Mailing List Archive: iptables: Devel

[PATCH] realm match - match by route entry

Index | Next | Previous | View Threaded

sampsa at netsonic

Jul 30, 2001, 3:07 AM

Post #1 of 5 (595 views)
Permalink

[PATCH] realm match - match by route entry

Hello,

Here is my contribution to Netfilter.

...
Author: Sampsa Ranta <sampsa [at] netsonic>
Status: Experimental

realm match: uses realm key from routing as match criteria similiar to
one in packet classifier

/** snip from packet classifier in Configure.help */
Routing tables based classifier
CONFIG_NET_CLS_ROUTE4
If you say Y here, you will be able to classify outgoing packets
according to the route table entry they matched. If unsure, say Y.
/** end snip **/

# Example
# add route
/sbin/ip route add 194.29.194.0/24 via 194.29.192.1 realm 10

# source realm is in realm with mask 0xFFFF0000,
# destination is in realm with mask 0x0000FFFF

# match destination realm
/usr/local/sbin/iptables -A OUTPUT -m realm --realm 10 -j LOG

# match realm of source, this is also determinated by routing,
/usr/local/sbin/iptables -A INPUT -m realm --realm 655360 -j LOG

THIS PATCH REQUIRES CONFIG_NET_CLS_ROUTE TO BE SET
...

- Sampsa Ranta
sampsa [at] netsonic

Attachments:

realm.patch (3.52 KB)

libipt_realm.c (2.97 KB)

realm.patch.help (0.89 KB)

laforge at gnumonks

Jul 29, 2001, 3:32 PM

Post #2 of 5 (570 views)
Permalink

Re: [PATCH] realm match - match by route entry [In reply to]

On Mon, Jul 30, 2001 at 01:07:58PM +0300, Sampsa Ranta wrote:
>
> Hello,
>
> Here is my contribution to Netfilter.

Hi, first of all thanks for your contribution.

I have included it in netfilter patch-o-matic now, but have to critisize
a few things

- patch did not comply to patch-o-matic rules
(makefile and config.in were patched from .patch!)
- patch was not a patch-of-patch for easy apply process
- patch does not add a Configure.help entry for the user
- patch did not contain extensions/.realm.test

I have now added / corrected those things, but for future patch submissions,
please take this into consideration, as it eases the process of integration
for the maintainers.

Thanks.

> - Sampsa Ranta
> sampsa [at] netsonic

--
Live long and prosper
- Harald Welte / laforge [at] gnumonks http://www.gnumonks.org
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)

laforge at gnumonks

Jul 29, 2001, 11:40 PM

Post #3 of 5 (568 views)
Permalink

Re: [PATCH] realm match - match by route entry [In reply to]

On Mon, Jul 30, 2001 at 09:10:28PM +0300, Sampsa Ranta wrote:
> > I have now added / corrected those things, but for future patch submissions,
> > please take this into consideration, as it eases the process of integration
> > for the maintainers.
>
> Where are latest patch-o-matic files located? Is it an public CVS or
> something?

sure, it is (as everything else) in netfilter cvs.

Just go to the netfilter homepage (http://netfilter.samba.org/) and
read the instructions for anon cvs.

> - Sampsa Ranta
> sampsa [at] netsonic

--
Live long and prosper
- Harald Welte / laforge [at] gnumonks http://www.gnumonks.org
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)

sampsa at netsonic

Jul 30, 2001, 11:10 AM

Post #4 of 5 (568 views)
Permalink

Re: [PATCH] realm match - match by route entry [In reply to]

On Sun, 29 Jul 2001, Harald Welte wrote:

> I have included it in netfilter patch-o-matic now, but have to critisize
> a few things
>
> - patch did not comply to patch-o-matic rules
> (makefile and config.in were patched from .patch!)
> - patch was not a patch-of-patch for easy apply process
> - patch does not add a Configure.help entry for the user
> - patch did not contain extensions/.realm.test
>
> I have now added / corrected those things, but for future patch submissions,
> please take this into consideration, as it eases the process of integration
> for the maintainers.

Where are latest patch-o-matic files located? Is it an public CVS or
something?

- Sampsa Ranta
sampsa [at] netsonic

haegar at sdinet

Jul 30, 2001, 2:07 PM

Post #5 of 5 (568 views)
Permalink

Re: [PATCH] realm match - match by route entry [In reply to]

On Mon, 30 Jul 2001, Sampsa Ranta wrote:

> Where are latest patch-o-matic files located? Is it an public CVS or
> something?

It is.
Have a look at http://netfilter.samba.org/ near the bottom (the "CVS
Server" part)

c'ya
sven

--

The Internet treats censorship as a routing problem, and routes around it.
(John Gilmore on http://www.cygnus.com/~gnu/)

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads