summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix unused function warningPatrick McHardy2007-09-081-2/+1
|
* Fix more sparse warnings: non-C99 array declaration, incorrect function ↵Patrick McHardy2007-09-084-86/+84
| | | | prototypes
* Fix sparse warnings: non-ANSI function declarations, 0 used as pointerPatrick McHardy2007-09-0867-279/+279
|
* Makefile for man pages of xtables extensions (Laszlo Attila Toth ↵László Attila Tóth2007-09-061-10/+42
| | | | | | | | | | | | <panther@balabit.hu>) * no extra target/match by default :) * man page of fix modules (PF_EXT_SLIB etc.) plus optional (...SLIB_OPTS) modules generated, but not all. * because of the previous one I had to rename PF_EXT_SE_SLIB to PF_EXT_SELINUX_SLIB etc. as a non-optional variable, original PF_EXT_SE_SLIB gets the value of PF_EXT_SELINUX_SLIB if DO_SELINUX is set to 1.
* Remove unsupported connrate extensionPatrick McHardy2007-09-062-183/+0
|
* Build manpages for xtables extensions (Laszlo Attila Toth <panther@balabit.hu>)László Attila Tóth2007-09-051-4/+9
|
* Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.Patrick McHardy2007-09-052-10/+15
| | | | Fixes compiler warning in quota match.
* Fix strict aliasing warningsPatrick McHardy2007-09-054-9/+23
|
* Build IPv6 hbh/dst matches unconditionallyPatrick McHardy2007-09-053-3/+24
|
* Build IPv6 rt match unconditionallyPatrick McHardy2007-09-053-3/+34
|
* Build ipv6header match unconditionallyPatrick McHardy2007-09-053-3/+28
|
* Build IPv6 mh match unconditionallyPatrick McHardy2007-09-053-3/+16
|
* Resync header files and build IPv6 frag match unconditionallyPatrick McHardy2007-09-053-12/+1
|
* Resync header file and build IPv6 ah match unconditionallyPatrick McHardy2007-09-053-12/+1
|
* Build IPv6 REJECT target unconditionallyPatrick McHardy2007-09-052-5/+1
|
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-053-6/+4
|
* Build recent match unconditionallyPatrick McHardy2007-09-053-4/+28
|
* Build dccp match unconditionallyPatrick McHardy2007-09-053-4/+24
|
* Build string match unconditionallyPatrick McHardy2007-09-053-4/+19
|
* Build statistic match unconditionallyPatrick McHardy2007-09-053-3/+33
|
* Build connbytes match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build quota match unconditionallyPatrick McHardy2007-09-053-4/+17
|
* Build NFLOG target unconditionallyPatrick McHardy2007-09-053-3/+19
|
* Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)Peter Riley2007-09-0286-139/+73
|
* Fix dscp match manpage (zhangxiliang <zhangxiliang@cn.fujitsu.com>)zhangxiliang2007-08-291-1/+1
| | | | | | | | The description for the value in option "-m dscp -dscp" should be modified to 0~63. The option can match 6 bit DSCP field within the TOS field in the IP header. So the range for the option should be 0~(26-1) that is 0~63.
* Resync ip6t_REJECT.h with kernel - seems the entire time we had an imcompatiblePatrick McHardy2007-08-231-1/+3
| | | | | | header :( Noticed by Peter Riley <Peter.Riley@hotpop.com>
* In <xsl:param name="$node"/>, "$node" is not a valid QName.Dan Nicholson2007-08-061-1/+1
| | | | | | See http://www.w3.org/TR/xslt#variables Dan Nicholson <dbn.lists@gmail.com>
* Add IPv6 support to statistic matchYasuyuki KOZAKAI2007-08-042-4/+20
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-044-19/+34
|
* Add IPv6 support to connbytes matchYasuyuki KOZAKAI2007-08-044-26/+68
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-043-27/+44
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-044-24/+41
|
* Unifies libip[6]t_TRACE into libxt_TRACEYasuyuki KOZAKAI2007-08-044-119/+75
|
* Unifies libip[6]t_NFLOG into libxt_NFLOGYasuyuki KOZAKAIYasuyuki KOZAKAI2007-08-046-328/+181
|
* Revert commit 6990.Yasuyuki KOZAKAI2007-08-046-181/+328
| | | | That log is not correct and .NF_LOG-testx has incorrect mode.
* Unifies libip[6]t_state into libxt_stateYasuyuki KOZAKAIYasuyuki KOZAKAI2007-08-044-168/+21
|
* Unifies libip[6]t_state into libxt_stateYasuyuki KOZAKAI2007-08-043-27/+56
|
* Unifies libip[6]t_connmark into libxt_connmarkYasuyuki KOZAKAI2007-08-044-184/+40
|
* Unifies libip[6]t_hashlimit into libxt_hashlimitYasuyuki KOZAKAI2007-08-045-396/+41
|
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-046-185/+77
|
* Unifies libip[6]t_CONNSECMARK into libxt_CONNSECMARKYasuyuki KOZAKAI2007-08-044-133/+39
|
* Add IPv6 support to CONNMARK matchYasuyuki KOZAKAI2007-08-044-261/+58
|
* Tries to load libxt_*.so at first.Yasuyuki KOZAKAI2007-08-042-27/+22
| | | | If failed, it tries libip[6]t_*.so.
* Make @msg argument a const char *, just like printf().Jan Engelhardt2007-08-014-4/+4
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Moves libip{,6}t_connlimit to libxt.Jan Engelhardt2007-07-314-282/+220
| | | | | | | Also fixes an option parsing bug (connlimit_parse() may receive a 'c' that is not from the connlimit options table). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Make the option structures const.Jan Engelhardt2007-07-3084-88/+88
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Makes it possible to omit extra_opts of matches/targets if unnecessary.Jan Engelhardt2007-07-309-37/+6
| | | | | | (Jan Engelhardt <jengelh@gmx.de>) A nice side effect is that merge_option() doesn't copy options in that case.
* The option struct needs to be terminated, otherwise ip{,6}tablesJan Engelhardt2007-07-302-0/+2
| | | | | | will access illegal memory in merge_options(). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Remove the .next=NULL field. This is automatically initialized to zero.Jan Engelhardt2007-07-3050-71/+2
| | | | | | | I've kept .print=NULL and .save=NULL so it stands out (since iptables will do the print/save then). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Make xtables_target->extra_opts const (xtables_match->extra_opts already is)Jan Engelhardt2007-07-301-1/+1
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>