SOURCES: iptables-nf-ipp2p.patch - updated to 0.8.0 final.

pluto pluto at pld-linux.org
Tue Nov 15 17:29:21 CET 2005


Author: pluto                        Date: Tue Nov 15 16:29:20 2005 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- updated to 0.8.0 final.

---- Files affected:
SOURCES:
   iptables-nf-ipp2p.patch (1.3 -> 1.4) 

---- Diffs:

================================================================
Index: SOURCES/iptables-nf-ipp2p.patch
diff -u SOURCES/iptables-nf-ipp2p.patch:1.3 SOURCES/iptables-nf-ipp2p.patch:1.4
--- SOURCES/iptables-nf-ipp2p.patch:1.3	Mon Oct 31 19:39:14 2005
+++ SOURCES/iptables-nf-ipp2p.patch	Tue Nov 15 17:29:15 2005
@@ -12,7 +12,7 @@
 diff -urN --exclude '*.orig' iptables.org/extensions/libipt_ipp2p.c iptables/extensions/libipt_ipp2p.c
 --- iptables.org/extensions/libipt_ipp2p.c	1970-01-01 01:00:00.000000000 +0100
 +++ iptables/extensions/libipt_ipp2p.c	2005-10-31 19:23:09.000000000 +0100
-@@ -0,0 +1,455 @@
+@@ -0,0 +1,360 @@
 +
 +#include <stdio.h>
 +#include <netdb.h>
@@ -25,32 +25,25 @@
 +
 +#include <linux/netfilter_ipv4/ipt_ipp2p.h>
 +
-+
-+
-+
 +static void
 +help(void)
 +{
 +    printf(
 +    "IPP2P v%s options:\n"
 +    " --ipp2p	Grab all known p2p packets\n"
-+    " --ipp2p-data	Identify all known p2p download commands (obsolete)\n\n"
 +    " --edk		[TCP&UDP]	All known eDonkey/eMule/Overnet packets\n"
 +    " --dc		[TCP] 		All known Direct Connect packets\n"
 +    " --kazaa	[TCP&UDP] 	All known KaZaA packets\n"
 +    " --gnu		[TCP&UDP]	All known Gnutella packets\n"
 +    " --bit		[TCP&UDP]	All known BitTorrent packets\n"
-+    " --apple	[TCP] 		All known AppleJuice packets (beta - just a few tests until now)\n"
-+    " --winmx	[TCP] 		All known WinMX (beta - need feedback)\n"
-+    " --soul		[TCP] 		All known SoulSeek (beta - need feedback!)\n"
-+    " --ares		[TCP] 		All known Ares - use with DROP only (beta - need feedback!)\n\n"
-+    " --edk-data	[TCP] 		eDonkey/eMule/Overnet download commands (obsolete)\n"
-+    " --dc-data	[TCP] 		Direct Connect download command (obsolete)\n"
-+    " --kazaa-data	[TCP] 		KaZaA download command (obsolete)\n"
-+    " --gnu-data	[TCP] 		Gnutella download command (obsolete)\n"
++    " --apple	[TCP] 		All known AppleJuice packets\n"
++    " --winmx	[TCP] 		All known WinMX\n"
++    " --soul		[TCP] 		All known SoulSeek\n"
++    " --ares		[TCP] 		All known Ares\n\n"
++    " DEBUG SUPPPORT, use only if you know why\n"
++    " --debug		Generate kernel debug output, THIS WILL SLOW DOWN THE FILTER\n"
 +    "\nNote that the follwing options will have the same meaning:\n"
-+    " '--ipp2p' is equal to '--edk --dc --kazaa --gnu'\n"
-+    " '--ipp2p-data' is equal to '--edk-data --dc-data --kazaa-data --gnu-data'\n"
++    " '--ipp2p' is equal to '--edk --dc --kazaa --gnu --bit --apple --winmx --soul --ares'\n"
 +    "\nIPP2P was intended for TCP only. Due to increasing usage of UDP we needed to change this.\n"
 +    "You can now use -p udp to search UDP packets only or without -p switch to search UDP and TCP packets.\n"
 +    "\nSee README included with this package for more details or visit http://www.ipp2p.org\n"
@@ -61,17 +54,10 @@
 +    , IPP2P_VERSION);
 +}
 +
-+							    
-+
 +static struct option opts[] = {
 +        { "ipp2p", 0, 0, '1' },
 +        { "edk", 0, 0, '2' },	
-+        { "ipp2p-data", 0, 0, '3' },		
-+        { "kazaa-data", 0, 0, '4' },
-+        { "edk-data", 0, 0, '5' },	
-+        { "dc-data", 0, 0, '6' },
 +	{ "dc", 0, 0, '7' },
-+	{ "gnu-data", 0, 0, '8' },	
 +	{ "gnu", 0, 0, '9' },
 +	{ "kazaa", 0, 0, 'a' },
 +	{ "bit", 0, 0, 'b' },
@@ -113,10 +99,10 @@
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
 +				"specified once!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
++/*	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
++				"specified alone!");*/
 +	    if ((*flags) != 0)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
@@ -135,10 +121,10 @@
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
 +				"specified alone!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
++/*	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
++				"specified alone!");*/
 +            if ((*flags & IPP2P_DATA_EDK) == IPP2P_DATA_EDK)
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: use `--edk' OR `--edk-data' but not both of them!");
@@ -147,86 +133,6 @@
 +	    info->cmd = *flags;	    
 +	    break;
 +
-+	case '3':		/*cmd: ipp2p-data*/
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified once!");
-+	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p' may only be "
-+				"specified alone!");
-+	    if ((*flags) != 0)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
-+	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
-+	    *flags += SHORT_HAND_DATA;
-+	    info->cmd = *flags;	    
-+	    break;
-+
-+        case '4':		/*cmd: kazaa-data*/
-+            if ((*flags & IPP2P_DATA_KAZAA) == IPP2P_DATA_KAZAA)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: `--kazaa-data' may only be "
-+                                "specified once!");
-+	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p' may only be "
-+				"specified alone!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
-+            if ((*flags & IPP2P_KAZAA) == IPP2P_KAZAA)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: use `--kazaa' OR `--kazaa-data' but not both of them!");
-+	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
-+            *flags += IPP2P_DATA_KAZAA;
-+	    info->cmd = *flags;
-+	    break;
-+
-+	case '5':		/*cmd: edk-data*/
-+            if ((*flags & IPP2P_DATA_EDK) == IPP2P_DATA_EDK)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: `--edk-data' may only be "
-+                                "specified once!");
-+	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p' may only be "
-+				"specified alone!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
-+            if ((*flags & IPP2P_EDK) == IPP2P_EDK)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: use `--edk' OR `--edk-data' but not both of them!");
-+	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
-+            *flags += IPP2P_DATA_EDK;
-+	    info->cmd = *flags;
-+	    break;																											
-+
-+	case '6':		/*cmd: dc-data*/
-+            if ((*flags & IPP2P_DATA_DC) == IPP2P_DATA_DC)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: `--dc-data' may only be "
-+                                "specified once!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
-+	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p' may only be "
-+				"specified alone!");
-+            if ((*flags & IPP2P_DC) == IPP2P_DC)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: use `--dc' OR `--dc-data' but not both of them!");
-+	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
-+            *flags += IPP2P_DATA_DC;
-+	    info->cmd = *flags;
-+	    break;																											
 +
 +	case '7':		/*cmd: dc*/
 +            if ((*flags & IPP2P_DC) == IPP2P_DC)
@@ -237,49 +143,28 @@
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
 +				"specified alone!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
++/*	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
++				"specified alone!");*/
 +            if ((*flags & IPP2P_DATA_DC) == IPP2P_DATA_DC)
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: use `--dc' OR `--dc-data' but not both of them!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_DC;
 +	    info->cmd = *flags;
-+	    break;																											
-+
++	    break;
 +
-+	case '8':		/*cmd: gnu-data*/
-+            if ((*flags & IPP2P_DATA_GNU) == IPP2P_DATA_GNU)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: `--gnu-data' may only be "
-+                                "specified once!");
-+	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p' may only be "
-+				"specified alone!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
-+		    exit_error(PARAMETER_PROBLEM,
-+				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
-+            if ((*flags & IPP2P_GNU) == IPP2P_GNU)
-+            exit_error(PARAMETER_PROBLEM,
-+                                "ipp2p: use `--gnu' OR `--gnu-data' but not both of them!");
-+	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
-+            *flags += IPP2P_DATA_GNU;
-+	    info->cmd = *flags;
-+	    break;																											
 +
 +	case '9':		/*cmd: gnu*/
 +            if ((*flags & IPP2P_GNU) == IPP2P_GNU)
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--gnu' may only be "
 +                                "specified once!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
++/*	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
++				"specified alone!");*/
 +	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
@@ -290,17 +175,17 @@
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_GNU;
 +	    info->cmd = *flags;
-+	    break;																											
++	    break;
 +
 +	case 'a':		/*cmd: kazaa*/
 +            if ((*flags & IPP2P_KAZAA) == IPP2P_KAZAA)
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--kazaa' may only be "
 +                                "specified once!");
-+	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
++/*	    if ((*flags & SHORT_HAND_DATA) == SHORT_HAND_DATA)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p-data' may only be "
-+				"specified alone!");
++				"specified alone!");*/
 +	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
 +		    exit_error(PARAMETER_PROBLEM,
 +				"ipp2p: `--ipp2p' may only be "
@@ -318,6 +203,10 @@
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--bit' may only be "
 +                                "specified once!");
++	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
++		    exit_error(PARAMETER_PROBLEM,
++				"ipp2p: `--ipp2p' may only be "
++				"specified alone!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_BIT;
 +	    info->cmd = *flags;
@@ -328,6 +217,10 @@
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--apple' may only be "
 +                                "specified once!");
++	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
++		    exit_error(PARAMETER_PROBLEM,
++				"ipp2p: `--ipp2p' may only be "
++				"specified alone!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_APPLE;
 +	    info->cmd = *flags;
@@ -339,6 +232,10 @@
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--soul' may only be "
 +                                "specified once!");
++	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
++		    exit_error(PARAMETER_PROBLEM,
++				"ipp2p: `--ipp2p' may only be "
++				"specified alone!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_SOUL;
 +	    info->cmd = *flags;
@@ -350,6 +247,10 @@
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--winmx' may only be "
 +                                "specified once!");
++	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
++		    exit_error(PARAMETER_PROBLEM,
++				"ipp2p: `--ipp2p' may only be "
++				"specified alone!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_WINMX;
 +	    info->cmd = *flags;
@@ -360,6 +261,10 @@
 +            exit_error(PARAMETER_PROBLEM,
 +                                "ipp2p: `--ares' may only be "
 +                                "specified once!");
++	    if ((*flags & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P)
++		    exit_error(PARAMETER_PROBLEM,
++				"ipp2p: `--ipp2p' may only be "
++				"specified alone!");
 +	    if (invert) exit_error(PARAMETER_PROBLEM, "ipp2p: invert [!] is not allowed!");
 +            *flags += IPP2P_ARES;
 +	    info->cmd = *flags;
@@ -371,8 +276,8 @@
 +	    break;																											
 +
 +	default:
-+            exit_error(PARAMETER_PROBLEM,
-+	    "\nipp2p-parameter problem: for ipp2p usage type: iptables -m ipp2p --help\n");
++//            exit_error(PARAMETER_PROBLEM,
++//	    "\nipp2p-parameter problem: for ipp2p usage type: iptables -m ipp2p --help\n");
 +	    return 0;
 +    }
 +    return 1;
@@ -398,14 +303,14 @@
 +    
 +    printf("ipp2p v%s", IPP2P_VERSION);
 +    if ((info->cmd & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P) printf(" --ipp2p");
-+    if ((info->cmd & SHORT_HAND_DATA) == SHORT_HAND_DATA) printf(" --ipp2p-data");
++//    if ((info->cmd & SHORT_HAND_DATA) == SHORT_HAND_DATA) printf(" --ipp2p-data");
 +    if ((info->cmd & IPP2P_KAZAA) == IPP2P_KAZAA) printf(" --kazaa");
-+    if ((info->cmd & IPP2P_DATA_KAZAA) == IPP2P_DATA_KAZAA) printf(" --kazaa-data");
-+    if ((info->cmd & IPP2P_DATA_GNU) == IPP2P_DATA_GNU) printf(" --gnu-data");
++//    if ((info->cmd & IPP2P_DATA_KAZAA) == IPP2P_DATA_KAZAA) printf(" --kazaa-data");
++//    if ((info->cmd & IPP2P_DATA_GNU) == IPP2P_DATA_GNU) printf(" --gnu-data");
 +    if ((info->cmd & IPP2P_GNU) == IPP2P_GNU) printf(" --gnu");
 +    if ((info->cmd & IPP2P_EDK) == IPP2P_EDK) printf(" --edk");
-+    if ((info->cmd & IPP2P_DATA_EDK) == IPP2P_DATA_EDK) printf(" --edk-data");
-+    if ((info->cmd & IPP2P_DATA_DC) == IPP2P_DATA_DC) printf(" --dc-data");
++//    if ((info->cmd & IPP2P_DATA_EDK) == IPP2P_DATA_EDK) printf(" --edk-data");
++//    if ((info->cmd & IPP2P_DATA_DC) == IPP2P_DATA_DC) printf(" --dc-data");
 +    if ((info->cmd & IPP2P_DC) == IPP2P_DC) printf(" --dc");
 +    if ((info->cmd & IPP2P_BIT) == IPP2P_BIT) printf(" --bit");
 +    if ((info->cmd & IPP2P_APPLE) == IPP2P_APPLE) printf(" --apple");
@@ -424,14 +329,14 @@
 +    struct ipt_p2p_info *info = (struct ipt_p2p_info *)match->data;
 +    
 +    if ((info->cmd & SHORT_HAND_IPP2P) == SHORT_HAND_IPP2P) printf("--ipp2p ");
-+    if ((info->cmd & SHORT_HAND_DATA) == SHORT_HAND_DATA) printf("--ipp2p-data ");
++//    if ((info->cmd & SHORT_HAND_DATA) == SHORT_HAND_DATA) printf("--ipp2p-data ");
 +    if ((info->cmd & IPP2P_KAZAA) == IPP2P_KAZAA) printf("--kazaa ");
-+    if ((info->cmd & IPP2P_DATA_KAZAA) == IPP2P_DATA_KAZAA) printf("--kazaa-data ");
-+    if ((info->cmd & IPP2P_DATA_GNU) == IPP2P_DATA_GNU) printf("--gnu-data ");
++//    if ((info->cmd & IPP2P_DATA_KAZAA) == IPP2P_DATA_KAZAA) printf("--kazaa-data ");
++//    if ((info->cmd & IPP2P_DATA_GNU) == IPP2P_DATA_GNU) printf("--gnu-data ");
 +    if ((info->cmd & IPP2P_GNU) == IPP2P_GNU) printf("--gnu ");
 +    if ((info->cmd & IPP2P_EDK) == IPP2P_EDK) printf("--edk ");
-+    if ((info->cmd & IPP2P_DATA_EDK) == IPP2P_DATA_EDK) printf("--edk-data ");
-+    if ((info->cmd & IPP2P_DATA_DC) == IPP2P_DATA_DC) printf("--dc-data ");
++//    if ((info->cmd & IPP2P_DATA_EDK) == IPP2P_DATA_EDK) printf("--edk-data ");
++//    if ((info->cmd & IPP2P_DATA_DC) == IPP2P_DATA_DC) printf("--dc-data ");
 +    if ((info->cmd & IPP2P_DC) == IPP2P_DC) printf("--dc ");
 +    if ((info->cmd & IPP2P_BIT) == IPP2P_BIT) printf("--bit ");
 +    if ((info->cmd & IPP2P_APPLE) == IPP2P_APPLE) printf("--apple ");
@@ -444,21 +349,21 @@
 +		
 +
 +
-+static
-+struct iptables_match ipp2p
-+= {
-+   .next          = NULL,
-+   .name          = "ipp2p",
-+   .version       = IPTABLES_VERSION, 
-+   .size          = IPT_ALIGN(sizeof(struct ipt_p2p_info)),
-+   .userspacesize = IPT_ALIGN(sizeof(struct ipt_p2p_info)),
-+   .help          = &help,
-+   .init          = &init,
-+   .parse         = &parse,
-+   .final_check   = &final_check,
-+   .print         = &print,
-+   .save          = &save,
-+   .extra_opts    = opts
++static 
++struct iptables_match ipp2p= 
++{ 
++    .next           = NULL,
++    .name           = "ipp2p",
++    .version        = IPTABLES_VERSION,
++    .size           = IPT_ALIGN(sizeof(struct ipt_p2p_info)),
++    .userspacesize  = IPT_ALIGN(sizeof(struct ipt_p2p_info)),
++    .help           = &help,
++    .init           = &init,
++    .parse          = &parse,
++    .final_check    = &final_check,
++    .print          = &print,
++    .save           = &save,
++    .extra_opts     = opts
 +};
 +					    
 +
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SOURCES/iptables-nf-ipp2p.patch?r1=1.3&r2=1.4&f=u




More information about the pld-cvs-commit mailing list