Jan Engelhardt
557af2177f
build: remove support for Linux 2.6.32
2012-11-12 18:29:53 +01:00
Jan Engelhardt
60f5239630
build: remove support for Linux 2.6.31
2012-10-16 04:16:57 +02:00
Jan Engelhardt
3ba7d8c3a9
build: remove support for Linux 2.6.30
2012-10-16 04:16:57 +02:00
Jan Engelhardt
28d12faba8
build: remove support for Linux 2.6.29
2012-10-16 04:16:57 +02:00
Jan Engelhardt
cf7a3d4342
build: remove support for Linux 2.6.28
2012-10-16 04:16:57 +02:00
Jan Engelhardt
fabad77f8f
build: remove support for Linux 2.6.27
2012-10-16 04:16:57 +02:00
Jan Engelhardt
5e020d380c
build: remove support for Linux 2.6.26
2012-10-16 04:16:57 +02:00
Jan Engelhardt
a7fbf4f4de
build: remove support for Linux 2.6.25
2012-10-16 04:16:57 +02:00
Jan Engelhardt
4137f6c111
build: remove support for Linux 2.6.24
2012-10-16 04:16:57 +02:00
Jan Engelhardt
04d8ebe31c
build: remove support for Linux 2.6.23
2012-10-16 04:16:56 +02:00
Jan Engelhardt
6ab4c02a54
build: remove support for Linux 2.6.22
2012-10-16 04:16:56 +02:00
Jan Engelhardt
a66e4510b8
build: remove support for Linux 2.6.21
2012-10-16 02:36:14 +02:00
Jan Engelhardt
31aebc134e
build: remove support for Linux 2.6.20
2012-10-16 02:36:10 +02:00
Jan Engelhardt
e640a15ec9
build: remove support for Linux 2.6.19
2012-10-16 02:36:06 +02:00
Jan Engelhardt
66f213e324
build: remove support for Linux 2.6.18
2012-10-16 02:36:02 +02:00
Jan Engelhardt
0dcc56bc62
build: remove support for Linux 2.6.17
2012-10-16 02:35:57 +02:00
Jan Engelhardt
8db01220fd
Xtables-addons 1.47.1
2012-10-15 21:29:22 +02:00
Jan Engelhardt
2f1e094125
Xtables-addons 1.47
2012-10-15 20:03:02 +02:00
Jan Engelhardt
35ce1adf5e
Xtables-addons 1.46
2012-08-23 15:54:21 +02:00
Jan Engelhardt
e5fe0b9c14
doc: update xt_SYSRQ.man to reflect that the full IPv6 address is needed
...
xt_SYSRQ uses NIP6_FMT, so requires the expanded form for the digest.
Reported-by: Jan Krcmar <honza801@gmail.com >
2012-08-23 15:27:23 +02:00
Arif Hossain
cd7fc84b29
build: remove extraneous closing bracket in configure.ac
...
Now autogen.sh will work without complaints.
2012-08-02 17:49:40 +02:00
Josh Hunt
4ff5a8fbf6
TARPIT: fix memory leak when tarpit_generic() fails
...
Currently tarpit_generic() just returns on failure, but this does not
free nskb.
Signed-off-by: Josh Hunt <johunt@akamai.com >
2012-08-02 17:48:05 +02:00
Florian Westphal
37e3a543a9
extensions: fix ipv6_find_hdr upstream change fallout
...
Upstream commit v3.5-rc1~109^2~138^2~4 ("netfilter: ip6_tables: add
flags parameter to ipv6_find_hdr()") changed the offset parameter of
ipv6_find_hdr() to be an input-output value. Moreover, if it is
non-zero, it MUST point to a valid IPv6 header embedded in the
packet.
2012-07-21 15:42:02 +02:00
Jan Engelhardt
5f6cbbc663
Xtables-addons 1.45
2012-07-16 05:39:32 +02:00
Jan Engelhardt
a2676585da
build: avoid use of unexported functions
...
Fixes: "WARNING 'ipv6_find_hdr' [xt_TARPIT.ko] not found" in
<= linux-2.6.37.
2012-07-16 05:36:41 +02:00
Jan Engelhardt
4a8aab6aed
fix: "WARNING 'xtnu_ipv6_find_hdr' [.ko] not found"
2012-07-16 05:34:24 +02:00
Jan Engelhardt
dec7d7fc4d
Xtables-addons 1.44
2012-07-15 13:58:51 +02:00
Jan Engelhardt
5c615a3c73
build: do not attempt to build IPv6 parts if CONFIG_IP6_NF_IPTABLES=n
...
Checking for IPV6 is not sufficient, use IP6_NF_IPTABLES instead.
2012-07-14 23:19:16 +02:00
Jan Engelhardt
0c1375414d
build: do not attempt to build IPv6 parts if CONFIG_IPV6=n
2012-07-14 22:55:39 +02:00
Jan Engelhardt
cb8050172a
SYSRQ: fix double target initialization at module load
2012-07-11 01:42:39 +02:00
Jan Engelhardt
8d5b7c5b7d
doc: changelog entry for IPv6 TARPIT
2012-07-09 19:07:24 +02:00
Jan Engelhardt
e2ecff2071
Xtables-addons 1.43
2012-06-30 19:46:21 +02:00
Jan Engelhardt
b2bcedd1ef
build: support for Linux 3.5
2012-06-30 18:38:49 +02:00
Florian Westphal
f6b8767228
psd: add basic validation of userspace matchinfo data
...
psd multiplies weight_thresh by HZ, so it could overflow.
Userspace libxt_psd refuses values exceeding PSD_MAX_RATE, so check
that on kernel side, too.
Also, setting 0 weight for both privileged and highports will cause
psd to never match at all.
Reject 0 weight threshold, too because it makes no sense (triggers
match for every initial packet).
2012-06-15 15:11:32 +02:00
Florian Westphal
759546f8d0
xt_psd: avoid crash due to curr->next corruption
...
curr->ports[] is of size SCAN_MAX_COUNT - 1, so under certain
conditions we wrote past end of array, corrupting ->next pointer
of the adjacent host entry.
Reported-and-tested-by: Serge Leschinsky <serge.leschinsky@gmail.com >
2012-04-18 14:30:22 +02:00
Jan Engelhardt
72b1421783
Xtables-addons 1.42
2012-04-05 06:58:46 +02:00
Jan Engelhardt
0b3d1bc4f0
src: remove ipset6-genl
...
As scheduled, perform the removal of ipset from the tree.
2012-04-05 06:58:46 +02:00
Jan Engelhardt
3679e0efa6
build: support for Linux 3.4
2012-04-05 06:58:46 +02:00
Jan Engelhardt
7ee9feb20e
build: support for Linux 3.3
2012-04-05 06:58:43 +02:00
Jan Engelhardt
916013cd89
xt_SYSRQ: fix compile error when crypto is turned off
2012-01-20 21:19:13 +01:00
Jan Engelhardt
a6b06502ca
compat_xtables: fixed mistranslation of checkentry return values
2012-01-12 09:21:39 +01:00
Jan Engelhardt
aee5aedc63
Xtables-addons 1.41
2012-01-04 21:45:45 +01:00
Jan Engelhardt
ce37dd6984
build: deactivate build of ipset-genl by default
2011-12-31 02:17:30 +01:00
Jan Engelhardt
31fdd86247
build: support for Linux 3.2
2011-12-31 02:15:45 +01:00
Jan Engelhardt
36df60c940
Xtables-addons 1.40
2011-11-30 11:41:04 +01:00
Jan Engelhardt
9ab6a0ee0d
ipset: update to 6.10-genl
2011-11-30 11:14:29 +01:00
Jan Engelhardt
365d5edfb3
build: notify of unsupported Linux kernel versions
...
make 3.82 does not like mixing normal rules with implicit rules,
which rejects Makefiles of Linux kernels before 2.6.32 series.
2011-11-26 00:20:36 +01:00
Eivind Naess
75cd1d7d6a
xt_ipv4options: fix an infinite loop
2011-11-05 15:31:00 +01:00
Jan Engelhardt
b0dc0e6f4c
Merge remote branch 'origin/master'
2011-11-04 20:08:04 +01:00
Jan Engelhardt
d7aeb7da4b
build: iptables >= 1.4.5 is in fact required
2011-11-02 00:17:54 +01:00
