summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove to support resizing from kernel context.Jozsef Kadlecsik2010-10-291-8/+1
| | | | | | Resizing in kernel context is simply too expensive. Drop the feature: if a set is used as a dynamic container by a SET target, then the set must be created with a proper size from now on.
* Fix gfp_flags at resizingJozsef Kadlecsik2010-10-292-3/+3
| | | | | Resizing functions are called without holding any lock. So we can allocate using the flag GFP_KERNEL.
* Test to list large hash sets added.Jozsef Kadlecsik2010-10-292-0/+1065
|
* Listing for hash types fixedJozsef Kadlecsik2010-10-291-2/+18
| | | | | | The listing was incorrect for large sets, when multiple messages were required. I assume that one full hash bucket fills into one message, but that is true for all current hash types.
* Kernel compile-time files are added to .gitignoreJozsef Kadlecsik2010-10-291-0/+9
|
* Build and source kernel directoriesv5.0-pre9Jozsef Kadlecsik2010-10-251-1/+7
| | | | | Fall back to the build directory if the source directory is not specified. Check that it looks like as a source directory.
* Merge branch 'ipset-5' of git://dev.medozas.de/ipset into ipset-5Jozsef Kadlecsik2010-10-257-34/+49
|\
| * Add .gitignore filesJan Engelhardt2010-10-192-0/+21
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: run autoupdateJan Engelhardt2010-10-191-2/+2
| | | | | | | | | | | | | | | | AC_CANONICAL_SYSTEM is deprecated in favor of calling one or more of AC_CANONICAL_{BUILD,HOST,TARGET}. Since configure.ac only uses $target, only AC_CANONICAL_TARGET is needed. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: use subdir-objects and CC_C_OJan Engelhardt2010-10-191-1/+2
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: remove manual -fPIC flagJan Engelhardt2010-10-191-1/+1
| | | | | | | | | | | | | | libtool will take care of adding -fPIC as needed. In fact, static libraries are often not desired to be compiled with -fPIC. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: use libmnl's pkgconfig filesJan Engelhardt2010-10-192-6/+3
| | | | | | | | | | | | | | | | | | | | | | | | libmnl installs .pc files that we can directly use and which are preferable over AC_CHECK_LIB. Also make sure that libipset.so is linked with libmnl, otherwise linking errors can ensue when a program tries to link to libipset. Furthermore, remove the now-unused LIBS variable. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: add separate option for kernel source directoryJan Engelhardt2010-10-191-9/+14
| | | | | | | | | | | | The build directory is not necessarily the same as the source directory. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: resolve autoreconf/libtoolize suggestionsJan Engelhardt2010-10-193-0/+5
| | | | | | | | | | | | | | | | libtoolize: Consider adding "AC_CONFIG_MACRO_DIR([m4])" to configure.ac and libtoolize: rerunning libtoolize, to keep the correct libtool macros in-tree. libtoolize: Consider adding "-I m4" to ACLOCAL_AMFLAGS in Makefile.am. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * build: just use autoreconfJan Engelhardt2010-10-191-16/+2
| | | | | | | | | | | | | | This is the recommended way to regenerate the GNU build system files these days. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* | Rollback to fix commit historyJozsef Kadlecsik2010-10-256-53/+33
| |
* | Fixes, cleanups, commentsv5.0-pre8Jozsef Kadlecsik2010-10-2488-1086/+2487
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - More comments added to the code - ICMP and ICMPv6 support added to the hash:ip,port, hash:ip,port,ip and hash:ip,port,net types - hash:net and hash:ip,port,net types are reworked - hash:net,port type added - Wrong direction parameters fixed in hash:ip,port - Helps and manpage are updated - More tests added - Ugly macros are rewritten to functions in parse.c (Holger Eitzenberger) - resize related bug in hash types fixed (Holger Eitzenberger) - autoreconf patches by Jan Engelhardt applied - netlink patch minimalized: dumping can be initialized by a second parsing of the message (thanks to David and Patrick for the suggestion) - IPv4/IPv6 address attributes are introduced in order to fix the context (suggested by David)
* | Cleanup, compatibilityv5.0-pre7Jozsef Kadlecsik2010-08-2312-66/+71
|/ | | | | | | | | - Use is_vmalloc_addr when freeing vmalloc or kmalloc-ed areas. Thus we can get rid of a flag and simplify some functions. - When checking "same" sets, ignore hash size, because resizing changes it. - 2.6.35 compatibility added. - Discuss backward/forward compatibilities in the README file.
* Compatibility and documentation fixesv5.0-pre6Jozsef Kadlecsik2010-07-137-39/+94
| | | | | | | Makefile fixes: compiler flags README and manpage fixes Compatibility with newer gcc releases (4.4.x) Compatibility with the 2.6.35 kernel tree
* ipset 5: Sparc related and compatibility fixesv5.0-pre5Jozsef Kadlecsik2010-06-2932-165/+306
| | | | | | | | ipset 5 is tested on Sparc, which revealed some compatibility issues and those are fixed. Kernels from 2.6.31 onward are supported. The testsuite checkings are completed to run match/target checks. The README file is updated to reflect the requirements to install and run ipset 5.
* ipset 5: IPv6 port related and manpage fixes, more testsv5.0-pre4Jozsef Kadlecsik2010-06-257-35/+231
| | | | | | - getting ports for family INET6 fixed - more manpage polishing - tests to check the iptables/ip6tables match and target added
* ipset 5: last new feature addedv5.0-pre3Jozsef Kadlecsik2010-06-2244-577/+1181
| | | | | | | | | | | - the hash types can now store protocol together port, not only port - lots of fixes everywhere: parser, error reporting, manpage The last bits on the todo list before announcing ipset 5: - recheck all the error messages - add possibly more tests - polish manpage
* configure/Makefile and debug fixesJozsef Kadlecsik2010-06-165-4/+26
|
* IPv6 match/target module aliases addedv5.0-pre2Jozsef Kadlecsik2010-06-161-0/+2
| | | | The missing IPv6 match/target aliases added.
* Use libmnl nest functions and fix size differences in iptree*.tJozsef Kadlecsik2010-06-153-24/+4
| | | | | | Use the libmnl mnl_attr_nest_star/mnl_attr_nest_end functions instead of the private ones. Ignore possible size differences in iptree*.t compatibility tests.
* ipset 5 in an almost ready state - milestonev5.0-pre1Jozsef Kadlecsik2010-06-15145-5846/+9165
| | | | | | | | | | | | Reworked protocol and internal interfaces, missing set types added, backward compatibility verified, lots of tests added (and thanks to the tests, bugs fixed), even the manpage is rewritten ;-). Countless changes everywhere... The missing bits before announcing ipset 5: - net namespace support - new iptables/ip6tables extension library - iptables/ip6tables match and target tests (backward/forward compatibility) - tests on catching syntax errors
* Fix Makefile.amv5.0-pre0Jozsef Kadlecsik2010-04-221-2/+2
| | | | | "tidy" must cleanup the kernel/ directory - and should not delete kernel/Makefile.
* Tenth stage to ipset-5Jozsef Kadlecsik2010-04-2220-0/+1306
| | | | Add new test files and toplevel files.
* Nineth stage to ipset-5Jozsef Kadlecsik2010-04-2218-241/+661
| | | | Update tests.
* Eight stage to ipset-5Jozsef Kadlecsik2010-04-2214-2535/+3590
| | | | Commit changed files in kernel/...
* Seventh stage to ipset-5Jozsef Kadlecsik2010-04-223-0/+871
| | | | | Refresh existing files in kernel/ with new content and add some new include/source files.
* Sixth stage to ipset-5Jozsef Kadlecsik2010-04-2215-646/+0
| | | | Remove unnecessary include files and rename some.
* Fifth stage to ipset-5Jozsef Kadlecsik2010-04-2234-125/+0
| | | | Rename files in kernel/ and get rid of old ones (2.4.x kernel tree support).
* Fourth stage to ipset-5Jozsef Kadlecsik2010-04-2229-0/+6085
| | | | Add new userspace files: include/, lib/ and plus new files in src/.
* Third stage to ipset-5Jozsef Kadlecsik2010-04-2211-5098/+1439
| | | | Refresh existing files in src/ with the new content.
* Second stage to ipset-5Jozsef Kadlecsik2010-04-2211-200/+0
| | | | Rename files in src/ according to the new naming convention.
* First staget to ipset-5Jozsef Kadlecsik2010-04-2217-186/+0
| | | | | Create src/ and move ipset source there. Get rid of unnecessary and outdated files.
* New version 4.2 released:v4.2Jozsef Kadlecsik2010-01-2410-63/+53
| | | | | | | | | | | kernel: - nethash and ipportnethash types counted every entry twice which could produce bogus entries when listing/saving these types of sets (bug reported by Husnu Demir) userspace: - Checking null entries when listing/saving hash types of sets deleted because it's unnecessary and can mask possible errors.
* 4.1 version releasedv4.1Jozsef Kadlecsik2009-11-118-159/+153
|
* Corrected kernel/ChangeLog entryJozsef Kadlecsik2009-11-101-1/+1
|
* ipset 4.0 releasedv4.0Jozsef Kadlecsik2009-11-1077-1906/+1357
| | | | See ChangeLog files
* Include linux/jiffies.h for kernel 2.6.20 (Jan Engelhardt)Jozsef Kadlecsik2009-09-112-0/+4
|
* New release again, to fix a mistyping of me and get rid of bool.v3.2Jozsef Kadlecsik2009-08-214-9/+8
|
* New 'release' target to make life simplerJozsef Kadlecsik2009-08-191-1/+6
|
* ipset 3.1 releasev3.1Jozsef Kadlecsik2009-08-1815-38/+76
| | | | | | | | | | | | | | A few minor bugs fixed and cleanups: - Nonexistent sets were reported as existing sets when testing from userspace in setlist type of sets (bug reported by Victor A. Safronov) - When saving sets, setlist type of sets must come last in order to satisfy the dependency from the elements (bug reported by Marty B.) - Sparse insists that the flags argument to kmalloc() is gfp_t (Stephen Hemminger) - Correct format specifiers and change %i to %d (Jan Engelhardt) - Fix the definition of 'bool' for kernels <= 2.6.18 (Jan Engelhardt)
* ipset 3.0 releasev3.0Jozsef Kadlecsik2009-05-1630-129/+143
| | | | | The main change is full bigendian and 64/32bit enviroment support - in consequence the kernel-userspace protocol version was bumped.
* Release v2.5.0.v2.5.0Jozsef Kadlecsik2009-03-063-1/+9
|
* Use spinlock initiator instead of setting the locks directly (Jan Engelhardt).Jozsef Kadlecsik2009-03-061-1/+1
|
* Respect LDFLAGS settings at compile time (Peter Volkov).Jozsef Kadlecsik2009-03-061-2/+2
|
* Fix alignment issue on parisc arhictecture (bugzilla id 582).Jozsef Kadlecsik2009-03-061-1/+2
|