8643adc8f0f0fe1e22ca0de0503eee0ee1e22bf5 |
|
06-Aug-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
iptables 1.4.20 release Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
c18f2ce7f61c7e7ae3bd207ef6337a1be0c7aff3 |
|
22-Jul-2013 |
Willem de Bruijn <willemb@google.com> |
build: fail in configure on missing dependency with --enable-bpf-compiler The build of utils/nfbpf_compile depends on libpcap. If configure is run with --enable-bpf-compiler, the script succeeds, but make fails. This small patch adds a test for the dependency (libpcap) in configure and fails hard if not found. Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
59bbc59fd2fbbb7a51ed19945d82172890bc40f9 |
|
21-Jul-2013 |
Phil Oester <kernel@linuxace.com> |
build: additional include path required after UAPI changes After kernel commit 607ca46e (UAPI: (Scripted) Disintegrate include/linux), using the "--with-kernel" argument to build iptables stopped working due to the missing #ifdefs in the original files. We need to make sure the UAPI include dir is listed before the original location. Leaving both allows support for old and new kernels. This fixes bug #833. Signed-off-by: Phil Oester <kernel@linuxace.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
51340f7b6a1103b12d86ef488f7140406d80401e |
|
15-Jul-2013 |
Florian Westphal <fw@strlen.de> |
extensions: libxt_connlabel: use libnetfilter_conntrack Pablo suggested to make it depend on lnf-conntrack, and get rid of the example config file as well. The problem is that the file must be in a fixed path, /etc/xtables/connlabel.conf, else userspace needs to "guess-the-right-file" when translating names to their bit values (and vice versa). Originally "make install" did put an example file into /etc/xtables/, but distributors complained about iptables ignoring the sysconfdir. So rather remove the example file, the man-page explains the format, and connlabels are inherently system-specific anyway. Signed-off-by: Florian Westphal <fw@strlen.de>
/external/iptables/configure.ac
|
fe42fac939288cf72cc751dc6b517714e0720e62 |
|
05-Jun-2013 |
Eric Leblond <eric@regit.org> |
configure: display summary This patch adds a message at the end of configure which displays the different compilation options and system settings. An example output is the following: Iptables Configuration: IPv4 support: yes IPv6 support: yes Devel support: yes IPQ support: no Large file support: yes BPF utils support: no Build parameters: Put plugins into executable (static): no Support plugins via dlopen (shared): yes Installation prefix (--prefix): /usr/local Xtables extension directory: /usr/local/lib/xtables Pkg-config directory: /usr/local/lib/pkgconfig Kernel build directory: /lib/modules/custom Host: x86_64-unknown-linux-gnu GCC binary: gcc Signed-off-by: Eric Leblond <eric@regit.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
14bca55dde79adddd77999ae262b8132ae0396f9 |
|
19-May-2013 |
Andy Spencer <andy753421@gmail.com> |
iptables: use autoconf to process .in man pages This fixes a bug in iptables.8 and ip6tables.8 where @PACKAGE_VERSION@ was not processed in the VERSION section. It also simplifies the Makefile by avoiding some sed commands. [ Mangled this patch to rename iptables-extensions.8.in to iptables-extensions.8.tmpl.in to avoid having a file whose name is terminated by .in.in --pablo ] Signed-off-by: Andy Spencer <andy753421@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
aef9c366d1761fd2d2013250df699f3dd5a4b708 |
|
29-May-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
iptables 1.4.19.1 release Unfortunately, previous release was not included two patches that were applied by Florian recently. This release fixes it. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
da18dbcd084cc6f00c46f738e838e752f2d7ae3c |
|
29-May-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
build: bump version to 1.4.19 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
1ac30c97c339957b6e3c5cf571de7bc38c827730 |
|
12-Mar-2013 |
Willem de Bruijn <willemb@google.com> |
utils: nfbpf_compile A BPF compiler to convert tcpdump expressions to the decimal format accepted by the libxt_bpf. Generate a file and pass that to iptables: nfbpf_compile RAW 'udp dst port 9000' > test.bpf iptables -A OUTPUT -m bpf --bytecode-file test.bpf -j LOG Or pass the output directly to iptables using backticks: iptables -A INPUT -m bpf --bytecode \ "`./nfbpf_compile RAW 'udp dst port 9000'" -j LOG This utility depends on libpcap. The library is only compiled if the option --enable-bpf-compiler is explicitly passed to ./configure and libpcap is found. Pablo has mangled the original patch to rename the utility to nfbpf_compile. Also modified the output to match exactly what -m bpf --bytecode needs. Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
d797d0ff0338d2938d18b03038d6f4455b000579 |
|
03-Mar-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
build: bump version to 1.4.18 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
3e55c13513f90cabd525e3893602c0e7e126651e |
|
05-Feb-2013 |
Jan Engelhardt <jengelh@inai.de> |
build: bump SONAME for libxtables Commit v1.4.17-16-gefcdba4 updated structs in xtables.h, so age must become 0 and vcurrent be increased. The latter has already happened in v1.4.17-6-gd1e7922. Signed-off-by: Jan Engelhardt <jengelh@inai.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
d1e7922a587a239e16e0dbe654e63f76e1375e49 |
|
04-Jan-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
libxtables: add xtables_rule_matches_free This function is shared by iptables and ip6tables. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
eec83c7ce4351359cae797840d63cf4ef2809c95 |
|
25-Dec-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump version to 1.4.17 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
3e6fa55d5e28c93f417afeae7a7d4f349ddffcf4 |
|
18-Oct-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump iptables to 1.4.16.3 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
c1a150c98fc94858a440550f0cb347a6060ebb30 |
|
08-Oct-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump version to 1.4.16.2 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
4bdc1edf49dedd20519f2eaea95466400f627dd5 |
|
08-Oct-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump version to 1.4.16.1 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
3fdf783ec78e7a7bffb2cd48d5bc6b3264b00dd2 |
|
07-Oct-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump version to 1.4.16 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
cd2f9bdbb7f9b737e5d640aafeb78bcd8e3a7adf |
|
04-Sep-2012 |
Jan Engelhardt <jengelh@inai.de> |
iptables: support for target aliases This patch allows for target names listed on the command line to be rewritten to new names and revisions. As before, we will pick a revision that is supported by the kernel - now including real_name in the search. This gives us the possibility to test for many action names. Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
|
df60a301bf24c3b3e37188d9da155b97fd6dc076 |
|
31-Aug-2012 |
Jan Engelhardt <jengelh@inai.de> |
build: separate AC variable replacements from xtables.h It was/is a bit annoying that modifying xtables.h.in causes configure to rerun. Split the @foo@ things into a separate file to bypass this. Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
|
053a4fdf6536ca63ad640d0b75f54c3f4964ca2b |
|
31-Aug-2012 |
Jan Engelhardt <jengelh@inai.de> |
build: support for automake-1.12 automake-1.12 wants that AM_PROG_AR be used when LT_INIT is. Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
|
42ba40035e40b492e8667932f20922cee0682167 |
|
31-Jul-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump version to 1.4.15 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
a96166c24eaac1c91bed4815c09e91733409d888 |
|
14-Jul-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
libxtables: add xtables_ip[6]mask_to_cidr This patch adds generic functions to return the mask in CIDR notation whenever is possible. This patch also simplifies xtables_ip[6]mask_to_numeric, that now use these new two functions. This patch also bumps libxtables_vcurrent and libxtables_vage since we added a couple new interfaces (thanks to Jan Engelhardt for his little reminder on this). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
9eaa87401ce5ac64cc6baa55775f58f59ca26f34 |
|
26-May-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
Bump version to 1.4.14 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
c4a6b0d437b02458fb3cb827b694fd94b3fbe044 |
|
27-Mar-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
Bump version to 1.4.13 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
2117f2b4519a027c8e8ccdb2c99f2025c8af898b |
|
02-Jan-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
Merge branch 'stable'
|
3852ebcd25f65a42b552a0c705126c4b22da437e |
|
02-Jan-2012 |
Pablo Neira Ayuso <pablo@netfilter.org> |
Bump version to 1.4.12.2 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
79cefabaac7a0ecf864db7da2a665845c0789f10 |
|
30-Dec-2011 |
Jan Engelhardt <jengelh@medozas.de> |
extensions: link on libxtables and check symbols Have each extension link against libxtables.so; with this, all home symbols are known at link time and we can use ld's --no-undefined to run the check, dropping the homebrew solution. By having libxtables.so required by extensions, package managers' automatic dependency discovery will become effective so that manual dependencies for distros with split extension packages (e.g. OpenWRT) will not be necessary anymore. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
de26cd21f367d929a1aff41e268ce250ad49b04b |
|
18-Dec-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: use AC_CONFIG_AUX_DIR and stash away tools
/external/iptables/configure.ac
|
b8c42eca0f224a00bf55b60ded81af14a1e07da1 |
|
18-Dec-2011 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: provide separate pkgconfig files Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
8816e91cddef785c78b3598c7c41a1f88be08f5a |
|
18-Sep-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: restore build order of modules iptables(exe) requires libext.a, but extensions/ require libxtables.la (in iptables/). This circular dependency does not work out, so separate libxtables into its own directory and put it in front. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
5df067f91b8ffa7801d09e6dd13fe9bf4b7b490b |
|
01-Sep-2011 |
Pablo Neira Ayuso <pablo@netfilter.org> |
Bump version to 1.4.12.1 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
91ca4603f649a9b9fed4f2e31a8c005cdbdacd1e |
|
09-Aug-2011 |
Patrick McHardy <kaber@trash.net> |
Merge branch 'master' of git://dev.medozas.de/iptables
|
4982fe43cf247cda6ddb946a8f1fd58177124735 |
|
08-Aug-2011 |
Jan Engelhardt <jengelh@medozas.de> |
libipq: add pkgconfig file This is just to make sure that projects (still) using it do so with the right cflags, e.g. for when the include file ends up in a non-standard location due to ./configure having been called with --include=/somewhere/else. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
47b5855bc396876295c6432e553351123a62534b |
|
22-Jul-2011 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.12 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
4d8656ad9d0afd04820f125a85a7b673c7e74fe6 |
|
22-Jul-2011 |
Jan Engelhardt <jengelh@medozas.de> |
libxt_TCPMSS: restore build with IPv6-less libcs Commit v1.4.10-149-gea2a02f added an netinet/ip6.h include, which is not available on systems without IPv6 header files. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
411a4e50ec1030f2dc51c5b0156e0c7255c81905 |
|
04-Jul-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: install modules in arch-dependent location Make it possible to have multiple types of ELF classes for the extension modules by putting them in an arch-dependent path. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
3c871010888e1479ef8fca2048485b979ec2661a |
|
24-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: attempt to fix building under Linux 2.4 iptables no longer compiles for Linux 2.4 because it uses linux/magic.h. This header and the PROC_SUPER_MAGIC macro are only for Linux 2.6. xtables.c:35:52: error: linux/magic.h: No such file or directory xtables.c: In function 'proc_file_exists': xtables.c:389: error: 'PROC_SUPER_MAGIC' undeclared (first use in this function) xtables.c:389: error: (Each undeclared identifier is reported only once for each function it appears in.) References: http://bugzilla.netfilter.org/show_bug.cgi?id=720 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
f6677b5bcae125af28d227b9073426bddbd9190e |
|
22-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: bump soversion for recent data structure change Cf. commit v1.4.11.1-5-g2dba676. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
c960bde4a82792c285110589cf8b2cf1438e1b8f |
|
08-Jun-2011 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.11.1 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
033e25a3ad215ee3f5a07f0a3315f74c4abfaced |
|
07-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
src: move all iptables pieces into a separate directory (Unclutter top-level dir) Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
5c8f5b60aa8e24da0bd25824f0f85bf7a4a39ea7 |
|
07-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
src: move all libiptc pieces into its directory Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
5085c3a037fa9327377dec7540d9c3ef2d53a58e |
|
01-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: move kinclude's preprocessor flags to kinclude_CPPFLAGS References: http://bugzilla.netfilter.org/show_bug.cgi?id=713 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
8e336251e155888f0ac2c79259f8792fc31920a1 |
|
01-Jun-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: move basic preprocessor flags to regular_CPPFLAGS This is where they belong, after all. References: http://bugzilla.netfilter.org/show_bug.cgi?id=713 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
172e9b15271c276aa1485b4a2fb63928a65b13ae |
|
26-May-2011 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.11 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
3a32dcbb5512bfc1fd385c26fb906ce8562200da |
|
14-Apr-2011 |
Jan Engelhardt <jengelh@medozas.de> |
build: bump libxtables ABI version Adding the x6_* members to struct xtables_{match,target} caused a change requiring a bump. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
8d89535b38e719f644d858e83f73bee9adf5b1a0 |
|
29-Oct-2010 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.10 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
655ae6b096b7ba3854159dc1eefadce91ec65550 |
|
13-Sep-2010 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: build with -Wl,--no-as-needed Since libiptc does not reference any symbols in libip(4|6)tc, the linker may ignore the dependencies. Use --no-as-needed to explicitly force a DT_NEEDED entry. References: http://bugzilla.netfilter.org/show_bug.cgi?id=674 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
a653f2936c56bfc541f13a7888484d5ae21c057a |
|
03-Aug-2010 |
Patrick McHardy <kaber@trash.net> |
Merge branch 'iptables-next'
|
d8b511ed36f00280dd141e59c08874c7fb116504 |
|
03-Aug-2010 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.9 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
c36d05e42406966440e3644110d3d2504c4b165c |
|
23-Jul-2010 |
Hannes Eder <heder@google.com> |
libxt_ipvs: user-space lib for netfilter matcher xt_ipvs The user-space library for the netfilter matcher xt_ipvs. [ trivial up-port by Simon Horman <horms@verge.net.au> ] Signed-off-by: Hannes Eder <heder@google.com> Acked-by: Simon Horman <horms@verge.net.au> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
11c2dd54b69e06ae3f35dea130ecba3df3859243 |
|
07-Jun-2010 |
Jan Engelhardt <jengelh@medozas.de> |
xtables: remove xtables_set_revision function Since iptables uses its own copies of the header files anyway where the revision field is exposed, there is no reach to access name[] beyond its size. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
63fc6258badea3f33cc0fc6b9ded6c94eaf53c4f |
|
21-May-2010 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.8 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
967cb7106f0f61cd7b8fbb10bc2451a3f7372a43 |
|
10-May-2010 |
Karl Hiramoto <karl@hiramoto.org> |
iptables: optionally disable largefile support Many toolchains for embedded systems don't have largefile support: usr/include/features.h:383:4: error: #error It appears you have defined _FILE_OFFSET_BITS=64. Unfortunately, uClibc was built without large file support enabled. In file included from /build_armeb/staging_dir/usr/include/stdio.h:72, from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/bits/uClibc_stdio.h:72:2: error: #error Sorry... uClibc was built without large file support! In file included from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/stdio.h:83: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'fpos_t' In file included from libiptc/libip4tc.c:18: /build_armeb/staging_dir/usr/include/stdio.h:709: error: expected declaration specifiers or '...' before 'fpos_t' /build_armeb/staging_dir/usr/include/stdio.h:711: error: expected ';', ',' or ')' before '*' token Signed-off-by: Karl Hiramoto <karl@hiramoto.org> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
db6d027bb9626129617ea3a3f2fe4b87ab307bf6 |
|
27-Mar-2010 |
Jan Engelhardt <jengelh@medozas.de> |
libxt_osf: import nfnl_osf program xt_osf is pretty useless without the actual fingerprint loader. Import nfnl_osf-2009-06-07 and make it a part of the iptables distribution. Cc: Evgeniy Polyakov <johnpol@2ka.mxt.ru> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
cf7e42ffbb624c27591f6d55606bdccd358c7785 |
|
01-Mar-2010 |
Patrick McHardy <kaber@trash.net> |
iptables 1.4.7 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
88bdf3cd2fbfad5ef24736ff7b14bea01a39c3ff |
|
09-Dec-2009 |
Patrick McHardy <kaber@trash.net> |
Bump version to v1.4.6 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
bf97128c7262f17a02fec41cdae75b472ba77f88 |
|
03-Nov-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: hand argv to xtables_check_inverse In going to fix NF bug #611, "argv" is needed in xtables_check_inverse to set "optarg" to the right spot in case of an intrapositional negation. References: http://bugzilla.netfilter.org/show_bug.cgi?id=611 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
f93a0cea9ddb988f28c4996c7b96ef65f05f1d30 |
|
14-Sep-2009 |
Patrick McHardy <kaber@trash.net> |
Bump version number to 1.4.5 Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
332e4acc574e3a348fe611d55bf642de0d50fbda |
|
09-Apr-2009 |
Michael Granzow <mgranzow@zeus.com> |
iptables: accept multiple IP address specifications for -s, -d libiptc already supports adding and deleting multiple rules with different addresses, so it only needs to be wired up to the options. # ip6tables -I INPUT -s 2001:db8::d,2001:db8::e -j DROP References: http://marc.info/?l=netfilter-devel&m=123929790719202&w=2 Adjustments made: syntax, removal of unneeded variables, manpage adjustment, soversion bump. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
f9bf812aed50949db584cdf93752193c802fefcb |
|
16-Jun-2009 |
Patrick McHardy <kaber@trash.net> |
Bump version Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
b5508d20e6d1bea01d398b74103ee85630b05f58 |
|
06-Apr-2009 |
Pablo Neira Ayuso <pablo@netfilter.org> |
build: bump version to 1.4.3.2 This patch bumps iptables version to 1.4.3.2 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
a094eb0f2a57592b6f3cf42fdbb9d49fead2d57c |
|
03-Apr-2009 |
Jan Engelhardt <jengelh@medozas.de> |
build: add configure option to disable ipv4 iptables This patch complements the previous one. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
8e58613df53f5f83e8ab92dec61d8065c68d967d |
|
03-Apr-2009 |
Jan Engelhardt <jengelh@medozas.de> |
build: add configure option to disable ip6tables This also skips building the IPv6 extensions. It does not #ifdef out all code however, I think that would make it too ugly. Inspired-by: http://bugzilla.netfilter.org/show_bug.cgi?id=560 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
c4edfa63eda06f02cc5bc1a65d366c55bd2eda30 |
|
30-Mar-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: reorder .version member When the structure's layout changes, as it did between v1.4.1 and v1.4.2, trying to compare the version string makes iptables segfault while it tries to determine whether the module is compatible in the first place. By moving the member to a known offset in the struct and keeping it there, objects (both iptables and 3rd party) compiled from this commit onwards will avoid the segfault. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
ca6ccdb172b1846152dea421c215122759b84d29 |
|
24-Mar-2009 |
Pablo Neira Ayuso <pablo@netfilter.org> |
build: bump version to 1.4.3.1 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
51bc836ad3fd52ed72289028871318d561b2959a |
|
11-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: make library available as a shared library Tested-by: Jesper Dangaard Brouer <hawk@comx.dk> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
f567ac9193bc421992e572ec3196a73dc6ed59c0 |
|
12-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
build: restructure Makefile for include/ directory This patch will support adding libiptc to the headers list in future. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
c02e80878979d2205f3d89d05548397871e598e9 |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: decouple non-xtables parts from header Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
dacafa55379fd98212031d8c559096c91d7ce93b |
|
27-Jan-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: prefix/order - program_name Split XTABLES_VERSION into xtables and iptables, and encode the xtables soversion into the extensions instead. This makes it possible to upgrade iptables without having to recompile 3rd-party extensions (if the libxtables version matches, of course). Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
|
0086b8bf9cf74642f6d6d82d9bbaedc80fec1dca |
|
07-Jan-2009 |
Jan Engelhardt <jengelh@medozas.de> |
build: resolve autotools suggestions libtool2 wants to put files into m4, so let it have it. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
|
928c4879e3a0da9dac6159c4d0f64a868e27f6e7 |
|
13-Nov-2008 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.3-rc1
/external/iptables/configure.ac
|
93086d4b51ee17e8fa4b5b0261a0f76d32fe71d8 |
|
08-Oct-2008 |
Patrick McHardy <kaber@trash.net> |
v1.4.2
/external/iptables/configure.ac
|
126c1361ad5201973e6ebc761b3e38a67915de29 |
|
04-Aug-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Put xtables.c into its own library, libxtables.so iproute2's tc's m_ipt.c poses as a pseudo-iptables program to make use of the info structure composition of iptables extensions. Since tc would have to clone a lot of code, xtables.c is put into its own shared library and should not be relied upon by any other programs. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
675e30f258952292972a562b71161b6d3cd77313 |
|
23-Jul-2008 |
Patrick McHardy <kaber@trash.net> |
v1.4.2-rc1
/external/iptables/configure.ac
|
b7580450b4c669846fe840997984dfaaa9c39a71 |
|
25-Jun-2008 |
Jan Engelhardt <jengelh@medozas.de> |
build: ip6.h is not required Remove the check from configure.ac that errors out when ip6.h is not found. The code does not actually depend on any structures from it. Reported-by: anonymous Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
ee3228af38ec98c60a3b6f72a9b1c75b5ef53641 |
|
23-Jun-2008 |
Jan Engelhardt <jengelh@medozas.de> |
build: change equailty test for old bash Michael used GNU bash, version 1.14.7(1), which apparently does not seem to know about the double ("==") variant of equality tests. Reported-by: Michael Teicher <mteicher@gmail.com> Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
73cf45b16112da0091824f6868bf8be3b874478f |
|
16-Jun-2008 |
Patrick McHardy <kaber@trash.net> |
v1.4.1.1
/external/iptables/configure.ac
|
b432667e1176bf24c8c8ac98dcec76c71688974c |
|
10-Jun-2008 |
Patrick McHardy <kaber@trash.net> |
v1.4.1
/external/iptables/configure.ac
|
0439dadeb3913331c4a25a9a8961cc205561f60f |
|
06-Jun-2008 |
Patrick McHardy <kaber@trash.net> |
Bump version
/external/iptables/configure.ac
|
2c570e76d4c627a0b0417cfa0d0f2e787a6d629d |
|
05-Jun-2008 |
Jan Engelhardt <jengelh@medozas.de> |
build: check for missing feature files linux/dccp.h is unlikely to be installed before 2.6.18 (which was when headers_install was introduced), and does not exist at all before 2.6.14. Add a compile-time check to skip compilation of libxt_dccp in case this was detected. Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
c634cb9cb13d6e1b6fd661b426363431f7ef321a |
|
03-Jun-2008 |
Thomas Jarosch <thomas.jarosch@intra2net.com> |
Add xtables version defines. Attached is a patch to add the new defines. The macro XTABLES_VERSION is already in use, so I named it XTABLES_VERSION_CHECK. I've also tested that an empty XTABLES_VERSION_EXTRA in configure.ac works. Now we can write code like this: #warning You are obselete and will be assimilated. Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com> Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
|
8e1a12fba4008933ce9e89f98c12593e0d39ede3 |
|
26-May-2008 |
Patrick McHardy <kaber@trash.net> |
iptables 1.4.1-rc2
/external/iptables/configure.ac
|
3d91993d3365feb5aa1fd8502100d59cd5efb1cd |
|
19-May-2008 |
Patrick McHardy <kaber@trash.net> |
Bump version to 1.4.1-rc1 Actually its not a bump but a decrease, the autoconf patches apparently sneaked it a version bump to 1.4.1 already.
/external/iptables/configure.ac
|
8b7c64d6ba156a99008fcd810cba874c73294333 |
|
15-Apr-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Remove old functions, constants
/external/iptables/configure.ac
|
493c712d61c35a6d8db877b208d34c111337a918 |
|
15-Apr-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Dynamically create xtables.h.in with version
/external/iptables/configure.ac
|
b95fc082a82953b590a5f3a039b022a455bd77da |
|
15-Apr-2008 |
Jan Engelhardt <jengelh@medozas.de> |
configure.ac: AC_SUBST must be separate
/external/iptables/configure.ac
|
d31a659e04d29dc2b1c6b3c495a0a154fbd35c86 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Update documentation about building the package
/external/iptables/configure.ac
|
ca7cd666949b68bf41a32de38ee38e332e89863b |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Add all necessary header files - compilation fix for various cases Allow iptables to compile without a kernel source tree. This implies fixing build for older kernels, such as 2.6.17 which lack xt_SECMARK.h.
/external/iptables/configure.ac
|
77f15384d768b1735a180d0c8e2b5934a94d02e4 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
configure: split --enable-libipq from --enable-devel
/external/iptables/configure.ac
|
21b41eea4724c57d2b6e5998cf38255046e43ad3 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR
/external/iptables/configure.ac
|
33690a1aec0b6309ff90066ca56285b6e43013f2 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Fix all remaining warnings (missing declarations, missing prototypes)
/external/iptables/configure.ac
|
dbb77543ad6afe29e9a1881b2d4fc212de621a55 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Fix -Wshadow warnings and clean up xt_sctp.h Note: xt_sctp.h is still not merged upstream in the kernel as of this commit. But a refactoring was really needed.
/external/iptables/configure.ac
|
7a236f4cc685a420c1a782a5db614a93baf37ccf |
|
03-Mar-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Drop -W from CFLAGS and some tiny code cleanups - change "unsigned" to explicit "unsigned int" - remove some casts
/external/iptables/configure.ac
|
e6403fd4e3027eed0d40e8c63d787659fcba4d80 |
|
02-Mar-2008 |
Pablo Neira Ayuso <pablo@netfilter.org> |
bump iptables version to prepare 1.4.1 release
/external/iptables/configure.ac
|
9ee386a1b6d7704b259460152c959ab0e79e02aa |
|
29-Jan-2008 |
Max Kellermann <max@duempel.org> |
fix gcc warnings Max Kellermann <max@duempel.org>
/external/iptables/configure.ac
|
a99cb4444ceff1b0029c7e25b0714dbee9021b12 |
|
29-Jan-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Build adjustments A few build system changes. * ip6tables needs IP6T_LIB_DIR * correctly trigger rebuild of master manpages when submanpages have been touched Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de.
/external/iptables/configure.ac
|
fb6209a30fd576cd740eefe0a3ad88d65d2bb2b7 |
|
29-Jan-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Give preference to iptables header files Have the header files in the iptables source tree take precedence over those from the kernel source. Otherwise, building the current iptables from subversion just fails with kernels < 2.6.25. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/configure.ac
|
f82070f9871d281c2802c1624dcf222886b5fb50 |
|
20-Jan-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Converts the iptables build infrastructure to autotools. - Can build both static and dynamic at the same time - iptables-static will be a multi-binary, semi-static (link against libc but w/o dynamic plugins) - Always build IPv6 modules - consider INSTALL Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/configure.ac
|