Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove support for compilation of conditional extensions | Jan Engelhardt | 2008-04-15 | 2 | -0/+519 |
| | |||||
* | Add all necessary header files - compilation fix for various cases | Jan Engelhardt | 2008-04-14 | 8 | -57/+131 |
| | | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h. | ||||
* | Remove compiler.h inclusions. | Patrick McHardy | 2008-02-22 | 1 | -1/+0 |
| | |||||
* | libxt_iprange r0 | Jan Engelhardt | 2008-01-20 | 1 | -5/+3 |
| | | | | | | Move libipt_iprange to libxt_iprange. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | libxt_conntrack r0 | Jan Engelhardt | 2008-01-20 | 1 | -77/+0 |
| | | | | | | Move libipt_conntrack to libxt_conntrack. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | Fix make/compile error for iptables-1.4.0rc1 | Jesper Brouer | 2007-11-25 | 1 | -0/+283 |
| | | | | | | | | | | | | | | | | | | | Fixing a make/compile issue with iptables, release candidate 1.4.0rc1, which has existed since SVN changeset 6920. This patch adds ip_tables.h and ip6_tables.h, and updates x_tables.h, taken from Linus'es git tree. Changeset 6920 added the include file x_tables.h from kernel source, but didn't add ip_tables.h and ip6_tables.h. At some point (Tue Nov 14 19:48:48 2006, by Yasuyuki Kozakai) these kernel headers where changed, which actually removes certain depencencies from ip_tables.h and ip6_tables.h to x_tables.h. If compiling will fail, with old kernel headers (ip_tables.h and ip6_tables.h) available in systems include path, because they depend on certaine defines in x_tables.h with is missing in the version in SVN. Jesper Brouer <jdb@comx.dk> | ||||
* | Resync header file and build CLUSTERIP target unconditionally | Patrick McHardy | 2007-09-05 | 1 | -3/+3 |
| | |||||
* | Build recent match unconditionally | Patrick McHardy | 2007-09-05 | 1 | -0/+27 |
| | |||||
* | Add IPv6 support to helper match | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -8/+0 |
| | |||||
* | Add IPv6 support to DSCP target | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -20/+0 |
| | |||||
* | Add IPv6 support to CLASSIFY target | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -8/+0 |
| | |||||
* | Unifies libip[6]t_connmark into libxt_connmark | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -18/+0 |
| | |||||
* | Unifies libip[6]t_hashlimit into libxt_hashlimit | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -40/+0 |
| | |||||
* | Unifies libip[6]t_MARK into libxt_MARK | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -19/+0 |
| | |||||
* | Add IPv6 support to CONNMARK match | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -25/+0 |
| | |||||
* | Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -16/+0 |
| | |||||
* | Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -10/+0 |
| | |||||
* | Add IPv6 support to comment match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -10/+0 |
| | |||||
* | Add IPv6 support to dscp match. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -23/+0 |
| | |||||
* | Unifies libip[6]t_esp.c into libxt_esp.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -16/+0 |
| | |||||
* | Unifies libip[6]t_length.c into libxt_length.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_limit.c into libxt_limit.c. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -21/+0 |
| | |||||
* | Unifies libip[6]t_physdev.c into libxt_physdev.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -24/+0 |
| | |||||
* | Add IPv6 support to pkttype match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_sctp.c into libxt_sctp.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -107/+0 |
| | |||||
* | Add IPv6 support to tcpmss match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Use unified API in libipt_mark.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_multiport.c into libipxt_multiport.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -29/+0 |
| | |||||
* | Removes KERNEL_64_USERSPACE_32 | Yasuyuki KOZAKAI | 2007-06-30 | 2 | -8/+0 |
| | | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel. | ||||
* | Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer | Yasuyuki KOZAKAI | 2007-06-28 | 7 | -35/+0 |
| | |||||
* | Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵ | Patrick McHardy | 2007-04-18 | 1 | -1/+1 |
| | | | | versions. | ||||
* | make policy match compile independant of kernel headersv1.3.5 | Harald Welte | 2006-02-01 | 1 | -0/+4 |
| | |||||
* | fix ipt_conntrack compilation against very early (2.4.0) kernel releases | Harald Welte | 2006-02-01 | 1 | -1/+1 |
| | |||||
* | Prepare policy match for x_tables unification by making sure both | Patrick McHardy | 2006-01-31 | 1 | -0/+58 |
| | | | | ipt_policy and ip6t_policy use the same data structure. | ||||
* | add NFQUEUE support for ipv4 and ipv6 | Harald Welte | 2005-07-19 | 1 | -0/+16 |
| | |||||
* | fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2 | Harald Welte | 2005-07-10 | 1 | -0/+17 |
| | | | | tested compilation with kernels starting 2.4.17 | ||||
* | omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵ | Harald WeltePablo Neira | 2005-04-15 | 1 | -1/+22 |
| | | | | to use ip_conntrack_old_tuple. (Pablo Neira) | ||||
* | This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira) | Pablo Neira | 2005-03-07 | 1 | -0/+37 |
| | |||||
* | Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace. | Martin Josefsson | 2005-02-12 | 2 | -0/+9 |
| | | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se> | ||||
* | Add support for inversion to multiport revision 1. | Phil Oester | 2005-02-02 | 1 | -0/+1 |
| | | | | Signed-off-by: Phil Oester <kernel@linuxace.com> | ||||
* | Pablo Neira: | Pablo Neira | 2005-01-03 | 1 | -0/+28 |
| | | | | Multiport revision 1 userspace support. | ||||
* | Extension revision number support (if kernel supports the getsockopts). | Rusty Russell | 2005-01-03 | 1 | -0/+15 |
| | | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied. | ||||
* | move ipt_hashlimit to it's correct location | Harald Welte | 2004-10-20 | 1 | -0/+40 |
| | |||||
* | Add comment match extension (Brad Fisher) | Brad Fisher | 2004-09-20 | 1 | -0/+10 |
| | |||||
* | Add ipt_addrtype.h | Patrick McHardy | 2004-06-28 | 1 | -0/+11 |
| | |||||
* | add missing include | Harald Welte | 2004-06-21 | 1 | -0/+39 |
| | |||||
* | With a 64bit kernel only the high 32bits of nfmark was used regardless of | Martin Josefsson | 2004-05-26 | 2 | -0/+25 |
| | | | | | | | 32/64bit userspace. This makes it quite hard to interoperate with 'tc'. Sync ipv6 versions with ipv4 versions. Tested on x86 and sparc64 with both 32bit and 64bit userspace. | ||||
* | Fix 64bit kernel / 32bit userspace issue. | Martin Josefsson | 2004-05-26 | 2 | -6/+15 |
| | | | | Sync header with kernel. | ||||
* | Fix 64bit kernel / 32bit userspace issue. | Martin Josefsson | 2004-05-26 | 2 | -1/+31 |
| | |||||
* | update for matching chunk flags (Kiran Kumar) | Kiran Kumar | 2004-03-02 | 1 | -0/+11 |
| |