linux/net/netfilter/ipset
Jozsef Kadlecsik 0f1799ba1a netfilter: ipset: Consistent userspace testing with nomatch flag
The "nomatch" commandline flag should invert the matching at testing,
similarly to the --return-nomatch flag of the "set" match of iptables.
Until now it worked with the elements with "nomatch" flag only. From
now on it works with elements without the flag too, i.e:

 # ipset n test hash:net
 # ipset a test 10.0.0.0/24 nomatch
 # ipset t test 10.0.0.1
 10.0.0.1 is NOT in set test.
 # ipset t test 10.0.0.1 nomatch
 10.0.0.1 is in set test.

 # ipset a test 192.168.0.0/24
 # ipset t test 192.168.0.1
 192.168.0.1 is in set test.
 # ipset t test 192.168.0.1 nomatch
 192.168.0.1 is NOT in set test.

 Before the patch the results were

 ...
 # ipset t test 192.168.0.1
 192.168.0.1 is in set test.
 # ipset t test 192.168.0.1 nomatch
 192.168.0.1 is in set test.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
2013-09-16 20:35:55 +02:00
..
ip_set_bitmap_gen.h netfilter: ipset: The bitmap types with counter support 2013-04-29 20:09:00 +02:00
ip_set_bitmap_ip.c netfilter: ipset: The bitmap types with counter support 2013-04-29 20:09:00 +02:00
ip_set_bitmap_ipmac.c netfilter: ipset: The bitmap types with counter support 2013-04-29 20:09:00 +02:00
ip_set_bitmap_port.c netfilter: ipset: The bitmap types with counter support 2013-04-29 20:09:00 +02:00
ip_set_core.c netfilter: ipset: Consistent userspace testing with nomatch flag 2013-09-16 20:35:55 +02:00
ip_set_getport.c netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/protocol 2013-09-16 20:33:44 +02:00
ip_set_hash_gen.h netfilter: ipset: The hash types with counter support 2013-04-29 20:09:01 +02:00
ip_set_hash_ip.c netfilter: ipset: The hash types with counter support 2013-04-29 20:09:01 +02:00
ip_set_hash_ipport.c netfilter: ipset: The hash types with counter support 2013-04-29 20:09:01 +02:00
ip_set_hash_ipportip.c netfilter: ipset: The hash types with counter support 2013-04-29 20:09:01 +02:00
ip_set_hash_ipportnet.c netfilter: ipset: Consistent userspace testing with nomatch flag 2013-09-16 20:35:55 +02:00
ip_set_hash_net.c netfilter: ipset: Consistent userspace testing with nomatch flag 2013-09-16 20:35:55 +02:00
ip_set_hash_netiface.c netfilter: ipset: Consistent userspace testing with nomatch flag 2013-09-16 20:35:55 +02:00
ip_set_hash_netport.c netfilter: ipset: Consistent userspace testing with nomatch flag 2013-09-16 20:35:55 +02:00
ip_set_list_set.c netfilter: ipset: set match: add support to match the counters 2013-04-29 20:09:03 +02:00
Kconfig netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
Makefile netfilter: ipset: hash:net,iface type introduced 2011-06-16 19:00:48 +02:00
pfxlen.c net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules 2011-10-31 19:30:30 -04:00