netfilter: add devgroup match
Subsystems (2)
PATCH 1/1 netfilter: add devgroup match
This patch adds a 'devgroup' match, which can be used to match on the device group a network device is assigned to.
commit 92f2850a01bf0689e7ee5797e08afaf2f71e24b7
Author: Patrick McHardy <[email protected]> Date: Thu Jan 27 11:16:11 2011 +0100
netfilter: add devgroup match
Signed-off-by Patrick McHardy <[email protected]>
include/linux/netfilter/Kbuild +1 -0
@@ -35,6 +35,7 @@ header-y += xt_connmark.h header-y += xt_conntrack.h header-y += xt_cpu.h header-y += xt_dccp.h +header-y += xt_devgroup.h header-y += xt_dscp.h header-y += xt_esp.h header-y += xt_hashlimit.h
include/linux/netfilter/xt_devgroup.h new file +21 -0
@@ -0,0 +1,21 @@ +#ifndef _XT_DEVGROUP_H +#define _XT_DEVGROUP_H + +#include <linux/types.h> + +enum xt_devgroup_flags { +XT_DEVGROUP_MATCH_SRC =0x1 , +XT_DEVGROUP_INVERT_SRC =0x2 , +XT_DEVGROUP_MATCH_DST =0x4 , +XT_DEVGROUP_INVERT_DST =0x8 , +}; + +struct xt_devgroup_info { +__u32 flags; +__u32 src_group; +__u32 src_mask; +__u32 dst_group; +__u32 dst_mask; +}; + +#endif /* _XT_DEVGROUP_H */
net/netfilter/Kconfig +9 -0
@@ -726,6 +726,15 @@ config NETFILTER_XT_MATCH_DCCP If you want to compile it as a module, say M here and read <file:Documentation/kbuild/modules.txt>. If unsure, say `N'. +config NETFILTER_XT_MATCH_DEVGROUP + tristate '"devgroup" match support' + depends on NETFILTER_ADVANCED + help + This options adds a `devgroup' match, which allows to match on the + device group a network device is assigned to. + + To compile it as a module, choose M here. If unsure, say N. + config NETFILTER_XT_MATCH_DSCP tristate '"dscp" and "tos" match support' depends on NETFILTER_ADVANCED
net/netfilter/Makefile +1 -0
@@ -76,6 +76,7 @@ obj-$(CONFIG_NETFILTER_XT_MATCH_CONNLIMIT) += xt_connlimit.o obj-$(CONFIG_NETFILTER_XT_MATCH_CONNTRACK) += xt_conntrack.o obj-$(CONFIG_NETFILTER_XT_MATCH_CPU) += xt_cpu.o obj-$(CONFIG_NETFILTER_XT_MATCH_DCCP) += xt_dccp.o +obj-$(CONFIG_NETFILTER_XT_MATCH_DEVGROUP) += xt_devgroup.o obj-$(CONFIG_NETFILTER_XT_MATCH_DSCP) += xt_dscp.o obj-$(CONFIG_NETFILTER_XT_MATCH_ESP) += xt_esp.o obj-$(CONFIG_NETFILTER_XT_MATCH_HASHLIMIT) += xt_hashlimit.o
net/netfilter/xt_devgroup.c new file +82 -0
82 lines not on this page · raw message