/* * Packet matching code. * * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling * Copyright (C) 2000-2005 Netfilter Core Team <coreteam@netfilter.org> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. * * 19 Jan 2002 Harald Welte <laforge@gnumonks.org> * - increase module usage count as soon as we have rules inside * a table * 06 Jun 2002 Andras Kis-Szabo <kisza@sch.bme.hu> * - new extension header parser code * 15 Oct 2005 Harald Welte <laforge@netfilter.org> * - Unification of {ip,ip6}_tables into x_tables * - Removed tcp and udp code, since it's not ipv6 specific */#include<linux/capability.h>#include<linux/config.h>#include<linux/in.h>#include<linux/skbuff.h>#include<linux/kmod.h>#include<linux/vmalloc.h>#include<linux/netdevice.h>#include<linux/module.h>#include<linux/icmpv6.h>#include<net/ipv6.h>#include<asm/uaccess.h>#include<asm/semaphore.h>#include<linux/proc_fs.h>#include<linux/cpumask.h>#include<linux/netfilter_ipv6/ip6_tables.h>#include<linux/netfilter/x_tables.h>MODULE_LICENSE("GPL");MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");MODULE_DESCRIPTION("IPv6 packet filter");#define IPV6_HDR_LEN (sizeof(struct ipv6hdr))#define IPV6_OPTHDR_LEN (sizeof(struct ipv6_opt_hdr))/*#define DEBUG_IP_FIREWALL*//*#define