Re: [PATCH] new match extension `flow'

[Josh Samuelson <josamue1@wsc.edu>]

[-- Attachment #1: Type: text/plain, Size: 181 bytes --]

After thinking about it for a bit, this match could be used in more tables
then just the filter table.  These patches make it so the prior patch
works in all tables but raw.

-Josh

[-- Attachment #2: linux-2.6.9-flow-20041028-noraw.diff --]
[-- Type: text/plain, Size: 675 bytes --]

diff -Pru linux-2.6.9-flow-20041027/net/ipv4/netfilter/ipt_flow.c linux-2.6.9-flow-20041028/net/ipv4/netfilter/ipt_flow.c
--- linux-2.6.9-flow-20041027/net/ipv4/netfilter/ipt_flow.c	2004-10-28 13:49:20.430784272 -0500
+++ linux-2.6.9-flow-20041028/net/ipv4/netfilter/ipt_flow.c	2004-10-28 13:49:54.800559272 -0500
@@ -77,8 +77,8 @@
 	if (matchsize != IPT_ALIGN(sizeof(struct ipt_flow_info)))
 		return 0;
 
-	if (strcmp(tablename, "filter") != 0) {
-		printk(KERN_WARNING "flow: can only be used in \"filter\" table, not \"%s\"\n", tablename);
+	if (strcmp(tablename, "raw") == 0) {
+		printk(KERN_WARNING "flow: can not by used in the \"raw\" table\n");
 		return(0);
 	}
 

[-- Attachment #3: iptables-1.2.11-flow-20041028-noraw.diff --]
[-- Type: text/plain, Size: 665 bytes --]

diff -Pru iptables-1.2.11-flow-20041027/extensions/libipt_flow.man iptables-1.2.11-flow-20041028/extensions/libipt_flow.man
--- iptables-1.2.11-flow-20041027/extensions/libipt_flow.man	2004-10-28 14:56:07.752578760 -0500
+++ iptables-1.2.11-flow-20041028/extensions/libipt_flow.man	2004-10-28 14:54:42.386556368 -0500
@@ -1,6 +1,6 @@
 This module, when combined with connection tracking, allows access to
 IP, ICMP, TCP and UDP flow counts per source IP address (IP_CT_DIR_ORIGINAL
-state from ip_conntrack)  This match module can only be used in the filter
+state from ip_conntrack)  This match module can not be used in the raw
 table.
 .TP
 .BI "--maxip "   "n"