anonfunc/xtables-addons
1
0
Fork 0
mirror of git://git.code.sf.net/p/xtables-addons/xtables-addons synced 2025-09-07 13:15:12 +02:00
Code Issues Releases Wiki Activity
967 Commits 5 Branches 85 Tags
60a26f1dea02b43a643a4cb53ba02de5c9599faa
Commit Graph

52 Commits

Author SHA1 Message Date
Jan Engelhardt
7e3e156d92 xt_ECHO: enable for all supported versions 
Linux is now at 4.x.
 2015-08-19 12:36:18 +02:00
Jan Engelhardt
9414a5df34 extensions: remove RAWSNAT/RAWDNAT 2013-08-07 15:42:56 +02:00
Jan Engelhardt
f28cfff138 extensions: remove STEAL target 
There is enough demo code in the "demos" branch.
 2013-08-07 15:40:24 +02:00
Jan Engelhardt
158e6a26eb xt_CHECKSUM: remove the module 
This is available in upstream Linux 2.6.36+.
 2012-11-12 18:30:20 +01:00
Jan Engelhardt
3e337562d7 xt_TEE: remove the module 
This is available in upstream Linux 2.6.35+.
 2012-11-12 18:30:09 +01:00
Jan Engelhardt
5c615a3c73 build: do not attempt to build IPv6 parts if CONFIG_IP6_NF_IPTABLES=n 
Checking for IPV6 is not sufficient, use IP6_NF_IPTABLES instead.
 2012-07-14 23:19:16 +02:00
Jan Engelhardt
95da880d39 build: remove empty warning message 2012-06-21 19:13:13 +02:00
Jan Engelhardt
3f1202c211 build: limit xt_ECHO to kernel 3.x 
(Would also work on 2.6.39, but eh.)
 2012-04-21 02:44:51 +02:00
Jan Engelhardt
0b3d1bc4f0 src: remove ipset6-genl 
As scheduled, perform the removal of ipset from the tree.
 2012-04-05 06:58:46 +02:00
Jan Engelhardt
c7f60a33c5 ipset-4: remove unsupported version from the VCS 2011-08-20 20:30:03 +02:00
Jan Engelhardt
ff27f61477 ipset: rename ipset-5 directory to ipset-6 2011-02-24 00:02:18 +01:00
Marek Kierdelewicz
c5d4dd0bcf Import of xt_DNETMAP 2011-01-10 22:59:32 +01:00
Jan Engelhardt
7d8ffffd85 ipset: import ipset 5.2+GENL 
This requires Linux 2.6.35 or newer to build, so it is deactivated by
default in the "mconfig" file.
 2011-01-04 04:31:46 +01:00
Jan Engelhardt
75212f3972 ipset: move ipset to ipset-4 2011-01-04 03:59:25 +01:00
Michael S. Tsirkin
d402cec807 xt_CHECKSUM: initial import 
This adds a "CHECKSUM" target, which can be used in the iptables mangle
table.

You can use this target to compute and fill in the checksum in a packet
that lacks a checksum. This is particularly useful, if you need to work
around old applications such as dhcp clients, that do not work well with
checksum offloads, but don't want to disable checksum offload in your
device.

The problem happens in the field with virtualized applications. For
reference, see Red Hat bz 605555, as well as
http://www.spinics.net/lists/kvm/msg37660.html

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
 2010-07-11 17:54:54 +02:00
Jan Engelhardt
84704346e7 RAWNAT: do not build ip6table_rawpost if IPv6 is not enabled 2010-02-24 00:31:48 +01:00
Jan Engelhardt
5184176c3b pknock: move into separate directory 
There will be a number of pknock-related tools, e.g. the trigger
programs, so move that out to its own directory.
 2009-10-09 17:50:05 +02:00
Jan Engelhardt
db9bb2778d pknock: import pknock trunk@463 2009-09-29 14:00:59 +02:00
Jan Engelhardt
5cb36ed213 ACCOUNT: move xt_ACCOUNT into its own subdirectory 
Will be adding related userspace programs shortly, and an extra
directory for the same reason it is for ipset/.
 2009-09-24 01:00:15 +02:00
Jan Engelhardt
2c53605084 build: enable automake for extensions/ directory 
Because we are likely to be having more userspace programs soon, and
reproducing manual makefiles is a bad idea, make extensions/ ready
for automake traversal. The build pattern now is:

1.  toplevel Makefile.am starts off with extensions/Makefile.am

2.  Makefile.am

    a.  builds programs in current directory

    b.  runs Kbuild
        - only from extensions/Makefile.am
          (so it does not get reinvoked from case 2cII)
        - Kbuild recurses on its own

    c.  runs Mbuild
        I.  builds iptables shared libraries in current directory
        II. runs Makefile.am in each subdir (goto step 2.)
 2009-09-24 00:59:59 +02:00
Jan Engelhardt
bcda21a2b0 Merge branch 'psd' 2009-09-09 17:27:28 +02:00
Jan Engelhardt
a44c4e4b1d Import ACCOUNT kernel and iptables modules 
Reference: git://developer.intra2net.com/ipt_ACCOUNT # v1.15-1-gfb4dd1a
 2009-09-05 03:38:31 +02:00
Jan Engelhardt
cebadbfcd7 psd: merge into main configuration files 
When psd is included in the main tree, it can use the main
configuration files.
 2009-08-14 20:12:43 +02:00
Jan Engelhardt
4bcb7077c0 Merge branch 'iface' 2009-04-27 20:50:05 +02:00
Jan Engelhardt
637516f2d4 RAWNAT: add extension's kernel and userspace modules 
RAWNAT provides stateless 1:1 network address translation.
 2009-04-26 21:44:54 +02:00
Jan Engelhardt
03aeed615d RAWNAT: add the rawpost tables for IPv4/IPv6 2009-04-11 00:35:58 +02:00
Jan Engelhardt
9b198fe6e7 iface: import version 20081029 2009-04-05 10:37:05 +02:00
Jan Engelhardt
3a632a9bc5 dhcpmac: rename from dhcpaddr 2009-03-26 21:55:10 +01:00
Jan Engelhardt
e3988b50b5 Add the "STEAL" target from the "demos" branch 2009-03-25 19:54:25 +01:00
Jan Engelhardt
a51b16097b Add a reworked IPv4 options match - xt_ipv4options 
This revision 1 of ipv4options makes it possible to match the
presence or absence of any of the 32 possible IP options, either all
or any of the options the user specified.
 2009-03-08 23:38:12 +01:00
Jan Engelhardt
08e6f23655 xt_lscan: rename from xt_portscan 2009-03-05 01:43:29 +01:00
Jan Engelhardt
7cdfc0ac3d Add xt_length2 
xt_length2 provides exact layer-4,-5 and -7 length matching
besides the preexisting layer-3 length match.
 2009-01-30 06:01:12 +01:00
Jan Engelhardt
f30793f591 DHCP address match and mangler 2008-09-01 15:27:43 -04:00
Jan Engelhardt
fd83fefad1 fuzzy: import 20050627 code base 2008-09-01 15:22:16 -04:00
Jan Engelhardt
b4784a48e8 cleanup [KM]build layout 2008-08-03 12:30:49 -04:00
Jan Engelhardt
039741e022 SYSRQ target 2008-08-03 12:26:09 -04:00
Jan Engelhardt
1c902893b5 Merge branch 'ipset' 2008-07-07 18:00:48 +02:00
Jan Engelhardt
5120ab0079 xt_quota2: minor fixes, merge into main config files 2008-07-07 17:56:20 +02:00
Jan Engelhardt
df6d795d22 build: properly recognize external Kbuild/Mbuild files 2008-07-06 22:00:54 +02:00
Jan Engelhardt
a48469ec5b Import ipset-2.3.1a-20080617 2008-07-02 15:53:37 +02:00
Jan Engelhardt
d432d8041a IPMARK: import 20080304 code base 
With truly minimal changes to make it compile.
 2008-04-08 20:37:59 +02:00
Jan Engelhardt
44d6f47ad6 ipp2p: import 20080304 code base 2008-04-08 20:34:03 +02:00
Jan Engelhardt
72dc73e6a5 condition: import 20080125 code base 2008-04-08 11:58:33 +02:00
Jan Engelhardt
cd323565d7 Merge reworked geoip extension 2008-03-22 05:16:53 +01:00
Jan Engelhardt
a39bfdf98e Add xt_ECHO sample target 2008-03-22 05:16:47 +01:00
Jan Engelhardt
3554e348bc geoip: import 20080214 code base 2008-03-22 03:59:42 +01:00
Jan Engelhardt
2fbfbe6cd4 Import Chaostables extensions 
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
 2008-02-21 18:56:21 +01:00
Jan Engelhardt
c1592673fb Allow external projects to be downloaded into the tree and used 
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
 2008-02-15 02:21:35 +01:00
Jan Engelhardt
da011c8871 Allow user to select what extensions to compile and install 
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
 2008-02-14 17:49:47 +01:00
Jan Engelhardt
6d2998588d Add xt_LOGMARK (nfmark, ctmark, secmark logger) 
xt_LOGMARK dumps the nfmark (packet mark), ctmark (connection mark)
and/or secmark to syslog.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
 2008-01-30 13:54:57 +01:00