Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [PATCH]: fix ip6tables dest address printing | Jamie Strandboge | 2008-05-16 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464244 ip6tables improperly displays the destination address when the address is longer than 18 characters. Here is example output: ... DROP tcp 2001:db8::/32 2001:db8:3:4:5:6:7:8/128tcp spt:25 ... Proper formatting should have a space between '2001:db8:3:4:5:6:7:8/128' and 'tcp'. Signed-off-by: Jamie Strandboge <jamie@ubuntu.com> Signed-off-by: Lawrence J. Lane <ljlane@debian.org> Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | [patch] Make --set-counters (-c) accept comma separated counters | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-13 | 2 | -9/+14 |
| | | | | | | | | | | | | Here is the --set-counters syntax patch requested earlier today making --set-counters (-c) accept comma separated counts. -c packets,bytes I have not updated the manpage to reflect this alternate syntax for the --set-counters (-c) option. Henrik Nordstrom <henrik@henriknordstrom.net> | ||||
* | [patch 4/4] iptables --list chain rulenum | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-13 | 2 | -30/+62 |
| | | | | | | | | | | | | Excent --list (and --list-rules) to allow selection of a single rule number iptables --list INPUT 4 iptables --list-rules INPUT 4 list rule number 4 in INPUT. Henrik Nordstrom <henrik@henriknordstrom.net> | ||||
* | [patch 3/4] iptables --list-rules command | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-13 | 8 | -429/+551 |
| | | | | | | | | | | | | | | | | | | Adds iptables --list-rules (-S) command, acting as a combination of iptables --list and iptables-save. The primary motivation behind this patch is to get iptables-save like output capabilities in iptables-restore, allowing "iptables-restore -n" to be used as a consistent API to iptables for all kind of operations, not only blind updates.. As a bonus iptables also gets the capability of printing the rules as-is. This completely replaces the earlier patch which added the --rules option. Henrik Nordstrom <henrik@henriknordstrom.net> | ||||
* | [patch 2/4] Add support for --set-counters to iptables -P | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-12 | 2 | -4/+4 |
| | | | | | | | | Adds support for setting the policy counters iptables -P INPUT -J DROP -c 10 20 Henrik Nordstrom <henrik@henriknordstrom.net> | ||||
* | [patch 1/4] Make iptables-restore usable over a pipe | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-12 | 2 | -0/+2 |
| | | | | | | | | The attached patch flushes stdout between commands to make output operations (-L etc) in iptables-restore usable over a pipe. stdio by defaut buffers output if not connected to a terminal. Henrik Nordstrom <henrik@henriknordstrom.net> | ||||
* | [patch] iptables out-of-tree build directory | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-05-12 | 1 | -1/+3 |
| | | | | | | | Reported by: Henrik Nordstrom When xtables.h is not already found in /usr/include, compilation would fail when ${top_srcdir} != ${top_builddir}. | ||||
* | [PATCH 1] Makefile.am: use PACKAGE_TARNAME | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-21 | 1 | -5/+5 |
| | |||||
* | [patch]iptables-save:remove unnecessary code. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-21 | 1 | -13/+0 |
| | | | | | | The following code is never be used. It should be removed. Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com> | ||||
* | Properly initialize revision for ip6tables targets | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -1/+8 |
| | | | | Also resync error handling with iptables. | ||||
* | [PATCH 08/10] Remove old functions, constants | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 97 | -606/+514 |
| | |||||
* | [PATCH 11] configure.ac: remove already-defined variables | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -3/+1 |
| | |||||
* | [PATCH 07/10] Dynamically create xtables.h.in with version | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 2 | -1/+3 |
| | |||||
* | [PATCH 06/10] configure.ac: AC_SUBST must be separate | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -1/+2 |
| | |||||
* | [PATCH 05/10] Update documentation about building the package | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 2 | -36/+64 |
| | |||||
* | [PATCH 04/10] Resolve libipt_set warnings | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -9/+9 |
| | |||||
* | [PATCH 03/10] Remove support for compilation of conditional extensions | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 10 | -233/+522 |
| | |||||
* | [PATCH 02/10] Wrap dlopen code into NO_SHARED_LIBS | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -0/+2 |
| | |||||
* | [PATCH 01/10] Resolve warnings on 64-bit compile | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-15 | 1 | -2/+2 |
| | |||||
* | [PATCH 5/8] Combine ipt and ip6t manpages | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 15 | -204/+12 |
| | | | | Combine ipt and ip6t manpages | ||||
* | [PATCH 8/8] Implement AF_UNSPEC as a wildcard for extensions | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 17 | -281/+37 |
| | |||||
* | [PATCH 6/8] RATEEST: add manpage | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 2 | -3/+13 |
| | |||||
* | [PATCH 4/8] iptables: use C99 lists for struct options | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 6 | -93/+93 |
| | |||||
* | [PATCH 3/8] Install libiptc header files because xtables.h depends on it | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 1 | -0/+3 |
| | |||||
* | [PATCH 2/8] Add all necessary header files - compilation fix for various cases | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 16 | -101/+239 |
| | | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h. | ||||
* | [PATCH 1/8] Import iptables-apply | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-14 | 2 | -0/+218 |
| | |||||
* | [PATCH 13/13] configure: split --enable-libipq from --enable-devel | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 2 | -2/+6 |
| | |||||
* | [PATCH 11/13] manpages: update to reflect fine-grained control | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 10 | -17/+17 |
| | |||||
* | [PATCH 10/13] manpages: grammar and spelling | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 10 | -16/+16 |
| | |||||
* | [PATCH 09/13] manpages: fix broken markup (missing close tags) | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 8 | -11/+11 |
| | |||||
* | [PATCH 05/13] Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 12 | -83/+108 |
| | |||||
* | [PATCH 04/13] Add support for xt_hashlimit match revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 3 | -64/+458 |
| | |||||
* | [PATCH 03/13] xtables.h: move non-exported parts to internal.h | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 2 | -61/+60 |
| | |||||
* | [PATCH 02/13] Fix all remaining warnings (missing declarations, missing ↵ | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-13 | 21 | -27/+55 |
| | | | | prototypes) | ||||
* | [PATCH 08/24] Update the libxt_owner manpage with the UID/GID-range feature | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -6/+9 |
| | |||||
* | [PATCH 05/24] Fix -Wshadow warnings and clean up xt_sctp.h | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 17 | -153/+140 |
| | | | | | Note: xt_sctp.h is still not merged upstream in the kernel as of this commit. But a refactoring was really needed. | ||||
* | [PATCH 04/24] Drop -W from CFLAGS and some tiny code cleanups | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 10 | -18/+18 |
| | | | | | - change "unsigned" to explicit "unsigned int" - remove some casts | ||||
* | [PATCH 03/24] Makefile: add a "tarball" target | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -0/+8 |
| | |||||
* | [PATCH 02/24] Correct the family member value of libxt_mark revision 1 | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -1/+1 |
| | | | | | libxt_mark rev1 used AF_INET6 in the class structure where it should have used AF_INET. | ||||
* | [PATCH 01/24] Fix compilation of iptables-static build | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-06 | 1 | -3/+3 |
| | | | | | | | | Adjust the _INIT macro and thus fix the build/linking procedure of the monolithic do-it-all binary (iptables-static). Also fix the Makefile since unfortunately, lib%.o does not seem to have a higher precedence than %.o | ||||
* | Retry ruleset dump when kernel returns EAGAIN. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-02 | 1 | -1/+4 |
| | | | | Bugzilla #104 | ||||
* | [IPTABLES]: libxt_iprange: Fix IP validation logic | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-04-02 | 1 | -2/+2 |
| | | | | | | | IP address validation logic was inverted, causing valid addresses to be rejected. Signed-off-by: James King <t.james.king@gmail.com> | ||||
* | removes useless white spaces from iptables-xml manpages. | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-07 | 1 | -9/+9 |
| | | | | Signed-off-by: Filippo Zangheri <filippo.zangheri@yahoo.it> | ||||
* | bump iptables version to prepare 1.4.1 release | /C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org | 2008-03-02 | 1 | -1/+1 |
| | |||||
* | [PATCH] Fix define value of SCTP chunk type. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-02-29 | 1 | -2/+2 |
| | | | | | | | There are wrong chunk_type values in sctp table. The chunk_type of ASCONF and ASCNF_ACK must be 193 and 128, respectively. Naohiro Ooiwa <nooiwa@miraclelinux.com> | ||||
* | Remove compiler.h inclusions. | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-02-22 | 3 | -4/+0 |
| | |||||
* | Add netfilter.h | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 1 | -0/+48 |
| | |||||
* | [PATCH]: fix gcc warnings | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 84 | -118/+122 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: allow empty strings in argument parser | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 2 | -14/+10 |
| | | | | Max Kellermann <max@duempel.org> | ||||
* | [PATCH]: unescape parameters | /C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net | 2008-01-29 | 2 | -53/+56 |
| | | | | Max Kellermann <max@duempel.org> |