Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | _really_ sort only user defined chains (Robert de Barth ↵ | Robert de Barth | 2005-07-31 | 1 | -1/+1 |
| | | | | <list-netfilter@debarth.co.uk> | ||||
* | 1.3.3 releasev1.3.3 | Harald Welte | 2005-07-29 | 1 | -2/+2 |
| | |||||
* | The call to free_opts() in merge_options() is invalid C. The oldopts | Marcus Sundberg | 2005-07-29 | 2 | -6/+2 |
| | | | | | | | | | argument always refers to the memory pointed to by the opts global, which may be freed by the call to free_opts(), but oldopts is used after the free_opts() call. This patch makes sure we don't use freed memory. (Marcus Sundberg <marcus@ingate.com>) ip6tables merge by myself. | ||||
* | update manpage to reflect QUEUE / nfnetlink_queue / NFQUEUE changes | Harald Welte | 2005-07-28 | 4 | -8/+52 |
| | |||||
* | Fix NAT of ICMP ID ranges (Patrick McHardy) | Patrick McHardy | 2005-07-22 | 4 | -4/+8 |
| | |||||
* | get rid of numerous gcc-4 warnings | Harald Welte | 2005-07-19 | 14 | -20/+25 |
| | |||||
* | add NFQUEUE support for ipv4 and ipv6 | Harald Welte | 2005-07-19 | 4 | -2/+244 |
| | |||||
* | fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2 | Harald Welte | 2005-07-10 | 3 | -16/+23 |
| | | | | tested compilation with kernels starting 2.4.17 | ||||
* | we need to have this header file included, since old kernels don't define ↵ | Harald Welte | 2005-07-10 | 1 | -0/+16 |
| | | | | IP6T_LOG_UID. | ||||
* | bump version number to 1.3.2 | Harald Welte | 2005-07-10 | 1 | -2/+2 |
| | |||||
* | add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334 | Harald Welte | 2005-07-04 | 1 | -0/+6 |
| | |||||
* | attempt to fix save/restore of '! --uid-owner squid' problem as reported by ↵ | Harald Welte | 2005-06-29 | 1 | -2/+2 |
| | | | | Costa Tsaousis (backport from ipv4 owner) | ||||
* | add pointer to bugzilla | Harald Welte | 2005-06-24 | 1 | -0/+1 |
| | |||||
* | we don't have any counter issues in sparc64 | Harald Welte | 2005-06-24 | 1 | -1/+0 |
| | |||||
* | Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>) | Patrick McHardy | 2005-06-24 | 2 | -1/+20 |
| | |||||
* | fix deletion of targets where kernel size != userspace size (Pablo Neira) | Pablo Neira | 2005-06-23 | 2 | -0/+2 |
| | |||||
* | reduce code replication of parse_interface() (Yasuyuki Kozakai) | Yasuyuki KOZAKAI | 2005-06-22 | 6 | -82/+5 |
| | |||||
* | This patch prevents user to set negative port value of SNAT/DNAT. | Yasuyuki KOZAKAI | 2005-06-22 | 2 | -4/+4 |
| | | | | (Yasuyuki Kozakai) | ||||
* | Chain name should not start with '!' (Yasuyuki Kozakai ↵ | Yasuyuki KOZAKAI | 2005-06-13 | 2 | -4/+4 |
| | | | | <yasuyuki.kozakai@toshiba.co.jp>) | ||||
* | Flush chain with noflush when it is redefined (Charlie Brady ↵ | Charlie Brady | 2005-06-12 | 2 | -12/+30 |
| | | | | <charlieb-netfilter-devel@budge.apana.org.au>) | ||||
* | OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov ↵ | Evgeniy Polyakov | 2005-06-11 | 1 | -3/+11 |
| | | | | <johnpol@2ka.mipt.ru>) | ||||
* | update multiport manpage (Phil Oester <kernel@linuxace.com>) | Phil Oester | 2005-06-11 | 2 | -8/+10 |
| | |||||
* | Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora ↵ | Tom Eastep | 2005-06-11 | 1 | -2/+2 |
| | | | | <pluto@agmk.net>) | ||||
* | Release previously merged options from merge_opts(), reduces memory-usage of ↵ | Pablo Neira | 2005-05-29 | 2 | -11/+34 |
| | | | | iptables-restore dramatically (Pablo Neira) | ||||
* | While adding testing for inversion of multiport, noticed that documentation ↵ | Rusty Russell | 2005-05-25 | 1 | -2/+2 |
| | | | | about --ports is *wrong*. Ports do not have to be equal: either dest or src being in list is enough for match. | ||||
* | include FIN bit in mask of "--syn" bits | Harald Welte | 2005-05-04 | 2 | -3/+3 |
| | |||||
* | Ignore unknown arguments in libipt_ULOG (Patrick McHardy <kaber@trash.net>) | Patrick McHardy | 2005-05-02 | 1 | -0/+2 |
| | |||||
* | Fix connbytes command line parsing bug (Piotrek Kaczmarek <kaczorek@daleka.net>) | Piotrek Kaczmarek | 2005-04-24 | 1 | -0/+1 |
| | |||||
* | pull out pmtu changes to fix compilation issues | Harald Welte | 2005-04-15 | 2 | -124/+3 |
| | |||||
* | poll goto specific changes out of trunk | Harald WeltePablo Neira | 2005-04-15 | 2 | -4/+1 |
| | |||||
* | fix iptables-save/restore of goto (Jonas Berlin) | Jonas Berlin | 2005-04-15 | 2 | -1/+4 |
| | |||||
* | omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵ | Harald WeltePablo Neira | 2005-04-15 | 1 | -1/+22 |
| | | | | to use ip_conntrack_old_tuple. (Pablo Neira) | ||||
* | add REJECT with icmp-frag-needed (Florian Lohoff) | Florian Lohoff | 2005-04-10 | 2 | -3/+124 |
| | |||||
* | don't allow newlines in LOG prefix (Phil Oester) (Closes: #312) | Phil Oester | 2005-04-01 | 2 | -0/+8 |
| | |||||
* | re-sync ip6tables with iptables (check for init functions) (Jonas Berlin) | Jonas Berlin | 2005-04-01 | 1 | -8/+12 |
| | |||||
* | add lots of man pages (Jonas Berlin) | Jonas Berlin | 2005-04-01 | 17 | -0/+474 |
| | |||||
* | the optflags array contains a '3' for the OPT_LINENUMBERS entry while ↵ | Jonas Berlin | 2005-04-01 | 2 | -2/+2 |
| | | | | everywhere else '0' is used (Jonas Berlin) | ||||
* | SET target bugfix by Michal Pokrywka applied | Michal Pokrywka | 2005-03-18 | 1 | -1/+3 |
| | |||||
* | Fix TCPLAG version (Torsten Lüttgert <t.luettgert@pressestimmen.de>) | Torsten Lüttgert | 2005-03-16 | 1 | -1/+1 |
| | |||||
* | improve REDIRECT manpage (Jonas Berlin <xkr47@outerspace.dyndns.org>) | Jonas Berlin | 2005-03-15 | 1 | -3/+4 |
| | |||||
* | bump version to 1.3.1v1.3.1 | Harald Welte | 2005-03-07 | 1 | -2/+2 |
| | |||||
* | This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira) | Pablo Neira | 2005-03-07 | 2 | -2/+40 |
| | |||||
* | Restore chain order (Olaf Rempel <razzor@kopf-tisch.de>) | Olaf Rempel | 2005-03-04 | 1 | -4/+7 |
| | |||||
* | Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>) | Pablo Neira | 2005-02-14 | 87 | -508/+26 |
| | | | | Fixes build with conntrack event patch for 2.6 | ||||
* | Allow "--realm ! foo" and "! --realm foo" (Closes: #297) | Harald Welte | 2005-02-13 | 1 | -1/+1 |
| | |||||
* | fix missing comma at end of line | Harald Welte | 2005-02-13 | 1 | -1/+1 |
| | |||||
* | Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace. | Martin Josefsson | 2005-02-12 | 4 | -25/+91 |
| | | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se> | ||||
* | time to release 1.3.0 finalv1.3.0 | Harald Welte | 2005-02-12 | 1 | -1/+1 |
| | |||||
* | remove way outdated files | Harald Welte | 2005-02-12 | 2 | -96/+0 |
| | |||||
* | update notes to reflect subversion usage | Harald Welte | 2005-02-12 | 1 | -4/+4 |
| |