Jan Engelhardt
1c902893b5
Merge branch 'ipset'
2008-07-07 18:00:48 +02:00
Jan Engelhardt
5120ab0079
xt_quota2: minor fixes, merge into main config files
2008-07-07 17:56:20 +02:00
Jan Engelhardt
35783b5c51
ipset: fixup compile errors with 2.6.18.x and 2.6.20 warnings
2008-07-07 11:07:15 +02:00
Jan Engelhardt
29aea5a87b
ipset: fixup compile warnings
...
And add a few const here and there.
2008-07-07 10:36:35 +02:00
Jan Engelhardt
e456c864c1
xt_quota2: support packet counting; add manpage
2008-07-07 01:19:10 +02:00
Jan Engelhardt
e987e2118c
xt_quota2: allow for multiple rules to share one counter
2008-07-06 22:00:54 +02:00
Jan Engelhardt
a1e915a984
Add xt_quota2
...
Support for inversion, upcounting, and changing the quota/counter
through sysfs.
2008-07-06 22:00:54 +02:00
Jan Engelhardt
df6d795d22
build: properly recognize external Kbuild/Mbuild files
2008-07-06 22:00:54 +02:00
Jan Engelhardt
74b20f5b73
ipp2p: bump version to indicate this is newer than 0.8.2
2008-07-05 19:41:23 +02:00
Jan Engelhardt
9d696b727a
Import ipset-2.3.2a (userspace components)
2008-07-04 18:38:58 +02:00
Jan Engelhardt
98e88e2d01
Import ipset-2.3.2 (kernel components)
2008-07-02 16:35:07 +02:00
Jan Engelhardt
a48469ec5b
Import ipset-2.3.1a-20080617
2008-07-02 15:53:37 +02:00
Jan Engelhardt
ca482e8add
Update README, .gitignore
2008-06-30 23:46:26 +02:00
Jan Engelhardt
38198b257d
Update manpages of CHAOS, IPMARK
2008-06-27 22:56:42 +02:00
Jan Engelhardt
02a65e0af8
Fix compilation error for 2.6.18-stable
...
The prototype of ip_route_me_harder changed in 2.6.18.5, so I think
Xtables-addons should account for it. This renders compilation on
anything below it impossible. (2.6.17 is not supported in general.)
2008-04-25 20:46:39 +02:00
Jan Engelhardt
84624f66cb
Update .gitignore
2008-04-16 21:35:02 +02:00
Jan Engelhardt
086c8def12
condition: use PF_UNSPEC in vtable
2008-04-12 05:58:08 +02:00
Jan Engelhardt
d5ee47e9da
manpages: generate manpages
2008-04-09 20:55:35 +02:00
Jan Engelhardt
2c2527bdc4
manpages: remove diff markers from CHAOS,TARIPT
2008-04-09 20:34:57 +02:00
Jan Engelhardt
f931e34365
compat: resolve missing tcp_hdr and udp_hdr for xt_ipp2p
2008-04-09 20:16:33 +02:00
Jan Engelhardt
f34be8445f
TEE: make skb writable before attempting checksum update
...
This also adds the compat function xtnu_skb_make_writable().
2008-04-09 20:06:17 +02:00
Jan Engelhardt
37e51dc44d
condition: resolve typesize compiler warning
...
Fix warning: field precision should have type "int", but argument 2
has type "long unsigned int".
2008-04-09 19:56:11 +02:00
Jan Engelhardt
1060138f77
IPMARK: redo ipmark_tg_parse()
...
- check for illegal inversion on flags
- use param_act() and strtonum() instead of open-coded checks
2008-04-09 19:24:24 +02:00
Jan Engelhardt
03eeabb4bd
IPMARK: style cleanup
2008-04-09 19:24:23 +02:00
Jan Engelhardt
2c7b1d5330
IPMARK: IPv6 support
2008-04-09 19:24:01 +02:00
Jan Engelhardt
b63ac3be45
IPMARK: print --addr flag the usual way
2008-04-09 19:24:01 +02:00
Jan Engelhardt
4b8ec990b8
IPMARK: omit printing unset mask
2008-04-09 19:23:45 +02:00
Jan Engelhardt
59ef68fecc
IPMARK: remove incorrect --and/--or check
...
It is perfectly valid for no --and-mask and also no --or-mask to
appear, in which case the IP(v4) address is taken as mark without
modification.
2008-04-09 19:23:08 +02:00
Jan Engelhardt
3bf45b60b2
IPMARK: misc cleanups
...
- order #include lists
- const annotations, removal of casts
- add ipt_IPMARK alias
- make symbol names distinct
2008-04-09 13:10:00 +02:00
Jan Engelhardt
e037035bd4
IPMARK: rebuild parameter structure (fixed-size types)
...
Rebuild the parameter structure to have fixed-size members only.
2008-04-09 13:09:45 +02:00
Jan Engelhardt
d432d8041a
IPMARK: import 20080304 code base
...
With truly minimal changes to make it compile.
2008-04-08 20:37:59 +02:00
Jan Engelhardt
29139c1414
ipp2p: add missing MODULE_ALIAS(ipt_ipp2p)
2008-04-08 20:34:06 +02:00
Jan Engelhardt
585cfd49ab
ipp2p: use c99 initializers in getopt structure
2008-04-08 20:34:05 +02:00
Jan Engelhardt
54f78ac3ef
ipp2p: use param_act() for parameter validation
2008-04-08 20:34:05 +02:00
Jan Engelhardt
376d41618c
ipp2p: use OR in flag settings in libxt_ipp2p
2008-04-08 20:34:05 +02:00
Jan Engelhardt
01df89eb8b
ipp2p: enable experimental data stream analyzers
...
(get rid of "function unused" warnings)
2008-04-08 20:34:05 +02:00
Jan Engelhardt
a1d307e336
ipp2p: internally simplify selecting protocol searches
2008-04-08 20:34:05 +02:00
Jan Engelhardt
0712d0fdca
ipp2p: guard against potential unaligned access
...
get_u16() and get_u32() may get passed unaligned pointers;
let's play it safe.
2008-04-08 20:34:05 +02:00
Jan Engelhardt
3c8131b976
ipp2p: use auxiliary skb functions
2008-04-08 20:34:04 +02:00
Jan Engelhardt
569643ac8c
ipp2p: static and const annotations, type usage
2008-04-08 20:34:04 +02:00
Jan Engelhardt
cc23d0a2e7
ipp2p: fix match function signature
2008-04-08 20:34:04 +02:00
Jan Engelhardt
c237fe2486
ipp2p: adhere to codingstyle
2008-04-08 20:34:04 +02:00
Jan Engelhardt
edcbcee84e
ipp2p: remove compat and obsolete code
2008-04-08 20:34:04 +02:00
Jan Engelhardt
44d6f47ad6
ipp2p: import 20080304 code base
2008-04-08 20:34:03 +02:00
Jan Engelhardt
e304252f4b
condition: greatly improve processing speed
...
Replace the loop over all possible condvars by a simple deref. This
changes the runtime from O(n) to O(1) at the expense of only 8 bytes
for rule.
2008-04-08 11:58:35 +02:00
Jan Engelhardt
32f06cbedf
condition: squash variables
2008-04-08 11:58:35 +02:00
Jan Engelhardt
75f6f14aaf
condition: remove support for nonstandard inversion
2008-04-08 11:58:34 +02:00
Jan Engelhardt
7dd8b1a678
condition: reenable IPv6 support in userspace extension
2008-04-08 11:58:34 +02:00
Jan Engelhardt
f5f17a27c5
condition: style cleanup
2008-04-08 11:58:34 +02:00
Jan Engelhardt
c9579115c3
condition: rework condvar name check
...
Use memchr() instead of a for loop to detect '/' in the condvar name.
Also unconditionally disallow names starting with a dot.
2008-04-08 11:58:34 +02:00
