Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | include: resynchronize headers with 2.6.29-rc5 | Jan Engelhardt | 2009-02-21 | 2 | -1/+3 |
| | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> | ||||
* | src: remove unused include files | Jan Engelhardt | 2008-12-07 | 6 | -141/+0 |
| | | | | | | | | No .c files include any of these - in fact they seem to be remnants missed during commit b1f568309a09e61f892dee3c23279cecff0b0ff4 - so remove them. Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | Move libipt_recent to libxt_recent | Jan Engelhardt | 2008-10-22 | 1 | -27/+0 |
| | | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | addrtype match: added revision 1 | Laszlo Attila Toth | 2008-06-06 | 1 | -0/+14 |
| | | | | | | | | | In revision 1 address type checking can be limited to either the incoming or outgoing interface depending on the current chain. In the FORWARD chain only one of them is allowed at the same time. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net> | ||||
* | Resync header files with kernel | Patrick McHardy | 2008-06-05 | 6 | -62/+24 |
| | | | | | Resync headers and add types.h file for endian annotated types, which are not available with old headers. | ||||
* | Remove support for compilation of conditional extensions | Jan Engelhardt | 2008-04-15 | 2 | -0/+519 |
| | |||||
* | Add all necessary header files - compilation fix for various cases | Jan Engelhardt | 2008-04-14 | 8 | -57/+131 |
| | | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h. | ||||
* | Remove compiler.h inclusions. | Patrick McHardy | 2008-02-22 | 1 | -1/+0 |
| | |||||
* | libxt_iprange r0 | Jan Engelhardt | 2008-01-20 | 1 | -5/+3 |
| | | | | | | Move libipt_iprange to libxt_iprange. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | libxt_conntrack r0 | Jan Engelhardt | 2008-01-20 | 1 | -77/+0 |
| | | | | | | Move libipt_conntrack to libxt_conntrack. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> | ||||
* | Fix make/compile error for iptables-1.4.0rc1 | Jesper Brouer | 2007-11-25 | 1 | -0/+283 |
| | | | | | | | | | | | | | | | | | | | Fixing a make/compile issue with iptables, release candidate 1.4.0rc1, which has existed since SVN changeset 6920. This patch adds ip_tables.h and ip6_tables.h, and updates x_tables.h, taken from Linus'es git tree. Changeset 6920 added the include file x_tables.h from kernel source, but didn't add ip_tables.h and ip6_tables.h. At some point (Tue Nov 14 19:48:48 2006, by Yasuyuki Kozakai) these kernel headers where changed, which actually removes certain depencencies from ip_tables.h and ip6_tables.h to x_tables.h. If compiling will fail, with old kernel headers (ip_tables.h and ip6_tables.h) available in systems include path, because they depend on certaine defines in x_tables.h with is missing in the version in SVN. Jesper Brouer <jdb@comx.dk> | ||||
* | Resync header file and build CLUSTERIP target unconditionally | Patrick McHardy | 2007-09-05 | 1 | -3/+3 |
| | |||||
* | Build recent match unconditionally | Patrick McHardy | 2007-09-05 | 1 | -0/+27 |
| | |||||
* | Add IPv6 support to helper match | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -8/+0 |
| | |||||
* | Add IPv6 support to DSCP target | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -20/+0 |
| | |||||
* | Add IPv6 support to CLASSIFY target | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -8/+0 |
| | |||||
* | Unifies libip[6]t_connmark into libxt_connmark | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -18/+0 |
| | |||||
* | Unifies libip[6]t_hashlimit into libxt_hashlimit | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -40/+0 |
| | |||||
* | Unifies libip[6]t_MARK into libxt_MARK | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -19/+0 |
| | |||||
* | Add IPv6 support to CONNMARK match | Yasuyuki KOZAKAI | 2007-08-04 | 1 | -25/+0 |
| | |||||
* | Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -16/+0 |
| | |||||
* | Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -10/+0 |
| | |||||
* | Add IPv6 support to comment match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -10/+0 |
| | |||||
* | Add IPv6 support to dscp match. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -23/+0 |
| | |||||
* | Unifies libip[6]t_esp.c into libxt_esp.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -16/+0 |
| | |||||
* | Unifies libip[6]t_length.c into libxt_length.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_limit.c into libxt_limit.c. | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -21/+0 |
| | |||||
* | Unifies libip[6]t_physdev.c into libxt_physdev.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -24/+0 |
| | |||||
* | Add IPv6 support to pkttype match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_sctp.c into libxt_sctp.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -107/+0 |
| | |||||
* | Add IPv6 support to tcpmss match | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Use unified API in libipt_mark.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -9/+0 |
| | |||||
* | Unifies libip[6]t_multiport.c into libipxt_multiport.c | Yasuyuki KOZAKAI | 2007-07-24 | 1 | -29/+0 |
| | |||||
* | Removes KERNEL_64_USERSPACE_32 | Yasuyuki KOZAKAI | 2007-06-30 | 2 | -8/+0 |
| | | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel. | ||||
* | Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer | Yasuyuki KOZAKAI | 2007-06-28 | 7 | -35/+0 |
| | |||||
* | Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵ | Patrick McHardy | 2007-04-18 | 1 | -1/+1 |
| | | | | versions. | ||||
* | make policy match compile independant of kernel headersv1.3.5 | Harald Welte | 2006-02-01 | 1 | -0/+4 |
| | |||||
* | fix ipt_conntrack compilation against very early (2.4.0) kernel releases | Harald Welte | 2006-02-01 | 1 | -1/+1 |
| | |||||
* | Prepare policy match for x_tables unification by making sure both | Patrick McHardy | 2006-01-31 | 1 | -0/+58 |
| | | | | ipt_policy and ip6t_policy use the same data structure. | ||||
* | add NFQUEUE support for ipv4 and ipv6 | Harald Welte | 2005-07-19 | 1 | -0/+16 |
| | |||||
* | fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2 | Harald Welte | 2005-07-10 | 1 | -0/+17 |
| | | | | tested compilation with kernels starting 2.4.17 | ||||
* | omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵ | Harald WeltePablo Neira | 2005-04-15 | 1 | -1/+22 |
| | | | | to use ip_conntrack_old_tuple. (Pablo Neira) | ||||
* | This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira) | Pablo Neira | 2005-03-07 | 1 | -0/+37 |
| | |||||
* | Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace. | Martin Josefsson | 2005-02-12 | 2 | -0/+9 |
| | | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se> | ||||
* | Add support for inversion to multiport revision 1. | Phil Oester | 2005-02-02 | 1 | -0/+1 |
| | | | | Signed-off-by: Phil Oester <kernel@linuxace.com> | ||||
* | Pablo Neira: | Pablo Neira | 2005-01-03 | 1 | -0/+28 |
| | | | | Multiport revision 1 userspace support. | ||||
* | Extension revision number support (if kernel supports the getsockopts). | Rusty Russell | 2005-01-03 | 1 | -0/+15 |
| | | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied. | ||||
* | move ipt_hashlimit to it's correct location | Harald Welte | 2004-10-20 | 1 | -0/+40 |
| | |||||
* | Add comment match extension (Brad Fisher) | Brad Fisher | 2004-09-20 | 1 | -0/+10 |
| | |||||
* | Add ipt_addrtype.h | Patrick McHardy | 2004-06-28 | 1 | -0/+11 |
| |