projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7a68257) | patch
netfilter: nf_tables: add range expression
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 23 Sep 2016 13:23:33 +0000 (15:23 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 25 Sep 2016 21:16:42 +0000 (23:16 +0200)
commit0f3cd9b3697708c86a825ae3cedabf7be6fd3e72
tree14b59bebf1a6dc16a961864a93febfbacc4d3715tree | snapshot
parent7a682575ad4829b4de3e672a6ad5f73a05826b82commit | diff
netfilter: nf_tables: add range expression

Inverse ranges != [a,b] are not currently possible because rules are
composites of && operations, and we need to express this:

data < a || data > b

This patch adds a new range expression. Positive ranges can be already
through two cmp expressions:

cmp(sreg, data, >=)
cmp(sreg, data, <=)

This new range expression provides an alternative way to express this.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables_core.h diff | blob | history
include/uapi/linux/netfilter/nf_tables.h diff | blob | history
net/netfilter/Makefile diff | blob | history
net/netfilter/nf_tables_core.c diff | blob | history
net/netfilter/nft_range.c [new file with mode: 0644] blob
John Crispins staging tree