From: "Dan Searle" <dan@intrago.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Optimize large iptables by hashing on MAC address help
Date: Fri, 11 Oct 2002 17:01:43 +0100 [thread overview]
Message-ID: <00cc01c2713f$7e37f530$0800000a@wormhole> (raw)
Re,
I've had a look at the linux/net/ipv4/netfilter/ipt_mac.c source and had a
thought...
It wouldn't be too difficult to add an extra parameter to the mac match
module to allow masked matching, i.e. add a --mac-mask parameter which would
allow the user to specify a bit mask so that only the un-masked bits of the
6 byte mac address were compared, e.g...
iptables -A INPUT -m mac --mac-source 00:00:00:00:00:02 --mac-mask
00:00:00:00:00:0F -j ACCEPT
...meaning that only the least significant 4 bits of the mac source are
compared against the specified mac source parameter.
Perhaps if the person in charge of writing the ipt_mac.c file reads this
they may consider adding this masking functionality to the module. I would
have a go myself, but I'm not too confident at kernel hacking! :-)
Cheers, Dan...
P.S.
Aplolgies to Brad Morgan, I replied to you personaly first, by mistake
instead of to the list!
----- Original Message -----
From: "Brad Morgan" <B-Morgan@concentric.net>
To: "Dan Searle" <dan@intrago.co.uk>
Sent: Friday, October 11, 2002 4:05 PM
Subject: RE: Optimize large iptables by hashing on MAC address help
> Dan,
>
> I'm not sure if code exists to accomidate your needs but I've attached a
> message to this list from a while back that may improve your performance.
> I'm not associated with this project and am not using it on my small
> firewall.
>
> Regards,
>
> Brad Morgan
>
next reply other threads:[~2002-10-11 16:01 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-11 16:01 Dan Searle [this message]
2002-10-11 16:59 ` Optimize large iptables by hashing on MAC address help Robert P. J. Day
-- strict thread matches above, loose matches on Subject: below --
2002-10-11 9:30 Dan Searle
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='00cc01c2713f$7e37f530$0800000a@wormhole' \
--to=dan@intrago.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox