index
:
iptables
master
iptables tree
pablo@netfilter.org
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
extensions
Commit message (
Expand
)
Author
Age
Files
Lines
*
fix loading shared library of ICMPv6 match.
Yasuyuki KOZAKAI
2006-04-15
3
-1
/
+1
*
[IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernel
Harald Welte
2006-04-12
2
-2
/
+2
*
Correct iptables-save output of osf module (Daniel De Graaf)
Daniel De Graaf
2006-03-31
1
-0
/
+8
*
make policy match compile independant of kernel headers
v1.3.5
Harald Welte
2006-02-01
2
-2
/
+2
*
Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.h
Harald Welte
2006-02-01
1
-0
/
+13
*
remove other bits of old ip pool code, people should use ipset (ipset.netfilt...
Harald Welte
2006-02-01
3
-295
/
+0
*
Prepare policy match for x_tables unification by making sure both
Patrick McHardy
2006-01-31
5
-16
/
+10
*
fix 'save' (Michael Rash)
Michael Rash
2006-01-30
1
-2
/
+2
*
major manpage update (Yasuyuki Kozakai)
Yasuyuki KOZAKAI
2006-01-30
26
-84
/
+128
*
Add 'copy+paste' support for 'state' and 'connmark' match, as well as
Harald Welte
2006-01-26
4
-1
/
+535
*
add note about deprecated state
Harald Welte
2006-01-26
1
-0
/
+2
*
fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony)
Harald Welte
2006-01-22
2
-2
/
+2
*
Fix "empty policy element" complaining in non-strict mode.
Noticed by Tom Eastep
2006-01-22
2
-2
/
+4
*
Clarify --tunnel-src/--tunnel-dst options
Patrick McHardy
2006-01-12
2
-6
/
+10
*
Move empty policy element check to also catch last element
Patrick McHardy
2006-01-12
2
-10
/
+12
*
Don't allow using --next option without specifying a policy element
Patrick McHardy
2006-01-12
2
-4
/
+14
*
Fix invalid assignment of tunnel-src to dest address (Patrick McHardy)
Patrick McHardy
2006-01-09
1
-2
/
+2
*
Add documentation for string match (Pablo Neira)
Pablo Neira
2006-01-03
1
-0
/
+15
*
fix iptables-save of 'goto' target (Closes: #410)
Harald Welte
2005-12-05
1
-2
/
+2
*
Add note that TCPMSS is only valid in the mangle table (not true today, but m...
Patrick McHardy
2005-12-05
1
-1
/
+4
*
tcp-rst is the alias, not tcp-reset (Torsten Hilbrich)
Harald Welte
2005-11-22
1
-1
/
+1
*
Add policy match extensions from patch-o-matic
Patrick McHardy
2005-11-19
6
-0
/
+998
*
Fix some gcc-4 warnings
Patrick McHardy
2005-11-18
4
-7
/
+7
*
Don't eat numeric arguments for other extensions
Patrick McHardy
2005-11-18
1
-4
/
+12
*
The conntrack match does not print any info for --ctproto, thus
Phil Oester
2005-11-17
1
-0
/
+7
*
fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de)
v1.3.4
Deti Fliegl
2005-11-03
2
-53
/
+10
*
The conntrack match extension doesn't handle address inversion correctly. (To...
Tom Eastep
2005-09-19
1
-2
/
+2
*
Kernels higher than 2.6.10 don't support multiple --to arguments in
Phil Oester
2005-09-19
2
-0
/
+14
*
* specifying random seed for the Jenkins hash works as documented
KOVACS Krisztian
2005-09-19
1
-28
/
+37
*
Make libipt_connbytes.c compile with the ipt_connbytes version that has been ...
Martin Josefsson
2005-09-11
1
-6
/
+6
*
Update manpage to reflect missing ability to SNAT to multiple ranges in 2.6.1...
Harald Welte
2005-08-29
1
-4
/
+6
*
Update manpage to reflect missing NAT to multiple ranges support in 2.6.11-rc...
Harald Welte
2005-08-29
1
-4
/
+7
*
update string match to reflect new kernel implementation (Pablo Neira)
Pablo Neira
2005-08-28
1
-40
/
+110
*
add support for new 'dccp' protocol match
Harald Welte
2005-08-06
3
-0
/
+414
*
port Eric Leblond's NFQUEUE missing-break fix to ip6tables
Harald Welte
2005-08-05
2
-0
/
+4
*
Add missing 'break' to make parsing of NFQUEUE numbers work (Eric Leblond)
Eric Leblond
2005-08-05
2
-0
/
+4
*
update manpage to reflect QUEUE / nfnetlink_queue / NFQUEUE changes
Harald Welte
2005-07-28
2
-0
/
+18
*
Fix NAT of ICMP ID ranges (Patrick McHardy)
Patrick McHardy
2005-07-22
4
-4
/
+8
*
get rid of numerous gcc-4 warnings
Harald Welte
2005-07-19
10
-15
/
+17
*
add NFQUEUE support for ipv4 and ipv6
Harald Welte
2005-07-19
3
-2
/
+228
*
fix various missing header file / #define issues on old kernels. I've now te...
v1.3.2
Harald Welte
2005-07-10
1
-0
/
+6
*
attempt to fix save/restore of '! --uid-owner squid' problem as reported by C...
Harald Welte
2005-06-29
1
-2
/
+2
*
Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>)
Patrick McHardy
2005-06-24
2
-1
/
+20
*
reduce code replication of parse_interface() (Yasuyuki Kozakai)
Yasuyuki KOZAKAI
2005-06-22
2
-78
/
+0
*
This patch prevents user to set negative port value of SNAT/DNAT.
Yasuyuki KOZAKAI
2005-06-22
2
-4
/
+4
*
OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov <...
Evgeniy Polyakov
2005-06-11
1
-3
/
+11
*
update multiport manpage (Phil Oester <kernel@linuxace.com>)
Phil Oester
2005-06-11
2
-8
/
+10
*
Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora <...
Tom Eastep
2005-06-11
1
-2
/
+2
*
While adding testing for inversion of multiport, noticed that documentation a...
Rusty Russell
2005-05-25
1
-2
/
+2
*
include FIN bit in mask of "--syn" bits
Harald Welte
2005-05-04
2
-3
/
+3
[next]