ipt_recent-0.2.1 [PATCH]

[Stephen Frost <sfrost@snowman.net>]

[-- Attachment #1.1: Type: text/plain, Size: 2118 bytes --]

Hey all,

  Version 0.2.1 of my ipt_recent module has been up and running on my
  production firewall for over a week now (8 days) and I've gotten
  reports from other people that they're using the module and everything
  is working.  Since I havn't had any bug reports and everything has
  been working fine for me I'm submitting this patch against the current
  netfilter tree to bring ipt_recent up to the current version in the
  CVS tree.  Harald, as opportunity allows I'd appriciate having this
  patch incorporated into the netfilter tree.  Following is the
  ChangeLog:

Big Changes:
  - The module is now hash-based for lookups and a sorted list is
    maintained for finding the oldest address in the list (which will be
    replaced by the newest once the table is full).
  - Multiple tables supported now
  - /proc/net/ipt_recent is now a directory where each file is a table
  - Source and Destination address matching ability, per table.
  - Alot of printk's for debugging, if you turn it on.
  - Finer grained locking; locks for a short time to locate the table to
    perform the match on and then locks that table and unlocks the
    overall lock; so, speed increase with multiple tables for SMP
    systems, though I think you'd have to throw alot at the system to
    really notice..
  - Changed basically everything to use vmalloc's instead of kmalloc;
    mallocs of any kind are only done when the module is inserted or a
    new table is created so there isn't any reason to use kalloc.

Smaller Changes:
  - Fixed argument processing
  - Changed method used to clear out a table (echo "clear" > table now)
  - Updated documentation for changes
  - Increased default table size to 100 since table size affects
    performance much, much, much less now.
  - Cleaned up some of the formatting of the files
  - Added versioning to the module

  All in all I feel very comfortable with this module and look forward
  to seeing the netfilter CVS version updated with all of the
  improvments and the many bug fixes.

  Any questions, comments, please feel free to contact me.

  	Thanks,

		Stephen

[-- Attachment #1.2: ipt_recent-0.2.1.patch.gz --]
[-- Type: application/octet-stream, Size: 8796 bytes --]

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]