21da1dfea5
xt_psd: cleanup and reduce number of condition checks
2011-08-11 15:46:53 +02:00
6c17eb46b5
xt_psd: restore skb_header_pointer functionality for UDP
2011-08-11 15:46:53 +02:00
e0154bfa4c
xt_TEE: abort build when the feature is already provided by mainline
2011-07-28 13:50:38 +02:00
cd18e2479c
xt_TARPIT: fix kernel warning about RTAX_HOPLIMIT being used
2011-07-26 01:57:45 +02:00
d2f3541cda
xt_LOGMARK: put ct dumping into its own function
2011-07-21 00:18:28 +02:00
1fed8bbf09
extensions: more precise description
2011-07-17 14:27:07 +02:00
6e8fb7f231
Xtables-addons 1.37
2011-06-25 00:57:02 +02:00
eceaee3431
doc: do not advertise old tools
...
Remove mention of netcat from the libxt_SYSRQ manpage.
2011-06-25 00:05:26 +02:00
77b29a62ee
xt_SYSRQ: include host address in digest
...
The xt_SYSRQ hash now includes the destination IPv4 or IPv6 address
which makes it harder to replay a request to many different machines
in the hope that some of them are using the same password.
2011-06-25 00:03:28 +02:00
33db992c39
xt_SYSRQ: make IPv6 trigger work again
...
IPv6 sysrq never worked because of bad pointer arithmetic.
2011-06-24 23:42:38 +02:00
85d8f98dd7
xt_TARPIT: fix a kernel oops in --reset mode
...
1. Moved misplaced code that was causing kernel oops in reset mode.
2. Added payload size calc to honeypot mode, so ack sequence may ACK
the length of client's sent payload packets correctly.
3. Modified TTL for honeypot mode so we look more like a Windows
machine.
2011-06-24 22:09:34 +02:00
e84391ce66
build: use absolute path for M=
...
Use absolute path for M during checking kernelrelease. This will force
temporary objects be built in the current directory and not $kbuilddir
as it happened, e.g. in the current kernel scripts/Kbuild.include
try-run target (it is called with TMPOUT=M=. and during call
pwd=$kbuilddir). This should fix sandbox violation in Gentoo:
https://bugs.gentoo.org/show_bug.cgi?id=371997
2011-06-20 10:48:10 +02:00
ef7fb0db7f
build: fix support for 2.6.x kernels
...
After commit 75b3762ef4
2011-06-20 09:14:51 +02:00
4203259e5a
Xtables-addons 1.36
2011-06-03 16:45:29 +02:00
e3956498ac
doc: remove stray "userspace" wording
2011-06-01 01:44:54 +02:00
6f730f3ab2
xt_TARPIT: unlock for use with all tables
2011-06-01 01:37:05 +02:00
2b590a35fd
Merge branch 'ipset-6'
2011-05-31 23:05:40 +02:00
3dd33dfe93
doc: move iptaccount(8) option overview to its own manpage
2011-05-31 23:05:31 +02:00
d417077816
doc: fix \(em in ipv4options
2011-05-31 23:00:35 +02:00
d057f6d6f0
doc: replace NOTRACK by CT-notrack
2011-05-31 22:58:34 +02:00
b2fc85c589
ipset: update to 6.7-genl
2011-05-31 22:54:49 +02:00
fa1348455d
xt_TARPIT: honeypot and reset modes
...
Honeypot mode attempts to maintain a normal connection for the purpose
of capturing payload packets.
Reset mode provides the ability to send a reset packet in lieu of
using the DROP or REJECT targets.
2011-05-31 22:41:51 +02:00
1a5c079e6b
Merge branch 'ipset-6'
2011-05-31 16:56:26 +02:00
75b3762ef4
build: support for Linux up to 3.0
2011-05-31 16:56:23 +02:00
cfb72bf468
ipset: update to 6.6a-genl
2011-05-31 16:14:44 +02:00
1b0790d151
ipset-6: move manpage into src/
2011-05-31 16:09:03 +02:00
a5355e74ea
xt_geoip: avoid recursive function calls
...
The stack memory is very limited in Linux kernel.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de >
2011-04-14 09:07:25 +02:00
757bf0e993
Xtables-addons 1.35
...
Trim the changelog to only reveal changes relevant to the end user.
2011-04-11 18:37:32 +02:00
cea4817a46
Merge branch 'ipset-6'
...
Conflicts:
INSTALL
mconfig
2011-04-11 04:23:18 +02:00
2dc79fe008
ipset; update to ipset-6.3 (genl)
...
* Handle EAGAIN from autoloading code.
* Turn one nfgenmsg site into genlmsg to avoid protocol mismatch
2011-04-11 04:11:30 +02:00
b60f8f1de2
Xtables-addons 1.34
2011-04-07 15:15:39 +02:00
499c6db75e
ipset: update to ipset-6.2
2011-04-04 00:39:50 +02:00
509953daec
build: notify of unsupported Linux kernel versions
2011-04-04 00:18:54 +02:00
c53a86874d
build: notify of unsupported Linux kernel versions
...
I would like to move forward a bit, and today, two issues prompted
me to start removing old code:
* make 3.82 does not like mixing normal rules with implicit rules,
which rejects Makefiles of Linux kernels before 2.6.34.
* xt_DNETMAP uses functionality not available before 2.6.29.
2011-04-04 00:10:23 +02:00
309b960012
Merge branch 'dnetmap'
2011-04-03 23:59:18 +02:00
f4882ca029
xt_DNETMAP: support for kernels below 2.6.34
2011-04-03 23:50:10 +02:00
8fd3eb56eb
xt_DNETMAP: add missing alias
2011-04-03 23:49:53 +02:00
94574fb829
Merge branch 'pknock'
...
Kernel warnings and oopses resulting from the inversion (HEAD^2)
reported by user mancha (mancha!debian-tor@gateway/tor-sasl/mancha) on
irc.freenode.net/#netfilter.
2011-02-28 20:51:25 +01:00
32871bad39
xt_pknock: avoid inversion of rule lookup that led to warnings
...
Commit v1.18-48-g58839b9 had this screwed up.
2011-02-25 01:22:16 +01:00
0ba44bd461
xt_pknock: avoid crash when hash TFM could not be allocated
2011-02-25 01:22:16 +01:00
d4e6e3d155
xt_pknock: indent
2011-02-25 01:20:12 +01:00
18043f3e3a
ipset: update to 6.0
2011-02-24 00:40:23 +01:00
ff27f61477
ipset: rename ipset-5 directory to ipset-6
2011-02-24 00:02:18 +01:00
9f59f21614
Xtables-addons 1.33
2011-02-02 05:21:56 +01:00
7a8bfed52c
xt_geoip: keep compiling for <= 2.6.23
2011-02-02 05:21:56 +01:00
1edc9b943b
build: do not forget including path for compat_user.h
2011-02-02 05:15:09 +01:00
ebfa77795a
build: preliminary support for iptables 1.4.11
2011-02-02 05:09:58 +01:00
4a8aa505c4
build: support for Linux up to 2.6.38
...
No API changes that needed to be taken care of, so just bump the
version check in configure.ac.
2011-02-02 04:59:58 +01:00
4654ee127f
xt_DNETMAP: disable by default for now
...
I wanted xt_DNETMAP to be included in the release already, though
because it only compiled with Linux >= 2.6.34 currently (some work
will be needed), deactive it by default.
2011-02-02 04:55:34 +01:00
a7a77d7146
Merge branch 'dnetmap'
2011-02-02 04:54:25 +01:00
Jan Engelhardt