| ebf81627b1a2f50fd47add49f9976ed430a19673 |
|
11-Jun-2011 |
JP Abgrall <jpa@google.com> |
Merge git://git.netfilter.org/iptables into v1.4.11_upstream
Using theirs, as they have taken some of my prior changes\
with some improvements.
Conflicts:
include/xtables.h.in
iptables/xtables.c
iptables/xtoptions.c
Change-Id: I8e1e537fbb868eeebb448c8f1d9e33b283448aac
|
| 16bd81be22ba2753e26f6a9ee6cb291e1e707d0d |
|
19-May-2011 |
JP Abgrall <jpa@google.com> |
androidifying: fixup includes and extraneous typedefs for __ANDROID__
The current could would take steps to define missing types, and include
extra stuff based on GLIBC defines/versions.
Make those places be ANDROID aware.
Change-Id: I2d1f03e3c0f7f53250288a84db4c9ccf0431d482
Signed-off-by: JP Abgrall <jpa@google.com>
/external/iptables/libiptc/libip4tc.c
|
| dcd1ad89105faf1f3a9a3febdb970b70c5466518 |
|
09-May-2011 |
Jan Engelhardt <jengelh@medozas.de> |
src: replace old IP*T_ALIGN macros
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip4tc.c
|
| d59b9db031abee37a9aa9776662dd15370faabf4 |
|
08-Mar-2011 |
Stefan Tomanek <stefan.tomanek@wertarbyte.de> |
iptables: add -C to check for existing rules
It is often useful to check whether a specific rule is already present
in a chain without actually modifying the iptables config.
Services like fail2ban usually employ techniques like grepping through
the output of "iptables -L" which is quite error prone.
This patch adds a new operation -C to the iptables command which
mostly works like -D; it can detect and indicate the existence of the
specified rule by modifying the exit code. The new operation
TC_CHECK_ENTRY uses the same code as the -D operation, whose functions
got a dry-run parameter appended.
Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip4tc.c
|
| 7ac405297ec38449b30e3b05fd6bf2082fd3d803 |
|
07-Jan-2011 |
Jan Engelhardt <jengelh@medozas.de> |
src: use C99/POSIX types
"u_int" was a non-standardized extension predating C99 on some platforms.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip4tc.c
|
| 390755ded5e4e8b0dcfa97443a95268bfa03e952 |
|
18-Feb-2010 |
Dmitry V. Levin <ldv@altlinux.org> |
libip4tc: Add static qualifier to dump_entry()
Change dump_entry() signature defined in libip4tc.c to match prototype
declared in libiptc.c and another static dump_entry() function defined
in libip6tc.c. This function is not a part of the public libiptc API.
Signed-off-by: Dmitry V. Levin <ldv@altlinux.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip4tc.c
|
| 51651b64fffc58d4f58d005fa7dc0d9669147c57 |
|
23-Oct-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: avoid strict-aliasing warnings
In file included from libiptc/libip4tc.c:117:0:
libiptc/libiptc.c: In function ‘__iptcc_p_del_policy’:
libiptc/libiptc.c:826:4: warning: dereferencing type-punned pointer will break
strict-aliasing rules
libiptc/libiptc.c: In function ‘iptc_get_target’:
libiptc/libiptc.c:1650:4: warning: dereferencing type-punned pointer will break
strict-aliasing rules
libiptc/libip4tc.c: In function ‘dump_entry’:
libiptc/libip4tc.c:157:3: warning: dereferencing type-punned pointer will break
strict-aliasing rules
CC libiptc/libip6tc.lo
In file included from libiptc/libip6tc.c:112:0:
libiptc/libiptc.c: In function ‘__iptcc_p_del_policy’:
libiptc/libiptc.c:826:4: warning: dereferencing type-punned pointer will break
strict-aliasing rules
libiptc/libiptc.c: In function ‘ip6tc_get_target’:
libiptc/libiptc.c:1650:4: warning: dereferencing type-punned pointer will break
strict-aliasing rules
libiptc/libip6tc.c: In function ‘dump_entry’:
libiptc/libip6tc.c:188:3: warning: dereferencing type-punned pointer will break
strict-aliasing rules
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/libiptc/libip4tc.c
|
| de899697fd8eb18e828e806ffab04d053208bbf2 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove unused iptc_get_raw_socket and iptc_check_packet
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip4tc.c
|
| fd1873110f8e57be578df17fc9d03536b10f4f73 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove typedef indirection
Don't you hate it when iptc_handle_t *x actually is a double-indirection
struct iptc_handle **? This also shows the broken constness model, since
"const iptc_handle_t x" = "iptc_handle_t const x" =
"struct iptc_handle *const x", which is like no const at all.
Lots of things to do then.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/libiptc/libip4tc.c
|
| ea146a982e26c42f9954f140276f8deeb2edbe98 |
|
02-Sep-2007 |
Peter Riley <Peter.Riley@hotpop.com> |
Remove last vestiges of NFC (Peter Riley <Peter.Riley@hotpop.com>)
/external/iptables/libiptc/libip4tc.c
|
| 70067291528bb949fac8a584e782f2b4c38e4c16 |
|
05-Jul-2006 |
Phil Oester <kernel@linuxace.com> |
libiptc symbols clash (Phil Oester <kernel@linuxace.com>)
As reported by Dmitry Levin, the TC_NUM_RULES and TC_GET_RULE exports
clash. His patch below, resolving bug #456
/external/iptables/libiptc/libip4tc.c
|
| 5ee88622ef8f38e5f6b6c60ca1ab61d8f93a0e82 |
|
23-Jun-2005 |
Pablo Neira <pablo@eurodev.net> |
fix deletion of targets where kernel size != userspace size (Pablo Neira)
/external/iptables/libiptc/libip4tc.c
|
| 8115e5425721cd610b6390c3d4c24540773b0520 |
|
14-Feb-2005 |
Pablo Neira <pablo@eurodev.net> |
Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>)
Fixes build with conntrack event patch for 2.6
/external/iptables/libiptc/libip4tc.c
|
| 733e54b8250576d6a1e0ab5621ef5b144abdf018 |
|
16-Dec-2004 |
Rusty Russell <rusty@rustcorp.com.au> |
Make "is_same" test basics and entries only: targets are generic.
Make target testing aware of different kinds of rules.
Change reverse logic: target_different now target_same.
Set type to MODULE in iptcc_map_target.
Add testcase for this.
/external/iptables/libiptc/libip4tc.c
|
| aae69bed019826ddec93f761514652a93d871e49 |
|
30-Aug-2004 |
Harald Welte <laforge@gnumonks.org> |
complete libiptc rewrite. Time to load 10k rules goes down from 2.20 minutes to 1.255 seconds (!). Might still contain bugs, use with caution.
/external/iptables/libiptc/libip4tc.c
|
| a28d495285ad7dd9f286d63958cf20d74eec6bcb |
|
26-May-2004 |
Martin Josefsson <gandalf@wlug.westbo.se> |
Get rid of some warnings when compiling 64bit.
/external/iptables/libiptc/libip4tc.c
|
| 4dc734c73cc4a0ff87c0ce3673544628b58c7e24 |
|
07-Oct-2003 |
Harald Welte <laforge@gnumonks.org> |
add support for the raw table to userspace
/external/iptables/libiptc/libip4tc.c
|
| 841e4aed2349046eb2c0b1375139c06569a93bd0 |
|
02-May-2003 |
Martin Josefsson <gandalf@wlug.westbo.se> |
fix memory leak(s) in libiptc. Reverts the previous (wrong) patch. (Martin Josefsson)
/external/iptables/libiptc/libip4tc.c
|
| 4f8d2d95056b50a2d05eff0245fe1ddd8c382b05 |
|
12-Jun-2002 |
Marc Boucher <marc@mbsi.ca> |
Fixed destination netmask comparison bug in is_same()
/external/iptables/libiptc/libip4tc.c
|
| 95df8e79d018f2e214d24a72237abac8e57bb3cf |
|
14-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
explicitly check for two possible sets of hooks in case of nat and mangle
/external/iptables/libiptc/libip4tc.c
|
| a540b1b15e0d63ab10555502fcd569b40eec8145 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
fix compatibility with mangle2hooks and mangle5hooks
/external/iptables/libiptc/libip4tc.c
|
| 596707cf8374dba73535bc77bae76fe8770c0028 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
first attempt in trying to make debug code work with mangle2hooks and mangle5hooks
/external/iptables/libiptc/libip4tc.c
|
| 380ba5f3074a16fbaa8869d9594962d58b5f8608 |
|
13-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
- don't need -DNDEBUG anymore. Instead, use -DIPTC_DEBUG to enable
libiptc debugging. This is to make people at RedHat and Mandrake
happy.
- add debugging code for mangle5hooks table (will break debugging
of iptables >= 1.2.6 on old kernels <= 2.4.18-pre6. *sigh*
/external/iptables/libiptc/libip4tc.c
|
| 72c6b79b9944e4784ca21779413db71d773d7f10 |
|
08-Feb-2002 |
Harald Welte <laforge@gnumonks.org> |
update debugging code to mangle5hooks changes
/external/iptables/libiptc/libip4tc.c
|
| 1afc3b67b53e40e5aace076c0b650348aa5f4936 |
|
19-Jan-2002 |
Marc Boucher <marc@mbsi.ca> |
Added #include <unistd.h> to eliminate close() warning.
/external/iptables/libiptc/libip4tc.c
|
| 1cef74d943055668b5e356eebea877fdaa1ce3e0 |
|
05-Jan-2001 |
Harald Welte <laforge@gnumonks.org> |
libiptc counter function
/external/iptables/libiptc/libip4tc.c
|
| e9b4853639bffb0e71d5f7da93736aa8ae34f79b |
|
14-Sep-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Fix typo.
/external/iptables/libiptc/libip4tc.c
|
| f92ba9bd4e68659e3c98aa0164cac87540ab3a76 |
|
14-Sep-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Add drop table support
/external/iptables/libiptc/libip4tc.c
|
| 10758b743d6aa076ebe2c3e8f855e73826841e71 |
|
14-Sep-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Added DROPPING chain.
/external/iptables/libiptc/libip4tc.c
|
| 725d97a79cf0b332ed45cb7d254915178328427d |
|
07-Jul-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Modifications for new header (entries -> entrytable, for alignment reasons)
/external/iptables/libiptc/libip4tc.c
|
| 8c700900e2a0cf87d7917cb62578583a60ad1210 |
|
15-May-2000 |
Philip Blundell <Philip.Blundell@pobox.com> |
Philip Blundell's IPv6 fixes.
/external/iptables/libiptc/libip4tc.c
|
| 3eee010524ae02a3f0786b6d02bef16ab122e1c3 |
|
10-May-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
Alignment assertion fix.
/external/iptables/libiptc/libip4tc.c
|
| 79dee0702b18c8ea1d1f7a2b1f6b29349466986b |
|
02-May-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
IPv6 enhancements.
/external/iptables/libiptc/libip4tc.c
|