summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter_ipv6
Commit message (Collapse)AuthorAgeFilesLines
* extensions: libip6t_srh: support matching previous, next and last SIDAhmed Abdelsalam2018-05-081-2/+41
| | | | | | | | This patch extends the libip6t_srh shared library to support matching previous SID, next SID, and last SID. Signed-off-by: Ahmed Abdelsalam <amsalam20@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* extensions: add support for 'srh' matchAhmed Abdelsalam2018-01-121-0/+56
| | | | | | | | | This patch adds a new exetension to iptables to supprt 'srh' match The implementation considers revision 7 of the SRH draft. https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-07 Signed-off-by: Ahmed Abdelsalam <amsalam20@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* added missing icmpv6 codes in REJECTAndreas Herz2015-09-291-1/+3
| | | | | | | | | | | | | | RFC 4443 added two new codes values for ICMPv6 type 1: 5 - Source address failed ingress/egress policy 6 - Reject route to destination And RFC 7084 states in L-14 that IPv6 Router MUST send ICMPv6 Destination Unreachable with code 5 for packets forwarded to it that use an address from a prefix that has been invalidated. Signed-off-by: Andreas Herz <andi@geekosphere.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* include: Sync with upstream kernel headersFelix Janda2015-06-261-9/+12
| | | | | Signed-off-by: Felix Janda <felix.janda@posteo.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* extensions: add NPT extensionPatrick McHardy2012-09-101-0/+16
| | | | | | | | Add extensions for the SNPT and DNPT stateless IPv6-to-IPv6 Network Prefix Translation targets. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* include: refresh include files from kernel 3.1-rc3Jan Engelhardt2011-08-3110-91/+84
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* extensions: libipt_LOG/libip6t_LOG: support macdecode optionPatrick McHardy2010-06-281-1/+2
| | | | Signed-off-by: Patrick McHardy <kaber@trash.net>
* includes: header updatesJan Engelhardt2010-02-019-69/+14
| | | | | | | | | | | | Update the shipped Linux kernel headers from 2.6.33-rc6, as iptables's ipt_ECN.h for example references ipt_DSCP.h, which no longer exists. Since a number of old code pieces have been removed in the kernel in that fashion, the structs for older versions are moved into the .c file, to keep header updating simple. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* include: resynchronize headers with 2.6.29-rc5Jan Engelhardt2009-02-212-10/+2
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* Resync header files with kernelPatrick McHardy2008-06-051-49/+14
| | | | | Resync headers and add types.h file for endian annotated types, which are not available with old headers.
* Add all necessary header files - compilation fix for various casesJan Engelhardt2008-04-142-37/+27
| | | | | | Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h.
* Remove compiler.h inclusions.Patrick McHardy2008-02-221-1/+0
|
* Fix make/compile error for iptables-1.4.0rc1Jesper Brouer2007-11-251-0/+324
| | | | | | | | | | | | | | | | | | | Fixing a make/compile issue with iptables, release candidate 1.4.0rc1, which has existed since SVN changeset 6920. This patch adds ip_tables.h and ip6_tables.h, and updates x_tables.h, taken from Linus'es git tree. Changeset 6920 added the include file x_tables.h from kernel source, but didn't add ip_tables.h and ip6_tables.h. At some point (Tue Nov 14 19:48:48 2006, by Yasuyuki Kozakai) these kernel headers where changed, which actually removes certain depencencies from ip_tables.h and ip6_tables.h to x_tables.h. If compiling will fail, with old kernel headers (ip_tables.h and ip6_tables.h) available in systems include path, because they depend on certaine defines in x_tables.h with is missing in the version in SVN. Jesper Brouer <jdb@comx.dk>
* Build IPv6 hbh/dst matches unconditionallyPatrick McHardy2007-09-051-0/+23
|
* Build IPv6 rt match unconditionallyPatrick McHardy2007-09-051-0/+33
|
* Build ipv6header match unconditionallyPatrick McHardy2007-09-051-0/+27
|
* Build IPv6 mh match unconditionallyPatrick McHardy2007-09-051-0/+15
|
* Resync header files and build IPv6 frag match unconditionallyPatrick McHardy2007-09-051-9/+0
|
* Resync header file and build IPv6 ah match unconditionallyPatrick McHardy2007-09-051-9/+0
|
* Resync ip6t_REJECT.h with kernel - seems the entire time we had an imcompatiblePatrick McHardy2007-08-231-1/+3
| | | | | | header :( Noticed by Peter Riley <Peter.Riley@hotpop.com>
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-041-8/+0
|
* Unifies libip[6]t_esp.c into libxt_esp.cYasuyuki KOZAKAI2007-07-241-23/+0
|
* Unifies libip[6]t_length.c into libxt_length.cYasuyuki KOZAKAI2007-07-241-10/+0
|
* Unifies libip[6]t_limit.c into libxt_limit.c.Yasuyuki KOZAKAI2007-07-241-21/+0
|
* Unifies libip[6]t_physdev.c into libxt_physdev.cYasuyuki KOZAKAI2007-07-241-24/+0
|
* Unifies libip[6]_mark.c into libxt_mark.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Unifies libip[6]t_multiport.c into libipxt_multiport.cYasuyuki KOZAKAI2007-07-241-30/+0
|
* Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layerYasuyuki KOZAKAI2007-06-283-15/+3
|
* Add ip6tables TCPMSS extension (Arnaud Ebalard <arno@natisbad.org>)Arnaud Ebalard2007-01-161-0/+10
| | | | Kernel part will go in 2.6.21.
* - Add revision support to ip6tables.Rémi Denis-Courmont2006-10-201-0/+30
| | | | | - Add support port range match to libip6t_multiport (R?mi Denis-Courmont <rdenis@simphalempin.com>)
* Prepare policy match for x_tables unification by making sure bothPatrick McHardy2006-01-311-0/+58
| | | | ipt_policy and ip6t_policy use the same data structure.
* fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2Harald Welte2005-07-101-16/+0
| | | | tested compilation with kernels starting 2.4.17
* we need to have this header file included, since old kernels don't define ↵Harald Welte2005-07-101-0/+16
| | | | IP6T_LOG_UID.
* port physdev to ip6tables (Bart De Schuymer)Bart De Schuymer2004-09-121-0/+24
|
* With a 64bit kernel only the high 32bits of nfmark was used regardless ofMartin Josefsson2004-05-262-0/+25
| | | | | | | 32/64bit userspace. This makes it quite hard to interoperate with 'tc'. Sync ipv6 versions with ipv4 versions. Tested on x86 and sparc64 with both 32bit and 64bit userspace.
* Fix 64bit kernel / 32bit userspace issue.Martin Josefsson2004-05-261-0/+25
|
* apply ipv6 hoplimit (hl match, HL target) patch (Maciej Soltysiak ↵Maciej Soltysiak2003-01-082-0/+44
| | | | <solt@dns.toxicfilms.tv>)
* new ip6 FRAG match by kiszaAndrás Kis-Szabó2002-03-262-0/+42
|
* Add AH/ESP match for ipv6Harald Welte2002-03-252-0/+44
|
* make compilation of libip6t_LOG, libipt_length, libip6t_length andHarald Welte2002-02-172-0/+28
| | | | libip6t_owner mandatory
* added libip6t_REJECT.c for IPv6 reject supportHarald Welte2001-07-231-0/+16