From: Florian Westphal <fw@strlen.de>
Date: Wed, 11 Jul 2012 10:56:57 +0000 (+0000)
Subject: net: sched: add ipset ematch
X-Git-Tag: v3.6-rc1~125^2~198
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6d4fa852a023080101f1665ea189dd1844c87fef;p=pandora-kernel.git

net: sched: add ipset ematch

Can be used to match packets against netfilter ip sets created via ipset(8).
skb->sk_iif is used as 'incoming interface', skb->dev is 'outgoing interface'.

Since ipset is usually called from netfilter, the ematch
initializes a fake xt_action_param, pulls the ip header into the
linear area and also sets skb->data to the IP header (otherwise
matching Layer 4 set types doesn't work).

Tested-by: Mr Dash Four <mr.dash.four@googlemail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed