Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Make '-p all' a special case that is handled before calling getprotoent() ↵ | Harald Welte | 2006-02-11 | 1 | -1/+7 | |
| | | | | (Closes: #446) | |||||
* | fix double-free if a single match is used multiple times within a signle rule | Harald Welte | 2006-02-11 | 1 | -1/+3 | |
| | | | | | | (Closes: #440). However, while this fixes the double-free, it still doesn't make iptables support two of the same matches within one rule. Apparently the last matchinfo is copied into all the previous matchinfo instances. | |||||
* | Fix probing for supported revisions (Jones Desougi <jones@ingate.com>) | Jones Desougi | 2005-12-22 | 1 | -4/+4 | |
| | | | | Bugzilla #413 | |||||
* | fix compilation of iptables on [old] systems that don't have IPT_F_GOTO | Harald Welte | 2005-11-24 | 1 | -0/+2 | |
| | ||||||
* | only set revisions on real targets, not on jumps. (Pablo Neira) | Pablo Neira | 2005-11-17 | 1 | -1/+3 | |
| | ||||||
* | add 'goto' support (Henrik Nordstrom <hno@marasystems.com>) | Henrik Nordstrom | 2005-11-05 | 1 | -1/+23 | |
| | ||||||
* | Kernels higher than 2.6.10 don't support multiple --to arguments in | Phil Oester | 2005-09-19 | 1 | -0/+18 | |
| | | | | | | | | | | | | | | | | | | | | | DNAT and SNAT targets. At present, the error is somewhat vague: # iptables -t nat -A foo -j SNAT --to 1.2.3.4 --to 2.3.4.5 iptables: Invalid argument But if we want current iptables to work with kernels <= 2.6.10, we cannot simply disallow this in all cases. So the below patch adds kernel version checking to iptables, and utilizes it in [DS]NAT. Now, users will see a more informative error: # iptables -t nat -A foo -j SNAT --to 1.2.3.4 --to 2.3.4.5 iptables v1.3.3: Multiple --to-source not supported This generic infrastructure (shamelessly lifted from procps btw) may come in handy in the future for other changes. This fixes bugzilla #367. (Phil Oester) | |||||
* | The call to free_opts() in merge_options() is invalid C. The oldopts | Marcus Sundberg | 2005-07-29 | 1 | -3/+1 | |
| | | | | | | | | | argument always refers to the memory pointed to by the opts global, which may be freed by the call to free_opts(), but oldopts is used after the free_opts() call. This patch makes sure we don't use freed memory. (Marcus Sundberg <marcus@ingate.com>) ip6tables merge by myself. | |||||
* | get rid of numerous gcc-4 warnings | Harald Welte | 2005-07-19 | 1 | -1/+2 | |
| | ||||||
* | reduce code replication of parse_interface() (Yasuyuki Kozakai) | Yasuyuki KOZAKAI | 2005-06-22 | 1 | -2/+1 | |
| | ||||||
* | Chain name should not start with '!' (Yasuyuki Kozakai ↵ | Yasuyuki KOZAKAI | 2005-06-13 | 1 | -2/+2 | |
| | | | | <yasuyuki.kozakai@toshiba.co.jp>) | |||||
* | Release previously merged options from merge_opts(), reduces memory-usage of ↵ | Pablo Neira | 2005-05-29 | 1 | -6/+17 | |
| | | | | iptables-restore dramatically (Pablo Neira) | |||||
* | poll goto specific changes out of trunk | Harald WeltePablo Neira | 2005-04-15 | 1 | -3/+0 | |
| | ||||||
* | fix iptables-save/restore of goto (Jonas Berlin) | Jonas Berlin | 2005-04-15 | 1 | -0/+3 | |
| | ||||||
* | the optflags array contains a '3' for the OPT_LINENUMBERS entry while ↵ | Jonas Berlin | 2005-04-01 | 1 | -1/+1 | |
| | | | | everywhere else '0' is used (Jonas Berlin) | |||||
* | Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>) | Pablo Neira | 2005-02-14 | 1 | -10/+8 | |
| | | | | Fixes build with conntrack event patch for 2.6 | |||||
* | Remove leftover debug printf | Martin Josefsson | 2005-01-03 | 1 | -3/+0 | |
| | ||||||
* | Replace memchr with strlen and fix up one of the statements. | Martin Josefsson | 2005-01-03 | 1 | -4/+4 | |
| | ||||||
* | Extension revision number support (if kernel supports the getsockopts). | Rusty Russell | 2005-01-03 | 1 | -5/+120 | |
| | | | | | Enhance MARK match with second revision. Committed in anticipation of the kernel patch being applied. | |||||
* | Fix setting lib_dir in ip*tables-{save,restore} | Martin Josefsson | 2004-12-27 | 1 | -10/+1 | |
| | ||||||
* | Don't need ipt_entry_target()/ip6t_entry_target() now kernel uses static ↵ | Rusty Russell | 2004-12-22 | 1 | -15/+8 | |
| | | | | | | inline instead of extern inline (otherwise it doesn't compile without -O). Don't re-initialize libiptc/libip6t unless modprobe attempt actually succeeds. This makes nfsim run about 20 times faster, as it doesn't have to explore failures in the first iptc_init(). | |||||
* | Implement IPTABLES_LIB_DIR and IP6TABLES_LIB_DIR environment variables, and ↵ | Rusty Russell | 2004-12-20 | 1 | -4/+10 | |
| | | | | set them in testsuite if we're running iptables within tree. | |||||
* | Fix module-autoloading in certain cases (Fixse Debian Bug 219686) | Harald Welte | 2004-10-22 | 1 | -3/+5 | |
| | ||||||
* | fix slightly changed semantics of iptc_is_builtin | Harald Welte | 2004-08-30 | 1 | -1/+1 | |
| | ||||||
* | Allocate enough memory for addr-list in host_to_addr() | Patrick McHardy | 2004-08-03 | 1 | -1/+1 | |
| | ||||||
* | fix dual-free bug with multiple-A dns records (keso@klister.net) | keso | 2004-07-04 | 1 | -5/+2 | |
| | ||||||
* | Get rid of some warnings when compiling 64bit. | Martin Josefsson | 2004-05-26 | 1 | -13/+13 | |
| | ||||||
* | Add versions of string_to_number() for use in 32bit userspace with 64bit kernel. | Martin Josefsson | 2004-05-26 | 1 | -5/+30 | |
| | ||||||
* | When compiled static, don't show help-messages for all matches and targets, | Martin Josefsson | 2004-05-26 | 1 | -11/+13 | |
| | | | | only show help for specified ones. | |||||
* | Get rid of some memoryleaks. | Martin Josefsson | 2004-05-18 | 1 | -3/+25 | |
| | | | | Will make ip(6)tables-restore sessions use less memory. | |||||
* | fix case where somebody uses '-i +' as interface name (Ozgur AKAN) | Ozgur AKAN | 2004-04-07 | 1 | -1/+1 | |
| | ||||||
* | add userspace part of SCTP match | Harald Welte | 2004-02-21 | 1 | -0/+1 | |
| | ||||||
* | Make sure to use matches in the order they are given when calling ↵ | Martin Josefsson | 2004-02-02 | 1 | -62/+67 | |
| | | | | do_command() multiple times. | |||||
* | Fix another possibly not zero-terminated string after copy (Karsten Desler) | Karsten Desler | 2004-01-31 | 1 | -0/+1 | |
| | ||||||
* | Fix possibly not zero-terminated string after copy (Karsten Desler) | Karsten Desler | 2004-01-31 | 1 | -0/+1 | |
| | ||||||
* | Fix '-L format bug' (Edward J. Huff) (Closes: #93) | Harald Welte | 2003-05-31 | 1 | -2/+2 | |
| | ||||||
* | Fix the previous fix | Martin Josefsson | 2003-05-05 | 1 | -7/+1 | |
| | | | | No more segfaults or compilewarnings. | |||||
* | fix trivial typo | Harald Welte | 2003-05-03 | 1 | -1/+1 | |
| | ||||||
* | fix memory leak(s) in libiptc. Reverts the previous (wrong) patch. (Martin ↵ | Martin Josefsson | 2003-05-02 | 1 | -1/+7 | |
| | | | | Josefsson) | |||||
* | fix stupid typo (Maciej Soltysiak) | Maciej Soltysiak | 2003-03-31 | 1 | -1/+1 | |
| | ||||||
* | make iptables-restore print the line number in case of an error | Illes Marci | 2003-03-03 | 1 | -0/+8 | |
| | | | | (Illes Marci <marci@balabit.hu>) | |||||
* | rename-chain has a mandatary argument, not an optional (Juergen Baumann) | Harald Welte | 2002-11-02 | 1 | -1/+1 | |
| | ||||||
* | fix long-standing bug with regard to protocol-on-demand-loading and ↵ | Harald Welte | 2002-08-26 | 1 | -15/+55 | |
| | | | | iptables-save/restore (1.2.7 release bug) | |||||
* | minor fixes by kisza: | András Kis-Szabó | 2002-08-14 | 1 | -1/+1 | |
| | | | | | | | | - remove -C(check) function from ip6tables - -M added to the getopts()'s list (missed) - small change in the iptables help - remove some unused code - some GPL notice added | |||||
* | modify protocol-match-extension load behaviour to eliminate the two | Harald Welte | 2002-08-07 | 1 | -24/+21 | |
| | | | | outstanding bugs. | |||||
* | chain name may not clash with target name | Joszef Kadlecsik | 2002-06-24 | 1 | -3/+4 | |
| | ||||||
* | make -M (aka --modprobe) work [Bart De Schuymer] | Bart De Schuymer | 2002-06-15 | 1 | -1/+1 | |
| | ||||||
* | remove '-C' check function; | Harald Welte | 2002-05-07 | 1 | -63/+7 | |
| | | | | add check for chain names starting with '-' to -N command. | |||||
* | remove check of find_proto(), since do_command() can be called multiple times, | Harald Welte | 2002-05-04 | 1 | -2/+0 | |
| | | | | and match will be loaded after first call. | |||||
* | make find_target() and find_match() honor LOAD_MUST_SUCCEED when NO_SHARED_LIBS | Marc Boucher | 2002-03-24 | 1 | -0/+8 | |
| | | | | is defined. |