summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter_ipv4
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'master' into iptables-nextPatrick McHardy2010-07-152-519/+0
|\
| * libxt_set: new revision addedJozsef Kadlecsik2010-06-162-519/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | libipt_set renamed to libxt_set and the support for the forthcoming ipset release added. I have tested backward (IPv4) and forward compatibility (IPv4/IPv6): ipset -N test iphash ipset -A test test-address iptables -N test-set iptables -A test-set -j LOG --log-prefix "match " iptables -A test-set -j DROP iptables -A OUTPUT -m set --match-set test dst -j test-set ping test-address
* | extensions: libipt_LOG/libip6t_LOG: support macdecode optionPatrick McHardy2010-06-281-1/+2
|/ | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* includes: header updatesJan Engelhardt2010-02-0110-107/+11
| | | | | | | | | | | | Update the shipped Linux kernel headers from 2.6.33-rc6, as iptables's ipt_ECN.h for example references ipt_DSCP.h, which no longer exists. Since a number of old code pieces have been removed in the kernel in that fashion, the structs for older versions are moved into the .c file, to keep header updating simple. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* include: resynchronize headers with 2.6.29-rc5Jan Engelhardt2009-02-212-1/+3
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* src: remove unused include filesJan Engelhardt2008-12-076-141/+0
| | | | | | | | No .c files include any of these - in fact they seem to be remnants missed during commit b1f568309a09e61f892dee3c23279cecff0b0ff4 - so remove them. Signed-off-by: Patrick McHardy <kaber@trash.net>
* Move libipt_recent to libxt_recentJan Engelhardt2008-10-221-27/+0
| | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* addrtype match: added revision 1Laszlo Attila Toth2008-06-061-0/+14
| | | | | | | | | In revision 1 address type checking can be limited to either the incoming or outgoing interface depending on the current chain. In the FORWARD chain only one of them is allowed at the same time. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>
* Resync header files with kernelPatrick McHardy2008-06-056-62/+24
| | | | | Resync headers and add types.h file for endian annotated types, which are not available with old headers.
* Remove support for compilation of conditional extensionsJan Engelhardt2008-04-152-0/+519
|
* Add all necessary header files - compilation fix for various casesJan Engelhardt2008-04-148-57/+131
| | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h.
* Remove compiler.h inclusions.Patrick McHardy2008-02-221-1/+0
|
* libxt_iprange r0Jan Engelhardt2008-01-201-5/+3
| | | | | | Move libipt_iprange to libxt_iprange. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* libxt_conntrack r0Jan Engelhardt2008-01-201-77/+0
| | | | | | Move libipt_conntrack to libxt_conntrack. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix make/compile error for iptables-1.4.0rc1Jesper Brouer2007-11-251-0/+283
| | | | | | | | | | | | | | | | | | | Fixing a make/compile issue with iptables, release candidate 1.4.0rc1, which has existed since SVN changeset 6920. This patch adds ip_tables.h and ip6_tables.h, and updates x_tables.h, taken from Linus'es git tree. Changeset 6920 added the include file x_tables.h from kernel source, but didn't add ip_tables.h and ip6_tables.h. At some point (Tue Nov 14 19:48:48 2006, by Yasuyuki Kozakai) these kernel headers where changed, which actually removes certain depencencies from ip_tables.h and ip6_tables.h to x_tables.h. If compiling will fail, with old kernel headers (ip_tables.h and ip6_tables.h) available in systems include path, because they depend on certaine defines in x_tables.h with is missing in the version in SVN. Jesper Brouer <jdb@comx.dk>
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-051-3/+3
|
* Build recent match unconditionallyPatrick McHardy2007-09-051-0/+27
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-041-8/+0
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-041-20/+0
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-041-8/+0
|
* Unifies libip[6]t_connmark into libxt_connmarkYasuyuki KOZAKAI2007-08-041-18/+0
|
* Unifies libip[6]t_hashlimit into libxt_hashlimitYasuyuki KOZAKAI2007-08-041-40/+0
|
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-041-19/+0
|
* Add IPv6 support to CONNMARK matchYasuyuki KOZAKAI2007-08-041-25/+0
|
* Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.cYasuyuki KOZAKAI2007-07-241-16/+0
|
* Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.cYasuyuki KOZAKAI2007-07-241-10/+0
|
* Add IPv6 support to comment matchYasuyuki KOZAKAI2007-07-241-10/+0
|
* Add IPv6 support to dscp match.Yasuyuki KOZAKAI2007-07-241-23/+0
|
* Unifies libip[6]t_esp.c into libxt_esp.cYasuyuki KOZAKAI2007-07-241-16/+0
|
* Unifies libip[6]t_length.c into libxt_length.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_limit.c into libxt_limit.c.Yasuyuki KOZAKAI2007-07-241-21/+0
|
* Unifies libip[6]t_physdev.c into libxt_physdev.cYasuyuki KOZAKAI2007-07-241-24/+0
|
* Add IPv6 support to pkttype matchYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_sctp.c into libxt_sctp.cYasuyuki KOZAKAI2007-07-241-107/+0
|
* Add IPv6 support to tcpmss matchYasuyuki KOZAKAI2007-07-241-9/+0
|
* Use unified API in libipt_mark.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_multiport.c into libipxt_multiport.cYasuyuki KOZAKAI2007-07-241-29/+0
|
* Removes KERNEL_64_USERSPACE_32Yasuyuki KOZAKAI2007-06-302-8/+0
| | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel.
* Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layerYasuyuki KOZAKAI2007-06-287-35/+0
|
* Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵Patrick McHardy2007-04-181-1/+1
| | | | versions.
* make policy match compile independant of kernel headersv1.3.5Harald Welte2006-02-011-0/+4
|
* fix ipt_conntrack compilation against very early (2.4.0) kernel releasesHarald Welte2006-02-011-1/+1
|
* Prepare policy match for x_tables unification by making sure bothPatrick McHardy2006-01-311-0/+58
| | | | ipt_policy and ip6t_policy use the same data structure.
* add NFQUEUE support for ipv4 and ipv6Harald Welte2005-07-191-0/+16
|
* fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2Harald Welte2005-07-101-0/+17
| | | | tested compilation with kernels starting 2.4.17
* omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵Harald WeltePablo Neira2005-04-151-1/+22
| | | | to use ip_conntrack_old_tuple. (Pablo Neira)
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)Pablo Neira2005-03-071-0/+37
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-122-0/+9
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* Add support for inversion to multiport revision 1.Phil Oester2005-02-021-0/+1
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* Pablo Neira:Pablo Neira2005-01-031-0/+28
| | | | Multiport revision 1 userspace support.