summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* make print-extensions doesn't show libxt_* extensionsSebastian Claßen2007-10-081-0/+1
| | | | | | | | In extensions/Makefile the variable PFX_EXT_SLIB_OPTS is not appended to OPTIONALS, therefor 'make print-extensions' doesn't show any optional libxt_* extension. Sebastian Claßen <sebastian.classen@freenet.ag>
* Unique symbols and no '&' charactersLászló Attila Tóth2007-10-082-56/+56
| | | | | | | Removing '&' from .._match and ..._target variables. Give all symbols unique names. Signed-off-by: Laszlo Attila Toth
* Remove redundant dst/hbh linesJan Engelhardt2007-10-042-61/+38
| | | | | | | Remove hbh stuff from libip6t_dst, remove dst stuff from libip6t_hbh. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique symbols 6/6Jan Engelhardt2007-10-043-67/+48
| | | | | | | | | | | Give symbols of libxt targets unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 5/6Jan Engelhardt2007-10-0414-297/+220
| | | | | | | | | | | Give symbols of libxt matches unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 4/6Jan Engelhardt2007-10-0415-329/+242
| | | | | | | | | | | Give symbols of libxt targets unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 3/6Jan Engelhardt2007-10-0415-339/+248
| | | | | | | | | | | Give symbols of libxt matches unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 2/6Jan Engelhardt2007-10-0410-277/+234
| | | | | | | | | | | Give symbols of libxt targets unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique symbols 1/6Jan Engelhardt2007-10-0426-709/+600
| | | | | | | | | | | Give symbols of libxt matches unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* No ipt in xtJan Engelhardt2007-10-041-1/+1
| | | | | | Cease using ipt_entry_match (replaced by xt_entry_match). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Constify data structuresJan Engelhardt2007-10-0412-13/+13
| | | | | | Constify more data structures. Make functions static. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->print() and ->save() functionsJan Engelhardt2007-10-044-33/+0
| | | | | | | Deletes empty ->print() and ->save() functions. ip[6]tables prints the trivial thing automatically. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->final_check() functionsJan Engelhardt2007-10-0432-214/+0
| | | | | | | Deletes empty ->final_check() functions, and makes ip[6]tables checks for NULL on these. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->init() functionsJan Engelhardt2007-10-0420-138/+0
| | | | | | | Deletes empty ->init() functions. ip[6]tables already checks for .init being NULL or not. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Remove stray NULLsJan Engelhardt2007-10-043-3/+3
| | | | | | | Mixing member accessors (non-named vs named) is not good. Remove stray NULL. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Addrtype match: renaming functionsLászló Attila Tóth2007-10-041-23/+23
| | | | | | | The function names in libipt_addrtype.c makes debugging hard, also I renamed them prefixed by 'addrtype_'. Laszlo attila toth <panther@balabit.hu>
* Couldn't load/find match `u32'Hann-Huei Chiou2007-09-281-0/+1
| | | | | | | | | | iptables (up to 0927 snapshot) keeps complaining of "Couldn't load (or find, if NO_SHARED_LIBS=1) match `u32'. After comparing with other libxt_*.c, I found that there's no member ".family" in the "u32_reg" structure, while ".family = AF_INET6" exists in "u32_reg6" Hann-Huei Chiou <koala@ascenvision.com>
* Add the libxt_time iptables matchJan Engelhardt2007-09-233-1/+574
| | | | | | | | | | | This is libipt_time from POM-ng enhanced by the following: * day-of-month support (for example "match on the 15th of each month") * inversion support for --weekdays and --monthdays * match against UTC or local timezone * a manpage Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix u32 warningsJan Engelhardt2007-09-191-13/+13
| | | | | | | | | | | warning: format '%ld' expects type 'long int', but argument 3 has type 'int'. With %u alone, you would get "but arg-start is long" warnings on x64. With %lu, you would get "but arg-start is int" on x86. Fix it up by explicitly deciding for one (%u and cast to unsigned int) and using that. Jan Engelhardt <jengelh@computergmbh.de>
* Adds u32 to iptables.Jan Engelhardt2007-09-104-1/+566
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Fix sparse warnings: non-ANSI function declarations, 0 used as pointerPatrick McHardy2007-09-0867-279/+279
|
* Makefile for man pages of xtables extensions (Laszlo Attila Toth ↵László Attila Tóth2007-09-061-10/+42
| | | | | | | | | | | | <panther@balabit.hu>) * no extra target/match by default :) * man page of fix modules (PF_EXT_SLIB etc.) plus optional (...SLIB_OPTS) modules generated, but not all. * because of the previous one I had to rename PF_EXT_SE_SLIB to PF_EXT_SELINUX_SLIB etc. as a non-optional variable, original PF_EXT_SE_SLIB gets the value of PF_EXT_SELINUX_SLIB if DO_SELINUX is set to 1.
* Remove unsupported connrate extensionPatrick McHardy2007-09-062-183/+0
|
* Build manpages for xtables extensions (Laszlo Attila Toth <panther@balabit.hu>)László Attila Tóth2007-09-051-4/+9
|
* Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.Patrick McHardy2007-09-051-9/+14
| | | | Fixes compiler warning in quota match.
* Build IPv6 hbh/dst matches unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 rt match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build ipv6header match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 mh match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header files and build IPv6 frag match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header file and build IPv6 ah match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 REJECT target unconditionallyPatrick McHardy2007-09-052-5/+1
|
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build recent match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build dccp match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build string match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build statistic match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build connbytes match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build quota match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build NFLOG target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)Peter Riley2007-09-0281-114/+59
|
* Fix dscp match manpage (zhangxiliang <zhangxiliang@cn.fujitsu.com>)zhangxiliang2007-08-291-1/+1
| | | | | | | | The description for the value in option "-m dscp -dscp" should be modified to 0~63. The option can match 6 bit DSCP field within the TOS field in the IP header. So the range for the option should be 0~(26-1) that is 0~63.
* Add IPv6 support to statistic matchYasuyuki KOZAKAI2007-08-042-4/+20
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-042-11/+26
|
* Add IPv6 support to connbytes matchYasuyuki KOZAKAI2007-08-043-26/+43
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-042-19/+36
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-042-16/+33
|
* Unifies libip[6]t_TRACE into libxt_TRACEYasuyuki KOZAKAI2007-08-044-119/+75
|
* Unifies libip[6]t_NFLOG into libxt_NFLOGYasuyuki KOZAKAIYasuyuki KOZAKAI2007-08-046-328/+181
|
* Revert commit 6990.Yasuyuki KOZAKAI2007-08-046-181/+328
| | | | That log is not correct and .NF_LOG-testx has incorrect mode.