summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * doc: clarify that -p all is a special keyword onlyJan Engelhardt2011-05-222-6/+4
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * doc: make usage of libxt_rateest more obviousJan Engelhardt2011-05-221-15/+56
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * doc: add some coded option examples to libxt_hashlimitJan Engelhardt2011-05-221-10/+16
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_rateest: streamline case display of unitsJan Engelhardt2011-05-201-3/+3
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: check for negative numbers in xtables_strtou*Jan Engelhardt2011-05-201-2/+7
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_quota: make sure uint64 is not truncatedJP Abgrall2011-05-203-5/+5
| | | | | | | | | | The xtables_strtoul() would cram a long long into a long. The parse_int would try to cram a UINT64 into a long.
| * libxt_quota: readd missing XTOPT_PUT requestJan Engelhardt2011-05-201-1/+2
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_REDIRECT: "--to-ports" is not mandatoryLutz Jaenicke2011-05-181-2/+1
| | | | | | | | | | | | | | | | | | The REDIRECT target can be called without the --to-ports option being specified. From the manual page: ...without this, the destination port is never altered. Signed-off-by: Lutz Jaenicke <ljaenicke@innominate.com> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: retract _NE types and use a flag insteadJan Engelhardt2011-05-183-18/+15
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* | libxt_devgroup: actually set XT_DEVGROUP_OPT_???GROUP flagsLutz Jaenicke2011-05-231-0/+2
|/ | | | | Signed-off-by: Lutz Jaenicke <ljaenicke@innominate.com> Signed-off-by: Patrick McHardy <kaber@trash.net>
* libip6t_rt: rt-0-not-strict should take no argJan Engelhardt2011-05-131-1/+1
| | | | | | | This unfortunately got mixed up during the getopt -> guided parser move. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxt_conntrack: resolve erroneous rev-2 port range messageJan Engelhardt2011-05-131-0/+8
| | | | | | | --ctorigdstport 13 ip6tables-restore v1.4.10: conntrack rev 2 does not support port ranges Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxt_conntrack: fix assignment to wrong memberJan Engelhardt2011-05-131-8/+4
| | | | | | | Of course the range end ought to be set, not doing the start value twice. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxt_conntrack: correct printed module nameJan Engelhardt2011-05-131-2/+2
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libipt_[SD]NAT: avoid false error about multiple destinations specifiedJan Engelhardt2011-05-132-6/+12
| | | | | | | | | | | iptables-restore v1.4.10: DNAT: Multiple --to-destination not supported xtables_option_parse sets cb->xflags already, so that it cannot be directly used to test whether an option is being used for the second time. Thus use a private option/flag (X_TO_DEST/SRC) that is not under the control of xtables_option_parse. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libipt_[SD]NAT: flag up module name on errorJan Engelhardt2011-05-132-2/+2
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: collapse double protocol parsingJan Engelhardt2011-05-122-41/+22
| | | | | | | Un-dent xtables_parse_protocol, and make xtopt_parse_protocol make use of it. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxt_policy: use XTTYPE_PROTOCOL typeJan Engelhardt2011-05-121-2/+2
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: avoid running into .also checks when option not usedJan Engelhardt2011-05-121-0/+3
| | | | | | | If a particular option was not specified, it should not be subject to .also checks in xtables_option_fcheck2 either. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxt_policy: option table fixes, improved error trackingJan Engelhardt2011-05-122-10/+32
| | | | | | | | | | | Most of the flags are multi-use in this extension. Also transfer --next => --strict requirement to option table. Furthermore, augment the error messages emitted from fcheck to contain the policy element number, and elaborate on what an "empty policy element" is. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* src: combine default_command functionsJan Engelhardt2011-05-124-137/+75
|
* src: replace old IP*T_ALIGN macrosJan Engelhardt2011-05-126-34/+20
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Merge branch 'floating/opts' of git://dev.medozas.de/iptablesPatrick McHardy2011-05-1212-611/+370
|\
| * libipt_SAME: use guided option parserJan Engelhardt2011-05-091-52/+30
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_REDIRECT: use guided option parserJan Engelhardt2011-05-091-37/+25
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_MASQUERADE: use guided option parserJan Engelhardt2011-05-091-27/+21
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_SNAT: use guided option parserJan Engelhardt2011-05-091-49/+39
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_DNAT: use guided option parserJan Engelhardt2011-05-091-49/+39
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_iprange: use guided option parserJan Engelhardt2011-05-091-90/+54
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_CLUSTERIP: use guided option parserJan Engelhardt2011-05-091-105/+52
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_mac: use guided option parserJan Engelhardt2011-05-091-60/+20
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: XTTYPE_ETHERMAC supportJan Engelhardt2011-05-092-0/+29
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libip6t_rt: use guided option parserJan Engelhardt2011-05-091-115/+44
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libip6t_mh: use guided option parserJan Engelhardt2011-05-091-27/+17
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* | Merge branch 'opts' of git://dev.medozas.de/iptablesPatrick McHardy2011-05-1115-1783/+1050
|\|
| * libxt_conntrack: use guided option parserJan Engelhardt2011-05-091-451/+219
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_ipvs: use guided option parserJan Engelhardt2011-05-091-143/+65
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: XTTYPE_PROTOCOL supportJan Engelhardt2011-05-092-1/+28
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_limit: use guided option parserJan Engelhardt2011-05-091-32/+21
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libipt_NETMAP: use guided option parserJan Engelhardt2011-05-091-90/+16
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_multiport: use guided option parserJan Engelhardt2011-05-093-105/+77
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_osf: use guided option parserJan Engelhardt2011-05-091-68/+29
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_owner: use guided option parserJan Engelhardt2011-05-091-171/+117
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_policy: use guided option parserJan Engelhardt2011-05-091-196/+73
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: XTTYPE_HOSTMASK supportJan Engelhardt2011-05-092-0/+32
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxt_hashlimit: use guided option parserJan Engelhardt2011-05-091-290/+129
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: XTTYPE_PLEN supportJan Engelhardt2011-05-092-14/+29
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: flag invalid uses of XTOPT_PUTJan Engelhardt2011-05-091-1/+2
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| * libxtables: do not overlay addr and mask parts, and cleanupJan Engelhardt2011-05-094-27/+48
| | | | | | | | | | | | | | | | | | XTTYPE_HOSTMASK will require that what has now become haddr, hmask/hlen are not overlays of another. Thus relax the structure and always set all members of the {haddr, hmask, hlen} triplet now for all types that touch any of the members. Add some more comments and clean out ONEHOST.
| * libxt_recent: use guided option parserJan Engelhardt2011-05-091-107/+79
| | | | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>