[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netfilter-devel
Subject:    [12/13] [NETFILTER]: xt_realm: enable for IPv6
From:       Jan Engelhardt <jengelh () computergmbh ! de>
Date:       2008-01-31 23:23:54
Message-ID: Pine.LNX.4.64.0802010021340.4864 () fbirervta ! pbzchgretzou ! qr
[Download RAW message or body]


Dunno why xt_realm was not registered for AF_INET6 before. iproute2 
does not seem to display IPv6 realms - leaves me wondering.

===
commit 05ec5f1b7e9d1497dd4738210df137722038d6b5
Author: Jan Engelhardt <jengelh@computergmbh.de>
Date:   Thu Jan 31 23:36:04 2008 +0100

    [NETFILTER]: xt_realm: enable for IPv6
    
    Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
---
 net/netfilter/xt_realm.c |   38 ++++++++++++++++++++++++++++----------
 1 files changed, 28 insertions(+), 10 deletions(-)

diff --git a/net/netfilter/xt_realm.c b/net/netfilter/xt_realm.c
index 7df1627..f18b6e9 100644
--- a/net/netfilter/xt_realm.c
+++ b/net/netfilter/xt_realm.c
@@ -20,6 +20,7 @@ MODULE_AUTHOR("Sampsa Ranta <sampsa@netsonic.fi>");
 MODULE_LICENSE("GPL");
 MODULE_DESCRIPTION("Xtables: Routing realm match");
 MODULE_ALIAS("ipt_realm");
+MODULE_ALIAS("ip6t_realm");
 
 static bool
 realm_mt(const struct sk_buff *skb, const struct net_device *in,
@@ -33,24 +34,41 @@ realm_mt(const struct sk_buff *skb, const struct net_device *in,
 	return (info->id == (dst->tclassid & info->mask)) ^ info->invert;
 }
 
-static struct xt_match realm_mt_reg __read_mostly = {
-	.name		= "realm",
-	.match		= realm_mt,
-	.matchsize	= sizeof(struct xt_realm_info),
-	.hooks		= (1 << NF_INET_POST_ROUTING) | (1 << NF_INET_FORWARD) |
-			  (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_LOCAL_IN),
-	.family		= AF_INET,
-	.me		= THIS_MODULE
+static struct xt_match realm_mt_reg[] __read_mostly = {
+	{
+		.name      = "realm",
+		.revision  = 0,
+		.family    = AF_INET,
+		.match     = realm_mt,
+		.matchsize = sizeof(struct xt_realm_info),
+		.hooks     = (1 << NF_INET_LOCAL_IN) |
+		             (1 << NF_INET_FORWARD) |
+		             (1 << NF_INET_LOCAL_OUT) |
+		             (1 << NF_INET_POST_ROUTING),
+		.me        = THIS_MODULE,
+	},
+	{
+		.name      = "realm",
+		.revision  = 0,
+		.family    = AF_INET6,
+		.match     = realm_mt,
+		.matchsize = sizeof(struct xt_realm_info),
+		.hooks     = (1 << NF_INET_LOCAL_IN) |
+		             (1 << NF_INET_FORWARD) |
+		             (1 << NF_INET_LOCAL_OUT) |
+		             (1 << NF_INET_POST_ROUTING),
+		.me        = THIS_MODULE,
+	},
 };
 
 static int __init realm_mt_init(void)
 {
-	return xt_register_match(&realm_mt_reg);
+	return xt_register_matches(realm_mt_reg, ARRAY_SIZE(realm_mt_reg));
 }
 
 static void __exit realm_mt_exit(void)
 {
-	xt_unregister_match(&realm_mt_reg);
+	xt_unregister_matches(realm_mt_reg, ARRAY_SIZE(realm_mt_reg));
 }
 
 module_init(realm_mt_init);
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]