From mboxrd@z Thu Jan 1 00:00:00 1970 From: Laszlo Attila Toth Subject: [PATCH 0/2] Interface groups, round two Date: Thu, 18 Oct 2007 12:15:13 +0200 Message-ID: <11927025171404-git-send-email-panther@balabit.hu> Cc: Laszlo Attila Toth To: netdev@vger.kernel.org, netfilter-devel@vger.kernel.org Return-path: Received: from www.balabit.hu ([212.92.18.33]:43946 "EHLO lists.balabit.hu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755368AbXJRKPZ (ORCPT ); Thu, 18 Oct 2007 06:15:25 -0400 Message-Id: Sender: netfilter-devel-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org Hello, Here is the new version of ifgroup patches. The interface group value is u_int32_t in net_device which should be enough. Previously it was an int. Usage: ip link set eth0 group 4 but currently it cannot be unset, only changed to another value. In /etc/iproute2/rt_ifgroup each value may have a symbolic name. Netfilter part: xt_ifgroup module for both IPv4 and IPv6. Iptables usage: iptables -A INPUT -m ifgroup --in-ifgroup 4/0xf -j ACCEPT iptables -A FORWARD -m ifgroup --in-ifgroup 4 --out-ifgroup 5 -j ACCEPT ... in the FORWARD chain both input and output interface group value should be matched (with optional masks). The following patches are: kernel: core part kernel: netfilter module, ifgroup match iproute2: showing and set ifgroup value iptables: ifgroup match -- Laszlo Attila Toth