From: Vytas Dauksa Date: Tue, 17 Dec 2013 14:01:43 +0000 (+0000) Subject: netfilter: ipset: add hash:ip,mark data type to ipset X-Git-Tag: v3.15-rc1~113^2~144^2~25 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3b02b56cd5988d569731f6c0c26992296e46b758;p=pandora-kernel.git netfilter: ipset: add hash:ip,mark data type to ipset Introduce packet mark support with new ip,mark hash set. This includes userspace and kernelspace code, hash:ip,mark set tests and man page updates. The intended use of ip,mark set is similar to the ip:port type, but for protocols which don't use a predictable port number. Instead of port number it matches a firewall mark determined by a layer 7 filtering program like opendpi. As well as allowing or blocking traffic it will also be used for accounting packets and bytes sent for each protocol. Signed-off-by: Jozsef Kadlecsik --- Reading git-diff-tree failed