++#define MPLS_NUM_OPS		8++#define MPLS_LINUX_VERSION	0x01090500++#define	MPLS_GRP_ILM	1+#define	MPLS_GRP_NHLFE	2+#define	MPLS_GRP_XC	4+#define	MPLS_GRP_LABELSPACE 8++#define MPLS_IPV4_EXPLICIT_NULL	0       /* only valid as sole label stack entry+					   Pop label and send to IPv4 stack */+#define MPLS_ROUTER_ALERT	1       /* anywhere except bottom, packet it is+					   forwared to a software module+					   determined by the next label,+					   if the packet is forwarded, push this+					   label back on */+#define MPLS_IPV6_EXPLICIT_NULL	2       /* only valid as sole label stack entry+					   Pop label and send to IPv6 stack */+#define MPLS_IMPLICIT_NULL	3       /* a LIB with this, signifies to pop+					   the next label and use that */++#define MPLS_CHANGE_MTU		0x01+#define MPLS_CHANGE_PROP_TTL	0x02+#define MPLS_CHANGE_INSTR	0x04+#define MPLS_CHANGE_PROTO	0x10++enum mpls_dir {+	MPLS_IN = 0x10,+	MPLS_OUT = 0x20+};++enum mpls_opcode_enum {+	MPLS_OP_NOP = 0x00,+	MPLS_OP_POP,+	MPLS_OP_PEEK,+	MPLS_OP_PUSH,+	MPLS_OP_DLV,+	MPLS_OP_FWD,+	MPLS_OP_NF_FWD,+	MPLS_OP_DS_FWD,+	MPLS_OP_EXP_FWD,+	MPLS_OP_SET,+	MPLS_OP_SET_RX,+	MPLS_OP_SET_TC,+	MPLS_OP_SET_DS,+	MPLS_OP_SET_EXP,+	MPLS_OP_EXP2TC,+	MPLS_OP_EXP2DS,+	MPLS_OP_TC2EXP,+	MPLS_OP_DS2EXP,+	MPLS_OP_NF2EXP,+	MPLS_OP_SET_NF,+	MPLS_OP_MAX+};++enum mpls_label_type_enum {+	MPLS_LABEL_GEN = 1,+	MPLS_LABEL_ATM,+	MPLS_LABEL_FR,+	MPLS_LABEL_KEY+};++struct mpls_label_atm {+	u_int16_t  mla_vpi;+	u_int16_t  mla_vci;+};++struct mpls_label {+	enum mpls_label_type_enum ml_type;+	union {+		u_int32_t ml_key;+		u_int32_t ml_gen;+		u_int32_t ml_fr;+		struct mpls_label_atm ml_atm;+	} u;+	int ml_index;+};++struct mpls_in_label_req {+	unsigned int      mil_proto;+	struct mpls_label mil_label;+	unsigned char     mil_change_flag;+};++#define MPLS_LABELSPACE_MAX	255++struct mpls_labelspace_req {+	int mls_ifindex;                  /* Index to the MPLS-enab. interface*/+	int mls_labelspace;               /* Labelspace IN/SET -- OUT/GET     */+};++struct mpls_nexthop_info {+	unsigned int    mni_if;+	struct sockaddr mni_addr;+};++struct mpls_out_label_req {+	struct mpls_label mol_label;+	u_int32_t         mol_mtu;+	int8_t            mol_propagate_ttl;+	unsigned char     mol_change_flag;+};++struct mpls_netfilter_target_info {+        u_int32_t key;++	/* only used by the netfilter kernel modules */+        void *nhlfe;+        void *proto;+};++struct mpls_xconnect_req {+	struct mpls_label mx_in;+	struct mpls_label mx_out;+};++struct mpls_tunnel_req {+	char mt_ifname[IFNAMSIZ];+	unsigned int mt_nhlfe_key;+};++#define MPLS_NFMARK_NUM 64++struct mpls_nfmark_fwd {+	unsigned int nf_key[MPLS_NFMARK_NUM];+	unsigned short nf_mask;+};++#define MPLS_DSMARK_NUM 64++struct mpls_dsmark_fwd {+	unsigned int df_key[MPLS_DSMARK_NUM];+	unsigned char df_mask;+};++#define MPLS_TCINDEX_NUM 64++struct mpls_tcindex_fwd {+	unsigned int tc_key[MPLS_TCINDEX_NUM];+	unsigned short tc_mask;+};++#define MPLS_EXP_NUM 8++struct mpls_exp_fwd {+	unsigned int ef_key[MPLS_EXP_NUM];+};++struct mpls_exp2tcindex {+	unsigned short e2t[MPLS_EXP_NUM];+};++struct mpls_exp2dsmark {+	unsigned char e2d[MPLS_EXP_NUM];+};++struct mpls_tcindex2exp {+	unsigned char t2e_mask;+	unsigned char t2e[MPLS_TCINDEX_NUM];+};++struct mpls_dsmark2exp {+	unsigned char d2e_mask;+	unsigned char d2e[MPLS_DSMARK_NUM];+};++struct mpls_nfmark2exp {+	unsigned char n2e_mask;+	unsigned char n2e[MPLS_NFMARK_NUM];+};++struct mpls_instr_elem {+	unsigned short mir_opcode;+	unsigned char mir_direction;+	union {+		struct mpls_label        push;+		struct mpls_label        fwd;+		struct mpls_nfmark_fwd   nf_fwd;+		struct mpls_dsmark_fwd   ds_fwd;+		struct mpls_exp_fwd      exp_fwd;+		struct mpls_nexthop_info set;+		unsigned int             set_rx;+		unsigned short           set_tc;+		unsigned short           set_ds;+		unsigned char            set_exp;+		struct mpls_exp2tcindex  exp2tc;+		struct mpls_exp2dsmark   exp2ds;+		struct mpls_tcindex2exp  tc2exp;+		struct mpls_dsmark2exp   ds2exp;+		struct mpls_nfmark2exp   nf2exp;+		unsigned long            set_nf;+	} mir_data;+};++/* Standard shortcuts */+#define mir_push       mir_data.push+#define mir_fwd        mir_data.fwd+#define mir_nf_fwd     mir_data.nf_fwd+#define mir_ds_fwd     mir_data.ds_fwd+#define mir_exp_fwd    mir_data.exp_fwd+#define mir_set        mir_data.set+#define mir_set_rx     mir_data.set_rx+#define mir_set_tc     mir_data.set_tc+#define mir_set_tx     mir_data.set_tx+#define mir_set_ds     mir_data.set_ds+#define mir_set_exp    mir_data.set_exp+#define mir_set_nf     mir_data.set_nf+#define mir_exp2tc     mir_data.exp2tc+#define mir_exp2ds     mir_data.exp2ds+#define mir_tc2exp     mir_data.tc2exp+#define mir_ds2exp     mir_data.ds2exp+#define mir_nf2exp     mir_data.nf2exp++struct mpls_instr_req {+	struct mpls_instr_elem       mir_instr[MPLS_NUM_OPS];+	unsigned char                mir_instr_length;+	unsigned char                mir_direction;+	int                          mir_index;+	struct mpls_label            mir_label;+};++#endifdiff -uNr iptables/include/linux/netfilter_ipv4/ipt_shim.h iptables-mpls/include/linux/netfilter_ipv4/ipt_shim.h--- iptables/include/linux/netfilter_ipv4/ipt_shim.h	1969-12-31 18:00:00.000000000 -0600+++ iptables-mpls/include/linux/netfilter_ipv4/ipt_shim.h	2005-12-14 21:11:32.000000000 -0600@@ -0,0 +1,11 @@+#ifndef _IPT_SHIM_H_target+#define _IPT_SHIM_H_target++#include <net/shim.h>++struct ipt_shim_target_info {+	struct rtshim shim;+	struct shim_blk *sblk;+};++#endif /*_IPT_SHIM_H_target*/diff -uNr iptables/include/linux/netfilter_ipv6/ip6t_shim.h iptables-mpls/include/linux/netfilter_ipv6/ip6t_shim.h--- iptables/include/linux/netfilter_ipv6/ip6t_shim.h	1969-12-31 18:00:00.000000000 -0600+++ iptables-mpls/include/linux/netfilter_ipv6/ip6t_shim.h	2005-12-14 21:11:32.000000000 -0600@@ -0,0 +1,11 @@+#ifndef _IP6T_SHIM_H_target+#define _IP6T_SHIM_H_target++#include <net/shim.h>++struct ip6t_shim_target_info {+	struct rtshim shim;+	struct shim_blk *sblk;+};++#endif /*_IP6T_SHIM_H_target*/diff -uNr iptables/iptables.c iptables-mpls/iptables.c--- iptables/iptables.c	2005-10-14 23:36:45.000000000 -0500+++ iptables-mpls/iptables.c	2005-12-14 21:11:30.000000000 -0600@@ -39,6 +39,7 @@ #include <iptables.h> #include <fcntl.h> #include <sys/wait.h>+#include <linux/mpls.h>  #ifndef TRUE #define TRUE 1@@ -2107,10 +2108,19 @@  		case 'V': 			if (invert)-				printf("Not %s ;-)\n", program_version);+				printf("Not %s mpls-linux %d.%d%d%d ;-)\n",+					program_version,+					(MPLS_LINUX_VERSION >> 24) & 0xFF,+					(MPLS_LINUX_VERSION >> 16) & 0xFF,+					(MPLS_LINUX_VERSION >> 8) & 0xFF,+					(MPLS_LINUX_VERSION) & 0xFF); 			else-				printf("%s v%s\n",-				       program_name, program_version);+				printf("%s v%s mpls-linux %d.%d%d%d\n",+					program_name, program_version,+					(MPLS_LINUX_VERSION >> 24) & 0xFF,+					(MPLS_LINUX_VERSION >> 16) & 0xFF,+					(MPLS_LINUX_VERSION >> 8) & 0xFF,+					(MPLS_LINUX_VERSION) & 0xFF); 			exit(0);  		case '0':diff -uNr iptables/redhat/iptables.spec iptables-mpls/redhat/iptables.spec--- iptables/redhat/iptables.spec	2005-10-14 23:36:45.000000000 -0500+++ iptables-mpls/redhat/iptables.spec	2005-12-14 21:11:30.000000000 -0600@@ -1,11 +1,11 @@ %define build_devel 1 %define linux_header 0-%define epoch %(date '+%s')+%define subver %([ ${MPLSVER}"x" != "x" ] && echo ${MPLSVER} || echo 0.`date '+%s'`)  Name: iptables Summary: Tools for managing Linux kernel packet filtering capabilities. Version: 1.3.0-Release: 2_%{epoch}+Release: 2_mpls_%{subver} Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2 Source1: iptables.init Source2: iptables-config