linux/net/netfilter/ipset
Jozsef Kadlecsik 89dc79b787 netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces
If overlapping networks with different interfaces was added to
the set, the type did not handle it properly. Example

    ipset create test hash:net,iface
    ipset add test 192.168.0.0/16,eth0
    ipset add test 192.168.0.0/24,eth1

Now, if a packet was sent from 192.168.0.0/24,eth0, the type returned
a match.

In the patch the algorithm is fixed in order to correctly handle
overlapping networks.

Limitation: the same network cannot be stored with more than 64 different
interfaces in a single set.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2011-07-21 12:06:18 +02:00
..
ip_set_bitmap_ip.c netfilter: ipset: add xt_action_param to the variant level kadt functions, ipset API change 2011-06-16 18:56:47 +02:00
ip_set_bitmap_ipmac.c netfilter: ipset: whitespace and coding fixes detected by checkpatch.pl 2011-06-16 19:01:26 +02:00
ip_set_bitmap_port.c netfilter: ipset: add xt_action_param to the variant level kadt functions, ipset API change 2011-06-16 18:56:47 +02:00
ip_set_core.c netfilter: ipset: whitespace and coding fixes detected by checkpatch.pl 2011-06-16 19:01:26 +02:00
ip_set_getport.c netfilter: ipset: SCTP, UDPLITE support added 2011-04-13 13:51:38 +02:00
ip_set_hash_ip.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_ipport.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_ipportip.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_ipportnet.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_net.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_netiface.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_hash_netport.c netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind different interfaces 2011-07-21 12:06:18 +02:00
ip_set_list_set.c netfilter: ipset: add xt_action_param to the variant level kadt functions, ipset API change 2011-06-16 18:56:47 +02:00
Kconfig netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
Makefile netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
pfxlen.c netfilter: ipset: whitespace and coding fixes detected by checkpatch.pl 2011-06-16 19:01:26 +02:00