summaryrefslogtreecommitdiffstats
path: root/include/libiptc/libip6tc.h
Commit message (Collapse)AuthorAgeFilesLines
* iptables: add -C to check for existing rulesStefan Tomanek2011-03-081-0/+6
| | | | | | | | | | | | | | | | | It is often useful to check whether a specific rule is already present in a chain without actually modifying the iptables config. Services like fail2ban usually employ techniques like grepping through the output of "iptables -L" which is quite error prone. This patch adds a new operation -C to the iptables command which mostly works like -D; it can detect and indicate the existence of the specified rule by modifying the exit code. The new operation TC_CHECK_ENTRY uses the same code as the -D operation, whose functions got a dry-run parameter appended. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* extensions: add missing limits.h includeJan Engelhardt2009-02-211-0/+5
| | | | | | Thanks to Stephen Hemminger for noticing. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libiptc: remove indirectionsJan Engelhardt2008-11-101-24/+24
| | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* libiptc: remove typedef indirectionJan Engelhardt2008-11-101-31/+30
| | | | | | | | | | | Don't you hate it when iptc_handle_t *x actually is a double-indirection struct iptc_handle **? This also shows the broken constness model, since "const iptc_handle_t x" = "iptc_handle_t const x" = "struct iptc_handle *const x", which is like no const at all. Lots of things to do then. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* Fix all remaining warnings (missing declarations, missing prototypes)Jan Engelhardt2008-04-131-0/+2
|
* fix gcc warningsMax Kellermann2008-01-291-1/+1
| | | | Max Kellermann <max@duempel.org>
* use <linux/types.h>Jan Engelhardt2007-12-171-0/+1
| | | | | | | | Remove our own definitions of the Linux types and use <linux/types.h> instead. libiptc needs it too, or otherwise will choke on union nf_inet_addr. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix the previous fixMartin Josefsson2003-05-051-0/+3
| | | | No more segfaults or compilewarnings.
* fix IP6T_MIN_ALIGN macro (Andreas Herrmann)Andreas Herrmann2002-02-251-1/+1
|
* libiptc counter functionsHarald Welte2001-01-051-0/+17
|
* Philip Blundell's IPv6 fixes.Philip Blundell2000-05-151-7/+7
|
* Philip Blundell's IPv6 fixes.Philip Blundell2000-05-101-5/+6
|
* IPv6 enhancements.Rusty Russell2000-05-021-0/+133