ebf81627b1a2f50fd47add49f9976ed430a19673 |
|
11-Jun-2011 |
JP Abgrall <jpa@google.com> |
Merge git://git.netfilter.org/iptables into v1.4.11_upstream Using theirs, as they have taken some of my prior changes\ with some improvements. Conflicts: include/xtables.h.in iptables/xtables.c iptables/xtoptions.c Change-Id: I8e1e537fbb868eeebb448c8f1d9e33b283448aac
|
16bd81be22ba2753e26f6a9ee6cb291e1e707d0d |
|
19-May-2011 |
JP Abgrall <jpa@google.com> |
androidifying: fixup includes and extraneous typedefs for __ANDROID__ The current could would take steps to define missing types, and include extra stuff based on GLIBC defines/versions. Make those places be ANDROID aware. Change-Id: I2d1f03e3c0f7f53250288a84db4c9ccf0431d482 Signed-off-by: JP Abgrall <jpa@google.com>
/external/iptables/libiptc/libip6tc.c
|
dcd1ad89105faf1f3a9a3febdb970b70c5466518 |
|
09-May-2011 |
Jan Engelhardt <jengelh@medozas.de> |
src: replace old IP*T_ALIGN macros Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip6tc.c
|
d59b9db031abee37a9aa9776662dd15370faabf4 |
|
08-Mar-2011 |
Stefan Tomanek <stefan.tomanek@wertarbyte.de> |
iptables: add -C to check for existing rules It is often useful to check whether a specific rule is already present in a chain without actually modifying the iptables config. Services like fail2ban usually employ techniques like grepping through the output of "iptables -L" which is quite error prone. This patch adds a new operation -C to the iptables command which mostly works like -D; it can detect and indicate the existence of the specified rule by modifying the exit code. The new operation TC_CHECK_ENTRY uses the same code as the -D operation, whose functions got a dry-run parameter appended. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip6tc.c
|
51651b64fffc58d4f58d005fa7dc0d9669147c57 |
|
23-Oct-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: avoid strict-aliasing warnings In file included from libiptc/libip4tc.c:117:0: libiptc/libiptc.c: In function ‘__iptcc_p_del_policy’: libiptc/libiptc.c:826:4: warning: dereferencing type-punned pointer will break strict-aliasing rules libiptc/libiptc.c: In function ‘iptc_get_target’: libiptc/libiptc.c:1650:4: warning: dereferencing type-punned pointer will break strict-aliasing rules libiptc/libip4tc.c: In function ‘dump_entry’: libiptc/libip4tc.c:157:3: warning: dereferencing type-punned pointer will break strict-aliasing rules CC libiptc/libip6tc.lo In file included from libiptc/libip6tc.c:112:0: libiptc/libiptc.c: In function ‘__iptcc_p_del_policy’: libiptc/libiptc.c:826:4: warning: dereferencing type-punned pointer will break strict-aliasing rules libiptc/libiptc.c: In function ‘ip6tc_get_target’: libiptc/libiptc.c:1650:4: warning: dereferencing type-punned pointer will break strict-aliasing rules libiptc/libip6tc.c: In function ‘dump_entry’: libiptc/libip6tc.c:188:3: warning: dereferencing type-punned pointer will break strict-aliasing rules Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip6tc.c
|
de899697fd8eb18e828e806ffab04d053208bbf2 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove unused iptc_get_raw_socket and iptc_check_packet Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip6tc.c
|
fd1873110f8e57be578df17fc9d03536b10f4f73 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove typedef indirection Don't you hate it when iptc_handle_t *x actually is a double-indirection struct iptc_handle **? This also shows the broken constness model, since "const iptc_handle_t x" = "iptc_handle_t const x" = "struct iptc_handle *const x", which is like no const at all. Lots of things to do then. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip6tc.c
|
5a2208c3e62a150e6f6297abbfa63056ab4a8066 |
|
04-Jun-2008 |
Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp> |
Use s6_addr32 to access bits in int6_addr instead of incompatible name Spotted by Khem Raj <raj.khem@gmail.com> Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip6tc.c
|
ea146a982e26c42f9954f140276f8deeb2edbe98 |
|
02-Sep-2007 |
Peter Riley <Peter.Riley@hotpop.com> |
Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)
/external/iptables/libiptc/libip6tc.c
|
70067291528bb949fac8a584e782f2b4c38e4c16 |
|
05-Jul-2006 |
Phil Oester <kernel@linuxace.com> |
libiptc symbols clash (Phil Oester <kernel@linuxace.com>) As reported by Dmitry Levin, the TC_NUM_RULES and TC_GET_RULE exports clash. His patch below, resolving bug #456
/external/iptables/libiptc/libip6tc.c
|
5ee88622ef8f38e5f6b6c60ca1ab61d8f93a0e82 |
|
23-Jun-2005 |
Pablo Neira <pablo@eurodev.net> |
fix deletion of targets where kernel size != userspace size (Pablo Neira)
/external/iptables/libiptc/libip6tc.c
|
8115e5425721cd610b6390c3d4c24540773b0520 |
|
14-Feb-2005 |
Pablo Neira <pablo@eurodev.net> |
Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>) Fixes build with conntrack event patch for 2.6
/external/iptables/libiptc/libip6tc.c
|
733e54b8250576d6a1e0ab5621ef5b144abdf018 |
|
16-Dec-2004 |
Rusty Russell <rusty@rustcorp.com.au> |
Make "is_same" test basics and entries only: targets are generic. Make target testing aware of different kinds of rules. Change reverse logic: target_different now target_same. Set type to MODULE in iptcc_map_target. Add testcase for this.
/external/iptables/libiptc/libip6tc.c
|
aae69bed019826ddec93f761514652a93d871e49 |
|
30-Aug-2004 |
Harald Welte <laforge@gnumonks.org> |
complete libiptc rewrite. Time to load 10k rules goes down from 2.20 minutes to 1.255 seconds (!). Might still contain bugs, use with caution.
/external/iptables/libiptc/libip6tc.c
|
a28d495285ad7dd9f286d63958cf20d74eec6bcb |
|
26-May-2004 |
Martin Josefsson <gandalf@wlug.westbo.se> |
Get rid of some warnings when compiling 64bit.
/external/iptables/libiptc/libip6tc.c
|
50fceae8f9b25bbe4effed74321e51916c1ce8b6 |
|
08-Oct-2003 |
Harald Welte <laforge@gnumonks.org> |
sorry, this one didn't make it in 1.2.9rc1 :(
/external/iptables/libiptc/libip6tc.c
|
cc7bb65ed37e366098983450a6f65d5f9bfaac4a |
|
24-Jun-2003 |
Harald Welte <laforge@gnumonks.org> |
fix ipv6_prefix_length endianness bugs (Closes: #103)
/external/iptables/libiptc/libip6tc.c
|
841e4aed2349046eb2c0b1375139c06569a93bd0 |
|
02-May-2003 |
Martin Josefsson <gandalf@wlug.westbo.se> |
fix memory leak(s) in libiptc. Reverts the previous (wrong) patch. (Martin Josefsson)
/external/iptables/libiptc/libip6tc.c
|
95df8e79d018f2e214d24a72237abac8e57bb3cf |
|
14-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
explicitly check for two possible sets of hooks in case of nat and mangle
/external/iptables/libiptc/libip6tc.c
|
a540b1b15e0d63ab10555502fcd569b40eec8145 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
fix compatibility with mangle2hooks and mangle5hooks
/external/iptables/libiptc/libip6tc.c
|
596707cf8374dba73535bc77bae76fe8770c0028 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
first attempt in trying to make debug code work with mangle2hooks and mangle5hooks
/external/iptables/libiptc/libip6tc.c
|
380ba5f3074a16fbaa8869d9594962d58b5f8608 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
- don't need -DNDEBUG anymore. Instead, use -DIPTC_DEBUG to enable libiptc debugging. This is to make people at RedHat and Mandrake happy. - add debugging code for mangle5hooks table (will break debugging of iptables >= 1.2.6 on old kernels <= 2.4.18-pre6. *sigh*
/external/iptables/libiptc/libip6tc.c
|
72c6b79b9944e4784ca21779413db71d773d7f10 |
|
08-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
update debugging code to mangle5hooks changes
/external/iptables/libiptc/libip6tc.c
|
1afc3b67b53e40e5aace076c0b650348aa5f4936 |
|
19-Jan-2002 |
Marc Boucher <marc@mbsi.ca> |
Added #include <unistd.h> to eliminate close() warning.
/external/iptables/libiptc/libip6tc.c
|
1cef74d943055668b5e356eebea877fdaa1ce3e0 |
|
05-Jan-2001 |
Harald Welte <laforge@gnumonks.org> |
libiptc counter function
/external/iptables/libiptc/libip6tc.c
|
5eed48af2516ebce0412121713d285bc30edb10d |
|
02-Jun-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Philip Blundell's IPv6 patches.
/external/iptables/libiptc/libip6tc.c
|
8c700900e2a0cf87d7917cb62578583a60ad1210 |
|
15-May-2000 |
Philip Blundell <Philip.Blundell@pobox.com> |
Philip Blundell's IPv6 fixes.
/external/iptables/libiptc/libip6tc.c
|
88eb835ad207f579ae4ce21cd46f0b564ebd4748 |
|
10-May-2000 |
Philip Blundell <Philip.Blundell@pobox.com> |
Philip Blundell's IPv6 fixes.
/external/iptables/libiptc/libip6tc.c
|
79dee0702b18c8ea1d1f7a2b1f6b29349466986b |
|
02-May-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
IPv6 enhancements.
/external/iptables/libiptc/libip6tc.c
|