += ip6table_raw.o obj-$(CONFIG_IP6_NF_MATCH_HL) += ip6t_hl.o +obj-$(CONFIG_IP6_NF_TARGET_REJECT) += ip6t_REJECT.o obj-$(CONFIG_NETFILTER_NETLINK_QUEUE) += ip6t_NFQUEUE.o
net/ipv6/netfilter/ip6t_REJECT.c new file +284 -0
284 lines not on this page · raw message