iptables - iptables tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Merge branch 'stable'	Pablo Neira Ayuso	2013-04-05	1	-1/+1
\|\ \| \| \| \| \| \| \| \|	Resolve conflict with Nicolas' Dichtel update on utils/Makefile.am for nfnl_osf.
\| *	utils: nfnl_osf: use the right nfnetlink lib	Nicolas Dichtel	2013-04-05	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	If the user specify libnfnetlink_LIBS during the configure, we must use it. Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* \|	utils: nfbpf_compile	Willem de Bruijn	2013-04-02	1	-2/+12
\|/ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	A BPF compiler to convert tcpdump expressions to the decimal format accepted by the libxt_bpf. Generate a file and pass that to iptables: nfbpf_compile RAW 'udp dst port 9000' > test.bpf iptables -A OUTPUT -m bpf --bytecode-file test.bpf -j LOG Or pass the output directly to iptables using backticks: iptables -A INPUT -m bpf --bytecode \ "`./nfbpf_compile RAW 'udp dst port 9000'" -j LOG This utility depends on libpcap. The library is only compiled if the option --enable-bpf-compiler is explicitly passed to ./configure and libpcap is found. Pablo has mangled the original patch to rename the utility to nfbpf_compile. Also modified the output to match exactly what -m bpf --bytecode needs. Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	nfnl_osf: add missing libnfnetlink_CFLAGS to compile process	Jan Engelhardt	2011-12-31	1	-1/+2
\|
*	build: move remaining preprocessor flags to CPPFLAGS	Mike Frysinger	2011-06-01	1	-2/+2
\| \| \| \| \|	References; http://bugzilla.netfilter.org/show_bug.cgi?id=713 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	build: move basic preprocessor flags to regular_CPPFLAGS	Jan Engelhardt	2011-06-01	1	-0/+1
\| \| \| \| \| \| \|	This is where they belong, after all. References: http://bugzilla.netfilter.org/show_bug.cgi?id=713 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	utils: add missing include flags to Makefile	Jan Engelhardt	2010-05-24	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \|	Fixes this compile error: CC nfnl_osf.o nfnl_osf.c:48:36: fatal error: linux/netfilter/xt_osf.h: No such file or directory compilation terminated. References: http://marc.info/?l=netfilter&m=127449929621579&w=2 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	libxt_osf: import nfnl_osf program	Jan Engelhardt	2010-04-06	1	-0/+6
	xt_osf is pretty useless without the actual fingerprint loader. Import nfnl_osf-2009-06-07 and make it a part of the iptables distribution. Cc: Evgeniy Polyakov <johnpol@2ka.mxt.ru> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>