| commit | e385357a2f214e4d4e79c6118f1bede2572e0701 | [log] [tgz] |
|---|---|---|
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | Thu Jun 16 19:00:48 2011 +0200 |
| committer | Patrick McHardy <kaber@trash.net> | Thu Jun 16 19:00:48 2011 +0200 |
| tree | 22ec359f9c9dc8b2ba290383a80663a5ea9f705a | |
| parent | 9b03a5ef49c01515387133ac5bd47073fae56318 [diff] |
netfilter: ipset: hash:net,iface type introduced
The hash:net,iface type makes possible to store network address and
interface name pairs in a set. It's mostly suitable for egress
and ingress filtering. Examples:
# ipset create test hash:net,iface
# ipset add test 192.168.0.0/16,eth0
# ipset add test 192.168.0.0/24,eth1
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>