summaryrefslogtreecommitdiffstats
path: root/include/linux
Commit message (Collapse)AuthorAgeFilesLines
...
* Resync ip6t_REJECT.h with kernel - seems the entire time we had an imcompatiblePatrick McHardy2007-08-231-1/+3
| | | | | | header :( Noticed by Peter Riley <Peter.Riley@hotpop.com>
* Add IPv6 support to helper matchYasuyuki KOZAKAI2007-08-042-8/+8
|
* Add IPv6 support to connbytes matchYasuyuki KOZAKAI2007-08-041-0/+25
|
* Add IPv6 support to DSCP targetYasuyuki KOZAKAI2007-08-041-8/+8
|
* Add IPv6 support to CLASSIFY targetYasuyuki KOZAKAI2007-08-042-8/+8
|
* Unifies libip[6]t_state into libxt_stateYasuyuki KOZAKAI2007-08-041-0/+13
|
* Unifies libip[6]t_connmark into libxt_connmarkYasuyuki KOZAKAI2007-08-041-4/+4
|
* Unifies libip[6]t_hashlimit into libxt_hashlimitYasuyuki KOZAKAI2007-08-041-12/+12
|
* Unifies libip[6]t_MARK into libxt_MARKYasuyuki KOZAKAI2007-08-043-27/+21
|
* Unifies libip[6]t_CONNSECMARK into libxt_CONNSECMARKYasuyuki KOZAKAI2007-08-041-0/+13
|
* Add IPv6 support to CONNMARK matchYasuyuki KOZAKAI2007-08-041-7/+7
|
* Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.cYasuyuki KOZAKAI2007-07-241-4/+4
|
* Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.cYasuyuki KOZAKAI2007-07-242-10/+10
|
* Add IPv6 support to comment matchYasuyuki KOZAKAI2007-07-242-10/+10
|
* Add IPv6 support to dscp match.Yasuyuki KOZAKAI2007-07-242-23/+23
|
* Unifies libip[6]t_esp.c into libxt_esp.cYasuyuki KOZAKAI2007-07-243-39/+14
|
* Unifies libip[6]t_length.c into libxt_length.cYasuyuki KOZAKAI2007-07-243-19/+9
|
* Unifies libip[6]t_limit.c into libxt_limit.c.Yasuyuki KOZAKAI2007-07-242-27/+6
|
* Unifies libip[6]t_mac.c into libxt_mac.cYasuyuki KOZAKAI2007-07-241-0/+8
|
* Unifies libip[6]t_physdev.c into libxt_physdev.cYasuyuki KOZAKAI2007-07-243-48/+24
|
* Add IPv6 support to pkttype matchYasuyuki KOZAKAI2007-07-242-9/+8
|
* Unifies libip[6]t_sctp.c into libxt_sctp.cYasuyuki KOZAKAI2007-07-241-11/+11
|
* Add IPv6 support to tcpmss matchYasuyuki KOZAKAI2007-07-242-9/+9
|
* Unifies libip[6]t_udp.c into libxt_udp.cYasuyuki KOZAKAI2007-07-241-0/+36
|
* Unifies libip[6]_mark.c into libxt_mark.cYasuyuki KOZAKAI2007-07-241-9/+0
|
* Use unified API in libipt_mark.cYasuyuki KOZAKAI2007-07-242-9/+9
|
* Unifies libip[6]t_multiport.c into libipxt_multiport.cYasuyuki KOZAKAI2007-07-242-59/+0
|
* Use unified API in multiport matchYasuyuki KOZAKAI2007-07-241-0/+30
|
* Introduces xtables match/target registrationYasuyuki KOZAKAI2007-07-241-0/+123
| | | | | | | | | | | | | | | | | | | | | | | - moves lib_dir to xtables.c - introduces struct pfinfo which has protocol family dependent infomations. - unifies load_ip[6]tables_ko() and moves them as load_xtables_ko() - introduces xt_{match,match_rule,target,tryload} and replaces ip[6]t_* with them - unifies following functions and move them to xtables.c - find_{match,find_target} - compatible_revision, compatible_{match,target}_revision - introduces xtables_register_{match,target} and make register_{match,target}[6] call them. xtables_register_* register ONLY matches/targets matched protocol family Some concepts: - source compatibility for libip[6]t_xxx.c with warning on compilation not binary compatibility. - binary compatibility between 2.4/2.6 kernel and iptables/ip6tables, of cause. - xtables is enough to support only one address family at runtime. Then xtables keeps infomations of only the focused address famiy in struct afinfo.
* PATCH: Add connlimit to iptables.Jan Engelhardt2007-07-091-0/+17
| | | | Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
* Removes KERNEL_64_USERSPACE_32Yasuyuki KOZAKAI2007-06-302-8/+0
| | | | | | | The recent kernel has compat layer for iptables. It doesn't have compat layer for libipq and ip6tables, but ip6tables with KERNEL_64_USERSPACE_32 is still broken. We should fix kernel instead of fixing them if and when we want use their 32bit binary with 64bit kernel.
* Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layerYasuyuki KOZAKAI2007-06-2810-50/+3
|
* Use nf_conntrack headers instead of ip_conntrack ones and add sanitized ↵Patrick McHardy2007-04-185-1/+297
| | | | versions.
* Add ip6tables TCPMSS extension (Arnaud Ebalard <arno@natisbad.org>)Arnaud Ebalard2007-01-161-0/+10
| | | | Kernel part will go in 2.6.21.
* - Add revision support to ip6tables.Rémi Denis-Courmont2006-10-201-0/+30
| | | | | - Add support port range match to libip6t_multiport (R?mi Denis-Courmont <rdenis@simphalempin.com>)
* make policy match compile independant of kernel headersv1.3.5Harald Welte2006-02-011-0/+4
|
* fix ipt_conntrack compilation against very early (2.4.0) kernel releasesHarald Welte2006-02-011-1/+1
|
* Prepare policy match for x_tables unification by making sure bothPatrick McHardy2006-01-312-0/+116
| | | | ipt_policy and ip6t_policy use the same data structure.
* add NFQUEUE support for ipv4 and ipv6Harald Welte2005-07-191-0/+16
|
* fix various missing header file / #define issues on old kernels. I've now ↵v1.3.2Harald Welte2005-07-102-16/+17
| | | | tested compilation with kernels starting 2.4.17
* we need to have this header file included, since old kernels don't define ↵Harald Welte2005-07-101-0/+16
| | | | IP6T_LOG_UID.
* omeone forgot to update ipt_conntrack.h header in user space. So, update it ↵Harald WeltePablo Neira2005-04-151-1/+22
| | | | to use ip_conntrack_old_tuple. (Pablo Neira)
* This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira)Pablo Neira2005-03-071-0/+37
|
* Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace.Martin Josefsson2005-02-122-0/+9
| | | | | | | Also fixes a typo in CONNMARK, --mask set the mark, not the mask. Initial patch by: Pablo Neira <pablo@eurodev.net> Signed-off-by: Martin Josefsson <gandalf@wlug.westbo.se>
* Add support for inversion to multiport revision 1.Phil Oester2005-02-021-0/+1
| | | | Signed-off-by: Phil Oester <kernel@linuxace.com>
* Pablo Neira:Pablo Neira2005-01-031-0/+28
| | | | Multiport revision 1 userspace support.
* Extension revision number support (if kernel supports the getsockopts).Rusty Russell2005-01-031-0/+15
| | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied.
* move ipt_hashlimit to it's correct locationHarald Welte2004-10-201-0/+40
|
* Add comment match extension (Brad Fisher)Brad Fisher2004-09-201-0/+10
|
* port physdev to ip6tables (Bart De Schuymer)Bart De Schuymer2004-09-121-0/+24
|