summaryrefslogtreecommitdiffstats
path: root/iptables-standalone.c
Commit message (Collapse)AuthorAgeFilesLines
* build: combine iptables-multi and iptables-staticJan Engelhardt2009-07-251-1/+1
| | | | | | | | | | | | | | | Changed the Makefile so that: 1. --enable-shared / --disable-shared control the linkage against libdl (and thus the potential to use 3rd party extensions) 2. --enable-static / --disable-static controls whether shipped extensions are built-in or provided as modules iptables-static becomes redundant by this action; iptables-multi now has the feature. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* iptables: refer to dmesg if we hit EINVALv1.4.3.1Pablo Neira Ayuso2009-03-241-3/+8
| | | | | | | With this patch, iptables refers to dmesg for further troubleshooting if we hit EINVAL. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* libxtables: general follow-up cleanupJamal Hadi Salim2009-02-131-4/+0
| | | | | | Kill program_name, program_version and xtables_program_name. Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
* libxtables: consolidate init calls into one functionJamal Hadi Salim2009-02-131-2/+7
| | | | | | | | | | | Introduce xtables_init_all() which hides three calls xtables_init(), xtables_set_nfproto(), and xtables_set_params(). Make ip[6]tables-restore, ip[6]tables-save and ip[6]tables-standalone use it. I moved xtables_set_params around for readability reasons. Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
* libxtables: set names of programsJamal Hadi Salim2009-02-121-0/+1
| | | | | | Set proper name of application. Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
* libxtables: move afinfo aroundJan Engelhardt2009-02-071-0/+1
| | | | | | | libxtables should not rely on the program executable providing the magic constants for using [gs]etsockopt. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: prefix/order - program_nameJan Engelhardt2009-01-301-1/+2
| | | | | | | | | Split XTABLES_VERSION into xtables and iptables, and encode the xtables soversion into the extensions instead. This makes it possible to upgrade iptables without having to recompile 3rd-party extensions (if the libxtables version matches, of course). Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* libxtables: prefix/order - libdirJan Engelhardt2009-01-271-10/+1
| | | | | | Consolidate the libdir variable initialization code into xtables.c. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* env: augment deprecation noticeJan Engelhardt2009-01-071-1/+2
| | | | | | | Tell the user what to use instead of IP*TABLES_LIBDIR. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* iptables: refer to dmesg when we hit errorPablo Neira Ayuso2008-11-191-1/+2
| | | | | | | | | | | This does not make any better, but at least refer to dmesg which is the common source of information to diagnose kernel-side problems. This is helpful for newbie users. # iptables -I INPUT -j CLUSTERIP iptables: Invalid argument. Run `dmesg' for more information. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* libiptc: remove indirectionsJan Engelhardt2008-11-101-2/+4
| | | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* libiptc: remove typedef indirectionJan Engelhardt2008-11-101-1/+1
| | | | | | | | | | | Don't you hate it when iptc_handle_t *x actually is a double-indirection struct iptc_handle **? This also shows the broken constness model, since "const iptc_handle_t x" = "iptc_handle_t const x" = "struct iptc_handle *const x", which is like no const at all. Lots of things to do then. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
* Remove old functions, constantsJan Engelhardt2008-04-151-1/+1
|
* Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIRJan Engelhardt2008-04-131-3/+8
|
* Fix all remaining warnings (missing declarations, missing prototypes)Jan Engelhardt2008-04-131-0/+1
|
* Add new exit value to indicate concurrency issues (Jesper Dangaard Brouer ↵Jesper Dangaard Brouer2006-06-191-1/+5
| | | | <hawk@comx.dk>)
* Fix setting lib_dir in ip*tables-{save,restore}Martin Josefsson2004-12-271-0/+4
|
* Bastiaan Bakker's patch to combine iptables, iptables-save and iptables-restoreBastiaan Bakker2004-06-251-0/+5
| | | | for size reduction applied
* copyright / GPL noticeHarald Welte2002-08-071-0/+7
|
* globally replace NETFILTER_VERSION with IPTABLES_VERSION to have consistent ↵Harald Welte2002-05-291-1/+1
| | | | naming
* - added patch to support statically linking of iptablesHarald Welte2001-08-061-0/+4
| | | | - iptables-save/-restore is no longer experimental
* Revert malloc. Why?Rusty Russell2001-01-071-10/+3
|
* o serveral changes / additions to libiptc:Harald Welte2001-01-051-0/+1
| | | | | | | | | - iptc_set_policy has additional argument 'counters' to be consistent with iptc_get_policy - added functions for counter manipulation (iptc_read_counter, iptc_zero_counter, iptc_set_counter) o iptables-save and iptables-restore manpage clearifications o iptables-restore counter restoring for chain counters
* Remove malloc warning.Rusty Russell2000-12-191-0/+1
|
* make iptables-restore and iptables-save work again!Harald Welte2000-12-011-3/+10
|
* reorganized tree after kernel mergeMarc Boucher2000-03-201-0/+50