summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* [PATCH] Introducing libxt_*.man files. Sorted matches and modules/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-311-31/+101
| | | | | | | | | | | The iptables.8 and ip6tables.8 man pages are now generated from libxt_*.man files too. For xtables modules one man page is enough with libxt_ prefix. The match and target lists are sorted alphabetically. The make command doesn't print anything when creates man pages. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu>
* Transfer all my copyright over to our company./C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-202-2/+5
| | | | Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix the compile warning fix/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-181-2/+2
| | | | | | | | According to Jan: While the fields of struct xt_time are uints, the defined time_t span is by definition 0..231-1, i.e. it should be INT_MAX, not UINT_MAX.
* Fix compiler warning on 64 bit: date_stop is an u_int32_t, so use UINT_MAX ↵/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-181-2/+2
| | | | instead of LONG_MAX
* [PATCH] extension/sctp: fix - mistake to pass a pointer where array is required/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-181-12/+9
| | | | | | | Macros like SCTP_CHUNKMAP_XXX(chukmap) require chukmap to be an array, but print_chunks() passes a pointer to these macros. Li Zefan <lizf@cn.fujitsu.com>
* [PATCH]: make print-extensions doesn't show libxt_* extensions/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-081-0/+1
| | | | | | | | In extensions/Makefile the variable PFX_EXT_SLIB_OPTS is not appended to OPTIONALS, therefor 'make print-extensions' doesn't show any optional libxt_* extension. Sebastian Claßen <sebastian.classen@freenet.ag>
* [PATCH] Unique symbols and no '&' characters/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-082-56/+56
| | | | | | | Removing '&' from .._match and ..._target variables. Give all symbols unique names. Signed-off-by: Laszlo Attila Toth
* [PATCH 13/13] Remove redundant dst/hbh lines/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-042-61/+38
| | | | | | | Remove hbh stuff from libip6t_dst, remove dst stuff from libip6t_hbh. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 12/13] Unique symbols 6/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-043-67/+48
| | | | | | | | | | | Give symbols of libxt targets unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 11/13] Unique names 5/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0414-297/+220
| | | | | | | | | | | Give symbols of libxt matches unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 10/13] Unique names 4/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0415-329/+242
| | | | | | | | | | | Give symbols of libxt targets unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 09/13] Unique names 3/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0415-339/+248
| | | | | | | | | | | Give symbols of libxt matches unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 08/13] Unique names 2/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0410-277/+234
| | | | | | | | | | | Give symbols of libxt targets unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 07/13] Unique symbols 1/6/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0426-709/+600
| | | | | | | | | | | Give symbols of libxt matches unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 06/13] No ipt in xt/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-041-1/+1
| | | | | | Cease using ipt_entry_match (replaced by xt_entry_match). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 05/13] Constify data structures/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0412-13/+13
| | | | | | Constify more data structures. Make functions static. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 04/14] Delete empty ->print() and ->save() functions/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-044-33/+0
| | | | | | | Deletes empty ->print() and ->save() functions. ip[6]tables prints the trivial thing automatically. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 03/14] Delete empty ->final_check() functions/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0432-214/+0
| | | | | | | Deletes empty ->final_check() functions, and makes ip[6]tables checks for NULL on these. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 02/14] Delete empty ->init() functions/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-0420-138/+0
| | | | | | | Deletes empty ->init() functions. ip[6]tables already checks for .init being NULL or not. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH 01/13] Remove stray NULLs/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-043-3/+3
| | | | | | | Mixing member accessors (non-named vs named) is not good. Remove stray NULL. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* [PATCH]: Addrtype match: renaming functions/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-10-041-23/+23
| | | | | | | The function names in libipt_addrtype.c makes debugging hard, also I renamed them prefixed by 'addrtype_'. Laszlo attila toth <panther@balabit.hu>
* [PATCH] Couldn't load/find match `u32'/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-281-0/+1
| | | | | | | | | | iptables (up to 0927 snapshot) keeps complaining of "Couldn't load (or find, if NO_SHARED_LIBS=1) match `u32'. After comparing with other libxt_*.c, I found that there's no member ".family" in the "u32_reg" structure, while ".family = AF_INET6" exists in "u32_reg6" Hann-Huei Chiou <koala@ascenvision.com>
* [PATCH]: Add the libxt_time iptables match/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-233-1/+574
| | | | | | | | | | | This is libipt_time from POM-ng enhanced by the following: * day-of-month support (for example "match on the 15th of each month") * inversion support for --weekdays and --monthdays * match against UTC or local timezone * a manpage Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* [PATCH]: Fix u32 warnings/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-191-13/+13
| | | | | | | | | | | warning: format '%ld' expects type 'long int', but argument 3 has type 'int'. With %u alone, you would get "but arg-start is long" warnings on x64. With %lu, you would get "but arg-start is int" on x86. Fix it up by explicitly deciding for one (%u and cast to unsigned int) and using that. Jan Engelhardt <jengelh@computergmbh.de>
* [PATCH]: Adds u32 to iptables./C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-104-1/+566
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Fix sparse warnings: non-ANSI function declarations, 0 used as pointer/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-0867-279/+279
|
* [PATCH] Makefile for man pages of xtables extensions (Laszlo Attila Toth ↵/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-061-10/+42
| | | | | | | | | | | | <panther@balabit.hu>) * no extra target/match by default :) * man page of fix modules (PF_EXT_SLIB etc.) plus optional (...SLIB_OPTS) modules generated, but not all. * because of the previous one I had to rename PF_EXT_SE_SLIB to PF_EXT_SELINUX_SLIB etc. as a non-optional variable, original PF_EXT_SE_SLIB gets the value of PF_EXT_SELINUX_SLIB if DO_SELINUX is set to 1.
* Remove unsupported connrate extension/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-062-183/+0
|
* Build manpages for xtables extensions (Laszlo Attila Toth <panther@balabit.hu>)/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-051-4/+9
|
* Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long./C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-051-9/+14
| | | | Fixes compiler warning in quota match.
* Build IPv6 hbh/dst matches unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build IPv6 rt match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build ipv6header match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build IPv6 mh match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Resync header files and build IPv6 frag match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Resync header file and build IPv6 ah match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build IPv6 REJECT target unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-5/+1
|
* Resync header file and build CLUSTERIP target unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build recent match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-4/+1
|
* Build dccp match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-4/+1
|
* Build string match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-4/+1
|
* Build statistic match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* Build connbytes match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-4/+1
|
* Build quota match unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-4/+1
|
* Build NFLOG target unconditionally/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-052-3/+1
|
* [PATCH]: Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-09-0281-114/+59
|
* Fix dscp match manpage (zhangxiliang <zhangxiliang@cn.fujitsu.com>)/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-08-291-1/+1
| | | | | | | | The description for the value in option "-m dscp -dscp" should be modified to 0~63. The option can match 6 bit DSCP field within the TOS field in the IP header. So the range for the option should be 0~(26-1) that is 0~63.
* Add IPv6 support to statistic match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-08-042-4/+20
|
* Add IPv6 support to helper match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-08-042-11/+26
|
* Add IPv6 support to connbytes match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-08-043-26/+43
|