<<

NAME

pf::ipset - module for ipset tables management.

DESCRIPTION

pf::ipset contains the functions necessary to manipulate the ipset tables used when using PacketFence in ARP or DHCP mode.

SUBROUTINES

TODO: This list is incomplete

generate_mangle_rules

Packet marking will traverse all the rules so the order in which packets are marked is rather important. The last mark will be the one having an effect.

get_mangle_mark_for_mac

Fetches the current mangle mark for a given mark. Useful to re-evaluate what to do with a given node who's state changed.

Returns IPTABLES MARK constant ($IPTABLES_MARK_...) or undef on failure.

ipset_remove_ip

Remove ip from ipset session

get_ip_from_ipset_by_mac

Fetches all the ip address from ipset by mac address

update_ipset

Update session when the ip address change

iptables_flush_mangle

Flush mangle table

AUTHOR

Inverse inc. <info@inverse.ca>

COPYRIGHT

Copyright (C) 2005-2015 Inverse inc.

LICENSE

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

<<