netdev - Re: [PATCHv7 iptables] Interface group match

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4751CFC9.6000607@o2.pl>
Date:	Sat, 01 Dec 2007 22:19:05 +0100
From:	Jarek Poplawski <jarkao2@...pl>
To:	Laszlo Attila Toth <panther@...abit.hu>
CC:	David Miller <davem@...emloft.net>,
	Patrick McHardy <kaber@...sh.net>, netdev@...r.kernel.org
Subject: Re: [PATCHv7 iptables] Interface group match

Laszlo Attila Toth wrote, On 11/29/2007 05:11 PM:
...

> Index: extensions/libxt_ifgroup.man
> ===================================================================
> --- extensions/libxt_ifgroup.man	(revision 0)
> +++ extensions/libxt_ifgroup.man	(revision 0)
> @@ -0,0 +1,36 @@
> +Maches packets on an interface if it is in the same interface group


  +Matches packets on an interface if it is in the same interface group

> +as specified by the
> +.B "--ifgroup-in"
> +or
> +.B "--ifgroup-in"


  +.B "--ifgroup-out"

> +parameter. If a mask is also specified, the masked value of
> +the inteface's group must be equal to the given value of the


  +the interface's group must be equal to the given value of the

> +.B "--ifgroup-in"
> +or
> +.B "--ifgroup-out"
> +parameter to match. This match is available in all tables.
> +.TP
> +.BR "[!] --ifgroup-in \fIgroup[/mask]\fR"
> +This specifies the interface group of input interface and the optional mask.
> +Valid only in the in the


  +Valid only in the

> +.B PREROUTING
> +and
> +.B INPUT
> +and
> +.B FORWARD
> +chains, and user-defined chains which are only called from those
> +chains. 
> +.TP
> +.BR "[!] --ifgroup-out \fIgroup[/mask]\fR"
> +This specifies the interface group of out interface and the optional mask.


  +This specifies the interface group of output interface and the optional mask.

> +Valid only in the in the
> +.B FORWARD
> +and
> +.B OUTPUT
> +and
> +.B POSTROUTING
> +chains, and user-defined chains which are only called from those
> +chains. 
> +.RS
> +.PP
> +

Regards,
Jarek P.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html