iptables - iptables tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	libxtables: guided option parser	Jan Engelhardt	2011-04-06	1	-0/+20
\| \| \| \| \| \| \| \| \| \| \|	This patchset seeks to drastically reduce the code in the individual extensions by centralizing their argument parsing (breakdown of strings), validation, and in part, assignment. As a secondary goal, this reduces the number of static storage duration variables in flight. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	ip(6)tables-multi: unify subcommand handling	Stefan Tomanek	2011-03-07	1	-0/+11
\| \| \| \| \| \| \| \| \| \|	I found the subcommand handling and naming done by iptables-multi and ip6tables-multi very confusing and complicated; this patch reorganizes the subcommands in a single table, allowing both variants of them to be used (iptables/main) and also prints a list of the allowed commands if an unknown command is entered by the user. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	src: move jump option handling from do_command6 into its own function	Jan Engelhardt	2011-02-07	1	-0/+1
\| \| \| \|	Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	src: deduplicate and simplify implicit protocol extension loading	Jan Engelhardt	2011-02-07	1	-2/+1
\| \| \| \|	Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	src: put shared option flags into xshared	Jan Engelhardt	2011-02-07	1	-0/+15
\| \| \| \| \| \|	This will be needed for the find_proto function. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	src: deduplicate find_proto function	Jan Engelhardt	2011-02-07	1	-0/+4
\| \| \| \|	Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	src: share iptables_command_state across the two programs	Jan Engelhardt	2011-02-07	1	-0/+18
\| \| \| \| \| \| \|	struct iptables_command_state and quite a bit of the code looks worthy of deduplication. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	ip[6]tables: only call match's parse function when option char is in range	Jan Engelhardt	2011-01-08	1	-0/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Normally, extensions use a "default:" case in switch(c) to just return if they do not handle c. Apparently, libip6t_hl does that too late and checks for hl-specific parsing state before it has established that c refers to one of its own options. Also affected: libipt_ttl, libxt_ipvs, libxt_policy, libxt_statistic. One way to fix this is to move the flags checks into case '2', '3', '4'. Doing this replication feels bad, so as an alternative, let's just free extensions from having to deal with other extension's options passing thru. References: http://marc.info/?l=netfilter-devel&m=129444759532377&w=2 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
*	iptables: allow for help-less extensions	Jan Engelhardt	2009-06-26	1	-0/+10
	This is for extensions that do not take any options, and which subsequently do not offer any help text either. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>