From: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Date: Fri, 21 Sep 2012 20:02:36 +0000 (+0200)
Subject: netfilter: ipset: Support to match elements marked with "nomatch"
X-Git-Tag: omap-for-v3.7-rc1/fixes-cpufreq-signed~47^2~93^2~4
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3e0304a583d72c747caa8afac76b8d514aa293f5;p=pandora-kernel.git

netfilter: ipset: Support to match elements marked with "nomatch"

Exceptions can now be matched and we can branch according to the
possible cases:

a. match in the set if the element is not flagged as "nomatch"
b. match in the set if the element is flagged with "nomatch"
c. no match

i.e.

iptables ... -m set --match-set ... -j ...
iptables ... -m set --match-set ... --nomatch-entries -j ...
...

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
---

Reading git-diff-tree failed