summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter
Commit message (Collapse)AuthorAgeFilesLines
...
* Unifies libip[6]t_sctp.c into libxt_sctp.cYasuyuki KOZAKAI2007-07-241-0/+107
|
* Add IPv6 support to tcpmss matchYasuyuki KOZAKAI2007-07-241-0/+9
|
* Unifies libip[6]t_udp.c into libxt_udp.cYasuyuki KOZAKAI2007-07-241-0/+36
|
* Use unified API in libipt_mark.cYasuyuki KOZAKAI2007-07-241-0/+9
|
* Use unified API in multiport matchYasuyuki KOZAKAI2007-07-241-0/+30
|
* Introduces xtables match/target registrationYasuyuki KOZAKAI2007-07-241-0/+123
| | | | | | | | | | | | | | | | | | | | | | | - moves lib_dir to xtables.c - introduces struct pfinfo which has protocol family dependent infomations. - unifies load_ip[6]tables_ko() and moves them as load_xtables_ko() - introduces xt_{match,match_rule,target,tryload} and replaces ip[6]t_* with them - unifies following functions and move them to xtables.c - find_{match,find_target} - compatible_revision, compatible_{match,target}_revision - introduces xtables_register_{match,target} and make register_{match,target}[6] call them. xtables_register_* register ONLY matches/targets matched protocol family Some concepts: - source compatibility for libip[6]t_xxx.c with warning on compilation not binary compatibility. - binary compatibility between 2.4/2.6 kernel and iptables/ip6tables, of cause. - xtables is enough to support only one address family at runtime. Then xtables keeps infomations of only the focused address famiy in struct afinfo.
* PATCH: Add connlimit to iptables.Jan Engelhardt2007-07-091-0/+17
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵Patrick McHardy2007-04-184-0/+296
versions.