netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [iptables 0/3] ebtables patchset
@ 2014-03-07 19:33 Giuseppe Longo
  2014-03-07 19:33 ` [iptables 1/3] xtables: bootstrap xtables-eb for nftables Giuseppe Longo
                   ` (3 more replies)
  0 siblings, 4 replies; 10+ messages in thread
From: Giuseppe Longo @ 2014-03-07 19:33 UTC (permalink / raw)
  To: netfilter-devel; +Cc: Giuseppe Longo

Hi Pablo,
I reworked the patchset.

The basic operations (-A/-I/-L/-D) are working,
see the examples below:

ebtables-compat -A INPUT -i eth0 -j ACCEPT
ebtables-compat -A INPUT -p arp -s 11:22:33:44:55:66 -j ACCEPT
ebtables-compat -A INPUT -p arp -d 11:22:33:44:55:66 -j ACCEPT
ebtables-compat -L --Ln

Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1 -i eth0 -j ACCEPT
2 -p ARP -s 11:22:33:44:55:66/0:0:0:0:0:0 -j ACCEPT
3 -p ARP -d 11:22:33:44:55:66/0:0:0:0:0:0 -j ACCEPT

ebtables-compat -D INPUT 2:3
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1 -i eth0 -j ACCEPT

As you can see, a minor issue have to be fixed when printing rules.
I have no idea how to handle --logical-in/out interfaces currently,
so please let me know if you have an idea or an advice.

Giuseppe Longo (3):
  xtables: bootstrap xtables-eb for nftables
  Operations for bridge family
  nft-shared: make compare_matches as public

 include/linux/netfilter_bridge.h            |   33 +
 include/linux/netfilter_bridge/ebtables.h   |  276 +++++++
 include/linux/netfilter_bridge/ethernetdb.h |   58 ++
 iptables/Makefile.am                        |    4 +-
 iptables/getethertype.c                     |  161 ++++
 iptables/nft-bridge.c                       |  439 ++++++++++
 iptables/nft-shared.c                       |    7 +-
 iptables/nft-shared.h                       |    1 +
 iptables/nft.c                              |   28 +
 iptables/nft.h                              |   12 +
 iptables/xtables-compat-multi.c             |    1 +
 iptables/xtables-eb-standalone.c            |   87 ++
 iptables/xtables-eb.c                       | 1164 +++++++++++++++++++++++++++
 iptables/xtables-ebtables.h                 |   49 ++
 iptables/xtables-multi.c                    |    1 +
 iptables/xtables-multi.h                    |    1 +
 16 files changed, 2319 insertions(+), 3 deletions(-)
 create mode 100644 include/linux/netfilter_bridge.h
 create mode 100644 include/linux/netfilter_bridge/ebtables.h
 create mode 100644 include/linux/netfilter_bridge/ethernetdb.h
 create mode 100644 iptables/getethertype.c
 create mode 100644 iptables/nft-bridge.c
 create mode 100644 iptables/xtables-eb-standalone.c
 create mode 100644 iptables/xtables-eb.c
 create mode 100644 iptables/xtables-ebtables.h

-- 
1.8.3.2


^ permalink raw reply	[flat|nested] 10+ messages in thread

end of thread, other threads:[~2014-03-25 11:38 UTC | newest]

Thread overview: 10+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-03-07 19:33 [iptables 0/3] ebtables patchset Giuseppe Longo
2014-03-07 19:33 ` [iptables 1/3] xtables: bootstrap xtables-eb for nftables Giuseppe Longo
2014-03-07 19:33 ` [iptables 2/3] Operations for bridge family Giuseppe Longo
2014-03-07 19:33 ` [iptables 3/3] nft-shared: make compare_matches as public Giuseppe Longo
2014-03-07 20:28   ` Stephen Hemminger
2014-03-10 10:50 ` [iptables 0/3] ebtables patchset Tomasz Bursztyka
2014-03-24 15:09   ` Pablo Neira Ayuso
2014-03-24 15:26     ` Giuseppe Longo
2014-03-25  7:40     ` Tomasz Bursztyka
2014-03-25 11:37     ` Tomasz Bursztyka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).