summaryrefslogtreecommitdiffstats
path: root/include/linux
Commit message (Collapse)AuthorAgeFilesLines
...
* Unifies libip[6]t_esp.c into libxt_esp.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-243-39/+14
|
* Unifies libip[6]t_length.c into libxt_length.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-243-19/+9
|
* Unifies libip[6]t_limit.c into libxt_limit.c./C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-242-27/+6
|
* Unifies libip[6]t_mac.c into libxt_mac.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-0/+8
|
* Unifies libip[6]t_physdev.c into libxt_physdev.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-243-48/+24
|
* Add IPv6 support to pkttype match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-242-9/+8
|
* Unifies libip[6]t_sctp.c into libxt_sctp.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-11/+11
|
* Add IPv6 support to tcpmss match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-242-9/+9
|
* Unifies libip[6]t_udp.c into libxt_udp.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-0/+36
|
* Unifies libip[6]_mark.c into libxt_mark.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-9/+0
|
* Use unified API in libipt_mark.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-242-9/+9
|
* Unifies libip[6]t_multiport.c into libipxt_multiport.c/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-242-59/+0
|
* Use unified API in multiport match/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-0/+30
|
* Introduces xtables match/target registration/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-07-241-0/+123
| | | | | | | | | | | | | | | | | | | | | | | - moves lib_dir to xtables.c - introduces struct pfinfo which has protocol family dependent infomations. - unifies load_ip[6]tables_ko() and moves them as load_xtables_ko() - introduces xt_{match,match_rule,target,tryload} and replaces ip[6]t_* with them - unifies following functions and move them to xtables.c - find_{match,find_target} - compatible_revision, compatible_{match,target}_revision - introduces xtables_register_{match,target} and make register_{match,target}[6] call them. xtables_register_* register ONLY matches/targets matched protocol family Some concepts: - source compatibility for libip[6]t_xxx.c with warning on compilation not binary compatibility. - binary compatibility between 2.4/2.6 kernel and iptables/ip6tables, of cause. - xtables is enough to support only one address family at runtime. Then xtables keeps infomations of only the focused address famiy in struct afinfo.
* PATCH: Add connlimit to iptables./C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-07-091-0/+17
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Removes KERNEL_64_USERSPACE_32/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-06-302-8/+0
| | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel.
* Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org2007-06-2810-50/+3
|
* Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net2007-04-185-1/+297
| | | | versions.
* Add ip6tables TCPMSS extension (Arnaud Ebalard <arno@natisbad.org>)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2007-01-161-0/+10
| | | | Kernel part will go in 2.6.21.
* - Add revision support to ip6tables./C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=yasuyuki/emailAddress=yasuyuki@netfilter.org2006-10-201-0/+30
| | | | | - Add support port range match to libip6t_multiport (R?mi Denis-Courmont <rdenis@simphalempin.com>)
* make policy match compile independant of kernel headerssvn_t_iptables_1_3_5/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-02-011-0/+4
|
* fix ipt_conntrack compilation against very early (2.4.0) kernel releases/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2006-02-011-1/+1
|
* Prepare policy match for x_tables unification by making sure both/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=kaber/emailAddress=kaber@netfilter.org2006-01-312-0/+116
| | | | ipt_policy and ip6t_policy use the same data structure.
* add NFQUEUE support for ipv4 and ipv6/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-07-191-0/+16
|
* fix various missing header file / #define issues on old kernels. I've now ↵svn_t_iptables_1_3_2/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-07-102-16/+17
| | | | tested compilation with kernels starting 2.4.17
* we need to have this header file included, since old kernels don't define ↵/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-07-101-0/+16
| | | | IP6T_LOG_UID.
* omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-04-101-1/+22
| | | | to use ip_conntrack_old_tuple. (Pablo Neira)
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-03-071-0/+37
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace./C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org2005-02-122-0/+9
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* Add support for inversion to multiport revision 1./C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=gandalf/emailAddress=gandalf@netfilter.org2005-02-021-0/+1
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* Pablo Neira:/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=rusty/emailAddress=rusty@netfilter.org2005-01-031-0/+28
| | | | Multiport revision 1 userspace support.
* Extension revision number support (if kernel supports the getsockopts)./C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=rusty/emailAddress=rusty@netfilter.org2005-01-031-0/+15
| | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied.
* move ipt_hashlimit to it's correct location/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2004-10-201-0/+40
|
* Add comment match extension (Brad Fisher)kaber2004-09-201-0/+10
|
* [PATCH] port physdev to ip6tables (Bart De Schuymer)kaber2004-09-121-0/+24
|
* Add ipt_addrtype.hkaber2004-06-281-0/+11
|
* add missing includelaforge2004-06-211-0/+39
|
* With a 64bit kernel only the high 32bits of nfmark was used regardless ofgandalf2004-05-264-0/+50
| | | | | | | 32/64bit userspace. This makes it quite hard to interoperate with 'tc'. Sync ipv6 versions with ipv4 versions. Tested on x86 and sparc64 with both 32bit and 64bit userspace.
* Fix 64bit kernel / 32bit userspace issue.gandalf2004-05-262-6/+15
| | | | Sync header with kernel.
* Fix 64bit kernel / 32bit userspace issue.gandalf2004-05-263-1/+56
|
* update for matching chunk flags (Kiran Kumar)laforge2004-03-021-0/+11
|
* add userspace part of SCTP matchlaforge2004-02-211-20/+91
|
* latest version of CONNMARK updates (Henrik Nordstrom)laforge2004-02-032-0/+19
|
* update ipt_physdev.h (test8 change, make parisc work, alignment issues)laforge2003-11-021-2/+2
|
* CLASSIFY is now built unconditionally, thus we need the kernel headerlaforge2003-09-131-0/+8
|
* add include files for soon-to-be-submitted patches (and build them ↵laforge2003-08-234-0/+56
| | | | unconditionally by putting thme in the extensions/Makefile)
* add (untested) sctp userspace support for even more untested kernel part (in ↵laforge2003-05-031-0/+25
| | | | pom soon)
* rename iplimit to connlimitlaforge2003-04-301-6/+6
|
* ipt_physdev update (--physdev-is-{in,out,bridged}) by Bart de Schuymerlaforge2003-04-271-2/+7
|
* add libipt_physdev.c (Bart de Schumyer)laforge2003-02-111-0/+19
|