Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Renames libipt_NOTRACK.c to libxt_NOTRACK.c | Yasuyuki KOZAKAI | 2007-07-24 | 2 | -1/+2 | |
| | ||||||
* | Use unified API in NOTRACK target. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -16/+15 | |
| | ||||||
* | Moves all declarations in iptables_common.h to xtables.h. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -2/+1 | |
| | ||||||
* | Installs libxt_*.so to DEST_IPT_LIBIDR and link libip[6]t_*.so to it. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -0/+26 | |
| | ||||||
* | Introduces DEST_IPT_LIBDIR to simplify $(DESTDIR)$(LIBDIR)/iptables | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -8/+9 | |
| | ||||||
* | Fixes warning on compilation, part 2 | Yasuyuki KOZAKAI | 2007-07-24 | 6 | -29/+46 | |
| | | | | | | | | | | This changes the type of arguments as follows in multiport, DNAT, SNAT, MASQUERADE, and REDIRECT - ip[6]t_ip[6] * -> void * - ip[6]t_entry * -> void * and adds lines to cast these pointer with intended type. | |||||
* | Fixes warning on compilation of ip6tables matches/targets | Yasuyuki KOZAKAI | 2007-07-24 | 36 | -107/+107 | |
| | | | | | | This changes the type of arguments as follows - ip6t_ip6 * -> void * - ip6t_entry * -> void * | |||||
* | Fixes warning on compilation of iptables matches/targets | Yasuyuki KOZAKAI | 2007-07-24 | 60 | -177/+177 | |
| | | | | | | | | | This changes the type of arguments as follows - ipt_ip * -> void * - ipt_entry * -> void * This patch doesn't change multiport, DNAT, SNAT, MASQUERADE, REDIRECT because these need more changes (casting void * variable with intended type) | |||||
* | Replaces ip6t_entry_* with xt_entry_* in matches/targets | Yasuyuki KOZAKAI | 2007-07-24 | 34 | -128/+127 | |
| | ||||||
* | Replaces ipt_entry_* with xt_entry_* in matches/targets | Yasuyuki KOZAKAI | 2007-07-24 | 64 | -237/+237 | |
| | ||||||
* | Adds missing explanations about FIN in mask part of '--syn' in libip[6]_tcp.c | Patrick McHardyYasuyuki KOZAKAI | 2007-07-16 | 3 | -3/+3 | |
| | | | | and libip6t_tcp.man. | |||||
* | Adds missing FIN to mask part generated by '--syn' of libip6t_tcp | Yasuyuki KOZAKAI | 2007-07-16 | 2 | -2/+2 | |
| | ||||||
* | Fixes compile error of connlimit where NO_SHARED_LIBS=1 is specified | Yasuyuki KOZAKAI | 2007-07-13 | 2 | -2/+2 | |
| | ||||||
* | PATCH: Add connlimit to iptables. | Jan Engelhardt | 2007-07-09 | 5 | -2/+335 | |
| | | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de> | |||||
* | libipt_statistic: add a few missing validity checks | Nicolas Bouliane | 2007-07-03 | 1 | -0/+9 | |
| | | | | Signed-off-by: Nicolas Bouliane | |||||
* | Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer | Yasuyuki KOZAKAI | 2007-06-28 | 6 | -117/+0 | |
| | ||||||
* | Add Jozsef's TRACE target. | Patrick McHardy | 2007-06-25 | 5 | -2/+148 | |
| | | | | | Changed to be built unconditionally by myself since it doesn't need any headerfiles anyways. | |||||
* | Fixes build error of conntrack match because of missing ip_conntrack_tuple.h | Yasuyuki KOZAKAI | 2007-06-24 | 1 | -1/+0 | |
| | | | | | in linux 2.6.22. It is not needed because nf_conntrack headers can be used instead. | |||||
* | libipt_hashlimit doc update | Jan Engelhardt | 2007-06-03 | 1 | -2/+2 | |
| | | | | | | Add srcip,srcport to hashlimit manpage. Signed-off-by: Jan Engelhardt <jengelh@gmx.de> | |||||
* | Add --random option to DNAT and REDIRECT targets and fix the manpage mess ↵ | Patrick McHardy | 2007-05-29 | 7 | -27/+76 | |
| | | | | this option left behind. | |||||
* | update quota manpage for SMP (Phil Oester) | Phil Oester | 2007-05-02 | 1 | -1/+0 | |
| | | | | | The quota match works fine on SMP, so update the manpage to reflect this. Closes bugzilla #564. | |||||
* | Fix iptables-save with --random option | Patrick McHardy | 2007-04-18 | 3 | -3/+14 | |
| | ||||||
* | Remove unnecessary IP_NAT_RANGE_PROTO_RANDOM ifdefs. | Patrick McHardy | 2007-04-18 | 3 | -45/+7 | |
| | ||||||
* | Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵ | Patrick McHardy | 2007-04-18 | 11 | -11/+11 | |
| | | | | versions. | |||||
* | Remove unnecessary ip_conntrack/ip_nat includes | Patrick McHardy | 2007-04-18 | 2 | -2/+0 | |
| | ||||||
* | Fix cut and paste error breaking use of groups != 0 | Patrick McHardy | 2007-03-06 | 2 | -12/+12 | |
| | ||||||
* | iptables: add random option to SNAT (Eric Leblond) | Eric Leblond | 2007-02-24 | 6 | -9/+117 | |
| | ||||||
* | Reverted r6754. libipt_icmp has the option 'any', so it's unnecessary | Yasuyuki KOZAKAI | 2007-02-19 | 1 | -4/+1 | |
| | | | | to check no option of ICMP type. | |||||
* | Remove and readd with executable bit set. SVN doesn't seem to have a proper ↵ | Patrick McHardy | 2007-02-13 | 1 | -0/+0 | |
| | | | | way of doing this. | |||||
* | Fixes man page for tcp, udp, icmp{,6}. They are not loaded when only '-p' is | Yasuyuki KOZAKAI | 2007-02-13 | 6 | -6/+6 | |
| | | | | specified, but loaded when extra options are specified, too. | |||||
* | Forgot to add TCPMSS target to PF6_EXT_SLIB | Patrick McHardy | 2007-02-13 | 1 | -1/+1 | |
| | ||||||
* | Error if no ICMP type is specified even though user intended | Yasuyuki KOZAKAI | 2007-02-13 | 1 | -0/+3 | |
| | | | | to use icmp match. | |||||
* | Add ip6tables mh extension (Masahide NAKAMURA <nakam@linux-ipv6.org>) | Masahide NAKAMURA | 2007-02-09 | 3 | -0/+266 | |
| | | | | Kernel part will go in 2.6.21 | |||||
* | Bugzilla #535 | Patrick McHardy | 2007-01-26 | 1 | -1/+1 | |
| | | | | | In the tcpmss section of the iptables manpage, there is an extraneous trailing quote for the --mss option. | |||||
* | Bugzilla #534: | Patrick McHardy | 2007-01-26 | 1 | -4/+0 | |
| | | | | | Please remove --mss from libipt_tcp.man. The tcp match doesn't handle that option, while the tcpmss match does. | |||||
* | Add ip6tables TCPMSS extension (Arnaud Ebalard <arno@natisbad.org>) | Arnaud Ebalard | 2007-01-16 | 2 | -0/+176 | |
| | | | | Kernel part will go in 2.6.21. | |||||
* | Add UDPLITE multiport support | Patrick McHardy | 2007-01-11 | 1 | -3/+6 | |
| | ||||||
* | Fix missing space in ruleset listing | Patrick McHardy | 2007-01-11 | 1 | -1/+1 | |
| | ||||||
* | Remove extensions for unmaintained/obsolete patchlets | Patrick McHardy | 2007-01-10 | 65 | -5009/+2 | |
| | ||||||
* | fix typo in manpage (thomas@aktaia.intevation.org) | thomas | 2007-01-07 | 1 | -1/+1 | |
| | ||||||
* | Move extensions for pom patches to individual patchlets. | Patrick McHardy | 2006-12-12 | 18 | -1337/+1 | |
| | ||||||
* | Add target extensions for new NFLOG target | Patrick McHardy | 2006-12-03 | 4 | -0/+326 | |
| | ||||||
* | Fix /etc/network usage (Pablo Neira) | Pablo Neira Ayuso | 2006-11-29 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | http://bugs.debian.org/398082 iptables 1.3.5 and 1.3.6 appear to read /etc/networks, but the information is lost somewhere with 1.3.6. # cat /etc/networks foonet 10.0.0.0 # strace -s 255 -o /tmp/foo iptables -v -A INPUT -s foonet/8 -j ACCEPT #1.3.5 [1] ACCEPT all opt -- in * out * 10.0.0.0/8 -> 0.0.0.0/0 # strace -s 255 -o /tmp/bar iptables -v -A INPUT -s foonet/8 -j ACCEPT #1.3.6 [2] iptables v1.3.6: host/network `foonet.0.0.0' not found Try `iptables -h' or 'iptables --help' for more information. 1. http://people.debian.org/~ljlane/stuff/strace-iptables-1.3.5.txt 2. http://people.debian.org/~ljlane/stuff/strace-iptables-1.3.6.txt | |||||
* | Add ip6tables support for hashlimit match | Patrick McHardy | 2006-11-13 | 2 | -0/+372 | |
| | ||||||
* | Add ip6tables support for sctp match | Patrick McHardy | 2006-11-13 | 2 | -0/+553 | |
| | ||||||
* | - Add revision support to ip6tables. | Rémi Denis-Courmont | 2006-10-20 | 1 | -1/+200 | |
| | | | | | - Add support port range match to libip6t_multiport (R?mi Denis-Courmont <rdenis@simphalempin.com>) | |||||
* | iptables segfaults when given "" to --log-prefix (Mike Frysinger ↵ | Mike Frysinger | 2006-10-10 | 3 | -0/+16 | |
| | | | | | | <vapier@gentoo.org>) Bugzilla #516 | |||||
* | Use correct types at error reporting (patch sent by H. Nakano) | Joszef Kadlecsik | 2006-10-06 | 1 | -2/+2 | |
| | ||||||
* | Named realm (Simon Lodal <simon@parknet.dk>) | Simon Lodal | 2006-09-02 | 2 | -13/+158 | |
| | | | | Optionally read realm values from /etc/iproute2/rt_realms | |||||
* | Add statistic match extension | Patrick McHardy | 2006-08-31 | 2 | -0/+177 | |
| |