| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | secmark: Add libselinux support | James Morris | 2006-05-24 | 3 | -4/+36 |
| * | Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18. | Patrick McHardy | 2006-04-28 | 4 | -16/+58 |
| * | Replace annoying "Something wrong... deleting dependencies" message by someth... | Patrick McHardy | 2006-04-28 | 1 | -1/+1 |
| * | Don't overwrite errno with return value of setsockopt (which is -1 on error). | Patrick McHardy | 2006-04-22 | 1 | -6/+2 |
| * | Revert incorrect fix for "Unknown error 4294967295" problem | Patrick McHardyHarald Welte | 2006-04-22 | 1 | -2/+0 |
| * | When entering an invalid command (such as iptables -A INPUT -j MARK --set-mark | Harald Welte | 2006-04-21 | 1 | -0/+2 |
| * | In ip[6]tables.c, NUMBER_OF_OPT was increased to 12 for the OPT_COUNTERS | Patrick McHardyHarald Welte | 2006-04-22 | 2 | -30/+32 |
| * | cmdflags is used in cmd2char() to return the option for a command. It uses the | Harald Welte | 2006-04-21 | 2 | -4/+2 |
| * | [IPTABLES,IP6TABLES]: check invalid esp spi range | Yasuyuki KOZAKAI | 2006-04-15 | 2 | -0/+6 |
| * | [IP6TABLES] kill manual comparing protocol name with "ipv6-icmp". | Yasuyuki KOZAKAI | 2006-04-15 | 1 | -3/+1 |
| * | fix loading shared library of ICMPv6 match. | Yasuyuki KOZAKAI | 2006-04-15 | 3 | -1/+1 |
| * | [IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernel | Harald Welte | 2006-04-12 | 2 | -2/+2 |
| * | Correct iptables-save output of osf module (Daniel De Graaf) | Daniel De Graaf | 2006-03-31 | 1 | -0/+8 |
| * | don't allow to specify protocol of IPv6 extension header (Yasuyuki Kozakai) | Yasuyuki KOZAKAI | 2006-03-29 | 1 | -0/+16 |
| * | Multiple matches of the same type can be specified on the commandline. | Joszef Kadlecsik | 2006-03-03 | 4 | -32/+84 |
| * | Make '-p all' a special case that is handled before calling getprotoent() (Cl... | Harald Welte | 2006-02-11 | 2 | -2/+14 |
| * | fix double-free if a single match is used multiple times within a signle rule | Harald Welte | 2006-02-11 | 2 | -2/+6 |
| * | don't install libiptc.a | Harald Welte | 2006-02-09 | 1 | -1/+2 |
| * | fix segfault or loading of invalid counters in ip[6]tables-restore (Olaf Remp... | Harald Welte | 2006-02-09 | 2 | -2/+8 |
| * | make policy match compile independant of kernel headersv1.3.5 | Harald Welte | 2006-02-01 | 3 | -2/+6 |
| * | Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.h | Harald Welte | 2006-02-01 | 1 | -0/+13 |
| * | fix ipt_conntrack compilation against very early (2.4.0) kernel releases | Harald Welte | 2006-02-01 | 1 | -1/+1 |
| * | remove other bits of old ip pool code, people should use ipset (ipset.netfilt... | Harald Welte | 2006-02-01 | 5 | -323/+2 |
| * | remove ippool | Harald Welte | 2006-02-01 | 3 | -679/+0 |
| * | Prepare policy match for x_tables unification by making sure both | Patrick McHardy | 2006-01-31 | 7 | -16/+126 |
| * | fix 'save' (Michael Rash) | Michael Rash | 2006-01-30 | 1 | -2/+2 |
| * | major manpage update (Yasuyuki Kozakai) | Yasuyuki KOZAKAI | 2006-01-30 | 27 | -88/+149 |
| * | Add 'copy+paste' support for 'state' and 'connmark' match, as well as | Harald Welte | 2006-01-26 | 4 | -1/+535 |
| * | add note about deprecated state | Harald Welte | 2006-01-26 | 1 | -0/+2 |
| * | fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony) | Harald Welte | 2006-01-22 | 2 | -2/+2 |
| * | Fix "empty policy element" complaining in non-strict mode. | Noticed by Tom Eastep | 2006-01-22 | 2 | -2/+4 |
| * | Clarify --tunnel-src/--tunnel-dst options | Patrick McHardy | 2006-01-12 | 2 | -6/+10 |
| * | Move empty policy element check to also catch last element | Patrick McHardy | 2006-01-12 | 2 | -10/+12 |
| * | Don't allow using --next option without specifying a policy element | Patrick McHardy | 2006-01-12 | 2 | -4/+14 |
| * | Fix invalid assignment of tunnel-src to dest address (Patrick McHardy) | Patrick McHardy | 2006-01-09 | 1 | -2/+2 |
| * | Add documentation for string match (Pablo Neira) | Pablo Neira | 2006-01-03 | 1 | -0/+15 |
| * | Fix probing for supported revisions (Jones Desougi <jones@ingate.com>) | Jones Desougi | 2005-12-22 | 4 | -8/+10 |
| * | fix iptables-save of 'goto' target (Closes: #410) | Harald Welte | 2005-12-05 | 1 | -2/+2 |
| * | Add note that TCPMSS is only valid in the mangle table (not true today, but m... | Patrick McHardy | 2005-12-05 | 1 | -1/+4 |
| * | fix compilation of iptables on [old] systems that don't have IPT_F_GOTO | Harald Welte | 2005-11-24 | 2 | -0/+6 |
| * | note that we can only delete chains that are empty | Harald Welte | 2005-11-22 | 1 | -3/+4 |
| * | tcp-rst is the alias, not tcp-reset (Torsten Hilbrich) | Harald Welte | 2005-11-22 | 1 | -1/+1 |
| * | Add policy match extensions from patch-o-matic | Patrick McHardy | 2005-11-19 | 6 | -0/+998 |
| * | Fix some gcc-4 warnings | Patrick McHardy | 2005-11-18 | 4 | -7/+7 |
| * | Don't eat numeric arguments for other extensions | Patrick McHardy | 2005-11-18 | 1 | -4/+12 |
| * | The conntrack match does not print any info for --ctproto, thus | Phil Oester | 2005-11-17 | 1 | -0/+7 |
| * | only set revisions on real targets, not on jumps. (Pablo Neira) | Pablo Neira | 2005-11-17 | 1 | -1/+3 |
| * | - Fix memory leak in TC_COMMIT() (Markus Sundberg) | Harald Welte | 2005-11-12 | 1 | -23/+25 |
| * | add 'goto' support (Henrik Nordstrom <hno@marasystems.com>) | Henrik Nordstrom | 2005-11-05 | 3 | -3/+33 |
| * | fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de)v1.3.4 | Deti Fliegl | 2005-11-03 | 2 | -53/+10 |
