summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter_ipv4
Commit message (Collapse)AuthorAgeFilesLines
* src: remove unused include filesJan Engelhardt2008-12-076-141/+0
| | | | | | | | No .c files include any of these - in fact they seem to be remnants missed during commit b1f568309a09e61f892dee3c23279cecff0b0ff4 - so remove them. Signed-off-by: Patrick McHardy <kaber@trash.net>
* Move libipt_recent to libxt_recentJan Engelhardt2008-10-221-27/+0
| | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* addrtype match: added revision 1Laszlo Attila Toth2008-06-061-0/+14
| | | | | | | | | In revision 1 address type checking can be limited to either the incoming or outgoing interface depending on the current chain. In the FORWARD chain only one of them is allowed at the same time. Signed-off-by: Laszlo Attila Toth <panther@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>
* Resync header files with kernelPatrick McHardy2008-06-056-62/+24
| | | | | Resync headers and add types.h file for endian annotated types, which are not available with old headers.
* Remove support for compilation of conditional extensionsJan Engelhardt2008-04-152-0/+519
|
* Add all necessary header files - compilation fix for various casesJan Engelhardt2008-04-148-57/+131
| | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h.
* Remove compiler.h inclusions.Patrick McHardy2008-02-221-1/+0
|
* libxt_iprange r0Jan Engelhardt2008-01-201-5/+3
| | | | | | Move libipt_iprange to libxt_iprange. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* libxt_conntrack r0Jan Engelhardt2008-01-201-77/+0
| | | | | | Move libipt_conntrack to libxt_conntrack. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
* Fix make/compile error for iptables-1.4.0rc1Jesper Brouer2007-11-251-0/+283
| | | | | | | | | | | | | | | | | | | Fixing a make/compile issue with iptables, release candidate 1.4.0rc1, which has existed since SVN changeset 6920. This patch adds ip_tables.h and ip6_tables.h, and updates x_tables.h, taken from Linus'es git tree. Changeset 6920 added the include file x_tables.h from kernel source, but didn't add ip_tables.h and ip6_tables.h. At some point (Tue Nov 14 19:48:48 2006, by Yasuyuki Kozakai) these kernel headers where changed, which actually removes certain depencencies from ip_tables.h and ip6_tables.h to x_tables.h. If compiling will fail, with old kernel headers (ip_tables.h and ip6_tables.h) available in systems include path, because they depend on certaine defines in x_tables.h with is missing in the version in SVN. Jesper Brouer <jdb@comx.dk>
* Resync header file and build CLUSTERIP target unconditionallyPatrick McHardy2007-09-051-3/+3
|
* Build recent match unconditionallyPatrick McHardy2007-09-051-0/+27
|
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-041-8/+0
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-041-20/+0
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-041-8/+0
|
* Unifies libip[6]t_connmark into libxt_connmarkYasuyuki KOZAKAI2007-08-041-18/+0
|
* Unifies libip[6]t_hashlimit into libxt_hashlimitYasuyuki KOZAKAI2007-08-041-40/+0
|
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-041-19/+0
|
* Add IPv6 support to CONNMARK matchYasuyuki KOZAKAI2007-08-041-25/+0
|
* Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.cYasuyuki KOZAKAI2007-07-241-16/+0
|
* Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.cYasuyuki KOZAKAI2007-07-241-10/+0
|
* Add IPv6 support to comment matchYasuyuki KOZAKAI2007-07-241-10/+0
|
* Add IPv6 support to dscp match.Yasuyuki KOZAKAI2007-07-241-23/+0
|
* Unifies libip[6]t_esp.c into libxt_esp.cYasuyuki KOZAKAI2007-07-241-16/+0
|
* Unifies libip[6]t_length.c into libxt_length.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_limit.c into libxt_limit.c.Yasuyuki KOZAKAI2007-07-241-21/+0
|
* Unifies libip[6]t_physdev.c into libxt_physdev.cYasuyuki KOZAKAI2007-07-241-24/+0
|
* Add IPv6 support to pkttype matchYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_sctp.c into libxt_sctp.cYasuyuki KOZAKAI2007-07-241-107/+0
|
* Add IPv6 support to tcpmss matchYasuyuki KOZAKAI2007-07-241-9/+0
|
* Use unified API in libipt_mark.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_multiport.c into libipxt_multiport.cYasuyuki KOZAKAI2007-07-241-29/+0
|
* Removes KERNEL_64_USERSPACE_32Yasuyuki KOZAKAI2007-06-302-8/+0
| | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel.
* Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layerYasuyuki KOZAKAI2007-06-287-35/+0
|
* Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵Patrick McHardy2007-04-181-1/+1
| | | | versions.
* make policy match compile independant of kernel headersv1.3.5Harald Welte2006-02-011-0/+4
|
* fix ipt_conntrack compilation against very early (2.4.0) kernel releasesHarald Welte2006-02-011-1/+1
|
* Prepare policy match for x_tables unification by making sure bothPatrick McHardy2006-01-311-0/+58
| | | | ipt_policy and ip6t_policy use the same data structure.
* add NFQUEUE support for ipv4 and ipv6Harald Welte2005-07-191-0/+16
|
* fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2Harald Welte2005-07-101-0/+17
| | | | tested compilation with kernels starting 2.4.17
* omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵Harald WeltePablo Neira2005-04-151-1/+22
| | | | to use ip_conntrack_old_tuple. (Pablo Neira)
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)Pablo Neira2005-03-071-0/+37
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-122-0/+9
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* Add support for inversion to multiport revision 1.Phil Oester2005-02-021-0/+1
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* Pablo Neira:Pablo Neira2005-01-031-0/+28
| | | | Multiport revision 1 userspace support.
* Extension revision number support (if kernel supports the getsockopts).Rusty Russell2005-01-031-0/+15
| | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied.
* move ipt_hashlimit to it's correct locationHarald Welte2004-10-201-0/+40
|
* Add comment match extension (Brad Fisher)Brad Fisher2004-09-201-0/+10
|
* Add ipt_addrtype.hPatrick McHardy2004-06-281-0/+11
|
* add missing includeHarald Welte2004-06-211-0/+39
|