8c58a61f52
geoip: address comparison is inclusive
...
subnet is somewhat a wrong term, geoip actually uses ipranges. Either
way, the comparison needs to be >= and <= instead of > <.
2008-03-22 03:59:45 +01:00
93c7d0ac47
geoip: lock timing correctness
...
find_node: The reference count needs to be increased while the lock
is held. Otherwise, the node may disappear right after the lock was
released and increase was attempted, leading to an oops.
remove_node: The reference count needs to be checked while the lock
is held. Otherwise, the node may be used in the match function or
returned from find_node while it has a zero refcount.
2008-03-22 03:59:45 +01:00
df063ab61c
geoip: add missing kfree in error path
2008-03-22 03:59:44 +01:00
d480ea2b1f
geoip: sort #include list
2008-03-22 03:59:44 +01:00
205a006ac9
geoip: use tabs not spaces and indent
2008-03-22 03:59:44 +01:00
9f45aa737a
geoip: remove redundant casts
2008-03-22 03:59:44 +01:00
f1615a03f3
geoip: remove unused code and unneeded per-info refcount
...
- freeing userspace memory is not the kernel's job, really.
- checkentry is called exactly once, as is destroy.
2008-03-22 03:59:44 +01:00
3554e348bc
geoip: import 20080214 code base
2008-03-22 03:59:42 +01:00
5fd97e9973
compat update: allow building from 2.6.18 onwards
2008-03-12 04:28:40 +01:00
10e3d8fe0d
Update .gitignore
2008-03-12 04:28:38 +01:00
6c06796e3b
Makefile: add missing xtables_CFLAGS variable
...
If xtables.h is to be found in a directory other than included in the
default preprocessor search path, compilation failed because the path
specified with --with-xtables= was not passed to gcc.
2008-03-05 00:19:15 +01:00
c338e8f827
Move defines in compat_xtables.h down to avoid redeclaration errors
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-03-04 05:12:06 +01:00
7c09f5db2f
Use system's readlink program to make things work with GNU make < 3.81
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-29 13:49:04 +01:00
4d22fbd97a
Use AF_UNSPEC registration in libxt_LOGMARK
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-21 18:56:47 +01:00
dd42c61581
Change IPTABLES_VERSION to XTABLES_VERSION
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-21 18:56:47 +01:00
2fbfbe6cd4
Import Chaostables extensions
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-21 18:56:21 +01:00
ec9663f680
Remove compat code for kernels below 2.6.22
...
Some code already uses ip_hdr() functions which did not exist in
2.6.21 and I do not feel like adding more compat code.
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-21 13:35:19 +01:00
75e88a7321
Update compat code for new 2.6.25 code
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-21 13:29:31 +01:00
1e34f02034
xt_LOGMARK: dump CLASSIFY mark, ctstate and ctstatus
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-20 23:17:55 +01:00
c1592673fb
Allow external projects to be downloaded into the tree and used
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-15 02:21:35 +01:00
da011c8871
Allow user to select what extensions to compile and install
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-14 17:49:47 +01:00
c43ce6d830
Fixup compilation for kernels before 2.6.25
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-11 15:49:51 +01:00
fd845be2d4
Update package name and documentation
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-02-11 14:08:23 +01:00
6d2998588d
Add xt_LOGMARK (nfmark, ctmark, secmark logger)
...
xt_LOGMARK dumps the nfmark (packet mark), ctmark (connection mark)
and/or secmark to syslog.
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-01-30 13:54:57 +01:00
f53dc9fbaf
Add plural target (un)registration to compat glue
...
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-01-30 03:50:16 +01:00
47b700b0f5
Add a compat wrapper to make modules work with older Linux.
...
The extension modules use the API of a fairly recent kernel, if not
even the networking git tree. To make it work with older Linux
kernels, an API wrapper is added. Should compile against
running-kernels Linux 2.6.19..current (tested: 2.6.22..current).
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-01-29 15:40:57 +01:00
7a981b17b5
Initial commit.
...
Populate the iptables-addons repository with two modules, xt_TARPIT
and xt_TEE, as a starting point.
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de >
2008-01-29 03:57:08 +01:00
Jan Engelhardt