summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* fix compilation of iptables on [old] systems that don't have IPT_F_GOTOHarald Welte2005-11-242-0/+6
* note that we can only delete chains that are emptyHarald Welte2005-11-221-3/+4
* tcp-rst is the alias, not tcp-reset (Torsten Hilbrich)Harald Welte2005-11-221-1/+1
* Add policy match extensions from patch-o-maticPatrick McHardy2005-11-196-0/+998
* Fix some gcc-4 warningsPatrick McHardy2005-11-184-7/+7
* Don't eat numeric arguments for other extensionsPatrick McHardy2005-11-181-4/+12
* The conntrack match does not print any info for --ctproto, thusPhil Oester2005-11-171-0/+7
* only set revisions on real targets, not on jumps. (Pablo Neira)Pablo Neira2005-11-171-1/+3
* - Fix memory leak in TC_COMMIT() (Markus Sundberg)Harald Welte2005-11-121-23/+25
* add 'goto' support (Henrik Nordstrom <hno@marasystems.com>)Henrik Nordstrom2005-11-053-3/+33
* fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de)v1.3.4Deti Fliegl2005-11-032-53/+10
* about to release 1.3.4Harald Welte2005-10-311-2/+2
* The conntrack match extension doesn't handle address inversion correctly. (To...Tom Eastep2005-09-191-2/+2
* Kernels higher than 2.6.10 don't support multiple --to arguments inPhil Oester2005-09-194-0/+41
* * specifying random seed for the Jenkins hash works as documentedKOVACS Krisztian2005-09-191-28/+37
* Add the aligned_u64 typedef, it's defined in linux/types.h in the kernel.Martin Josefsson2005-09-111-0/+4
* Make libipt_connbytes.c compile with the ipt_connbytes version that has been ...Martin Josefsson2005-09-111-6/+6
* Update manpage to reflect missing ability to SNAT to multiple ranges in 2.6.1...Harald Welte2005-08-291-4/+6
* Update manpage to reflect missing NAT to multiple ranges support in 2.6.11-rc...Harald Welte2005-08-291-4/+7
* update string match to reflect new kernel implementation (Pablo Neira)Pablo Neira2005-08-281-40/+110
* Note which kernel versions are affected by REJECT change (Maciej Soltysiak)Maciej Soltysiak2005-08-261-0/+2
* add support for new 'dccp' protocol matchHarald Welte2005-08-063-0/+414
* port Eric Leblond's NFQUEUE missing-break fix to ip6tablesHarald Welte2005-08-052-0/+4
* Add missing 'break' to make parsing of NFQUEUE numbers work (Eric Leblond)Eric Leblond2005-08-052-0/+4
* _really_ sort only user defined chains (Robert de Barth <list-netfilter@debar...Robert de Barth2005-07-311-1/+1
* 1.3.3 releasev1.3.3Harald Welte2005-07-291-2/+2
* The call to free_opts() in merge_options() is invalid C. The oldoptsMarcus Sundberg2005-07-292-6/+2
* update manpage to reflect QUEUE / nfnetlink_queue / NFQUEUE changesHarald Welte2005-07-284-8/+52
* Fix NAT of ICMP ID ranges (Patrick McHardy)Patrick McHardy2005-07-224-4/+8
* get rid of numerous gcc-4 warningsHarald Welte2005-07-1914-20/+25
* add NFQUEUE support for ipv4 and ipv6Harald Welte2005-07-194-2/+244
* fix various missing header file / #define issues on old kernels. I've now te...v1.3.2Harald Welte2005-07-103-16/+23
* we need to have this header file included, since old kernels don't define IP6...Harald Welte2005-07-101-0/+16
* bump version number to 1.3.2Harald Welte2005-07-101-2/+2
* add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334Harald Welte2005-07-041-0/+6
* attempt to fix save/restore of '! --uid-owner squid' problem as reported by C...Harald Welte2005-06-291-2/+2
* add pointer to bugzillaHarald Welte2005-06-241-0/+1
* we don't have any counter issues in sparc64Harald Welte2005-06-241-1/+0
* Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>)Patrick McHardy2005-06-242-1/+20
* fix deletion of targets where kernel size != userspace size (Pablo Neira)Pablo Neira2005-06-232-0/+2
* reduce code replication of parse_interface() (Yasuyuki Kozakai)Yasuyuki KOZAKAI2005-06-226-82/+5
* This patch prevents user to set negative port value of SNAT/DNAT.Yasuyuki KOZAKAI2005-06-222-4/+4
* Chain name should not start with '!' (Yasuyuki Kozakai <yasuyuki.kozakai@tosh...Yasuyuki KOZAKAI2005-06-132-4/+4
* Flush chain with noflush when it is redefined (Charlie Brady <charlieb-netfil...Charlie Brady2005-06-122-12/+30
* OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov <...Evgeniy Polyakov2005-06-111-3/+11
* update multiport manpage (Phil Oester <kernel@linuxace.com>)Phil Oester2005-06-112-8/+10
* Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora <...Tom Eastep2005-06-111-2/+2
* Release previously merged options from merge_opts(), reduces memory-usage of ...Pablo Neira2005-05-292-11/+34
* While adding testing for inversion of multiport, noticed that documentation a...Rusty Russell2005-05-251-2/+2
* include FIN bit in mask of "--syn" bitsHarald Welte2005-05-042-3/+3