summaryrefslogtreecommitdiffstats
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* build: bump libxtables ABI versionJan Engelhardt2011-04-141-1/+1
| | | | | | | Adding the x6_* members to struct xtables_{match,target} caused a change requiring a bump. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Bump version to 1.4.10v1.4.10Patrick McHardy2010-10-291-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* libiptc: build with -Wl,--no-as-neededJan Engelhardt2010-09-131-0/+5
| | | | | | | | | Since libiptc does not reference any symbols in libip(4|6)tc, the linker may ignore the dependencies. Use --no-as-needed to explicitly force a DT_NEEDED entry. References: http://bugzilla.netfilter.org/show_bug.cgi?id=674 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Merge branch 'iptables-next'Patrick McHardy2010-08-031-2/+8
|\
| * libxt_ipvs: user-space lib for netfilter matcher xt_ipvsHannes Eder2010-07-231-2/+8
| | | | | | | | | | | | | | | | | | The user-space library for the netfilter matcher xt_ipvs. [ trivial up-port by Simon Horman <horms@verge.net.au> ] Signed-off-by: Hannes Eder <heder@google.com> Acked-by: Simon Horman <horms@verge.net.au> Signed-off-by: Patrick McHardy <kaber@trash.net>
* | Bump version to 1.4.9v1.4.9Patrick McHardy2010-08-031-1/+1
|/ | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* xtables: remove xtables_set_revision functionJan Engelhardt2010-06-071-1/+1
| | | | | | | | Since iptables uses its own copies of the header files anyway where the revision field is exposed, there is no reach to access name[] beyond its size. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Bump version to 1.4.8v1.4.8Patrick McHardy2010-05-211-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* iptables: optionally disable largefile supportKarl Hiramoto2010-05-101-1/+7
| | | | | | | | | | | | | | | | | Many toolchains for embedded systems don't have largefile support: usr/include/features.h:383:4: error: #error It appears you have defined _FILE_OFFSET_BITS=64. Unfortunately, uClibc was built without large file support enabled. In file included from /build_armeb/staging_dir/usr/include/stdio.h:72, from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/bits/uClibc_stdio.h:72:2: error: #error Sorry... uClibc was built without large file support! In file included from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/stdio.h:83: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'fpos_t' In file included from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/stdio.h:709: error: expected declaration specifiers or '...' before 'fpos_t' /build_armeb/staging_dir/usr/include/stdio.h:711: error: expected ';', ',' or ')' before '*' token Signed-off-by: Karl Hiramoto <karl@hiramoto.org> Signed-off-by: Patrick McHardy <kaber@trash.net>
* libxt_osf: import nfnl_osf programJan Engelhardt2010-04-061-1/+7
| | | | | | | | xt_osf is pretty useless without the actual fingerprint loader. Import nfnl_osf-2009-06-07 and make it a part of the iptables distribution. Cc: Evgeniy Polyakov <johnpol@2ka.mxt.ru> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* iptables 1.4.7v1.4.7Patrick McHardy2010-03-011-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* Bump version to v1.4.6v1.4.6Patrick McHardy2009-12-091-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* libxtables: hand argv to xtables_check_inverseJan Engelhardt2009-11-031-2/+2
| | | | | | | | | In going to fix NF bug #611, "argv" is needed in xtables_check_inverse to set "optarg" to the right spot in case of an intrapositional negation. References: http://bugzilla.netfilter.org/show_bug.cgi?id=611 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Bump version number to 1.4.5v1.4.5Patrick McHardy2009-09-141-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* iptables: accept multiple IP address specifications for -s, -dMichael Granzow2009-06-261-2/+2
| | | | | | | | | | | | | | libiptc already supports adding and deleting multiple rules with different addresses, so it only needs to be wired up to the options. # ip6tables -I INPUT -s 2001:db8::d,2001:db8::e -j DROP References: http://marc.info/?l=netfilter-devel&m=123929790719202&w=2 Adjustments made: syntax, removal of unneeded variables, manpage adjustment, soversion bump. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Bump versionv1.4.4Patrick McHardy2009-06-161-1/+1
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* build: bump version to 1.4.3.2v1.4.3.2Pablo Neira Ayuso2009-04-061-1/+1
| | | | | | This patch bumps iptables version to 1.4.3.2 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: add configure option to disable ipv4 iptablesJan Engelhardt2009-04-031-0/+4
| | | | | | This patch complements the previous one. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: add configure option to disable ip6tablesJan Engelhardt2009-04-031-0/+4
| | | | | | | | This also skips building the IPv6 extensions. It does not #ifdef out all code however, I think that would make it too ugly. Inspired-by: http://bugzilla.netfilter.org/show_bug.cgi?id=560 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: reorder .version memberJan Engelhardt2009-04-031-1/+1
| | | | | | | | | | | | | When the structure's layout changes, as it did between v1.4.1 and v1.4.2, trying to compare the version string makes iptables segfault while it tries to determine whether the module is compatible in the first place. By moving the member to a known offset in the struct and keeping it there, objects (both iptables and 3rd party) compiled from this commit onwards will avoid the segfault. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: bump version to 1.4.3.1Pablo Neira Ayuso2009-03-241-1/+1
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* libiptc: make library available as a shared libraryJan Engelhardt2009-02-161-1/+1
| | | | | Tested-by: Jesper Dangaard Brouer <hawk@comx.dk> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: restructure Makefile for include/ directoryJan Engelhardt2009-02-121-1/+2
| | | | | | This patch will support adding libiptc to the headers list in future. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: decouple non-xtables parts from headerJan Engelhardt2009-02-101-1/+1
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: prefix/order - program_nameJan Engelhardt2009-01-301-16/+10
| | | | | | | | | Split XTABLES_VERSION into xtables and iptables, and encode the xtables soversion into the extensions instead. This makes it possible to upgrade iptables without having to recompile 3rd-party extensions (if the libxtables version matches, of course). Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: resolve autotools suggestionsJan Engelhardt2009-01-071-4/+6
| | | | | | | libtool2 wants to put files into m4, so let it have it. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Bump version to 1.4.3-rc1v1.4.3-rc1Patrick McHardy2008-11-131-2/+2
|
* v1.4.2v1.4.2Patrick McHardy2008-10-081-1/+1
|
* Put xtables.c into its own library, libxtables.soJan Engelhardt2008-08-041-1/+6
| | | | | | | | | | | iproute2's tc's m_ipt.c poses as a pseudo-iptables program to make use of the info structure composition of iptables extensions. Since tc would have to clone a lot of code, xtables.c is put into its own shared library and should not be relied upon by any other programs. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* v1.4.2-rc1v1.4.2-rc1Patrick McHardy2008-07-231-2/+2
|
* build: ip6.h is not requiredJan Engelhardt2008-06-251-1/+0
| | | | | | | | | Remove the check from configure.ac that errors out when ip6.h is not found. The code does not actually depend on any structures from it. Reported-by: anonymous Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* build: change equailty test for old bashJan Engelhardt2008-06-231-4/+4
| | | | | | | | | Michael used GNU bash, version 1.14.7(1), which apparently does not seem to know about the double ("==") variant of equality tests. Reported-by: Michael Teicher <mteicher@gmail.com> Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* v1.4.1.1v1.4.1.1Patrick McHardy2008-06-161-1/+1
|
* v1.4.1v1.4.1Patrick McHardy2008-06-101-1/+1
|
* Bump versionv1.4.1-rc3Patrick McHardy2008-06-061-1/+1
|
* build: check for missing feature filesJan Engelhardt2008-06-051-0/+8
| | | | | | | | | | linux/dccp.h is unlikely to be installed before 2.6.18 (which was when headers_install was introduced), and does not exist at all before 2.6.14. Add a compile-time check to skip compilation of libxt_dccp in case this was detected. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* Add xtables version defines.Thomas Jarosch2008-06-031-1/+17
| | | | | | | | | | | | | Attached is a patch to add the new defines. The macro XTABLES_VERSION is already in use, so I named it XTABLES_VERSION_CHECK. I've also tested that an empty XTABLES_VERSION_EXTRA in configure.ac works. Now we can write code like this: #warning You are obselete and will be assimilated. Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com> Signed-off-by: Patrick McHardy <kaber@trash.net>
* iptables 1.4.1-rc2v1.4.1-rc2Patrick McHardy2008-05-261-1/+1
|
* Bump version to 1.4.1-rc1v1.4.1-rc1Patrick McHardy2008-05-191-1/+1
| | | | | Actually its not a bump but a decrease, the autoconf patches apparently sneaked it a version bump to 1.4.1 already.
* Remove old functions, constantsJan Engelhardt2008-04-151-1/+1
|
* Dynamically create xtables.h.in with versionJan Engelhardt2008-04-151-1/+1
|
* configure.ac: AC_SUBST must be separateJan Engelhardt2008-04-151-1/+2
|
* Update documentation about building the packageJan Engelhardt2008-04-151-2/+2
|
* Add all necessary header files - compilation fix for various casesJan Engelhardt2008-04-141-3/+7
| | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h.
* configure: split --enable-libipq from --enable-develJan Engelhardt2008-04-131-1/+5
|
* Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIRJan Engelhardt2008-04-131-7/+6
|
* Fix all remaining warnings (missing declarations, missing prototypes)Jan Engelhardt2008-04-131-5/+1
|
* Fix -Wshadow warnings and clean up xt_sctp.hJan Engelhardt2008-04-061-2/+1
| | | | | Note: xt_sctp.h is still not merged upstream in the kernel as of this commit. But a refactoring was really needed.
* Drop -W from CFLAGS and some tiny code cleanupsJan Engelhardt2008-04-061-1/+1
| | | | | - change "unsigned" to explicit "unsigned int" - remove some casts
* bump iptables version to prepare 1.4.1 releasePablo Neira Ayuso2008-03-021-1/+1
|
generated by cgit v1.2.3 (git 2.25.0) at 2024-11-16 11:08:20 +0000