[netfilter-cvslog] r7029 - in trunk/iptables: extensions include/linux/netfilter_ipv6

kaber at trash.net kaber at trash.net
Wed Sep 5 15:57:29 CEST 2007


Author: kaber at trash.net
Date: 2007-09-05 15:57:28 +0200 (Wed, 05 Sep 2007)
New Revision: 7029

Added:
   trunk/iptables/include/linux/netfilter_ipv6/ip6t_mh.h
Removed:
   trunk/iptables/extensions/.mh-test6
Modified:
   trunk/iptables/extensions/Makefile
Log:
Build IPv6 mh match unconditionally


Deleted: trunk/iptables/extensions/.mh-test6
===================================================================
--- trunk/iptables/extensions/.mh-test6	2007-09-05 13:56:30 UTC (rev 7028)
+++ trunk/iptables/extensions/.mh-test6	2007-09-05 13:57:28 UTC (rev 7029)
@@ -1,2 +0,0 @@
-#!/bin/sh
-[ -f $KERNEL_DIR/include/linux/netfilter_ipv6/ip6t_mh.h ] && echo mh

Modified: trunk/iptables/extensions/Makefile
===================================================================
--- trunk/iptables/extensions/Makefile	2007-09-05 13:56:30 UTC (rev 7028)
+++ trunk/iptables/extensions/Makefile	2007-09-05 13:57:28 UTC (rev 7029)
@@ -6,7 +6,7 @@
 # package (HW)
 #
 PF_EXT_SLIB:=ah addrtype conntrack ecn icmp iprange owner policy realm recent tos ttl unclean CLUSTERIP DNAT ECN LOG MASQUERADE MIRROR NETMAP REDIRECT REJECT SAME SNAT TOS TTL ULOG
-PF6_EXT_SLIB:=ah eui64 frag hl icmp6 owner policy HL LOG REJECT
+PF6_EXT_SLIB:=ah eui64 frag hl icmp6 mh owner policy HL LOG REJECT
 PFX_EXT_SLIB:=connbytes connmark connlimit comment dccp dscp esp hashlimit helper length limit mac mark multiport physdev pkttype quota sctp state statistic standard string tcp tcpmss udp CLASSIFY CONNMARK DSCP MARK NFLOG NFQUEUE NOTRACK TCPMSS TRACE
 
 ifeq ($(DO_SELINUX), 1)

Added: trunk/iptables/include/linux/netfilter_ipv6/ip6t_mh.h
===================================================================
--- trunk/iptables/include/linux/netfilter_ipv6/ip6t_mh.h	                        (rev 0)
+++ trunk/iptables/include/linux/netfilter_ipv6/ip6t_mh.h	2007-09-05 13:57:28 UTC (rev 7029)
@@ -0,0 +1,15 @@
+#ifndef _IP6T_MH_H
+#define _IP6T_MH_H
+
+/* MH matching stuff */
+struct ip6t_mh
+{
+	u_int8_t types[2];	/* MH type range */
+	u_int8_t invflags;	/* Inverse flags */
+};
+
+/* Values for "invflags" field in struct ip6t_mh. */
+#define IP6T_MH_INV_TYPE	0x01	/* Invert the sense of type. */
+#define IP6T_MH_INV_MASK	0x01	/* All possible flags. */
+
+#endif /*_IP6T_MH_H*/




More information about the netfilter-cvslog mailing list