diff options
| author |  Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
| 2011-06-16 19:00:48 +0200 |
|---|---|---|
| committer |  Patrick McHardy <kaber@trash.net>
| 2011-06-16 19:00:48 +0200 |
| commit | e385357a2f214e4d4e79c6118f1bede2572e0701 (patch) | |
| tree | 22ec359f9c9dc8b2ba290383a80663a5ea9f705a /net/netfilter/nf_conntrack_expect.c | |
| parent | netfilter: ipset: use the stored first cidr value instead of '1' (diff) | |
| download | linux-e385357a2f214e4d4e79c6118f1bede2572e0701.tar.gz linux-e385357a2f214e4d4e79c6118f1bede2572e0701.tar.bz2 linux-e385357a2f214e4d4e79c6118f1bede2572e0701.zip | |
netfilter: ipset: hash:net,iface type introduced
The hash:net,iface type makes possible to store network address and
interface name pairs in a set. It's mostly suitable for egress
and ingress filtering. Examples:
# ipset create test hash:net,iface
# ipset add test 192.168.0.0/16,eth0
# ipset add test 192.168.0.0/24,eth1
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/netfilter/nf_conntrack_expect.c')
0 files changed, 0 insertions, 0 deletions