History log of /external/iptables/configure.ac
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
8643adc8f0f0fe1e22ca0de0503eee0ee1e22bf5 06-Aug-2013 Pablo Neira Ayuso <pablo@netfilter.org> iptables 1.4.20 release

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
c18f2ce7f61c7e7ae3bd207ef6337a1be0c7aff3 22-Jul-2013 Willem de Bruijn <willemb@google.com> build: fail in configure on missing dependency with --enable-bpf-compiler

The build of utils/nfbpf_compile depends on libpcap. If configure is
run with --enable-bpf-compiler, the script succeeds, but make fails.

This small patch adds a test for the dependency (libpcap) in configure
and fails hard if not found.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
59bbc59fd2fbbb7a51ed19945d82172890bc40f9 21-Jul-2013 Phil Oester <kernel@linuxace.com> build: additional include path required after UAPI changes

After kernel commit 607ca46e (UAPI: (Scripted) Disintegrate
include/linux), using the "--with-kernel" argument to build iptables
stopped working due to the missing #ifdefs in the original files.
We need to make sure the UAPI include dir is listed before the
original location. Leaving both allows support for old and new
kernels.

This fixes bug #833.

Signed-off-by: Phil Oester <kernel@linuxace.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
51340f7b6a1103b12d86ef488f7140406d80401e 15-Jul-2013 Florian Westphal <fw@strlen.de> extensions: libxt_connlabel: use libnetfilter_conntrack

Pablo suggested to make it depend on lnf-conntrack, and get rid of
the example config file as well.

The problem is that the file must be in a fixed path,
/etc/xtables/connlabel.conf, else userspace needs to "guess-the-right-file"
when translating names to their bit values (and vice versa).

Originally "make install" did put an example file into /etc/xtables/,
but distributors complained about iptables ignoring the sysconfdir.

So rather remove the example file, the man-page explains the format,
and connlabels are inherently system-specific anyway.

Signed-off-by: Florian Westphal <fw@strlen.de>
/external/iptables/configure.ac
fe42fac939288cf72cc751dc6b517714e0720e62 05-Jun-2013 Eric Leblond <eric@regit.org> configure: display summary

This patch adds a message at the end of configure which displays
the different compilation options and system settings.

An example output is the following:

Iptables Configuration:
IPv4 support: yes
IPv6 support: yes
Devel support: yes
IPQ support: no
Large file support: yes
BPF utils support: no

Build parameters:
Put plugins into executable (static): no
Support plugins via dlopen (shared): yes
Installation prefix (--prefix): /usr/local
Xtables extension directory: /usr/local/lib/xtables
Pkg-config directory: /usr/local/lib/pkgconfig
Kernel build directory: /lib/modules/custom
Host: x86_64-unknown-linux-gnu
GCC binary: gcc

Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
14bca55dde79adddd77999ae262b8132ae0396f9 19-May-2013 Andy Spencer <andy753421@gmail.com> iptables: use autoconf to process .in man pages

This fixes a bug in iptables.8 and ip6tables.8 where @PACKAGE_VERSION@
was not processed in the VERSION section. It also simplifies the
Makefile by avoiding some sed commands.

[ Mangled this patch to rename iptables-extensions.8.in to
iptables-extensions.8.tmpl.in to avoid having a file whose name
is terminated by .in.in --pablo ]

Signed-off-by: Andy Spencer <andy753421@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
aef9c366d1761fd2d2013250df699f3dd5a4b708 29-May-2013 Pablo Neira Ayuso <pablo@netfilter.org> iptables 1.4.19.1 release

Unfortunately, previous release was not included two patches
that were applied by Florian recently. This release fixes it.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
da18dbcd084cc6f00c46f738e838e752f2d7ae3c 29-May-2013 Pablo Neira Ayuso <pablo@netfilter.org> build: bump version to 1.4.19

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
1ac30c97c339957b6e3c5cf571de7bc38c827730 12-Mar-2013 Willem de Bruijn <willemb@google.com> utils: nfbpf_compile

A BPF compiler to convert tcpdump expressions to the decimal format
accepted by the libxt_bpf.

Generate a file and pass that to iptables:

nfbpf_compile RAW 'udp dst port 9000' > test.bpf
iptables -A OUTPUT -m bpf --bytecode-file test.bpf -j LOG

Or pass the output directly to iptables using backticks:

iptables -A INPUT -m bpf --bytecode \
"`./nfbpf_compile RAW 'udp dst port 9000'" -j LOG

This utility depends on libpcap. The library is only compiled if the option
--enable-bpf-compiler is explicitly passed to ./configure and libpcap is
found.

Pablo has mangled the original patch to rename the utility to
nfbpf_compile. Also modified the output to match exactly what
-m bpf --bytecode needs.

Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
d797d0ff0338d2938d18b03038d6f4455b000579 03-Mar-2013 Pablo Neira Ayuso <pablo@netfilter.org> build: bump version to 1.4.18

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
3e55c13513f90cabd525e3893602c0e7e126651e 05-Feb-2013 Jan Engelhardt <jengelh@inai.de> build: bump SONAME for libxtables

Commit v1.4.17-16-gefcdba4 updated structs in xtables.h, so age must
become 0 and vcurrent be increased. The latter has already happened in
v1.4.17-6-gd1e7922.

Signed-off-by: Jan Engelhardt <jengelh@inai.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
d1e7922a587a239e16e0dbe654e63f76e1375e49 04-Jan-2013 Pablo Neira Ayuso <pablo@netfilter.org> libxtables: add xtables_rule_matches_free

This function is shared by iptables and ip6tables.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
eec83c7ce4351359cae797840d63cf4ef2809c95 25-Dec-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump version to 1.4.17

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
3e6fa55d5e28c93f417afeae7a7d4f349ddffcf4 18-Oct-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump iptables to 1.4.16.3

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
c1a150c98fc94858a440550f0cb347a6060ebb30 08-Oct-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump version to 1.4.16.2

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
4bdc1edf49dedd20519f2eaea95466400f627dd5 08-Oct-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump version to 1.4.16.1

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
3fdf783ec78e7a7bffb2cd48d5bc6b3264b00dd2 07-Oct-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump version to 1.4.16

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
cd2f9bdbb7f9b737e5d640aafeb78bcd8e3a7adf 04-Sep-2012 Jan Engelhardt <jengelh@inai.de> iptables: support for target aliases

This patch allows for target names listed on the command line to be
rewritten to new names and revisions.

As before, we will pick a revision that is supported by the kernel - now
including real_name in the search. This gives us the possibility to test
for many action names.

Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
df60a301bf24c3b3e37188d9da155b97fd6dc076 31-Aug-2012 Jan Engelhardt <jengelh@inai.de> build: separate AC variable replacements from xtables.h

It was/is a bit annoying that modifying xtables.h.in causes configure
to rerun. Split the @foo@ things into a separate file to bypass this.

Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
053a4fdf6536ca63ad640d0b75f54c3f4964ca2b 31-Aug-2012 Jan Engelhardt <jengelh@inai.de> build: support for automake-1.12

automake-1.12 wants that AM_PROG_AR be used when LT_INIT is.

Signed-off-by: Jan Engelhardt <jengelh@inai.de>
/external/iptables/configure.ac
42ba40035e40b492e8667932f20922cee0682167 31-Jul-2012 Pablo Neira Ayuso <pablo@netfilter.org> bump version to 1.4.15

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
a96166c24eaac1c91bed4815c09e91733409d888 14-Jul-2012 Pablo Neira Ayuso <pablo@netfilter.org> libxtables: add xtables_ip[6]mask_to_cidr

This patch adds generic functions to return the mask in CIDR
notation whenever is possible.

This patch also simplifies xtables_ip[6]mask_to_numeric, that
now use these new two functions.

This patch also bumps libxtables_vcurrent and libxtables_vage
since we added a couple new interfaces (thanks to Jan Engelhardt
for his little reminder on this).

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
9eaa87401ce5ac64cc6baa55775f58f59ca26f34 26-May-2012 Pablo Neira Ayuso <pablo@netfilter.org> Bump version to 1.4.14

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
c4a6b0d437b02458fb3cb827b694fd94b3fbe044 27-Mar-2012 Pablo Neira Ayuso <pablo@netfilter.org> Bump version to 1.4.13

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
2117f2b4519a027c8e8ccdb2c99f2025c8af898b 02-Jan-2012 Pablo Neira Ayuso <pablo@netfilter.org> Merge branch 'stable'
3852ebcd25f65a42b552a0c705126c4b22da437e 02-Jan-2012 Pablo Neira Ayuso <pablo@netfilter.org> Bump version to 1.4.12.2

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
79cefabaac7a0ecf864db7da2a665845c0789f10 30-Dec-2011 Jan Engelhardt <jengelh@medozas.de> extensions: link on libxtables and check symbols

Have each extension link against libxtables.so; with this, all home
symbols are known at link time and we can use ld's --no-undefined to
run the check, dropping the homebrew solution.

By having libxtables.so required by extensions, package managers'
automatic dependency discovery will become effective so that manual
dependencies for distros with split extension packages (e.g. OpenWRT)
will not be necessary anymore.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
de26cd21f367d929a1aff41e268ce250ad49b04b 18-Dec-2011 Jan Engelhardt <jengelh@medozas.de> build: use AC_CONFIG_AUX_DIR and stash away tools
/external/iptables/configure.ac
b8c42eca0f224a00bf55b60ded81af14a1e07da1 18-Dec-2011 Jan Engelhardt <jengelh@medozas.de> libiptc: provide separate pkgconfig files

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
8816e91cddef785c78b3598c7c41a1f88be08f5a 18-Sep-2011 Jan Engelhardt <jengelh@medozas.de> build: restore build order of modules

iptables(exe) requires libext.a, but extensions/ require libxtables.la
(in iptables/). This circular dependency does not work out, so
separate libxtables into its own directory and put it in front.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
5df067f91b8ffa7801d09e6dd13fe9bf4b7b490b 01-Sep-2011 Pablo Neira Ayuso <pablo@netfilter.org> Bump version to 1.4.12.1

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
91ca4603f649a9b9fed4f2e31a8c005cdbdacd1e 09-Aug-2011 Patrick McHardy <kaber@trash.net> Merge branch 'master' of git://dev.medozas.de/iptables
4982fe43cf247cda6ddb946a8f1fd58177124735 08-Aug-2011 Jan Engelhardt <jengelh@medozas.de> libipq: add pkgconfig file

This is just to make sure that projects (still) using it do so with
the right cflags, e.g. for when the include file ends up in a
non-standard location due to ./configure having been called with
--include=/somewhere/else.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
47b5855bc396876295c6432e553351123a62534b 22-Jul-2011 Patrick McHardy <kaber@trash.net> Bump version to 1.4.12

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
4d8656ad9d0afd04820f125a85a7b673c7e74fe6 22-Jul-2011 Jan Engelhardt <jengelh@medozas.de> libxt_TCPMSS: restore build with IPv6-less libcs

Commit v1.4.10-149-gea2a02f added an netinet/ip6.h include, which is
not available on systems without IPv6 header files.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
411a4e50ec1030f2dc51c5b0156e0c7255c81905 04-Jul-2011 Jan Engelhardt <jengelh@medozas.de> build: install modules in arch-dependent location

Make it possible to have multiple types of ELF classes for the
extension modules by putting them in an arch-dependent path.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
3c871010888e1479ef8fca2048485b979ec2661a 24-Jun-2011 Jan Engelhardt <jengelh@medozas.de> build: attempt to fix building under Linux 2.4

iptables no longer compiles for Linux 2.4 because it uses
linux/magic.h. This header and the PROC_SUPER_MAGIC macro are only for
Linux 2.6.

xtables.c:35:52: error: linux/magic.h: No such file or directory
xtables.c: In function 'proc_file_exists':
xtables.c:389: error: 'PROC_SUPER_MAGIC' undeclared (first use in
this function)
xtables.c:389: error: (Each undeclared identifier is reported only
once for each function it appears in.)

References: http://bugzilla.netfilter.org/show_bug.cgi?id=720
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
f6677b5bcae125af28d227b9073426bddbd9190e 22-Jun-2011 Jan Engelhardt <jengelh@medozas.de> build: bump soversion for recent data structure change

Cf. commit v1.4.11.1-5-g2dba676.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
c960bde4a82792c285110589cf8b2cf1438e1b8f 08-Jun-2011 Patrick McHardy <kaber@trash.net> Bump version to 1.4.11.1

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
033e25a3ad215ee3f5a07f0a3315f74c4abfaced 07-Jun-2011 Jan Engelhardt <jengelh@medozas.de> src: move all iptables pieces into a separate directory

(Unclutter top-level dir)

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
5c8f5b60aa8e24da0bd25824f0f85bf7a4a39ea7 07-Jun-2011 Jan Engelhardt <jengelh@medozas.de> src: move all libiptc pieces into its directory

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
5085c3a037fa9327377dec7540d9c3ef2d53a58e 01-Jun-2011 Jan Engelhardt <jengelh@medozas.de> build: move kinclude's preprocessor flags to kinclude_CPPFLAGS

References: http://bugzilla.netfilter.org/show_bug.cgi?id=713
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
8e336251e155888f0ac2c79259f8792fc31920a1 01-Jun-2011 Jan Engelhardt <jengelh@medozas.de> build: move basic preprocessor flags to regular_CPPFLAGS

This is where they belong, after all.

References: http://bugzilla.netfilter.org/show_bug.cgi?id=713
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
172e9b15271c276aa1485b4a2fb63928a65b13ae 26-May-2011 Patrick McHardy <kaber@trash.net> Bump version to 1.4.11

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
3a32dcbb5512bfc1fd385c26fb906ce8562200da 14-Apr-2011 Jan Engelhardt <jengelh@medozas.de> build: bump libxtables ABI version

Adding the x6_* members to struct xtables_{match,target} caused a
change requiring a bump.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
8d89535b38e719f644d858e83f73bee9adf5b1a0 29-Oct-2010 Patrick McHardy <kaber@trash.net> Bump version to 1.4.10

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
655ae6b096b7ba3854159dc1eefadce91ec65550 13-Sep-2010 Jan Engelhardt <jengelh@medozas.de> libiptc: build with -Wl,--no-as-needed

Since libiptc does not reference any symbols in libip(4|6)tc, the linker
may ignore the dependencies. Use --no-as-needed to explicitly force a
DT_NEEDED entry.

References: http://bugzilla.netfilter.org/show_bug.cgi?id=674
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
a653f2936c56bfc541f13a7888484d5ae21c057a 03-Aug-2010 Patrick McHardy <kaber@trash.net> Merge branch 'iptables-next'
d8b511ed36f00280dd141e59c08874c7fb116504 03-Aug-2010 Patrick McHardy <kaber@trash.net> Bump version to 1.4.9

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
c36d05e42406966440e3644110d3d2504c4b165c 23-Jul-2010 Hannes Eder <heder@google.com> libxt_ipvs: user-space lib for netfilter matcher xt_ipvs

The user-space library for the netfilter matcher xt_ipvs.

[ trivial up-port by Simon Horman <horms@verge.net.au> ]
Signed-off-by: Hannes Eder <heder@google.com>
Acked-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
11c2dd54b69e06ae3f35dea130ecba3df3859243 07-Jun-2010 Jan Engelhardt <jengelh@medozas.de> xtables: remove xtables_set_revision function

Since iptables uses its own copies of the header files anyway where the
revision field is exposed, there is no reach to access name[] beyond its
size.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
63fc6258badea3f33cc0fc6b9ded6c94eaf53c4f 21-May-2010 Patrick McHardy <kaber@trash.net> Bump version to 1.4.8

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
967cb7106f0f61cd7b8fbb10bc2451a3f7372a43 10-May-2010 Karl Hiramoto <karl@hiramoto.org> iptables: optionally disable largefile support

Many toolchains for embedded systems don't have largefile support:

usr/include/features.h:383:4: error: #error It appears you have defined _FILE_OFFSET_BITS=64. Unfortunately, uClibc was built without large file support enabled.
In file included from /build_armeb/staging_dir/usr/include/stdio.h:72,
from libiptc/libip4tc.c:18:
/build_armeb/staging_dir/usr/include/bits/uClibc_stdio.h:72:2: error: #error Sorry... uClibc was built without large file support!
In file included from libiptc/libip4tc.c:18:
/build_armeb/staging_dir/usr/include/stdio.h:83: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'fpos_t'
In file included from libiptc/libip4tc.c:18:
/build_armeb/staging_dir/usr/include/stdio.h:709: error: expected declaration specifiers or '...' before 'fpos_t'
/build_armeb/staging_dir/usr/include/stdio.h:711: error: expected ';', ',' or ')' before '*' token

Signed-off-by: Karl Hiramoto <karl@hiramoto.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
db6d027bb9626129617ea3a3f2fe4b87ab307bf6 27-Mar-2010 Jan Engelhardt <jengelh@medozas.de> libxt_osf: import nfnl_osf program

xt_osf is pretty useless without the actual fingerprint loader. Import
nfnl_osf-2009-06-07 and make it a part of the iptables distribution.

Cc: Evgeniy Polyakov <johnpol@2ka.mxt.ru>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
cf7e42ffbb624c27591f6d55606bdccd358c7785 01-Mar-2010 Patrick McHardy <kaber@trash.net> iptables 1.4.7

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
88bdf3cd2fbfad5ef24736ff7b14bea01a39c3ff 09-Dec-2009 Patrick McHardy <kaber@trash.net> Bump version to v1.4.6

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
bf97128c7262f17a02fec41cdae75b472ba77f88 03-Nov-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: hand argv to xtables_check_inverse

In going to fix NF bug #611, "argv" is needed in
xtables_check_inverse to set "optarg" to the right spot in case of an
intrapositional negation.

References: http://bugzilla.netfilter.org/show_bug.cgi?id=611
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
f93a0cea9ddb988f28c4996c7b96ef65f05f1d30 14-Sep-2009 Patrick McHardy <kaber@trash.net> Bump version number to 1.4.5

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
332e4acc574e3a348fe611d55bf642de0d50fbda 09-Apr-2009 Michael Granzow <mgranzow@zeus.com> iptables: accept multiple IP address specifications for -s, -d

libiptc already supports adding and deleting multiple rules with
different addresses, so it only needs to be wired up to the options.

# ip6tables -I INPUT -s 2001:db8::d,2001:db8::e -j DROP

References: http://marc.info/?l=netfilter-devel&m=123929790719202&w=2

Adjustments made: syntax, removal of unneeded variables, manpage
adjustment, soversion bump.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
f9bf812aed50949db584cdf93752193c802fefcb 16-Jun-2009 Patrick McHardy <kaber@trash.net> Bump version

Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
b5508d20e6d1bea01d398b74103ee85630b05f58 06-Apr-2009 Pablo Neira Ayuso <pablo@netfilter.org> build: bump version to 1.4.3.2

This patch bumps iptables version to 1.4.3.2

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
a094eb0f2a57592b6f3cf42fdbb9d49fead2d57c 03-Apr-2009 Jan Engelhardt <jengelh@medozas.de> build: add configure option to disable ipv4 iptables

This patch complements the previous one.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
8e58613df53f5f83e8ab92dec61d8065c68d967d 03-Apr-2009 Jan Engelhardt <jengelh@medozas.de> build: add configure option to disable ip6tables

This also skips building the IPv6 extensions. It does not #ifdef out
all code however, I think that would make it too ugly.

Inspired-by: http://bugzilla.netfilter.org/show_bug.cgi?id=560
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
c4edfa63eda06f02cc5bc1a65d366c55bd2eda30 30-Mar-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: reorder .version member

When the structure's layout changes, as it did between v1.4.1 and
v1.4.2, trying to compare the version string makes iptables segfault
while it tries to determine whether the module is compatible in the
first place.

By moving the member to a known offset in the struct and keeping it
there, objects (both iptables and 3rd party) compiled from this
commit onwards will avoid the segfault.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
ca6ccdb172b1846152dea421c215122759b84d29 24-Mar-2009 Pablo Neira Ayuso <pablo@netfilter.org> build: bump version to 1.4.3.1

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
51bc836ad3fd52ed72289028871318d561b2959a 11-Feb-2009 Jan Engelhardt <jengelh@medozas.de> libiptc: make library available as a shared library

Tested-by: Jesper Dangaard Brouer <hawk@comx.dk>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
f567ac9193bc421992e572ec3196a73dc6ed59c0 12-Feb-2009 Jan Engelhardt <jengelh@medozas.de> build: restructure Makefile for include/ directory

This patch will support adding libiptc to the headers list in future.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
c02e80878979d2205f3d89d05548397871e598e9 10-Feb-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: decouple non-xtables parts from header

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
dacafa55379fd98212031d8c559096c91d7ce93b 27-Jan-2009 Jan Engelhardt <jengelh@medozas.de> libxtables: prefix/order - program_name

Split XTABLES_VERSION into xtables and iptables, and encode the
xtables soversion into the extensions instead. This makes it possible
to upgrade iptables without having to recompile 3rd-party extensions
(if the libxtables version matches, of course).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/configure.ac
0086b8bf9cf74642f6d6d82d9bbaedc80fec1dca 07-Jan-2009 Jan Engelhardt <jengelh@medozas.de> build: resolve autotools suggestions

libtool2 wants to put files into m4, so let it have it.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/configure.ac
928c4879e3a0da9dac6159c4d0f64a868e27f6e7 13-Nov-2008 Patrick McHardy <kaber@trash.net> Bump version to 1.4.3-rc1
/external/iptables/configure.ac
93086d4b51ee17e8fa4b5b0261a0f76d32fe71d8 08-Oct-2008 Patrick McHardy <kaber@trash.net> v1.4.2
/external/iptables/configure.ac
126c1361ad5201973e6ebc761b3e38a67915de29 04-Aug-2008 Jan Engelhardt <jengelh@medozas.de> Put xtables.c into its own library, libxtables.so

iproute2's tc's m_ipt.c poses as a pseudo-iptables program to make
use of the info structure composition of iptables extensions.
Since tc would have to clone a lot of code, xtables.c is put into
its own shared library and should not be relied upon by any other
programs.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
675e30f258952292972a562b71161b6d3cd77313 23-Jul-2008 Patrick McHardy <kaber@trash.net> v1.4.2-rc1
/external/iptables/configure.ac
b7580450b4c669846fe840997984dfaaa9c39a71 25-Jun-2008 Jan Engelhardt <jengelh@medozas.de> build: ip6.h is not required

Remove the check from configure.ac that errors out when ip6.h is not
found. The code does not actually depend on any structures from it.

Reported-by: anonymous
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
ee3228af38ec98c60a3b6f72a9b1c75b5ef53641 23-Jun-2008 Jan Engelhardt <jengelh@medozas.de> build: change equailty test for old bash

Michael used GNU bash, version 1.14.7(1), which apparently does not
seem to know about the double ("==") variant of equality tests.

Reported-by: Michael Teicher <mteicher@gmail.com>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
73cf45b16112da0091824f6868bf8be3b874478f 16-Jun-2008 Patrick McHardy <kaber@trash.net> v1.4.1.1
/external/iptables/configure.ac
b432667e1176bf24c8c8ac98dcec76c71688974c 10-Jun-2008 Patrick McHardy <kaber@trash.net> v1.4.1
/external/iptables/configure.ac
0439dadeb3913331c4a25a9a8961cc205561f60f 06-Jun-2008 Patrick McHardy <kaber@trash.net> Bump version
/external/iptables/configure.ac
2c570e76d4c627a0b0417cfa0d0f2e787a6d629d 05-Jun-2008 Jan Engelhardt <jengelh@medozas.de> build: check for missing feature files

linux/dccp.h is unlikely to be installed before 2.6.18 (which was
when headers_install was introduced), and does not exist at all
before 2.6.14. Add a compile-time check to skip compilation of
libxt_dccp in case this was detected.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
c634cb9cb13d6e1b6fd661b426363431f7ef321a 03-Jun-2008 Thomas Jarosch <thomas.jarosch@intra2net.com> Add xtables version defines.

Attached is a patch to add the new defines. The macro XTABLES_VERSION
is already in use, so I named it XTABLES_VERSION_CHECK. I've also tested
that an empty XTABLES_VERSION_EXTRA in configure.ac works.

Now we can write code like this:

#warning You are obselete and will be assimilated.

Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/configure.ac
8e1a12fba4008933ce9e89f98c12593e0d39ede3 26-May-2008 Patrick McHardy <kaber@trash.net> iptables 1.4.1-rc2
/external/iptables/configure.ac
3d91993d3365feb5aa1fd8502100d59cd5efb1cd 19-May-2008 Patrick McHardy <kaber@trash.net> Bump version to 1.4.1-rc1

Actually its not a bump but a decrease, the autoconf patches
apparently sneaked it a version bump to 1.4.1 already.
/external/iptables/configure.ac
8b7c64d6ba156a99008fcd810cba874c73294333 15-Apr-2008 Jan Engelhardt <jengelh@medozas.de> Remove old functions, constants
/external/iptables/configure.ac
493c712d61c35a6d8db877b208d34c111337a918 15-Apr-2008 Jan Engelhardt <jengelh@medozas.de> Dynamically create xtables.h.in with version
/external/iptables/configure.ac
b95fc082a82953b590a5f3a039b022a455bd77da 15-Apr-2008 Jan Engelhardt <jengelh@medozas.de> configure.ac: AC_SUBST must be separate
/external/iptables/configure.ac
d31a659e04d29dc2b1c6b3c495a0a154fbd35c86 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Update documentation about building the package
/external/iptables/configure.ac
ca7cd666949b68bf41a32de38ee38e332e89863b 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Add all necessary header files - compilation fix for various cases

Allow iptables to compile without a kernel source tree. This
implies fixing build for older kernels, such as 2.6.17 which
lack xt_SECMARK.h.
/external/iptables/configure.ac
77f15384d768b1735a180d0c8e2b5934a94d02e4 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> configure: split --enable-libipq from --enable-devel
/external/iptables/configure.ac
21b41eea4724c57d2b6e5998cf38255046e43ad3 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR
/external/iptables/configure.ac
33690a1aec0b6309ff90066ca56285b6e43013f2 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Fix all remaining warnings (missing declarations, missing prototypes)
/external/iptables/configure.ac
dbb77543ad6afe29e9a1881b2d4fc212de621a55 11-Feb-2008 Jan Engelhardt <jengelh@medozas.de> Fix -Wshadow warnings and clean up xt_sctp.h

Note: xt_sctp.h is still not merged upstream in the kernel as of
this commit. But a refactoring was really needed.
/external/iptables/configure.ac
7a236f4cc685a420c1a782a5db614a93baf37ccf 03-Mar-2008 Jan Engelhardt <jengelh@medozas.de> Drop -W from CFLAGS and some tiny code cleanups

- change "unsigned" to explicit "unsigned int"
- remove some casts
/external/iptables/configure.ac
e6403fd4e3027eed0d40e8c63d787659fcba4d80 02-Mar-2008 Pablo Neira Ayuso <pablo@netfilter.org> bump iptables version to prepare 1.4.1 release
/external/iptables/configure.ac
9ee386a1b6d7704b259460152c959ab0e79e02aa 29-Jan-2008 Max Kellermann <max@duempel.org> fix gcc warnings

Max Kellermann <max@duempel.org>
/external/iptables/configure.ac
a99cb4444ceff1b0029c7e25b0714dbee9021b12 29-Jan-2008 Jan Engelhardt <jengelh@medozas.de> Build adjustments

A few build system changes.
* ip6tables needs IP6T_LIB_DIR
* correctly trigger rebuild of master manpages when
submanpages have been touched

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de.
/external/iptables/configure.ac
fb6209a30fd576cd740eefe0a3ad88d65d2bb2b7 29-Jan-2008 Jan Engelhardt <jengelh@medozas.de> Give preference to iptables header files

Have the header files in the iptables source tree take precedence
over those from the kernel source. Otherwise, building the current
iptables from subversion just fails with kernels < 2.6.25.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/configure.ac
f82070f9871d281c2802c1624dcf222886b5fb50 20-Jan-2008 Jan Engelhardt <jengelh@medozas.de> Converts the iptables build infrastructure to autotools.

- Can build both static and dynamic at the same time

- iptables-static will be a multi-binary, semi-static
(link against libc but w/o dynamic plugins)

- Always build IPv6 modules

- consider INSTALL

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
/external/iptables/configure.ac