Changes in Kconfig

6a7a2c18 - net: Kconfig: fix spellos

Tue, 24 Jan 2023 18:17:24 +0000

net: Kconfig: fix spellosFix spelling in net/ Kconfig files.(reported by codespell)Signed-off-by: Randy Dunlap Cc: Pablo Neira Ayuso Cc: Jozsef Kadlecsik Cc: Florian Westphal Cc: coreteam@netfilter.orgCc: Jamal Hadi Salim Cc: Cong Wang Cc: Jiri Pirko Link: https://lore.kernel.org/r/20230124181724.18166-1-rdunlap@infradead.orgSigned-off-by: Jakub Kicinski List of files: /linux-6.15/net/netfilter/ipset/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/netfilter/ipset/Kconfig

c0db95c7 - netfilter: ipset: hash:ipmac type support added to ipset

Thu, 05 May 2016 05:21:26 +0000

netfilter: ipset: hash:ipmac type support added to ipsetIntroduce the hash:ipmac type.Signed-off-by: Tomasz Chili??ski Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

07034aea - netfilter: ipset: hash:mac type added to ipset

Mon, 15 Sep 2014 15:36:06 +0000

netfilter: ipset: hash:mac type added to ipsetSigned-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

3b02b56c - netfilter: ipset: add hash:ip,mark data type to ipset

Tue, 17 Dec 2013 14:01:43 +0000

netfilter: ipset: add hash:ip,mark data type to ipsetIntroduce packet mark support with new ip,mark hash set. This includesuserspace and kernelspace code, hash:ip,mark set tests and man pageupdates.The intended use of ip,mark set is similar to the ip:port type, but forprotocols which don't use a predictable port number. Instead of portnumber it matches a firewall mark determined by a layer 7 filteringprogram like opendpi.As well as allowing or blocking traffic it will also be used foraccounting packets and bytes sent for each protocol.Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

5065a706 - treewide: Fix typo in Kconfig

Sat, 30 Nov 2013 12:38:43 +0000

treewide: Fix typo in KconfigCorrect spelling typo in Kconfig.Signed-off-by: Masanari Iida Acked-by: Randy Dunlap Signed-off-by: Jiri Kosina List of files: /linux-6.15/net/netfilter/ipset/Kconfig

7c3ad056 - netfilter: ipset: Add hash:net,port,net module to kernel.

Sat, 28 Sep 2013 18:33:23 +0000

netfilter: ipset: Add hash:net,port,net module to kernel.This adds a new set that provides similar functionality to ip,port,netbut permits arbitrary size subnets for both the first and lastparameter.Signed-off-by: Oliver Smith Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

ea53ac5b - netfilter: ipset: Add hash:net,net module to kernel.

Fri, 20 Sep 2013 08:13:53 +0000

netfilter: ipset: Add hash:net,net module to kernel.This adds a new set that provides the ability to configure pairs ofsubnets. A small amount of additional handling code has been added tothe generic hash header file - this code is conditionally activated by apreprocessor definition.Signed-off-by: Oliver Smith Signed-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

d9628bbe - netfilter: ipset: Kconfig: ipset needs NETFILTER_NETLINK

Mon, 30 Sep 2013 07:15:44 +0000

netfilter: ipset: Kconfig: ipset needs NETFILTER_NETLINKSigned-off-by: Jozsef Kadlecsik List of files: /linux-6.15/net/netfilter/ipset/Kconfig

e385357a - netfilter: ipset: hash:net,iface type introduced

Thu, 16 Jun 2011 17:00:48 +0000

netfilter: ipset: hash:net,iface type introducedThe hash:net,iface type makes possible to store network address andinterface name pairs in a set. It's mostly suitable for egressand ingress filtering. Examples: # ipset create test hash:net,iface # ipset add test 192.168.0.0/16,eth0 # ipset add test 192.168.0.0/24,eth1Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

c16e19c1 - netfilter: ipset: add dependency on CONFIG_NETFILTER_NETLINK

Thu, 10 Feb 2011 09:13:07 +0000

netfilter: ipset: add dependency on CONFIG_NETFILTER_NETLINKWhen SYSCTL and PROC_FS and NETFILTER_NETLINK are not enabled:net/built-in.o: In function `try_to_load_type':ip_set_core.c:(.text+0x3ab49): undefined reference to `nfnl_unlock'ip_set_core.c:(.text+0x3ab4e): undefined reference to `nfnl_lock'...Reported-by: Randy Dunlap Acked-by: Randy Dunlap Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

f830837f - netfilter: ipset: list:set set type support

Tue, 01 Feb 2011 14:54:59 +0000

netfilter: ipset: list:set set type supportThe module implements the list:set type support in two flavours:without and with timeout. The sets has two sides: for the userspace,they store the names of other (non list:set type of) sets: one can add,delete and test set names. For the kernel, it forms an ordered union ofthe member sets: the members sets are tried in order when elements areadded, deleted and tested and the process stops at the first success.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

21f45020 - netfilter: ipset: hash:net,port set type support

Tue, 01 Feb 2011 14:53:55 +0000

netfilter: ipset: hash:net,port set type supportThe module implements the hash:net,port type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare two dimensional: IPv4/IPv6 network address/prefix and protocol/portpairs.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

b3837029 - netfilter: ipset: hash:net set type support

Tue, 01 Feb 2011 14:52:54 +0000

netfilter: ipset: hash:net set type supportThe module implements the hash:net type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare one dimensional: IPv4/IPv6 network address/prefixes.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

41d22f7b - netfilter: ipset: hash:ip,port,net set type support

Tue, 01 Feb 2011 14:51:00 +0000

netfilter: ipset: hash:ip,port,net set type supportThe module implements the hash:ip,port,net type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6network address/prefix triples. The different prefixes are searched/matchedfrom the longest prefix to the shortes one (most specific to least).In other words the processing time linearly grows with the number ofdifferent prefixes in the set.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

5663bc30 - netfilter: ipset: hash:ip,port,ip set type support

Tue, 01 Feb 2011 14:41:26 +0000

netfilter: ipset: hash:ip,port,ip set type supportThe module implements the hash:ip,port,ip type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6address triples.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

07896ed3 - netfilter: ipset: hash:ip,port set type support

Tue, 01 Feb 2011 14:39:52 +0000

netfilter: ipset: hash:ip,port set type supportThe module implements the hash:ip,port type support in four flavours:for IPv4 and IPv6, both without and with timeout support. The elementsare two dimensional: IPv4/IPv6 address and protocol/port pairs. The portis interpeted for TCP, UPD, ICMP and ICMPv6 (at the latters as type/codeof course).Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

6c027889 - netfilter: ipset: hash:ip set type support

Tue, 01 Feb 2011 14:38:36 +0000

netfilter: ipset: hash:ip set type supportThe module implements the hash:ip type support in four flavours:for IPv4 or IPv6, both without and with timeout support.All the hash types are based on the "array hash" or ahash structureand functions as a good compromise between minimal memory footprintand speed. The hashing uses arrays to resolve clashes. The hash tableis resized (doubled) when searching becomes too long. Resizing can betriggered by userspace add commands only and those are serialized bythe nfnl mutex. During resizing the set is read-locked, so the onlypossible concurrent operations are the kernel side readers. Those areprotected by RCU locking.Because of the four flavours and the other hash types, the functionsare implemented in general forms in the ip_set_ahash.h header fileand the real functions are generated before compiling by macro expansion.Thus the dereferencing of low-level functions and void pointer argumentscould be avoided: the low-level functions are inlined, the functionarguments are pointers of type-specific structures.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

54326190 - netfilter: ipset; bitmap:port set type support

Tue, 01 Feb 2011 14:37:04 +0000

netfilter: ipset; bitmap:port set type supportThe module implements the bitmap:port type in two flavours, withoutand with timeout support to store TCP/UDP ports from a range.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig

de76021a - netfilter: ipset: bitmap:ip,mac type support

Tue, 01 Feb 2011 14:35:12 +0000

netfilter: ipset: bitmap:ip,mac type supportThe module implements the bitmap:ip,mac set type in two flavours,without and with timeout support. In this kind of set one can storeIPv4 address and (source) MAC address pairs. The type supports elementsadded without the MAC part filled out: when the first matching from kernelhappens, the MAC part is automatically filled out. The timing out of theelements stars when an element is complete in the IP,MAC pair.Signed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/ipset/Kconfig