Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [PATCH 11/13] manpages: update to reflect fine-grained control | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 10 | -17/+17 |
| | |||||
* | [PATCH 10/13] manpages: grammar and spelling | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 6 | -8/+8 |
| | |||||
* | [PATCH 09/13] manpages: fix broken markup (missing close tags) | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 8 | -11/+11 |
| | |||||
* | [PATCH 05/13] Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 1 | -3/+3 |
| | |||||
* | [PATCH 04/13] Add support for xt_hashlimit match revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 2 | -58/+426 |
| | |||||
* | [PATCH 02/13] Fix all remaining warnings (missing declarations, missing ↵ | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 3 | -6/+3 |
| | | | | prototypes) | ||||
* | [PATCH 08/24] Update the libxt_owner manpage with the UID/GID-range feature | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -6/+9 |
| | |||||
* | [PATCH 05/24] Fix -Wshadow warnings and clean up xt_sctp.h | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 7 | -44/+51 |
| | | | | | Note: xt_sctp.h is still not merged upstream in the kernel as of this commit. But a refactoring was really needed. | ||||
* | [PATCH 04/24] Drop -W from CFLAGS and some tiny code cleanups | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 7 | -9/+9 |
| | | | | | - change "unsigned" to explicit "unsigned int" - remove some casts | ||||
* | [PATCH 02/24] Correct the family member value of libxt_mark revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -1/+1 |
| | | | | | libxt_mark rev1 used AF_INET6 in the class structure where it should have used AF_INET. | ||||
* | [PATCH 01/24] Fix compilation of iptables-static build | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -3/+3 |
| | | | | | | | | Adjust the _INIT macro and thus fix the build/linking procedure of the monolithic do-it-all binary (iptables-static). Also fix the Makefile since unfortunately, lib%.o does not seem to have a higher precedence than %.o | ||||
* | [IPTABLES]: libxt_iprange: Fix IP validation logic | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-02 | 1 | -2/+2 |
| | | | | | | | IP address validation logic was inverted, causing valid addresses to be rejected. Signed-off-by: James King <t.james.king@gmail.com> | ||||
* | [PATCH] Fix define value of SCTP chunk type. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-02-29 | 1 | -2/+2 |
| | | | | | | | There are wrong chunk_type values in sctp table. The chunk_type of ASCONF and ASCNF_ACK must be 193 and 128, respectively. Naohiro Ooiwa <nooiwa@miraclelinux.com> | ||||
* | [PATCH]: fix gcc warnings | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 78 | -96/+98 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: escape strings | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 4 | -7/+14 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: use size_t | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -4/+5 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: whitespace cleanup | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -28/+28 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: Fix REDIRECT manpage | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -2/+1 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [IPTABLES]: libxt_owner: UID/GID range support | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -21/+47 |
| | | | | | | UID/GID range support for libxt_owner Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [IPTABLES]: libxt_conntrack revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 2 | -17/+576 |
| | | | | | | Add support for xt_conntrack match revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_CONNMARK revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 2 | -20/+305 |
| | | | | | | Add support for xt_CONNMARK target revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: Build adjustments | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -4/+4 |
| | | | | | | | | | A few build system changes. * ip6tables needs IP6T_LIB_DIR * correctly trigger rebuild of master manpages when submanpages have been touched Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de. | ||||
* | [PATCH]: Give preference to iptables header files | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -2/+3 |
| | | | | | | | | Have the header files in the iptables source tree take precedence over those from the kernel source. Otherwise, building the current iptables from subversion just fails with kernels < 2.6.25. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_TCPOPTSTRIP | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 2 | -0/+219 |
| | | | | | | | Import libxt_TCPOPTSTRIP into iptables. Signed-off-by: Sven Schnelle <svens@bitebene.org> Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_iprange r1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 1 | -1/+222 |
| | | | | | | Add support for xt_iprange revision 1 Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_iprange r0 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 3 | -51/+46 |
| | | | | | | Move libipt_iprange to libxt_iprange. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_mark r1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 1 | -28/+112 |
| | | | | | | Introduce libxt_mark match revision 1 support. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_hashlimit checks | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 1 | -0/+17 |
| | | | | | | Add checks for libxt_hashlimit so that options cannot be passed twice Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: rename overlapping function names | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 8 | -25/+23 |
| | | | | | | Rename overlapping function names. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: bunch o' renames | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 6 | -17/+18 |
| | | | | | | | | Move a few functions from iptables.c/ip6tables.c to xtables.c so they are available for combined (both AF_INET and AF_INET6) libxt modules. Rename overlapping function names. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_conntrack r0 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 3 | -163/+188 |
| | | | | | | Move libipt_conntrack to libxt_conntrack. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_connmark r1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 2 | -36/+119 |
| | | | | | | Add support for xt_connmark match revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_MARK r2 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 4 | -19/+173 |
| | | | | | | | Add support for xt_MARK target revision 2. Also consolidate libip6t_MARK.man and libipt_MARK.man. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_TOS | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 4 | -170/+284 |
| | | | | | | | Move libipt_TOS revision 0 to libxt_TOS revision 0 and add support for xt_TOS target revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_tos | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 5 | -172/+292 |
| | | | | | | | Move libipt_tos revision 0 to libxt_tos revision 0 and add support for xt_tos match revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | [PATCH]: libxt_owner | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 6 | -532/+590 |
| | | | | | | | libxt_owner merges libipt_owner and libip6t_owner, and adds support for the xt_owner match revision 1. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | Converts the iptables build infrastructure to autotools. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-20 | 8 | -324/+221 |
| | | | | | | | | | | | | | - Can build both static and dynamic at the same time - iptables-static will be a multi-binary, semi-static (link against libc but w/o dynamic plugins) - Always build IPv6 modules - consider INSTALL Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | Add rateest match extension | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-15 | 2 | -1/+462 |
| | | | | Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | Add RATEEST target extension | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-15 | 2 | -1/+241 |
| | | | | Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | Fix CONNMARK mask initialisation | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-15 | 1 | -2/+10 |
| | | | | | | | | | | This patch fixes the problem that the CONNMARK mask value has been set to 0 whenever the CONNMARK target options were not the last options to be processed. It initalizes the mask value rather than setting it for each parse. Signed-off-by: Peter Warasin <peter@endian.com> | ||||
* | Unifies libip[6]t_SECMARK.man to libxt_SECMARK.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -7/+0 |
| | |||||
* | Unifies libip[6]t_CONNSECMARK.man to libxt_CONNSECMARK.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -15/+0 |
| | |||||
* | Fixes missing '6' and 'X' in definitions of selinux related extension lists. | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 1 | -2/+2 |
| | |||||
* | Remove libip6t_state.c. libxt_state.c supports IPv6. | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 1 | -156/+0 |
| | |||||
* | Unifies libip[6]t_udp.man to libxt_udp.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -14/+0 |
| | |||||
* | Removes libip6t_u32.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 1 | -129/+0 |
| | | | | libxt_u32.man already exists. | ||||
* | Unifies libip[6]t_physdev.man to libxt_physdev.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -42/+0 |
| | |||||
* | Unifies libip[6]t_mark.man to libxt_mark.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -9/+0 |
| | |||||
* | Unifies libip[6]t_mac.man to libxt_mac.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -10/+0 |
| | |||||
* | Unifies libip[6]t_limit.man to libxt_limit.man | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org | 2007-11-29 | 2 | -15/+0 |
| |