History log of /external/iptables/extensions/libxt_time.c
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
db50b83bc3cd634beb71f38978ad7d035c88ff11 23-May-2011 Jan Engelhardt <jengelh@medozas.de> libxt_time: deprecate --localtz option, document kernel TZ caveats

Comparing against the kernel time zone has significant caveats. This
patch adds documentation about the issue, and makes --utc the default
setting for libxt_time.

Furthremore, throw a warning on using the "--localtz" option, to avoid
confusion with one's shell TZ environment variable, and rename it to
"--kerneltz" to be explicit about whose timezone will be used.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
1201871343223d9781253283a64686be4e63ad52 23-May-2011 Jan Engelhardt <jengelh@medozas.de> libxt_time: --utc and --localtz are mutually exclusive

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
b1319cc083de658c0007da93f25d19874f75d55f 23-May-2011 Jan Engelhardt <jengelh@medozas.de> libxt_time: always ignore libc timezone

Since xt_time is meant to work across many months, libc doing
automatic conversion from local time to UTC (during parse) is
unwanted, especially when --utc is specified. The same goes for
dumping.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
d64d54777b4a9405a8229a533e44a2e80f000a9f 02-Mar-2011 Jan Engelhardt <jengelh@medozas.de> libxt_time: use guided option parser

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
73866357e4a7a0fdc1b293bf8863fee2bd56da9e 18-Dec-2010 Jan Engelhardt <jengelh@medozas.de> iptables: do not print trailing whitespaces

Due to the use of printf("foobar "), iptables emits spaces at the
end-of-line, which looks odd to some users because it causes the
terminal to wrap even if there is seemingly nothing to print.

It may also have other points of annoyance, such as mailers
interpreting a trailing space as an indicator that the paragraph
continues when format=flowed is also on.
And git highlights trailing spaces in red, so let's avoid :)

Preexisting inconsistencies in outputting spaces in the right
spot are also addressed right away.

References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429579
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
8ad33a34a34ba2bcd360352ad3b7772916832702 09-Jan-2011 Florian Westphal <fwestphal@astaro.com> libxt_time: fix random --datestart skips

Frank Lichtenheld points out that -m time --datestart ...
sometimes messes up --datestart:

$ iptables -A INPUT -m time --datestart 2010-11-24T16:50:00 -j ACCEPT
$ iptables-save | grep 11
-A INPUT -m time --datestart 2010-11-24T16:50:00 -j ACCEPT
$ iptables-save | iptables-restore
$ iptables-save | grep 11
-A INPUT -m time --datestart 2010-11-24T15:50:00 -j ACCEPT

--datestart moved by one hour.

As the --timestart option does not care about DST, always set
dst=0 when parsing --starttime input.

Reported-by: Frank Lichtenheld <flichtenheld@astaro.com>
Signed-off-by: Florian Westphal <fwestphal@astaro.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/extensions/libxt_time.c
b4af04be14560b3fcc6cf23200148d408014a2f5 03-Dec-2010 Jan Engelhardt <jengelh@medozas.de> include: update files with headers from Linux 2.6.37-rc1

Also includes the type change to __u{8,16,32} kernel types already.
/external/iptables/extensions/libxt_time.c
32b8e61e4e5bd405d9ad07bf9468498dfbb19f9e 23-Jul-2010 Jan Engelhardt <jengelh@medozas.de> all: consistent syntax use in struct option

Try to inhibit copypasting old stuff.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
42979363f3958b4436c6d2503753c182c58e55ea 01-Jun-2009 Jan Engelhardt <jengelh@medozas.de> extensions: use NFPROTO_UNSPEC for .family field

This constant would be the designated one for the .family field; it
also, given recent changes, makes grep for NFPROTO_UNSPEC work to
finally recollect all manpages.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
69f564e3890976461de0016cd81171ff8bfa8353 26-May-2009 Jan Engelhardt <jengelh@medozas.de> extensions: add const qualifiers in print/save functions

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
1829ed482efbc8b390cc760d012b3a4450494e1a 21-Feb-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: prefix exit_error to xtables_error

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
1de7edffc9085c0f41c261dca995e28ae4126c29 30-Jan-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: prefix/order - move parse_protocol to xtables.c

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/extensions/libxt_time.c
9a90f9075cbcaa743c93b57f12f6e38b04dfc790 01-Sep-2008 Phil Oester <kernel@linuxace.com> src: Missing limits.h includes

Latest git doesn't compile for me on Fedora 9 due to various *MAX constants
being undefined. Below adds the include in 3 files which need it (although
I can't see why this isn't required in 1.4.1.1).

Signed-off-by: Phil Oester <kernel@linuxace.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/extensions/libxt_time.c
ef18e8147903885708d1c264904129af4fb636d6 04-Aug-2008 Jan Engelhardt <jengelh@medozas.de> src: remove dependency on libiptc headers

xtables.h does not need really need libxtc.h, and we can drop it from
the install as it is internal-only.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/extensions/libxt_time.c
9b488b992872d4d2b7ebf7897d74d52f4fb59e1c 08-Jun-2008 Jan Engelhardt <jengelh@medozas.de> manpage updates

A number of options support negation, but the manpage did not reflect
this ("[!]" was absent). Also fix a few [] (optional arguments) to {}
(required arguments) in the option-BNF.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/extensions/libxt_time.c
8b7c64d6ba156a99008fcd810cba874c73294333 15-Apr-2008 Jan Engelhardt <jengelh@medozas.de> Remove old functions, constants
/external/iptables/extensions/libxt_time.c
23545c2a7a31c68c1e49c7c901b632c2f1c59968 14-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Implement AF_UNSPEC as a wildcard for extensions
/external/iptables/extensions/libxt_time.c
9ee386a1b6d7704b259460152c959ab0e79e02aa 29-Jan-2008 Max Kellermann <max@duempel.org> fix gcc warnings

Max Kellermann <max@duempel.org>
/external/iptables/extensions/libxt_time.c
032722b2d24138ee92e459c779ae4869f33b1f37 20-Oct-2007 Jan Engelhardt <jengelh@medozas.de> Transfer all my copyright over to our company.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/extensions/libxt_time.c
fceebd8a493a16a767cf1c8e890830c129218c8f 18-Oct-2007 Patrick McHardy <kaber@trash.net> Fix the compile warning fix

According to Jan:

While the fields of struct xt_time are uints, the defined
time_t span is by definition 0..231-1, i.e. it should be
INT_MAX, not UINT_MAX.
/external/iptables/extensions/libxt_time.c
ff64ae696f64811d513b7969713d8002e37c0c3b 18-Oct-2007 Patrick McHardy <kaber@trash.net> Fix compiler warning on 64 bit: date_stop is an u_int32_t, so use UINT_MAX instead of LONG_MAX
/external/iptables/extensions/libxt_time.c
181dead3f13befe02769ef479bcbb51801b7fc4e 04-Oct-2007 Jan Engelhardt <jengelh@medozas.de> Unique symbols 1/6

Give symbols of libxt matches unique names (1/3).

Adds unique prefixes to all functions (most of them - especially the hook
functions) so that debugging programs can unambiguously map a symbol to an
address. Also unifies the names of the xtables_match/xtables_target structs,
(based upon libxt_connmark.c/libip6t_*.c).

Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
/external/iptables/extensions/libxt_time.c
830132ac9c0d270bf9dcfe85c2464e3fe8c73fb9 04-Oct-2007 Jan Engelhardt <jengelh@medozas.de> Delete empty ->final_check() functions

Deletes empty ->final_check() functions, and makes ip[6]tables
checks for NULL on these.

Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
/external/iptables/extensions/libxt_time.c
ad326ef9f734ac30548de292c59fc0e2fd81ac2a 23-Sep-2007 Jan Engelhardt <jengelh@medozas.de> Add the libxt_time iptables match

This is libipt_time from POM-ng enhanced by the following:

* day-of-month support (for example "match on the 15th of each month")
* inversion support for --weekdays and --monthdays
* match against UTC or local timezone
* a manpage

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/extensions/libxt_time.c