iptables - iptables tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	libxt_CT: add support for recently introduced zone options	Daniel Borkmann	2015-09-29	1	-2/+14
\| \| \| \| \| \| \| \|	This adds the user space front-end and man-page bits for the additional zone features (direction, mark) of the CT target. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	libxt_CT: add --timeout option	Pablo Neira Ayuso	2012-04-02	1	-0/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This patch adds the --timeout option to allow to attach timeout policy objects to flows, eg. iptables -I PREROUTING -t raw -s 1.1.1.1 -p tcp \ -j CT --timeout custom-tcp-policy You need the nfct(8) tool which is available at: http://git.netfilter.org/cgi-bin/gitweb.cgi?p=nfct.git To define the cttimeout policies. Example of usage: nfct timeout add custom-tcp-policy inet tcp established 1000 The new nfct tool also requires libnetfilter_cttimeout: http://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_cttimeout.git Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	libxt_CT: add a manpage	Jan Engelhardt	2010-03-11	1	-0/+25
	Signed-off-by: Jan Engelhardt <jengelh@medozas.de>