summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Expand)AuthorAgeFilesLines
* size_t changed to socklen_t in getsockopt callJoszef Kadlecsik2006-06-231-3/+3
* set match negation bug fixedJoszef Kadlecsik2006-06-232-3/+3
* REDIRECT does not accept IP (Phil Oester <kernel@linuxace.com>)Phil Oester2006-06-201-0/+3
* trivial connlimit manpage fix (Phil Oester <kernel@linuxace.com>)Phil Oester2006-05-291-2/+2
* Use lowercase letters for match name (Simon Lodal <simonl@parknet.dk>)Simon Lodal2006-05-241-4/+4
* Add information about :<port> syntax (Evan Miller <evanm@frap.net>)Evan Miller2006-05-241-2/+3
* secmark: Add libip6t_CONNSECMARKJames Morris2006-05-243-1/+140
* D'oh .. I'm not too smart, forgot to add the new files in the previous patche...Patrick McHardy2006-05-246-0/+405
* secmark: Add libipt_CONNSECMARKJames Morris2006-05-241-1/+1
* secmark: Add libip6t_SECMARKJames Morris2006-05-241-1/+1
* secmark: Add libipt_SECMARKJames Morris2006-05-241-1/+1
* secmark: Add libselinux supportJames Morris2006-05-241-1/+14
* Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18.Patrick McHardy2006-04-282-16/+48
* [IPTABLES,IP6TABLES]: check invalid esp spi rangeYasuyuki KOZAKAI2006-04-152-0/+6
* fix loading shared library of ICMPv6 match.Yasuyuki KOZAKAI2006-04-153-1/+1
* [IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernelHarald Welte2006-04-122-2/+2
* Correct iptables-save output of osf module (Daniel De Graaf)Daniel De Graaf2006-03-311-0/+8
* make policy match compile independant of kernel headersv1.3.5Harald Welte2006-02-012-2/+2
* Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.hHarald Welte2006-02-011-0/+13
* remove other bits of old ip pool code, people should use ipset (ipset.netfilt...Harald Welte2006-02-013-295/+0
* Prepare policy match for x_tables unification by making sure bothPatrick McHardy2006-01-315-16/+10
* fix 'save' (Michael Rash)Michael Rash2006-01-301-2/+2
* major manpage update (Yasuyuki Kozakai)Yasuyuki KOZAKAI2006-01-3026-84/+128
* Add 'copy+paste' support for 'state' and 'connmark' match, as well asHarald Welte2006-01-264-1/+535
* add note about deprecated stateHarald Welte2006-01-261-0/+2
* fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony)Harald Welte2006-01-222-2/+2
* Fix "empty policy element" complaining in non-strict mode.Noticed by Tom Eastep2006-01-222-2/+4
* Clarify --tunnel-src/--tunnel-dst optionsPatrick McHardy2006-01-122-6/+10
* Move empty policy element check to also catch last elementPatrick McHardy2006-01-122-10/+12
* Don't allow using --next option without specifying a policy elementPatrick McHardy2006-01-122-4/+14
* Fix invalid assignment of tunnel-src to dest address (Patrick McHardy)Patrick McHardy2006-01-091-2/+2
* Add documentation for string match (Pablo Neira)Pablo Neira2006-01-031-0/+15
* fix iptables-save of 'goto' target (Closes: #410)Harald Welte2005-12-051-2/+2
* Add note that TCPMSS is only valid in the mangle table (not true today, but m...Patrick McHardy2005-12-051-1/+4
* tcp-rst is the alias, not tcp-reset (Torsten Hilbrich)Harald Welte2005-11-221-1/+1
* Add policy match extensions from patch-o-maticPatrick McHardy2005-11-196-0/+998
* Fix some gcc-4 warningsPatrick McHardy2005-11-184-7/+7
* Don't eat numeric arguments for other extensionsPatrick McHardy2005-11-181-4/+12
* The conntrack match does not print any info for --ctproto, thusPhil Oester2005-11-171-0/+7
* fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de)v1.3.4Deti Fliegl2005-11-032-53/+10
* The conntrack match extension doesn't handle address inversion correctly. (To...Tom Eastep2005-09-191-2/+2
* Kernels higher than 2.6.10 don't support multiple --to arguments inPhil Oester2005-09-192-0/+14
* * specifying random seed for the Jenkins hash works as documentedKOVACS Krisztian2005-09-191-28/+37
* Make libipt_connbytes.c compile with the ipt_connbytes version that has been ...Martin Josefsson2005-09-111-6/+6
* Update manpage to reflect missing ability to SNAT to multiple ranges in 2.6.1...Harald Welte2005-08-291-4/+6
* Update manpage to reflect missing NAT to multiple ranges support in 2.6.11-rc...Harald Welte2005-08-291-4/+7
* update string match to reflect new kernel implementation (Pablo Neira)Pablo Neira2005-08-281-40/+110
* add support for new 'dccp' protocol matchHarald Welte2005-08-063-0/+414
* port Eric Leblond's NFQUEUE missing-break fix to ip6tablesHarald Welte2005-08-052-0/+4
* Add missing 'break' to make parsing of NFQUEUE numbers work (Eric Leblond)Eric Leblond2005-08-052-0/+4