diff options
| author | Denys Fedoryshchenko | 2012-05-17 22:08:57 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2012-06-07 14:58:42 +0200 |
| commit | efdedd5426a94b00d23483a1bcb4af3a91c894db (patch) | |
| tree | fdcf05bb970caa499a8dc86c058a167d8eb098b3 /include/linux/netfilter | |
| parent | netfilter: NFQUEUE: don't xor src/dst ip address for load distribution (diff) | |
| download | kernel-qcow2-linux-efdedd5426a94b00d23483a1bcb4af3a91c894db.tar.gz kernel-qcow2-linux-efdedd5426a94b00d23483a1bcb4af3a91c894db.tar.xz kernel-qcow2-linux-efdedd5426a94b00d23483a1bcb4af3a91c894db.zip | |
netfilter: xt_recent: add address masking option
The mask option allows you put all address belonging that mask into
the same recent slot. This can be useful in case that recent is used
to detect attacks from the same network segment.
Tested for backward compatibility.
Signed-off-by: Denys Fedoryshchenko <denys@visp.net.lb>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/linux/netfilter')
| -rw-r--r-- | include/linux/netfilter/xt_recent.h | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/include/linux/netfilter/xt_recent.h b/include/linux/netfilter/xt_recent.h index 83318e01425e..6ef36c113e89 100644 --- a/include/linux/netfilter/xt_recent.h +++ b/include/linux/netfilter/xt_recent.h @@ -32,4 +32,14 @@ struct xt_recent_mtinfo { __u8 side; }; +struct xt_recent_mtinfo_v1 { + __u32 seconds; + __u32 hit_count; + __u8 check_set; + __u8 invert; + char name[XT_RECENT_NAME_LEN]; + __u8 side; + union nf_inet_addr mask; +}; + #endif /* _LINUX_NETFILTER_XT_RECENT_H */ |