summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2Harald Welte2005-07-103-16/+23
| | | | tested compilation with kernels starting 2.4.17
* we need to have this header file included, since old kernels don't define ↵Harald Welte2005-07-101-0/+16
| | | | IP6T_LOG_UID.
* bump version number to 1.3.2Harald Welte2005-07-101-2/+2
|
* add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334Harald Welte2005-07-041-0/+6
|
* attempt to fix save/restore of '! --uid-owner squid' problem as reported by ↵Harald Welte2005-06-291-2/+2
| | | | Costa Tsaousis (backport from ipv4 owner)
* add pointer to bugzillaHarald Welte2005-06-241-0/+1
|
* we don't have any counter issues in sparc64Harald Welte2005-06-241-1/+0
|
* Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>)Patrick McHardy2005-06-242-1/+20
|
* fix deletion of targets where kernel size != userspace size (Pablo Neira)Pablo Neira2005-06-232-0/+2
|
* reduce code replication of parse_interface() (Yasuyuki Kozakai)Yasuyuki KOZAKAI2005-06-226-82/+5
|
* This patch prevents user to set negative port value of SNAT/DNAT.Yasuyuki KOZAKAI2005-06-222-4/+4
| | | | (Yasuyuki Kozakai)
* Chain name should not start with '!' (Yasuyuki Kozakai ↵Yasuyuki KOZAKAI2005-06-132-4/+4
| | | | <yasuyuki.kozakai@toshiba.co.jp>)
* Flush chain with noflush when it is redefined (Charlie Brady ↵Charlie Brady2005-06-122-12/+30
| | | | <charlieb-netfilter-devel@budge.apana.org.au>)
* OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov ↵Evgeniy Polyakov2005-06-111-3/+11
| | | | <johnpol@2ka.mipt.ru>)
* update multiport manpage (Phil Oester <kernel@linuxace.com>)Phil Oester2005-06-112-8/+10
|
* Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora ↵Tom Eastep2005-06-111-2/+2
| | | | <pluto@agmk.net>)
* Release previously merged options from merge_opts(), reduces memory-usage of ↵Pablo Neira2005-05-292-11/+34
| | | | iptables-restore dramatically (Pablo Neira)
* While adding testing for inversion of multiport, noticed that documentation ↵Rusty Russell2005-05-251-2/+2
| | | | about --ports is *wrong*. Ports do not have to be equal: either dest or src being in list is enough for match.
* include FIN bit in mask of "--syn" bitsHarald Welte2005-05-042-3/+3
|
* Ignore unknown arguments in libipt_ULOG (Patrick McHardy <kaber@trash.net>)Patrick McHardy2005-05-021-0/+2
|
* Fix connbytes command line parsing bug (Piotrek Kaczmarek <kaczorek@daleka.net>)Piotrek Kaczmarek2005-04-241-0/+1
|
* pull out pmtu changes to fix compilation issuesHarald Welte2005-04-152-124/+3
|
* poll goto specific changes out of trunkHarald WeltePablo Neira2005-04-152-4/+1
|
* fix iptables-save/restore of goto (Jonas Berlin)Jonas Berlin2005-04-152-1/+4
|
* omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵Harald WeltePablo Neira2005-04-151-1/+22
| | | | to use ip_conntrack_old_tuple. (Pablo Neira)
* add REJECT with icmp-frag-needed (Florian Lohoff)Florian Lohoff2005-04-102-3/+124
|
* don't allow newlines in LOG prefix (Phil Oester) (Closes: #312)Phil Oester2005-04-012-0/+8
|
* re-sync ip6tables with iptables (check for init functions) (Jonas Berlin)Jonas Berlin2005-04-011-8/+12
|
* add lots of man pages (Jonas Berlin)Jonas Berlin2005-04-0117-0/+474
|
* the optflags array contains a '3' for the OPT_LINENUMBERS entry while ↵Jonas Berlin2005-04-012-2/+2
| | | | everywhere else '0' is used (Jonas Berlin)
* SET target bugfix by Michal Pokrywka appliedMichal Pokrywka2005-03-181-1/+3
|
* Fix TCPLAG version (Torsten Lüttgert <t.luettgert@pressestimmen.de>)Torsten Lüttgert2005-03-161-1/+1
|
* improve REDIRECT manpage (Jonas Berlin <xkr47@outerspace.dyndns.org>)Jonas Berlin2005-03-151-3/+4
|
* bump version to 1.3.1v1.3.1Harald Welte2005-03-071-2/+2
|
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)Pablo Neira2005-03-072-2/+40
|
* Restore chain order (Olaf Rempel <razzor@kopf-tisch.de>)Olaf Rempel2005-03-041-4/+7
|
* Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>)Pablo Neira2005-02-1487-508/+26
| | | | Fixes build with conntrack event patch for 2.6
* Allow "--realm ! foo" and "! --realm foo" (Closes: #297)Harald Welte2005-02-131-1/+1
|
* fix missing comma at end of lineHarald Welte2005-02-131-1/+1
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-124-25/+91
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* time to release 1.3.0 finalv1.3.0Harald Welte2005-02-121-1/+1
|
* remove way outdated filesHarald Welte2005-02-122-96/+0
|
* update notes to reflect subversion usageHarald Welte2005-02-121-4/+4
|
* try to fix realm save/restore issue (Adresses: #297)Harald Welte2005-02-081-11/+14
|
* Fix rule deletion (hinfo pointer initialized by kernel, don't compare it in ↵Samuel Jean2005-02-071-2/+1
| | | | userspace). (Samuel Jean)
* fix parameter handling in libipt_hashlimit with iptables-save (Nikolai Malykh)Nikolai Malykh2005-02-071-2/+6
|
* Revert the recent addition of memset()'s to TC_COMMIT. One of them is bogus ↵Phil Oester2005-02-041-3/+0
| | | | | | and the other one needs more investigation to why valgrind is complaining. Noticed and reverted by Phil Oester.
* Add support for inversion to multiport revision 1.Phil Oester2005-02-022-5/+11
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* we now need to exclude .svn instead of CVSv1.3.0-rc1Harald Welte2005-02-011-1/+1
|
* release rc1Harald Welte2005-02-011-1/+1
|