summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* Introducing libxt_*.man files. Sorted matches and modulesLászló Attila Tóth2007-10-311-31/+101
| | | | | | | | | | | The iptables.8 and ip6tables.8 man pages are now generated from libxt_*.man files too. For xtables modules one man page is enough with libxt_ prefix. The match and target lists are sorted alphabetically. The make command doesn't print anything when creates man pages. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu>
* Transfer all my copyright over to our company.Jan Engelhardt2007-10-202-2/+5
| | | | Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix the compile warning fixPatrick McHardy2007-10-181-2/+2
| | | | | | | | According to Jan: While the fields of struct xt_time are uints, the defined time_t span is by definition 0..231-1, i.e. it should be INT_MAX, not UINT_MAX.
* Fix compiler warning on 64 bit: date_stop is an u_int32_t, so use UINT_MAX ↵Patrick McHardy2007-10-181-2/+2
| | | | instead of LONG_MAX
* extension/sctp: fix - mistake to pass a pointer where array is requiredLi Zefan2007-10-181-12/+9
| | | | | | | Macros like SCTP_CHUNKMAP_XXX(chukmap) require chukmap to be an array, but print_chunks() passes a pointer to these macros. Li Zefan <lizf@cn.fujitsu.com>
* make print-extensions doesn't show libxt_* extensionsSebastian Claßen2007-10-081-0/+1
| | | | | | | | In extensions/Makefile the variable PFX_EXT_SLIB_OPTS is not appended to OPTIONALS, therefor 'make print-extensions' doesn't show any optional libxt_* extension. Sebastian Claßen <sebastian.classen@freenet.ag>
* Unique symbols and no '&' charactersLászló Attila Tóth2007-10-082-56/+56
| | | | | | | Removing '&' from .._match and ..._target variables. Give all symbols unique names. Signed-off-by: Laszlo Attila Toth
* Remove redundant dst/hbh linesJan Engelhardt2007-10-042-61/+38
| | | | | | | Remove hbh stuff from libip6t_dst, remove dst stuff from libip6t_hbh. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique symbols 6/6Jan Engelhardt2007-10-043-67/+48
| | | | | | | | | | | Give symbols of libxt targets unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 5/6Jan Engelhardt2007-10-0414-297/+220
| | | | | | | | | | | Give symbols of libxt matches unique names (3/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 4/6Jan Engelhardt2007-10-0415-329/+242
| | | | | | | | | | | Give symbols of libxt targets unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 3/6Jan Engelhardt2007-10-0415-339/+248
| | | | | | | | | | | Give symbols of libxt matches unique names (2/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique names 2/6Jan Engelhardt2007-10-0410-277/+234
| | | | | | | | | | | Give symbols of libxt targets unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Unique symbols 1/6Jan Engelhardt2007-10-0426-709/+600
| | | | | | | | | | | Give symbols of libxt matches unique names (1/3). Adds unique prefixes to all functions (most of them - especially the hook functions) so that debugging programs can unambiguously map a symbol to an address. Also unifies the names of the xtables_match/xtables_target structs, (based upon libxt_connmark.c/libip6t_*.c). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* No ipt in xtJan Engelhardt2007-10-041-1/+1
| | | | | | Cease using ipt_entry_match (replaced by xt_entry_match). Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Constify data structuresJan Engelhardt2007-10-0412-13/+13
| | | | | | Constify more data structures. Make functions static. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->print() and ->save() functionsJan Engelhardt2007-10-044-33/+0
| | | | | | | Deletes empty ->print() and ->save() functions. ip[6]tables prints the trivial thing automatically. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->final_check() functionsJan Engelhardt2007-10-0432-214/+0
| | | | | | | Deletes empty ->final_check() functions, and makes ip[6]tables checks for NULL on these. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Delete empty ->init() functionsJan Engelhardt2007-10-0420-138/+0
| | | | | | | Deletes empty ->init() functions. ip[6]tables already checks for .init being NULL or not. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Remove stray NULLsJan Engelhardt2007-10-043-3/+3
| | | | | | | Mixing member accessors (non-named vs named) is not good. Remove stray NULL. Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Addrtype match: renaming functionsLászló Attila Tóth2007-10-041-23/+23
| | | | | | | The function names in libipt_addrtype.c makes debugging hard, also I renamed them prefixed by 'addrtype_'. Laszlo attila toth <panther@balabit.hu>
* Couldn't load/find match `u32'Hann-Huei Chiou2007-09-281-0/+1
| | | | | | | | | | iptables (up to 0927 snapshot) keeps complaining of "Couldn't load (or find, if NO_SHARED_LIBS=1) match `u32'. After comparing with other libxt_*.c, I found that there's no member ".family" in the "u32_reg" structure, while ".family = AF_INET6" exists in "u32_reg6" Hann-Huei Chiou <koala@ascenvision.com>
* Add the libxt_time iptables matchJan Engelhardt2007-09-233-1/+574
| | | | | | | | | | | This is libipt_time from POM-ng enhanced by the following: * day-of-month support (for example "match on the 15th of each month") * inversion support for --weekdays and --monthdays * match against UTC or local timezone * a manpage Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix u32 warningsJan Engelhardt2007-09-191-13/+13
| | | | | | | | | | | warning: format '%ld' expects type 'long int', but argument 3 has type 'int'. With %u alone, you would get "but arg-start is long" warnings on x64. With %lu, you would get "but arg-start is int" on x86. Fix it up by explicitly deciding for one (%u and cast to unsigned int) and using that. Jan Engelhardt <jengelh@computergmbh.de>
* Adds u32 to iptables.Jan Engelhardt2007-09-104-1/+566
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Fix sparse warnings: non-ANSI function declarations, 0 used as pointerPatrick McHardy2007-09-0867-279/+279
|
* Makefile for man pages of xtables extensions (Laszlo Attila Toth ↵László Attila Tóth2007-09-061-10/+42
| | | | | | | | | | | | <panther@balabit.hu>) * no extra target/match by default :) * man page of fix modules (PF_EXT_SLIB etc.) plus optional (...SLIB_OPTS) modules generated, but not all. * because of the previous one I had to rename PF_EXT_SE_SLIB to PF_EXT_SELINUX_SLIB etc. as a non-optional variable, original PF_EXT_SE_SLIB gets the value of PF_EXT_SELINUX_SLIB if DO_SELINUX is set to 1.
* Remove unsupported connrate extensionPatrick McHardy2007-09-062-183/+0
|
* Build manpages for xtables extensions (Laszlo Attila Toth <panther@balabit.hu>)László Attila Tóth2007-09-051-4/+9
|
* Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.Patrick McHardy2007-09-051-9/+14
| | | | Fixes compiler warning in quota match.
* Build IPv6 hbh/dst matches unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 rt match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build ipv6header match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 mh match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header files and build IPv6 frag match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Resync header file and build IPv6 ah match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build IPv6 REJECT target unconditionallyPatrick McHardy2007-09-052-5/+1
|
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build recent match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build dccp match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build string match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build statistic match unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Build connbytes match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build quota match unconditionallyPatrick McHardy2007-09-052-4/+1
|
* Build NFLOG target unconditionallyPatrick McHardy2007-09-052-3/+1
|
* Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)Peter Riley2007-09-0281-114/+59
|
* Fix dscp match manpage (zhangxiliang <zhangxiliang@cn.fujitsu.com>)zhangxiliang2007-08-291-1/+1
| | | | | | | | The description for the value in option "-m dscp -dscp" should be modified to 0~63. The option can match 6 bit DSCP field within the TOS field in the IP header. So the range for the option should be 0~(26-1) that is 0~63.
* Add IPv6 support to statistic matchYasuyuki KOZAKAI2007-08-042-4/+20
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-042-11/+26
|
* Add IPv6 support to connbytes matchYasuyuki KOZAKAI2007-08-043-26/+43
|