summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* Delete empty ->init() functionsJan Engelhardt2007-10-0420-138/+0
| | | | | | | Deletes empty ->init() functions. ip[6]tables already checks for .init being NULL or not. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Remove stray NULLsJan Engelhardt2007-10-043-3/+3
| | | | | | | Mixing member accessors (non-named vs named) is not good. Remove stray NULL. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Addrtype match: renaming functionsLászló Attila Tóth2007-10-041-23/+23
| | | | | | | The function names in libipt_addrtype.c makes debugging hard, also I renamed them prefixed by 'addrtype_'. Laszlo attila toth <panther@balabit.hu>
* Couldn't load/find match `u32'Hann-Huei Chiou2007-09-281-0/+1
| | | | | | | | | | iptables (up to 0927 snapshot) keeps complaining of "Couldn't load (or find, if NO_SHARED_LIBS=1) match `u32'. After comparing with other libxt_*.c, I found that there's no member ".family" in the "u32_reg" structure, while ".family = AF_INET6" exists in "u32_reg6" Hann-Huei Chiou <koala@ascenvision.com>
* Add the libxt_time iptables matchJan Engelhardt2007-09-233-1/+574
| | | | | | | | | | | This is libipt_time from POM-ng enhanced by the following: * day-of-month support (for example "match on the 15th of each month") * inversion support for --weekdays and --monthdays * match against UTC or local timezone * a manpage Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix u32 warningsJan Engelhardt2007-09-191-13/+13
| | | | | | | | | | | warning: format '%ld' expects type 'long int', but argument 3 has type 'int'. With %u alone, you would get "but arg-start is long" warnings on x64. With %lu, you would get "but arg-start is int" on x86. Fix it up by explicitly deciding for one (%u and cast to unsigned int) and using that. Jan Engelhardt <jengelh@computergmbh.de>
* Adds u32 to iptables.Jan Engelhardt2007-09-104-1/+566
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Fix sparse warnings: non-ANSI function declarations, 0 used as pointerPatrick McHardy2007-09-0867-279/+279
|
* Makefile for man pages of xtables extensions (Laszlo Attila Toth ↵László Attila Tóth2007-09-061-10/+42
| | | | | | | | | | | | <panther@balabit.hu>) * no extra target/match by default :) * man page of fix modules (PF_EXT_SLIB etc.) plus optional (...SLIB_OPTS) modules generated, but not all. * because of the previous one I had to rename PF_EXT_SE_SLIB to PF_EXT_SELINUX_SLIB etc. as a non-optional variable, original PF_EXT_SE_SLIB gets the value of PF_EXT_SELINUX_SLIB if DO_SELINUX is set to 1.
* Remove unsupported connrate extensionPatrick McHardy2007-09-062-183/+0
|
* Build manpages for xtables extensions (Laszlo Attila Toth <panther@balabit.hu>)László Attila Tóth2007-09-051-4/+9
|
* Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.Patrick McHardy2007-09-051-9/+14
| | | | Fixes compiler warning in quota match.
* Build IPv6 hbh/dst matches unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 rt match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build ipv6header match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 mh match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header files and build IPv6 frag match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header file and build IPv6 ah match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 REJECT target unconditionallyPatrick McHardy2007-09-052-5/+1
|
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build recent match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build dccp match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build string match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build statistic match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build connbytes match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build quota match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build NFLOG target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)Peter Riley2007-09-0281-114/+59
|
* Fix dscp match manpage (zhangxiliang <zhangxiliang@cn.fujitsu.com>)zhangxiliang2007-08-291-1/+1
| | | | | | | | The description for the value in option "-m dscp -dscp" should be modified to 0~63. The option can match 6 bit DSCP field within the TOS field in the IP header. So the range for the option should be 0~(26-1) that is 0~63.
* Add IPv6 support to statistic matchYasuyuki KOZAKAI2007-08-042-4/+20
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-042-11/+26
|
* Add IPv6 support to connbytes matchYasuyuki KOZAKAI2007-08-043-26/+43
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-042-19/+36
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-042-16/+33
|
* Unifies libip[6]t_TRACE into libxt_TRACEYasuyuki KOZAKAI2007-08-044-119/+75
|
* Unifies libip[6]t_NFLOG into libxt_NFLOGYasuyuki KOZAKAIYasuyuki KOZAKAI2007-08-046-328/+181
|
* Revert commit 6990.Yasuyuki KOZAKAI2007-08-046-181/+328
| | | | That log is not correct and .NF_LOG-testx has incorrect mode.
* Unifies libip[6]t_state into libxt_stateYasuyuki KOZAKAIYasuyuki KOZAKAI2007-08-044-168/+21
|
* Unifies libip[6]t_state into libxt_stateYasuyuki KOZAKAI2007-08-042-27/+43
|
* Unifies libip[6]t_connmark into libxt_connmarkYasuyuki KOZAKAI2007-08-043-180/+36
|
* Unifies libip[6]t_hashlimit into libxt_hashlimitYasuyuki KOZAKAI2007-08-044-384/+29
|
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-043-158/+56
|
* Unifies libip[6]t_CONNSECMARK into libxt_CONNSECMARKYasuyuki KOZAKAI2007-08-043-133/+26
|
* Add IPv6 support to CONNMARK matchYasuyuki KOZAKAI2007-08-043-254/+51
|
* Tries to load libxt_*.so at first.Yasuyuki KOZAKAI2007-08-041-12/+0
| | | | If failed, it tries libip[6]t_*.so.
* Moves libip{,6}t_connlimit to libxt.Jan Engelhardt2007-07-314-282/+220
| | | | | | | Also fixes an option parsing bug (connlimit_parse() may receive a 'c' that is not from the connlimit options table). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Make the option structures const.Jan Engelhardt2007-07-3084-88/+88
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Makes it possible to omit extra_opts of matches/targets if unnecessary.Jan Engelhardt2007-07-307-37/+0
| | | | | | (Jan Engelhardt <jengelh@gmx.de>) A nice side effect is that merge_option() doesn't copy options in that case.
* The option struct needs to be terminated, otherwise ip{,6}tablesJan Engelhardt2007-07-302-0/+2
| | | | | | will access illegal memory in merge_options(). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Remove the .next=NULL field. This is automatically initialized to zero.Jan Engelhardt2007-07-3050-71/+2
| | | | | | | I've kept .print=NULL and .save=NULL so it stands out (since iptables will do the print/save then). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>