Skip to contentSkip to conversation

ipset: add "inner" flag support

PATCH Superseded Dash Four 3 participants 5 messages May 29, 2013 netfilter

v1 of 4 Superseded Latest is v4 →

lore
Share & tools
lore

Dash Four

author
#0 lore raw

cover ipset: add "inner" flag support

This series of 4 patches implements "inner" flag option in the set iptables match, allowing matching based on the properties (source/destination IP address, protocol, port and so on) of the original (inner) connection in the event of the following ICMP[v4,v6] messages:

ICMPv4 destination-unreachable (code 3);
ICMPv4 source-quench (code 4);
ICMPv4 time-exceeded (code 11);
ICMPv6 destination-unreachable (code 1);
ICMPv6 packet-too-big (code 2);
ICMPv6 time-exceeded (code 3);

Dash Four (4):
ipset: minor variable-naming corrections
ipset: add "inner" flag implementation
iptables: add set match "inner" flag support iptables (userspace): add set match "inner" flag support

maintainer
#1 lore raw

Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

Hi Jozsef,

Cc'ing netfilter-core.

David has been pushing this guy to get him out of anonimity. According to the kernel policy (Developer authenticity certificate), we need contributions from a source that we can recognize to avoid legal issues.

If the contributions are not worth, like that stupid variable rename he made, better just not to risk and skip them.

Regards.

Quoted 22 lines · Dash Four

This series of 4 patches implements "inner" flag option in the set iptables match, allowing matching based on the properties (source/destination IP address, protocol, port and so on) of the original (inner) connection in the event of the following ICMP[v4,v6] messages:

ICMPv4 destination-unreachable (code 3);
ICMPv4 source-quench (code 4);
ICMPv4 time-exceeded (code 11);
ICMPv6 destination-unreachable (code 1);
ICMPv6 packet-too-big (code 2);
ICMPv6 time-exceeded (code 3);

Dash Four (4):
ipset: minor variable-naming corrections
ipset: add "inner" flag implementation
iptables: add set match "inner" flag support iptables (userspace): add set match "inner" flag support

#2 lore raw

Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

Quoted 4 lines · Pablo Neira Ayuso

David has been pushing this guy to get him out of anonimity. According to the kernel policy (Developer authenticity certificate), we need contributions from a source that we can recognize to avoid legal issues.

I have already discussed the question with it and it is a real name.

Best regards,
Jozsef
-
E-mail : [email protected], [email protected] PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences

          H-1525 Budapest 114, POB. 49, Hungary
#3 lore raw

Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

Quoted 8 lines · Jozsef Kadlecsik
Quoted 4 lines · Pablo Neira Ayuso

David has been pushing this guy to get him out of anonimity. According to the kernel policy (Developer authenticity certificate), we need contributions from a source that we can recognize to avoid legal issues.

I have already discussed the question with it and it is a real name.

Sorry, confusing mistypeing: s/it/him/

Best regards,
Jozsef
-
E-mail : [email protected], [email protected] PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences

          H-1525 Budapest 114, POB. 49, Hungary
#4 lore raw
In reply to Dash Four
Quoted 14 lines · Dash Four

This series of 4 patches implements "inner" flag option in the set iptables match, allowing matching based on the properties (source/destination IP address, protocol, port and so on) of the original (inner) connection in the event of the following ICMP[v4,v6] messages:

ICMPv4 destination-unreachable (code 3);
ICMPv4 source-quench (code 4);
ICMPv4 time-exceeded (code 11);
ICMPv6 destination-unreachable (code 1);
ICMPv6 packet-too-big (code 2);
ICMPv6 time-exceeded (code 3);

Quoted 5 lines

Dash Four (4):
ipset: minor variable-naming corrections
ipset: add "inner" flag implementation
iptables: add set match "inner" flag support iptables (userspace): add set match "inner" flag support

I can review your patches in a few days, a quick look is not enough.

Best regards,
Jozsef
-
E-mail : [email protected], [email protected] PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences

          H-1525 Budapest 114, POB. 49, Hungary