iptables - iptables tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	extensions: manpages: cleanup hyphens	Laurence J. Lane	2019-12-05	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Cleanup, scape hyphens so they are not interpreted by the manpage generator. Arturo says: This patch is forwarded from the iptables Debian package, where it has been around for many years now. Signed-off-by: Laurence J. Lane <ljlane@debian.org> Signed-off-by: Arturo Borrero Gonzalez <arturo@netfilter.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	xtables: SET target: Add mapping of meta informations (skbinfo ipset extension)	Anton Danilov	2014-09-14	1	-0/+21
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	This feature add support of mapping metainformation to packets like nftables maps or ipfw tables. Currently we can map firewall mark, tc priority and hardware NIC queue. Usage of this functionality allowed only from mangle table. We can map tc priority only in OUTPUT/FORWARD/POSTROUTING chains because it rewrite by route decision. If entry doesn't exist in the set nothing of fields changed. Example of classify by destination address: iptables -t mangle -A POSTROUTING -o eth0 -j SET --map-set DST2CLASS dst --map-prio Signed-off-by: Anton Danilov <littlesmilingcloud@gmail.com> Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
*	doc: grammatical updates to libxt_SET	Jan Engelhardt	2012-07-31	1	-6/+6
\| \| \| \| \| \|	Cherry-picked these from recent patches from Mr Dash Four. Signed-off-by: Jan Engelhardt <jengelh@inai.de>
*	libxt_set: update man page about kernel support on the feature	Jan Engelhardt	2011-08-20	1	-3/+2
\| \| \| \|	Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	SET target revision 2 added	Jozsef Kadlecsik	2011-04-17	1	-0/+8
\| \| \| \| \| \| \| \| \|	The new revision of the SET target supports the following new operations - specifying the timeout value of the entry to be added - flag to instruct the kernel that if the entry already exists then reset the timeout value to the specified one (or to the default from the set definition)
*	libxt_set: new revision added	Jozsef Kadlecsik	2010-06-16	1	-0/+18
	libipt_set renamed to libxt_set and the support for the forthcoming ipset release added. I have tested backward (IPv4) and forward compatibility (IPv4/IPv6): ipset -N test iphash ipset -A test test-address iptables -N test-set iptables -A test-set -j LOG --log-prefix "match " iptables -A test-set -j DROP iptables -A OUTPUT -m set --match-set test dst -j test-set ping test-address