| Commit message (Expand) | Author | Age | Files | Lines |
* | iptables: fix ipt_MARK documentation (Eric Leblond) | Eric Leblond | 2006-08-29 | 1 | -1/+8 |
* | update quota match for xtables + fix -D bug (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-08-08 | 2 | -7/+8 |
* | Revert "proto_to_name duplication" patch, as noticed by Yasuyuki it can cause | Patrick McHardyJesper Brouer | 2006-07-25 | 1 | -2/+19 |
* | proto_to_name duplication (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-07-22 | 1 | -19/+2 |
* | reduce parse_*_port duplication (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-07-20 | 9 | -137/+18 |
* | reduce service_to_port duplication (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-07-20 | 9 | -105/+6 |
* | please kill santa-claus (Pierre-Yves Ritschard <pierre-yves@spootnik.org>) | Pierre-Yves Ritschard | 2006-07-05 | 1 | -1/+0 |
* | - force user to specify --icmpv6-type if icmpv6 match is required to load | Yasuyuki KOZAKAI | 2006-07-04 | 2 | -1/+11 |
* | ip6tables multiport does not support x:y (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-07-03 | 1 | -5/+4 |
* | iptables trivial compile warning cleanup (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-07-03 | 2 | -4/+6 |
* | size_t changed to socklen_t in getsockopt call | Joszef Kadlecsik | 2006-06-23 | 1 | -3/+3 |
* | set match negation bug fixed | Joszef Kadlecsik | 2006-06-23 | 2 | -3/+3 |
* | REDIRECT does not accept IP (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-06-20 | 1 | -0/+3 |
* | trivial connlimit manpage fix (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2006-05-29 | 1 | -2/+2 |
* | Use lowercase letters for match name (Simon Lodal <simonl@parknet.dk>) | Simon Lodal | 2006-05-24 | 1 | -4/+4 |
* | Add information about :<port> syntax (Evan Miller <evanm@frap.net>) | Evan Miller | 2006-05-24 | 1 | -2/+3 |
* | secmark: Add libip6t_CONNSECMARK | James Morris | 2006-05-24 | 3 | -1/+140 |
* | D'oh .. I'm not too smart, forgot to add the new files in the previous patche... | Patrick McHardy | 2006-05-24 | 6 | -0/+405 |
* | secmark: Add libipt_CONNSECMARK | James Morris | 2006-05-24 | 1 | -1/+1 |
* | secmark: Add libip6t_SECMARK | James Morris | 2006-05-24 | 1 | -1/+1 |
* | secmark: Add libipt_SECMARK | James Morris | 2006-05-24 | 1 | -1/+1 |
* | secmark: Add libselinux support | James Morris | 2006-05-24 | 1 | -1/+14 |
* | Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18. | Patrick McHardy | 2006-04-28 | 2 | -16/+48 |
* | [IPTABLES,IP6TABLES]: check invalid esp spi range | Yasuyuki KOZAKAI | 2006-04-15 | 2 | -0/+6 |
* | fix loading shared library of ICMPv6 match. | Yasuyuki KOZAKAI | 2006-04-15 | 3 | -1/+1 |
* | [IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernel | Harald Welte | 2006-04-12 | 2 | -2/+2 |
* | Correct iptables-save output of osf module (Daniel De Graaf) | Daniel De Graaf | 2006-03-31 | 1 | -0/+8 |
* | make policy match compile independant of kernel headersv1.3.5 | Harald Welte | 2006-02-01 | 2 | -2/+2 |
* | Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.h | Harald Welte | 2006-02-01 | 1 | -0/+13 |
* | remove other bits of old ip pool code, people should use ipset (ipset.netfilt... | Harald Welte | 2006-02-01 | 3 | -295/+0 |
* | Prepare policy match for x_tables unification by making sure both | Patrick McHardy | 2006-01-31 | 5 | -16/+10 |
* | fix 'save' (Michael Rash) | Michael Rash | 2006-01-30 | 1 | -2/+2 |
* | major manpage update (Yasuyuki Kozakai) | Yasuyuki KOZAKAI | 2006-01-30 | 26 | -84/+128 |
* | Add 'copy+paste' support for 'state' and 'connmark' match, as well as | Harald Welte | 2006-01-26 | 4 | -1/+535 |
* | add note about deprecated state | Harald Welte | 2006-01-26 | 1 | -0/+2 |
* | fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony) | Harald Welte | 2006-01-22 | 2 | -2/+2 |
* | Fix "empty policy element" complaining in non-strict mode. | Noticed by Tom Eastep | 2006-01-22 | 2 | -2/+4 |
* | Clarify --tunnel-src/--tunnel-dst options | Patrick McHardy | 2006-01-12 | 2 | -6/+10 |
* | Move empty policy element check to also catch last element | Patrick McHardy | 2006-01-12 | 2 | -10/+12 |
* | Don't allow using --next option without specifying a policy element | Patrick McHardy | 2006-01-12 | 2 | -4/+14 |
* | Fix invalid assignment of tunnel-src to dest address (Patrick McHardy) | Patrick McHardy | 2006-01-09 | 1 | -2/+2 |
* | Add documentation for string match (Pablo Neira) | Pablo Neira | 2006-01-03 | 1 | -0/+15 |
* | fix iptables-save of 'goto' target (Closes: #410) | Harald Welte | 2005-12-05 | 1 | -2/+2 |
* | Add note that TCPMSS is only valid in the mangle table (not true today, but m... | Patrick McHardy | 2005-12-05 | 1 | -1/+4 |
* | tcp-rst is the alias, not tcp-reset (Torsten Hilbrich) | Harald Welte | 2005-11-22 | 1 | -1/+1 |
* | Add policy match extensions from patch-o-matic | Patrick McHardy | 2005-11-19 | 6 | -0/+998 |
* | Fix some gcc-4 warnings | Patrick McHardy | 2005-11-18 | 4 | -7/+7 |
* | Don't eat numeric arguments for other extensions | Patrick McHardy | 2005-11-18 | 1 | -4/+12 |
* | The conntrack match does not print any info for --ctproto, thus | Phil Oester | 2005-11-17 | 1 | -0/+7 |
* | fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de)v1.3.4 | Deti Fliegl | 2005-11-03 | 2 | -53/+10 |