17 Oct, 2012

1 commit

  • Remove non-UAPI Kbuild files that have become empty as a result of UAPI
    disintegration. They used to have only header-y lines in them and those have
    now moved to the Kbuild files in the corresponding uapi/ directories.

    Possibly these should not be removed but rather have a comment inserted to say
    they are intentionally left blank. This would make it easier to add generated
    header lines in future without having to restore the infrastructure.

    Note that at this point not all the UAPI disintegration parts have been merged,
    so it is likely that more empty Kbuild files will turn up.

    It is probably necessary to make the files non-empty to prevent the patch
    program from automatically deleting them when it reduces them to nothing.

    Signed-off-by: David Howells

    David Howells
     

09 Oct, 2012

1 commit


21 Feb, 2012

1 commit

  • ebt_among extension of ebtables uses __alignof__(_xt_align) while the
    corresponding kernel module uses __alignof__(ebt_replace) to determine
    the alignment in EBT_ALIGN().

    These are the results of these values on different platforms:

    x86 x86_64 ppc
    __alignof__(_xt_align) 4 8 8
    __alignof__(ebt_replace) 4 8 4

    ebtables fails to add rules which use the among extension.

    I'm using kernel 2.6.33 and ebtables 2.0.10-4

    According to Bart De Schuymer, userspace alignment was changed to
    _xt_align to fix an alignment issue on a userspace32-kernel64 system
    (he thinks it was for an ARM device). So userspace must be right.
    The kernel alignment macro needs to change so it also uses _xt_align
    instead of ebt_replace. The userspace changes date back from
    June 29, 2009.

    Signed-off-by: Joerg Willmann
    Signed-off by: Bart De Schuymer
    Signed-off-by: Pablo Neira Ayuso

    Joerg Willmann
     

31 Mar, 2011

1 commit


21 Jan, 2011

1 commit


18 Jan, 2011

1 commit


13 Jan, 2011

1 commit


18 Oct, 2010

1 commit


15 Aug, 2010

1 commit


18 Jan, 2010

1 commit


05 Nov, 2009

1 commit

  • This cleanup patch puts struct/union/enum opening braces,
    in first line to ease grep games.

    struct something
    {

    becomes :

    struct something {

    Signed-off-by: Eric Dumazet
    Signed-off-by: David S. Miller

    Eric Dumazet
     

24 Aug, 2009

1 commit


04 Nov, 2008

2 commits

  • * return ebt_table from ebt_register_table(), module code will save it into
    per-netns data for unregistration
    * duplicate ebt_table at the very beginning of registration -- it's added into
    list, so one ebt_table wouldn't end up in many lists (and each netns has
    different one)
    * introduce underscored tables in individial modules, this is temporary to not
    break bisection.

    Signed-off-by: Alexey Dobriyan
    Signed-off-by: Patrick McHardy

    Alexey Dobriyan
     
  • * propagate netns from userspace, register table in passed netns
    * remporarily register every ebt_table in init_net

    P. S.: one needs to add ".netns_ok = 1" to igmp_protocol to test with
    ebtables(8) in netns.

    Signed-off-by: Alexey Dobriyan
    Signed-off-by: Patrick McHardy

    Alexey Dobriyan
     

08 Oct, 2008

9 commits


10 Jun, 2008

1 commit

  • It implements matching functions for IPv6 address & traffic class
    (merged from the patch sent by Jan Engelhardt [jengelh@computergmbh.de]
    http://marc.info/?l=netfilter-devel&m=120182168424052&w=2), protocol,
    and layer-4 port id. Corresponding watcher logging function is also
    added for IPv6.

    Signed-off-by: Kuo-lang Tseng
    Signed-off-by: Patrick McHardy
    Signed-off-by: David S. Miller

    Kuo-lang Tseng
     

14 Apr, 2008

1 commit


16 Oct, 2007

1 commit


26 Apr, 2007

2 commits

  • The attached patch adds gratuitous arp filtering, more precisely: it
    allows checking that the IPv4 source address matches the IPv4
    destination address inside the ARP header. It also adds a check for the
    hardware address type when matching MAC addresses (nothing critical,
    just for better consistency).

    Signed-off-by: Bart De Schuymer
    Acked-by: Carl-Daniel Hailfinger
    Signed-off-by: Patrick McHardy
    Signed-off-by: David S. Miller

    Bart De Schuymer
     
  • For the places where we need a pointer to the mac header, it is still legal to
    touch skb->mac.raw directly if just adding to, subtracting from or setting it
    to another layer header.

    This one also converts some more cases to skb_reset_mac_header() that my
    regex missed as it had no spaces before nor after '=', ugh.

    Signed-off-by: Arnaldo Carvalho de Melo
    Signed-off-by: David S. Miller

    Arnaldo Carvalho de Melo
     

03 Dec, 2006

3 commits


04 Oct, 2006

1 commit


19 Sep, 2006

1 commit


18 Jun, 2006

1 commit


28 Feb, 2006

1 commit

  • The nfnetlink_log infrastructure changes broke compatiblity of the LOG
    targets. They currently use whatever log backend was registered first,
    which means that if ipt_ULOG was loaded first, no messages will be printed
    to the ring buffer anymore.

    Restore compatiblity by using the old log functions by default and only use
    the nf_log backend if the user explicitly said so.

    Signed-off-by: Patrick McHardy
    Signed-off-by: David S. Miller

    Patrick McHardy
     

17 Apr, 2005

1 commit

  • Initial git repository build. I'm not bothering with the full history,
    even though we have it. We can create a separate "historical" git
    archive of that later if we want to, and in the meantime it's about
    3.2GB when imported into git - space that would just make the early
    git days unnecessarily complicated, when we don't have a lot of good
    infrastructure for it.

    Let it rip!

    Linus Torvalds