lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[NETFILTER]: x_tables: add connlimit match

Browse Source 
ipt_connlimit has been sitting in POM-NG for a long time.
Here is a new shiny xt_connlimit with:

 * xtables'ified
 * will request the layer3 module
   (previously it hotdropped every packet when it was not loaded)
 * fixed: there was a deadlock in case of an OOM condition
 * support for any layer4 protocol (e.g. UDP/SCTP)
 * using jhash, as suggested by Eric Dumazet
 * ipv6 support

Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Jan Engelhardt
2007-07-14 20:47:26 -07:00
committed by David S. Miller
parent a887c1c148
commit 370786f9cf
4 changed files with 338 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
include/linux/netfilter/xt_connlimit.h Normal file
View File

@ -0,0 +1,17 @@
#ifndef _XT_CONNLIMIT_H
#define _XT_CONNLIMIT_H
struct xt_connlimit_data;
struct xt_connlimit_info {
union {
u_int32_t v4_mask;
u_int32_t v6_mask[4];
};
unsigned int limit, inverse;
/* this needs to be at the end */
struct xt_connlimit_data *data __attribute__((aligned(8)));
};
#endif /* _XT_CONNLIMIT_H */