OpenCloudOS-Kernel/net/netfilter/ipset
Jozsef Kadlecsik 3e0304a583 netfilter: ipset: Support to match elements marked with "nomatch"
Exceptions can now be matched and we can branch according to the
possible cases:

a. match in the set if the element is not flagged as "nomatch"
b. match in the set if the element is flagged with "nomatch"
c. no match

i.e.

iptables ... -m set --match-set ... -j ...
iptables ... -m set --match-set ... --nomatch-entries -j ...
...

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
2012-09-22 22:44:34 +02:00
..
Kconfig netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
Makefile netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
ip_set_bitmap_ip.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
ip_set_bitmap_ipmac.c netfilter: ipset: Coding style fixes 2012-09-22 22:44:29 +02:00
ip_set_bitmap_port.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
ip_set_core.c netfilter: ipset: Support to match elements marked with "nomatch" 2012-09-22 22:44:34 +02:00
ip_set_getport.c netfilter: ipset: use NFPROTO_ constants 2012-03-07 17:40:29 +01:00
ip_set_hash_ip.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
ip_set_hash_ipport.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
ip_set_hash_ipportip.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
ip_set_hash_ipportnet.c netfilter: ipset: Support to match elements marked with "nomatch" 2012-09-22 22:44:34 +02:00
ip_set_hash_net.c netfilter: ipset: Support to match elements marked with "nomatch" 2012-09-22 22:44:34 +02:00
ip_set_hash_netiface.c netfilter: ipset: Support to match elements marked with "nomatch" 2012-09-22 22:44:34 +02:00
ip_set_hash_netport.c netfilter: ipset: Support to match elements marked with "nomatch" 2012-09-22 22:44:34 +02:00
ip_set_list_set.c netfilter: ipset: Include supported revisions in module description 2012-09-22 22:44:24 +02:00
pfxlen.c net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules 2011-10-31 19:30:30 -04:00