[netfilter-cvslog] r3233 -
trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter
/C=DE/ST=Berlin/L=Berlin/O=Netfilter
/C=DE/ST=Berlin/L=Berlin/O=Netfilter
Wed Oct 20 12:58:59 CEST 2004
Author: /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge at netfilter.org
Date: 2004-10-20 12:58:58 +0200 (Wed, 20 Oct 2004)
New Revision: 3233
Modified:
trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Kconfig.ladd
trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Makefile.ladd
Log:
adopt makefile/kconfig to new name, add kconfig help message
Modified: trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Kconfig.ladd
===================================================================
--- trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Kconfig.ladd 2004-10-20 10:55:15 UTC (rev 3232)
+++ trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Kconfig.ladd 2004-10-20 10:58:58 UTC (rev 3233)
@@ -1,3 +1,14 @@
-config IP_NF_MATCH_DSTLIMIT
- tristate 'dstlimit match support'
+config IP_NF_MATCH_HASHLIMIT
+ tristate 'hashlimit match support'
depends on IP_NF_IPTABLES
+ help
+ This option adds a new iptables `hashlimit' match.
+
+ As opposed to `limit', this match dynamically crates a hash table
+ of limit buckets, based on your selection of source/destination
+ ip addresses and/or ports.
+
+ It enables you to express policies like "10kpps for any given
+ destination IP" or "500pps from any given source IP" with a single
+ IPtables rule.
+
Modified: trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Makefile.ladd
===================================================================
--- trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Makefile.ladd 2004-10-20 10:55:15 UTC (rev 3232)
+++ trunk/patch-o-matic-ng/dstlimit/linux-2.6/net/ipv4/netfilter/Makefile.ladd 2004-10-20 10:58:58 UTC (rev 3233)
@@ -1,2 +1,2 @@
obj-$(CONFIG_IP_NF_MATCH_LIMIT) += ipt_limit.o
-obj-$(CONFIG_IP_NF_MATCH_DSTLIMIT) += ipt_dstlimit.o
+obj-$(CONFIG_IP_NF_MATCH_HASHLIMIT) += ipt_hashlimit.o
More information about the netfilter-cvslog
mailing list