Re: [PATCH 14/15] netfilter: ipset: hash:net,iface type introduced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH 14/15] netfilter: ipset: hash:net,iface type introduced
From: Patrick McHardy <kaber@xxxxxxxxx>
Date: Thu, 16 Jun 2011 19:01:14 +0200
Cc: netfilter-devel@xxxxxxxxxxxxxxx, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
In-reply-to: <1307465780-28980-15-git-send-email-kadlec@xxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100620 Icedove/3.0.5

On 07.06.2011 18:56, Jozsef Kadlecsik wrote:
> The hash:net,iface type makes possible to store network address and
> interface name pairs in a set. It's mostly suitable for egress
> and ingress filtering. Examples:
> 
>         # ipset create test hash:net,iface
>         # ipset add test 192.168.0.0/16,eth0
>         # ipset add test 192.168.0.0/24,eth1

Applied.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

References:
- [PATCH 00/15] ipset patches against nf-next-2.6, next try
  - From: Jozsef Kadlecsik
- [PATCH 01/15] netfilter: ipset: Timeout can be modified for already added elements
  - From: Jozsef Kadlecsik
- [PATCH 02/15] netfilter: ipset: Whitespace fixes: some space before tab slipped in.
  - From: Jozsef Kadlecsik
- [PATCH 03/15] netfilter: ipset: Options and flags support added to the kernel API
  - From: Jozsef Kadlecsik
- [PATCH 04/15] netfilter: ipset: Support listing setnames and headers too
  - From: Jozsef Kadlecsik
- [PATCH 05/15] netfilter: ipset: Fix adding ranges to hash types
  - From: Jozsef Kadlecsik
- [PATCH 06/15] netfilter: ipset: Set type support with multiple revisions added
  - From: Jozsef Kadlecsik
- [PATCH 07/15] netfilter: ipset: Support range for IPv4 at adding/deleting elements for hash:*net* types
  - From: Jozsef Kadlecsik
- [PATCH 08/15] netfilter: ipset: Adding ranges to hash types with timeout could still fail, fixed
  - From: Jozsef Kadlecsik
- [PATCH 09/15] netfilter: ipset: Take into account cidr value for the from address when creating the set
  - From: Jozsef Kadlecsik
- [PATCH 10/15] netfilter: ipset: Use unified from/to address masking and check the usage
  - From: Jozsef Kadlecsik
- [PATCH 11/15] netfilter: ipset: Add xt_action_param to the variant level kadt functions, ipset API change
  - From: Jozsef Kadlecsik
- [PATCH 12/15] netfilter: ipset: Fix return code for destroy when sets are in use
  - From: Jozsef Kadlecsik
- [PATCH 13/15] netfilter: ipset: Use the stored first cidr value instead of '1'
  - From: Jozsef Kadlecsik
- [PATCH 14/15] netfilter: ipset: hash:net,iface type introduced
  - From: Jozsef Kadlecsik

Prev by Date: Re: [PATCH 13/15] netfilter: ipset: Use the stored first cidr value instead of '1'
Next by Date: Re: [PATCH 15/15] netfilter: ipset: Whitespace and coding fixes detected by checkpatch.pl
Previous by thread: Re: [PATCH 15/15] netfilter: ipset: Whitespace and coding fixes detected by checkpatch.pl
Next by thread: Re: [PATCH 13/15] netfilter: ipset: Use the stored first cidr value instead of '1'
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [LARTC] [Bugtraq] [Yosemite Forum]