Mailing List Archive: [PATCH] realm match

[PATCH] realm match - match by route entry

Jul 30, 2001, 3:07 AM

Post #1 of 5 (2062 views)

Hello,

Here is my contribution to Netfilter.

...
Author: Sampsa Ranta <sampsa@netsonic.fi>
Status: Experimental

realm match: uses realm key from routing as match criteria similiar to
one in packet classifier

/** snip from packet classifier in Configure.help */
Routing tables based classifier
CONFIG_NET_CLS_ROUTE4
If you say Y here, you will be able to classify outgoing packets
according to the route table entry they matched. If unsure, say Y.
/** end snip **/

# Example
# add route
/sbin/ip route add 194.29.194.0/24 via 194.29.192.1 realm 10

# source realm is in realm with mask 0xFFFF0000,
# destination is in realm with mask 0x0000FFFF

# match destination realm
/usr/local/sbin/iptables -A OUTPUT -m realm --realm 10 -j LOG

# match realm of source, this is also determinated by routing,
/usr/local/sbin/iptables -A INPUT -m realm --realm 655360 -j LOG

THIS PATCH REQUIRES CONFIG_NET_CLS_ROUTE TO BE SET
...

- Sampsa Ranta
sampsa@netsonic.fi

Re: [PATCH] realm match - match by route entry [ In reply to ]

laforge at gnumonks

Jul 29, 2001, 3:32 PM

Post #2 of 5 (2021 views)

Permalink

On Mon, Jul 30, 2001 at 01:07:58PM +0300, Sampsa Ranta wrote:
>
> Hello,
>
> Here is my contribution to Netfilter.

Hi, first of all thanks for your contribution.

I have included it in netfilter patch-o-matic now, but have to critisize
a few things

- patch did not comply to patch-o-matic rules
(makefile and config.in were patched from .patch!)
- patch was not a patch-of-patch for easy apply process
- patch does not add a Configure.help entry for the user
- patch did not contain extensions/.realm.test

I have now added / corrected those things, but for future patch submissions,
please take this into consideration, as it eases the process of integration
for the maintainers.

Thanks.

> - Sampsa Ranta
> sampsa@netsonic.fi

--
Live long and prosper
- Harald Welte / laforge@gnumonks.org http://www.gnumonks.org
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)

Re: [PATCH] realm match - match by route entry [ In reply to ]

laforge at gnumonks

Jul 29, 2001, 11:40 PM

Post #3 of 5 (2013 views)

Permalink

On Mon, Jul 30, 2001 at 09:10:28PM +0300, Sampsa Ranta wrote:
> > I have now added / corrected those things, but for future patch submissions,
> > please take this into consideration, as it eases the process of integration
> > for the maintainers.
>
> Where are latest patch-o-matic files located? Is it an public CVS or
> something?

sure, it is (as everything else) in netfilter cvs.

Just go to the netfilter homepage (http://netfilter.samba.org/) and
read the instructions for anon cvs.

> - Sampsa Ranta
> sampsa@netsonic.fi

--
Live long and prosper
- Harald Welte / laforge@gnumonks.org http://www.gnumonks.org
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M-
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)

Re: [PATCH] realm match - match by route entry [ In reply to ]

sampsa at netsonic

Jul 30, 2001, 11:10 AM

Post #4 of 5 (2006 views)

Permalink

On Sun, 29 Jul 2001, Harald Welte wrote:

> I have included it in netfilter patch-o-matic now, but have to critisize
> a few things
>
> - patch did not comply to patch-o-matic rules
> (makefile and config.in were patched from .patch!)
> - patch was not a patch-of-patch for easy apply process
> - patch does not add a Configure.help entry for the user
> - patch did not contain extensions/.realm.test
>
> I have now added / corrected those things, but for future patch submissions,
> please take this into consideration, as it eases the process of integration
> for the maintainers.

Where are latest patch-o-matic files located? Is it an public CVS or
something?

- Sampsa Ranta
sampsa@netsonic.fi

Re: [PATCH] realm match - match by route entry [ In reply to ]

haegar at sdinet

Jul 30, 2001, 2:07 PM

Post #5 of 5 (2012 views)

Permalink

On Mon, 30 Jul 2001, Sampsa Ranta wrote:

> Where are latest patch-o-matic files located? Is it an public CVS or
> something?

It is.
Have a look at http://netfilter.samba.org/ near the bottom (the "CVS
Server" part)

c'ya
sven

--

The Internet treats censorship as a routing problem, and routes around it.
(John Gilmore on http://www.cygnus.com/~gnu/)

Mailing List Archive

Mailing List Archive

Attached Files: