[netfilter-cvslog] r7031 - in trunk/iptables: extensions include/linux/netfilter_ipv6

kaber at trash.net kaber at trash.net
Wed Sep 5 16:00:15 CEST 2007


Author: kaber at trash.net
Date: 2007-09-05 16:00:15 +0200 (Wed, 05 Sep 2007)
New Revision: 7031

Added:
   trunk/iptables/include/linux/netfilter_ipv6/ip6t_rt.h
Removed:
   trunk/iptables/extensions/.rt-test6
Modified:
   trunk/iptables/extensions/Makefile
Log:
Build IPv6 rt match unconditionally


Deleted: trunk/iptables/extensions/.rt-test6
===================================================================
--- trunk/iptables/extensions/.rt-test6	2007-09-05 13:58:58 UTC (rev 7030)
+++ trunk/iptables/extensions/.rt-test6	2007-09-05 14:00:15 UTC (rev 7031)
@@ -1,2 +0,0 @@
-#!/bin/sh
-[ -f $KERNEL_DIR/net/ipv6/netfilter/ip6t_rt.c -a -f $KERNEL_DIR/include/linux/netfilter_ipv6/ip6t_rt.h ] && echo rt

Modified: trunk/iptables/extensions/Makefile
===================================================================
--- trunk/iptables/extensions/Makefile	2007-09-05 13:58:58 UTC (rev 7030)
+++ trunk/iptables/extensions/Makefile	2007-09-05 14:00:15 UTC (rev 7031)
@@ -6,7 +6,7 @@
 # package (HW)
 #
 PF_EXT_SLIB:=ah addrtype conntrack ecn icmp iprange owner policy realm recent tos ttl unclean CLUSTERIP DNAT ECN LOG MASQUERADE MIRROR NETMAP REDIRECT REJECT SAME SNAT TOS TTL ULOG
-PF6_EXT_SLIB:=ah eui64 frag hl icmp6 ipv6header mh owner policy HL LOG REJECT
+PF6_EXT_SLIB:=ah eui64 frag hl icmp6 ipv6header mh owner policy rt HL LOG REJECT
 PFX_EXT_SLIB:=connbytes connmark connlimit comment dccp dscp esp hashlimit helper length limit mac mark multiport physdev pkttype quota sctp state statistic standard string tcp tcpmss udp CLASSIFY CONNMARK DSCP MARK NFLOG NFQUEUE NOTRACK TCPMSS TRACE
 
 ifeq ($(DO_SELINUX), 1)

Added: trunk/iptables/include/linux/netfilter_ipv6/ip6t_rt.h
===================================================================
--- trunk/iptables/include/linux/netfilter_ipv6/ip6t_rt.h	                        (rev 0)
+++ trunk/iptables/include/linux/netfilter_ipv6/ip6t_rt.h	2007-09-05 14:00:15 UTC (rev 7031)
@@ -0,0 +1,33 @@
+#ifndef _IP6T_RT_H
+#define _IP6T_RT_H
+
+/*#include <linux/in6.h>*/
+
+#define IP6T_RT_HOPS 16
+
+struct ip6t_rt
+{
+	u_int32_t rt_type;			/* Routing Type */
+	u_int32_t segsleft[2];			/* Segments Left */
+	u_int32_t hdrlen;			/* Header Length */
+	u_int8_t  flags;			/*  */
+	u_int8_t  invflags;			/* Inverse flags */
+	struct in6_addr addrs[IP6T_RT_HOPS];	/* Hops */
+	u_int8_t addrnr;			/* Nr of Addresses */
+};
+
+#define IP6T_RT_TYP 		0x01
+#define IP6T_RT_SGS 		0x02
+#define IP6T_RT_LEN 		0x04
+#define IP6T_RT_RES 		0x08
+#define IP6T_RT_FST_MASK	0x30
+#define IP6T_RT_FST 		0x10
+#define IP6T_RT_FST_NSTRICT	0x20
+
+/* Values for "invflags" field in struct ip6t_rt. */
+#define IP6T_RT_INV_TYP		0x01	/* Invert the sense of type. */
+#define IP6T_RT_INV_SGS		0x02	/* Invert the sense of Segments. */
+#define IP6T_RT_INV_LEN		0x04	/* Invert the sense of length. */
+#define IP6T_RT_INV_MASK	0x07	/* All possible flags. */
+
+#endif /*_IP6T_RT_H*/




More information about the netfilter-cvslog mailing list