Jan Engelhardt
365d5edfb3
build: notify of unsupported Linux kernel versions
...
make 3.82 does not like mixing normal rules with implicit rules,
which rejects Makefiles of Linux kernels before 2.6.32 series.
2011-11-26 00:20:36 +01:00
Eivind Naess
75cd1d7d6a
xt_ipv4options: fix an infinite loop
2011-11-05 15:31:00 +01:00
Jan Engelhardt
b0dc0e6f4c
Merge remote branch 'origin/master'
2011-11-04 20:08:04 +01:00
Jan Engelhardt
bc1c37618a
src: use xtables_register_targets throughout
2011-11-02 00:26:23 +01:00
Jan Engelhardt
d7aeb7da4b
build: iptables >= 1.4.5 is in fact required
2011-11-02 00:17:54 +01:00
Jan Engelhardt
487da26146
xt_ECHO: IPv6 support
2011-09-25 14:57:48 +02:00
Jan Engelhardt
434dea2b53
xt_ECHO: calculate UDP checksum
2011-09-25 14:39:43 +02:00
Jan Engelhardt
30d227135b
xt_ECHO: fix kernel warning about RTAX_HOPLIMIT being used
2011-09-25 14:39:43 +02:00
Jan Engelhardt
a508ec048c
xt_ECHO: misc backports from ipt_REJECT and cosmetics
2011-09-25 14:39:10 +02:00
Jan Engelhardt
3069c9a3a2
Xtables-addons 1.39
v1.39
2011-09-21 19:59:41 +02:00
Jan Engelhardt
5245220246
ipset: update to 6.9.1-genl
2011-09-21 19:58:05 +02:00
Jan Engelhardt
ec97cd6d89
build: add missing linux/version.h includes where needed
...
Reported-by: Sergei Zhirikov <sfzhi@yahoo.com >
References: http://marc.info/?l=netfilter-devel&m=131404939007827&w=2
2011-08-28 19:45:39 +02:00
Jan Engelhardt
dc58126e37
doc: update changelog
2011-08-28 19:45:24 +02:00
Arkadiusz Miskiewicz
d509951fcf
ipset: move ipset_errcode from src to library to avoid undefined reference
...
Unresolved symbols found in: /home/users/arekm/tmp/
xtables-addons-1.38-root-arekm/usr/lib64/libipset.so.1.0.0
ipset_errcode
References: http://marc.info/?l=netfilter-devel&m=131435791514602&w=2
2011-08-28 19:40:14 +02:00
Frank Reppin
6ef91897b2
build: fix compilation after missing libxtables_CFLAGS in submodules
2011-08-21 13:56:42 +02:00
Jan Engelhardt
c7f60a33c5
ipset-4: remove unsupported version from the VCS
2011-08-20 20:30:03 +02:00
Jan Engelhardt
65b75fc19c
Xtables-addons 1.38
v1.38
2011-08-20 17:02:31 +02:00
Jan Engelhardt
bac406bff5
ipset-6: unambiguouize reported name
2011-08-20 16:50:41 +02:00
Jan Engelhardt
aa53733851
build: disable ipset-4 by default
...
This is no longer supported by upstream.
2011-08-20 16:47:40 +02:00
Jan Engelhardt
9ccd32d840
ipset: fix compile error due to changed function signature with Linux 3.1
2011-08-20 16:45:58 +02:00
Jan Engelhardt
939d3c8b27
xt_ipp2p: support UDPLITE
2011-08-16 14:50:53 +02:00
Jan Engelhardt
c2d93e16fd
xt_SYSRQ: fix UDPLITE header lookup in IPv6
2011-08-12 15:44:27 +02:00
Jan Engelhardt
04aed87cb6
xt_pknock: support UDPLITE
2011-08-12 15:42:44 +02:00
Jan Engelhardt
5ef3a7c436
xt_CHECKSUM: abort build when the feature is already provided by mainline
2011-08-12 15:42:39 +02:00
Jan Engelhardt
27a77b62f5
Merge branch 'ipset'
...
Conflicts:
doc/changelog.txt
2011-08-12 15:37:50 +02:00
Jan Engelhardt
c10e974bd6
Merge branch 'psd'
2011-08-12 15:37:24 +02:00
Jan Engelhardt
01d864f4fc
xt_psd: resolve compiler warning
...
xt_psd.c: In function "xt_psd_match":
xt_psd.c:253:27: warning: "tcph" may be used uninitialized in this
function [-Wuninitialized]
2011-08-11 15:50:08 +02:00
Jan Engelhardt
071c95b750
xt_psd: compact temporary skb buffers
2011-08-11 15:49:40 +02:00
Jan Engelhardt
a141cc311c
xt_psd: support UDPLITE
2011-08-11 15:47:20 +02:00
Jan Engelhardt
7e92ce7ce6
xt_psd: move early bail-out code above skb_header_pointer
2011-08-11 15:46:53 +02:00
Jan Engelhardt
21da1dfea5
xt_psd: cleanup and reduce number of condition checks
2011-08-11 15:46:53 +02:00
Jan Engelhardt
6c17eb46b5
xt_psd: restore skb_header_pointer functionality for UDP
2011-08-11 15:46:53 +02:00
Jan Engelhardt
74ea647303
ipset: update to 6.8-genl
2011-07-28 13:56:45 +02:00
Jan Engelhardt
e0154bfa4c
xt_TEE: abort build when the feature is already provided by mainline
2011-07-28 13:50:38 +02:00
Jan Engelhardt
cd18e2479c
xt_TARPIT: fix kernel warning about RTAX_HOPLIMIT being used
2011-07-26 01:57:45 +02:00
Jan Engelhardt
d2f3541cda
xt_LOGMARK: put ct dumping into its own function
2011-07-21 00:18:28 +02:00
Jan Engelhardt
1fed8bbf09
extensions: more precise description
2011-07-17 14:27:07 +02:00
Jan Engelhardt
6e8fb7f231
Xtables-addons 1.37
v1.37
2011-06-25 00:57:02 +02:00
Jan Engelhardt
eceaee3431
doc: do not advertise old tools
...
Remove mention of netcat from the libxt_SYSRQ manpage.
2011-06-25 00:05:26 +02:00
John Haxby
77b29a62ee
xt_SYSRQ: include host address in digest
...
The xt_SYSRQ hash now includes the destination IPv4 or IPv6 address
which makes it harder to replay a request to many different machines
in the hope that some of them are using the same password.
2011-06-25 00:03:28 +02:00
John Haxby
33db992c39
xt_SYSRQ: make IPv6 trigger work again
...
IPv6 sysrq never worked because of bad pointer arithmetic.
2011-06-24 23:42:38 +02:00
Martin Barrowcliff
85d8f98dd7
xt_TARPIT: fix a kernel oops in --reset mode
...
1. Moved misplaced code that was causing kernel oops in reset mode.
2. Added payload size calc to honeypot mode, so ack sequence may ACK
the length of client's sent payload packets correctly.
3. Modified TTL for honeypot mode so we look more like a Windows
machine.
2011-06-24 22:09:34 +02:00
Peter Volkov
e84391ce66
build: use absolute path for M=
...
Use absolute path for M during checking kernelrelease. This will force
temporary objects be built in the current directory and not $kbuilddir
as it happened, e.g. in the current kernel scripts/Kbuild.include
try-run target (it is called with TMPOUT=M=. and during call
pwd=$kbuilddir). This should fix sandbox violation in Gentoo:
https://bugs.gentoo.org/show_bug.cgi?id=371997
2011-06-20 10:48:10 +02:00
Peter Volkov
ef7fb0db7f
build: fix support for 2.6.x kernels
...
After commit 75b3762ef4
"WARNING: That
kernel version is not supported." is issued to supported kernels too.
Fix this.
2011-06-20 09:14:51 +02:00
Jan Engelhardt
4203259e5a
Xtables-addons 1.36
v1.36
2011-06-03 16:45:29 +02:00
Jan Engelhardt
e3956498ac
doc: remove stray "userspace" wording
2011-06-01 01:44:54 +02:00
Jan Engelhardt
6f730f3ab2
xt_TARPIT: unlock for use with all tables
2011-06-01 01:37:05 +02:00
Jan Engelhardt
2b590a35fd
Merge branch 'ipset-6'
2011-05-31 23:05:40 +02:00
Jan Engelhardt
3dd33dfe93
doc: move iptaccount(8) option overview to its own manpage
2011-05-31 23:05:31 +02:00
Jan Engelhardt
d417077816
doc: fix \(em in ipv4options
2011-05-31 23:00:35 +02:00