summaryrefslogtreecommitdiffstats
path: root/extensions
Commit message (Collapse)AuthorAgeFilesLines
* add REJECT with icmp-frag-needed (Florian Lohoff)Florian Lohoff2005-04-102-3/+124
|
* don't allow newlines in LOG prefix (Phil Oester) (Closes: #312)Phil Oester2005-04-012-0/+8
|
* add lots of man pages (Jonas Berlin)Jonas Berlin2005-04-0117-0/+474
|
* SET target bugfix by Michal Pokrywka appliedMichal Pokrywka2005-03-181-1/+3
|
* Fix TCPLAG version (Torsten Lüttgert <t.luettgert@pressestimmen.de>)Torsten Lüttgert2005-03-161-1/+1
|
* improve REDIRECT manpage (Jonas Berlin <xkr47@outerspace.dyndns.org>)Jonas Berlin2005-03-151-3/+4
|
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)Pablo Neira2005-03-071-2/+3
|
* Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>)Pablo Neira2005-02-1483-471/+18
| | | | Fixes build with conntrack event patch for 2.6
* Allow "--realm ! foo" and "! --realm foo" (Closes: #297)Harald Welte2005-02-131-1/+1
|
* fix missing comma at end of lineHarald Welte2005-02-131-1/+1
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-122-25/+82
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* try to fix realm save/restore issue (Adresses: #297)Harald Welte2005-02-081-11/+14
|
* Fix rule deletion (hinfo pointer initialized by kernel, don't compare it in ↵Samuel Jean2005-02-071-2/+1
| | | | userspace). (Samuel Jean)
* fix parameter handling in libipt_hashlimit with iptables-save (Nikolai Malykh)Nikolai Malykh2005-02-071-2/+6
|
* Add support for inversion to multiport revision 1.Phil Oester2005-02-021-5/+10
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* fix compiler warning about discarding constHarald Welte2005-02-011-1/+1
|
* add missing commaHarald Welte2005-02-011-1/+1
|
* fix typoHarald Welte2005-02-011-1/+1
|
* make structure initializers use C99 standard (Harald Welte)Harald Welte2005-02-0119-261/+229
|
* check for colonsHarald Welte2005-02-011-1/+6
|
* Use C99 initializersHarald Welte2005-02-011-11/+11
|
* John McCann points out via bugzilla that iptables happily accepts thisPhil Oester2005-02-011-1/+6
| | | | | | | | | | | | | syntax on DNAT/SNAT: --to x.x.x.x:y:z but doesn't actually make use of the second port. Clear up the confusion by only accepting a dash between the ports. This closes bugzilla #265. Signed-off-by: Phil Oester <kernel@linuxace.com>
* fix name of 'extra_opts' structure member (Nikolai Malykh)Nikolai Malykh2005-01-221-1/+1
|
* Make it compile on current kernels, the future isn't here yet.Martin Josefsson2005-01-051-0/+6
|
* Testsuite found an issue: multiport accepts -p ! tcp.Rusty Russell2005-01-031-0/+4
|
* Pablo Neira:Pablo Neira2005-01-031-1/+199
| | | | Multiport revision 1 userspace support.
* Extension revision number support (if kernel supports the getsockopts).Rusty Russell2005-01-031-14/+126
| | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied.
* Prevent user from using --helper multiple times (Nicolas Bouliane ↵Nicolas Bouliane2005-01-021-0/+3
| | | | <nib@cookinglinux.org>)
* Add --log-uid option (John Lange <john.lange@open-it.ca>)John Lange2005-01-022-1/+20
|
* Fix compile error introduced by C99 conversion.Rusty Russell2004-12-291-1/+0
|
* Pablo Neira: extensions conversion to C99 structure initializationPablo Neira2004-12-2869-939/+893
| | | | (I removed the revision stuff for the moment, but this needs to go in before the code moves too much --RR)
* Use string_to_number. Don't check for no optarg: we set has_arg to 1 in ↵Rusty Russell2004-12-221-5/+5
| | | | option array, so getopt does that for us.
* Nicolas Bouliane: I was writing an nfsim .sim for the match tos, when I ↵Nicolas Bouliane2004-12-201-0/+5
| | | | realized that when we enter --tos twice the second overwrite the first.
* ROUTE --tee target extension (Patrick Schaaf)Patrick Schaaf2004-12-144-13/+84
|
* ipset 2 related updates (JK)Joszef Kadlecsik2004-12-015-83/+243
|
* fix some compiler warnings and errorsHarald Welte2004-11-181-17/+24
|
* sync with latest patch-o-matic-ng update (support direction and mode parameters)Harald Welte2004-11-181-11/+84
|
* minor syntax fixesHarald Welte2004-10-201-13/+18
|
* - add hashlimit to makefileHarald Welte2004-10-202-2/+2
| | | | - fix typo in libipt_hashlimit
* hashlimit port of userspace pluginHarald Welte2004-10-201-0/+365
|
* Mention owner brokenness in manpagePatrick McHardy2004-10-032-0/+4
|
* note owner match brokenness in helptext, closes bugzilla #244 (Phil Oester)Phil Oester2004-10-011-0/+2
|
* Add comment about time not adhering DST (Phil Oester) (Closes: #75)Phil Oester2004-09-261-0/+1
|
* realm: fix inversion (Simon Lodal)Simon Lodal2004-09-221-2/+3
|
* Fix half-working ipv6 limit invert check (Phil Oester)Phil Oester2004-09-211-7/+6
|
* Fix half-working dstlimit invert check (Phil Oester)Phil Oester2004-09-211-26/+12
|
* limit match does not support invert, warn about it. Closes bugzilla #95 ↵Phil Oester2004-09-211-7/+6
| | | | (Phil Oester)
* Add comment match extension (Brad Fisher)Brad Fisher2004-09-202-1/+128
|
* fix psd option parsing (Phil Oester)Phil Oester2004-09-181-5/+0
|
* Print error when '!' is used with multiport. Based on patch by Phil Oester.Patrick McHardy2004-09-183-0/+21
|