From: Patrick McHardy <kaber@trash.net>
To: David Miller <davem@davemloft.net>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: rules matching ipv6 prefix addrs
Date: Wed, 03 Nov 2010 08:37:44 +0100 [thread overview]
Message-ID: <4CD11148.2060204@trash.net> (raw)
In-Reply-To: <20101102.135254.226783976.davem@davemloft.net>
On 02.11.2010 21:52, David Miller wrote:
>
> H. Peter Anvin just mentioned something interesting to me,
> basically it's the fact that when your prefix addresses
> change on an interface in ipv6, this can invalidate your
> netfilter rules.
>
> So it would be nice if there were some way to match "the
> ipv6 prefix address on interface X", and through some
> kind of caching this could be optimized so it wouldn't
> really cost anything.
>
> Thoughts?
Perhaps something similar to the IPv4 addrtype match would work?
Basically it allows you to match on inet_addr_type() of the source
or destination address.
next prev parent reply other threads:[~2010-11-03 7:37 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-02 20:52 rules matching ipv6 prefix addrs David Miller
2010-11-02 21:24 ` Maciej Żenczykowski
2010-11-03 7:37 ` Patrick McHardy [this message]
2010-11-03 9:29 ` Pascal Hambourg
2010-11-03 10:51 ` Jan Engelhardt
2010-11-03 12:19 ` David Miller
2010-11-03 12:32 ` Jan Engelhardt
2010-11-03 21:55 ` David Miller
2010-11-03 22:36 ` H. Peter Anvin
2010-11-03 22:52 ` Jan Engelhardt
2010-11-04 2:12 ` H. Peter Anvin
2010-11-04 4:14 ` Patrick McHardy
2010-11-04 8:58 ` Jan Engelhardt
2010-11-04 11:36 ` H. Peter Anvin
2010-11-04 11:53 ` Jan Engelhardt
2010-11-04 14:41 ` H. Peter Anvin
2010-11-04 20:02 ` Pascal Hambourg
2010-11-04 12:07 ` Pascal Hambourg
2010-11-04 11:08 ` Stephen Clark
2010-11-04 11:29 ` Pascal Hambourg
2010-11-04 12:07 ` Stephen Clark
2010-11-04 12:19 ` Pascal Hambourg
2010-11-04 13:34 ` Jozsef Kadlecsik
2010-11-04 14:41 ` H. Peter Anvin
2010-11-04 17:35 ` Jeff Haran
2010-11-04 18:45 ` H. Peter Anvin
2010-11-04 19:24 ` Jan Engelhardt
2010-11-04 19:26 ` H. Peter Anvin
2010-11-04 11:55 ` Pascal Hambourg
2010-11-04 14:42 ` H. Peter Anvin
2010-11-04 20:00 ` Pascal Hambourg
2010-11-03 12:56 ` Pascal Hambourg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4CD11148.2060204@trash.net \
--to=kaber@trash.net \
--cc=davem@davemloft.net \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).