[PATCH 0/4] ipset: add "inner" flag support

[PATCH 0/4] ipset: add "inner" flag support

[Dash Four]

This series of 4 patches implements "inner" flag option in the set
iptables match, allowing matching based on the properties
(source/destination IP address, protocol, port and so on) of the
original (inner) connection in the event of the following
ICMP[v4,v6] messages:

ICMPv4 destination-unreachable (code 3);
ICMPv4 source-quench (code 4);
ICMPv4 time-exceeded (code 11);
ICMPv6 destination-unreachable (code 1);
ICMPv6 packet-too-big (code 2);
ICMPv6 time-exceeded (code 3);


Dash Four (4):
   ipset: minor variable-naming corrections
   ipset: add "inner" flag implementation
   iptables: add set match "inner" flag support
   iptables (userspace): add set match "inner" flag support

Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

[Pablo Neira Ayuso]

Hi Jozsef,

Cc'ing netfilter-core.

David has been pushing this guy to get him out of anonimity. According
to the kernel policy (Developer authenticity certificate), we need
contributions from a source that we can recognize to avoid legal
issues.

If the contributions are not worth, like that stupid variable rename
he made, better just not to risk and skip them.

Regards.

On Wed, May 29, 2013 at 01:13:08AM +0100, Dash Four wrote:
> This series of 4 patches implements "inner" flag option in the set
> iptables match, allowing matching based on the properties
> (source/destination IP address, protocol, port and so on) of the
> original (inner) connection in the event of the following
> ICMP[v4,v6] messages:
> 
> ICMPv4 destination-unreachable (code 3);
> ICMPv4 source-quench (code 4);
> ICMPv4 time-exceeded (code 11);
> ICMPv6 destination-unreachable (code 1);
> ICMPv6 packet-too-big (code 2);
> ICMPv6 time-exceeded (code 3);
> 
> 
> Dash Four (4):
>   ipset: minor variable-naming corrections
>   ipset: add "inner" flag implementation
>   iptables: add set match "inner" flag support
>   iptables (userspace): add set match "inner" flag support
> 
> 
> 

Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

[Jozsef Kadlecsik]

On Wed, 29 May 2013, Pablo Neira Ayuso wrote:

> David has been pushing this guy to get him out of anonimity. According
> to the kernel policy (Developer authenticity certificate), we need
> contributions from a source that we can recognize to avoid legal
> issues.

I have already discussed the question with it and it is a real name.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary

Re: Head up [was Re: [PATCH 0/4] ipset: add "inner" flag support]

[Jozsef Kadlecsik]

On Wed, 29 May 2013, Jozsef Kadlecsik wrote:

> On Wed, 29 May 2013, Pablo Neira Ayuso wrote:
> 
> > David has been pushing this guy to get him out of anonimity. According
> > to the kernel policy (Developer authenticity certificate), we need
> > contributions from a source that we can recognize to avoid legal
> > issues.
> 
> I have already discussed the question with it and it is a real name.
Sorry, confusing mistypeing:               s/it/him/

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary

Re: [PATCH 0/4] ipset: add "inner" flag support

[Jozsef Kadlecsik]

On Wed, 29 May 2013, Dash Four wrote:

> This series of 4 patches implements "inner" flag option in the set
> iptables match, allowing matching based on the properties
> (source/destination IP address, protocol, port and so on) of the
> original (inner) connection in the event of the following
> ICMP[v4,v6] messages:
> 
> ICMPv4 destination-unreachable (code 3);
> ICMPv4 source-quench (code 4);
> ICMPv4 time-exceeded (code 11);
> ICMPv6 destination-unreachable (code 1);
> ICMPv6 packet-too-big (code 2);
> ICMPv6 time-exceeded (code 3);
> 
> 
> Dash Four (4):
>   ipset: minor variable-naming corrections
>   ipset: add "inner" flag implementation
>   iptables: add set match "inner" flag support
>   iptables (userspace): add set match "inner" flag support

I can review your patches in a few days, a quick look is not enough.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary