[POM PATCHES] IPv6 ports of time and quota matches

[POM PATCHES] IPv6 ports of time and quota matches

[Maciej Sołtysiak]

Hello,

I noticed I have two patchsets left behind, never included in patch-o-matic
These are IPv6 ports of the time and quota matches.

Here they are:
http://soltysiak.com/patches/netfilter/userspace/time6.patch
http://soltysiak.com/patches/netfilter/userspace/ip6t_quota.diff

I just tested if they still apply to cvs, they do.
pom-ng ports of these will come later on if you decide to include those
at all.

Regards,
Maciej

Re: [POM PATCHES] IPv6 ports of time and quota matches

[Andras Kis-Szabo]

Maciej Sołtysiak ............................................................................ (2003. december 23.)

Hi,

> I noticed I have two patchsets left behind, never included in patch-o-matic
> These are IPv6 ports of the time and quota matches.
Please, be careful w/ the 'plain ports'.
Rusty has changed the internal structure of the IPv4 parts (acording the skb
linearization) - and these changes are missing from the IPv6 part. In IPv6
every packets are linearized - in IPv4 you have to linearize the required
parts avery time and in some higher-level protocols tha helper functions have
benn changed.
(We have no size parameter in the IPv6 header (like in IPv4) so we cannot seek
in the virtual skb. We have to parse the full header every time. I think that
a plain linearize_all is much more cheaper.)

Regards,

	kisza 

-- 
    Andras Kis-Szabo       Security Development, Design and Audit
-------------------------/        Zorp, NetFilter and IPv6
 kisza@SecurityAudit.hu /----------------------------------------------->

Re: [POM PATCHES] IPv6 ports of time and quota matches

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1220 bytes --]

On Mon, Jan 05, 2004 at 01:12:44PM +0100, Andras Kis-Szabo wrote:
> Maciej So??tysiak ............................................................................ (2003. december 23.)
> 
> Hi,
> 
> > I noticed I have two patchsets left behind, never included in patch-o-matic
> > These are IPv6 ports of the time and quota matches.
> Please, be careful w/ the 'plain ports'.
> Rusty has changed the internal structure of the IPv4 parts (acording the skb
> linearization) - and these changes are missing from the IPv6 part. In IPv6
> every packets are linearized - in IPv4 you have to linearize the required
> parts avery time and in some higher-level protocols tha helper functions have
> benn changed.

yes, for consistency reasons we should forward-port those changes from
ipv4 to ipv6.  any volunteers?

> Regards,
> 	kisza 

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]