Skip to contentSkip to conversation

: add comment match

PATCH In review Patrick McHardy 1 participant 1 message Sep 21, 2004

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

PATCH 12/12 : add comment match

[email protected], 2004-09-20 11:55:28+02:00, [email protected]
[NETFILTER]: add comment match

2.4 version by Brad Fisher <[email protected]>

# This is a BitKeeper generated diff -Nru style patch. #
# ChangeSet
# 2004/09/20 11:55:28+02:00 [email protected]
# [NETFILTER]: add comment match
#
# 2.4 version by Brad Fisher <[email protected]>
#
# Signed-off-by: Patrick McHardy <[email protected]>
#

# net/ipv4/netfilter/ipt_comment.c
#   2004/09/20 11:55:06+02:00 [email protected] +59 -0
# 
# net/ipv4/netfilter/ipt_comment.c
#   2004/09/20 11:55:06+02:00 [email protected] +0 -0
#   BitKeeper file /home/kaber/src/net/2.6-netfilter/net/ipv4/netfilter/ipt_comment.c
# 
# include/linux/netfilter_ipv4/ipt_comment.h
#   2004/09/20 11:55:04+02:00 [email protected] +10 -0
# 
# net/ipv4/netfilter/Makefile
#   2004/09/20 11:55:04+02:00 [email protected] +1 -6
#   [NETFILTER]: add comment match
#   
#   2.4 version by Brad Fisher <[email protected]>
#   
#   Signed-off-by: Patrick McHardy <[email protected]>
# 
# net/ipv4/netfilter/Kconfig
#   2004/09/20 11:55:04+02:00 [email protected] +10 -0
#   [NETFILTER]: add comment match
#   
#   2.4 version by Brad Fisher <[email protected]>
#   
#   Signed-off-by: Patrick McHardy <[email protected]>
# 
# include/linux/netfilter_ipv4/ipt_comment.h
#   2004/09/20 11:55:04+02:00 [email protected] +0 -0
#   BitKeeper file /home/kaber/src/net/2.6-netfilter/include/linux/netfilter_ipv4/ipt_comment.h
# 
diff -Nru a/include/linux/netfilter_ipv4/ipt_comment.h b/include/linux/netfilter_ipv4/ipt_comment.h
--- /dev/null	Wed Dec 31 16:00:00 196900
+++ b/include/linux/netfilter_ipv4/ipt_comment.h	2004-09-20 12:00:15 +02:00
@@ -0,0 +1,10 @@
+#ifndef _IPT_COMMENT_H
+#define _IPT_COMMENT_H
+
+#define IPT_MAX_COMMENT_LEN 256
+
+struct ipt_comment_info {
+	unsigned char comment[IPT_MAX_COMMENT_LEN];
+};
+
+#endif /* _IPT_COMMENT_H */
diff -Nru a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig
--- a/net/ipv4/netfilter/Kconfig	2004-09-20 12:00:15 +02:00
+++ b/net/ipv4/netfilter/Kconfig	2004-09-20 12:00:15 +02:00
@@ -332,6 +332,16 @@
 	  If you want to compile it as a module, say M here and read
 	  Documentation/modules.txt.  If unsure, say `N'.

+config IP_NF_MATCH_COMMENT
+ tristate 'comment match support'
+ depends on IP_NF_IPTABLES
+ help
+ This option adds a `comment' dummy-match, which allows you to put
+ comments in your iptables ruleset.
+
+ If you want to compile it as a module, say M here and read
+ Documentation/modules.txt. If unsure, say `N'.
+
# `filter', generic and specific targets
config IP_NF_FILTER
tristate "Packet filtering"

net/ipv4/netfilter/Makefile +1 -6
diff -Nru a/net/ipv4/netfilter/Makefile b/net/ipv4/netfilter/Makefile
@@ -50,28 +50,23 @@
 obj-$(CONFIG_IP_NF_MATCH_MARK) += ipt_mark.o
 obj-$(CONFIG_IP_NF_MATCH_MAC) += ipt_mac.o
 obj-$(CONFIG_IP_NF_MATCH_IPRANGE) += ipt_iprange.o
-
 obj-$(CONFIG_IP_NF_MATCH_PKTTYPE) += ipt_pkttype.o
 obj-$(CONFIG_IP_NF_MATCH_MULTIPORT) += ipt_multiport.o
 obj-$(CONFIG_IP_NF_MATCH_OWNER) += ipt_owner.o
 obj-$(CONFIG_IP_NF_MATCH_TOS) += ipt_tos.o
-
 obj-$(CONFIG_IP_NF_MATCH_RECENT) += ipt_recent.o
-
 obj-$(CONFIG_IP_NF_MATCH_ECN) += ipt_ecn.o
 obj-$(CONFIG_IP_NF_MATCH_DSCP) += ipt_dscp.o
 obj-$(CONFIG_IP_NF_MATCH_AH_ESP) += ipt_ah.o ipt_esp.o
-
 obj-$(CONFIG_IP_NF_MATCH_LENGTH) += ipt_length.o
-
 obj-$(CONFIG_IP_NF_MATCH_TTL) += ipt_ttl.o
 obj-$(CONFIG_IP_NF_MATCH_STATE) += ipt_state.o
 obj-$(CONFIG_IP_NF_MATCH_CONNTRACK) += ipt_conntrack.o
 obj-$(CONFIG_IP_NF_MATCH_TCPMSS) += ipt_tcpmss.o
 obj-$(CONFIG_IP_NF_MATCH_REALM) += ipt_realm.o
 obj-$(CONFIG_IP_NF_MATCH_ADDRTYPE) += ipt_addrtype.o
-
 obj-$(CONFIG_IP_NF_MATCH_PHYSDEV) += ipt_physdev.o
+obj-$(CONFIG_IP_NF_MATCH_COMMENT) += ipt_comment.o
 
 # targets
 obj-$(CONFIG_IP_NF_TARGET_REJECT) += ipt_REJECT.o
net/ipv4/netfilter/ipt_comment.c new file +59 -0

59 lines not on this page · raw message