summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>)Pablo Neira2005-02-1483-471/+18
| | | | Fixes build with conntrack event patch for 2.6
* Allow "--realm ! foo" and "! --realm foo" (Closes: #297)Harald Welte2005-02-131-1/+1
|
* fix missing comma at end of lineHarald Welte2005-02-131-1/+1
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-122-25/+82
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* try to fix realm save/restore issue (Adresses: #297)Harald Welte2005-02-081-11/+14
|
* Fix rule deletion (hinfo pointer initialized by kernel, don't compare it in ↵Samuel Jean2005-02-071-2/+1
| | | | userspace). (Samuel Jean)
* fix parameter handling in libipt_hashlimit with iptables-save (Nikolai Malykh)Nikolai Malykh2005-02-071-2/+6
|
* Add support for inversion to multiport revision 1.Phil Oester2005-02-021-5/+10
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* fix compiler warning about discarding constHarald Welte2005-02-011-1/+1
|
* add missing commaHarald Welte2005-02-011-1/+1
|
* fix typoHarald Welte2005-02-011-1/+1
|
* make structure initializers use C99 standard (Harald Welte)Harald Welte2005-02-0119-261/+229
|
* check for colonsHarald Welte2005-02-011-1/+6
|
* Use C99 initializersHarald Welte2005-02-011-11/+11
|
* John McCann points out via bugzilla that iptables happily accepts thisPhil Oester2005-02-011-1/+6
| | | | | | | | | | | | | syntax on DNAT/SNAT: --to x.x.x.x:y:z but doesn't actually make use of the second port. Clear up the confusion by only accepting a dash between the ports. This closes bugzilla #265. Signed-off-by: Phil Oester <kernel@linuxace.com>
* fix name of 'extra_opts' structure member (Nikolai Malykh)Nikolai Malykh2005-01-221-1/+1
|
* Make it compile on current kernels, the future isn't here yet.Martin Josefsson2005-01-051-0/+6
|
* Testsuite found an issue: multiport accepts -p ! tcp.Rusty Russell2005-01-031-0/+4
|
* Pablo Neira:Pablo Neira2005-01-031-1/+199
| | | | Multiport revision 1 userspace support.
* Extension revision number support (if kernel supports the getsockopts).Rusty Russell2005-01-031-14/+126
| | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied.
* Prevent user from using --helper multiple times (Nicolas Bouliane ↵Nicolas Bouliane2005-01-021-0/+3
| | | | <nib@cookinglinux.org>)
* Add --log-uid option (John Lange <john.lange@open-it.ca>)John Lange2005-01-022-1/+20
|
* Fix compile error introduced by C99 conversion.Rusty Russell2004-12-291-1/+0
|
* Pablo Neira: extensions conversion to C99 structure initializationPablo Neira2004-12-2869-939/+893
| | | | (I removed the revision stuff for the moment, but this needs to go in before the code moves too much --RR)
* Use string_to_number. Don't check for no optarg: we set has_arg to 1 in ↵Rusty Russell2004-12-221-5/+5
| | | | option array, so getopt does that for us.
* Nicolas Bouliane: I was writing an nfsim .sim for the match tos, when I ↵Nicolas Bouliane2004-12-201-0/+5
| | | | realized that when we enter --tos twice the second overwrite the first.
* ROUTE --tee target extension (Patrick Schaaf)Patrick Schaaf2004-12-144-13/+84
|
* ipset 2 related updates (JK)Joszef Kadlecsik2004-12-015-83/+243
|
* fix some compiler warnings and errorsHarald Welte2004-11-181-17/+24
|
* sync with latest patch-o-matic-ng update (support direction and mode parameters)Harald Welte2004-11-181-11/+84
|
* minor syntax fixesHarald Welte2004-10-201-13/+18
|
* - add hashlimit to makefileHarald Welte2004-10-202-2/+2
| | | | - fix typo in libipt_hashlimit
* hashlimit port of userspace pluginHarald Welte2004-10-201-0/+365
|
* Mention owner brokenness in manpagePatrick McHardy2004-10-032-0/+4
|
* note owner match brokenness in helptext, closes bugzilla #244 (Phil Oester)Phil Oester2004-10-011-0/+2
|
* Add comment about time not adhering DST (Phil Oester) (Closes: #75)Phil Oester2004-09-261-0/+1
|
* realm: fix inversion (Simon Lodal)Simon Lodal2004-09-221-2/+3
|
* Fix half-working ipv6 limit invert check (Phil Oester)Phil Oester2004-09-211-7/+6
|
* Fix half-working dstlimit invert check (Phil Oester)Phil Oester2004-09-211-26/+12
|
* limit match does not support invert, warn about it. Closes bugzilla #95 ↵Phil Oester2004-09-211-7/+6
| | | | (Phil Oester)
* Add comment match extension (Brad Fisher)Brad Fisher2004-09-202-1/+128
|
* fix psd option parsing (Phil Oester)Phil Oester2004-09-181-5/+0
|
* Print error when '!' is used with multiport. Based on patch by Phil Oester.Patrick McHardy2004-09-183-0/+21
|
* port physdev to ip6tables (Bart De Schuymer)Bart De Schuymer2004-09-123-1/+275
|
* Fix number parsing (Piotr Gasidlo)Piotr Gasidło2004-09-021-1/+1
|
* add missing spaces in 'save' printout (youza@post.cz) (Closes: #235)Youza Youzovic2004-08-241-4/+4
|
* Cleanup ttl-match option parsing, fixes bugzilla #183 (Phil Oester)Phil Oester2004-08-231-11/+6
|
* Fix conntrack-match typo, fixes bugzilla #194 (Phil Oester)Phil Oester2004-08-231-1/+1
|
* Limit ttl-value to 0-255 (Maciej Soltysiak <solt@dns.toxicfilms.tv>)Maciej Soltysiak2004-07-281-5/+7
|
* Check that TTL is between 0 and 255 (Nicolas Bouliane)Nicolas Bouliane2004-07-271-6/+8
|