Jan Engelhardt
c7f60a33c5
ipset-4: remove unsupported version from the VCS
2011-08-20 20:30:03 +02:00
Jan Engelhardt
65b75fc19c
Xtables-addons 1.38
2011-08-20 17:02:31 +02:00
Jan Engelhardt
9ccd32d840
ipset: fix compile error due to changed function signature with Linux 3.1
2011-08-20 16:45:58 +02:00
Jan Engelhardt
939d3c8b27
xt_ipp2p: support UDPLITE
2011-08-16 14:50:53 +02:00
Jan Engelhardt
c2d93e16fd
xt_SYSRQ: fix UDPLITE header lookup in IPv6
2011-08-12 15:44:27 +02:00
Jan Engelhardt
04aed87cb6
xt_pknock: support UDPLITE
2011-08-12 15:42:44 +02:00
Jan Engelhardt
5ef3a7c436
xt_CHECKSUM: abort build when the feature is already provided by mainline
2011-08-12 15:42:39 +02:00
Jan Engelhardt
27a77b62f5
Merge branch 'ipset'
...
Conflicts:
doc/changelog.txt
2011-08-12 15:37:50 +02:00
Jan Engelhardt
a141cc311c
xt_psd: support UDPLITE
2011-08-11 15:47:20 +02:00
Jan Engelhardt
6c17eb46b5
xt_psd: restore skb_header_pointer functionality for UDP
2011-08-11 15:46:53 +02:00
Jan Engelhardt
74ea647303
ipset: update to 6.8-genl
2011-07-28 13:56:45 +02:00
Jan Engelhardt
e0154bfa4c
xt_TEE: abort build when the feature is already provided by mainline
2011-07-28 13:50:38 +02:00
Jan Engelhardt
cd18e2479c
xt_TARPIT: fix kernel warning about RTAX_HOPLIMIT being used
2011-07-26 01:57:45 +02:00
Jan Engelhardt
6e8fb7f231
Xtables-addons 1.37
2011-06-25 00:57:02 +02:00
John Haxby
77b29a62ee
xt_SYSRQ: include host address in digest
...
The xt_SYSRQ hash now includes the destination IPv4 or IPv6 address
which makes it harder to replay a request to many different machines
in the hope that some of them are using the same password.
2011-06-25 00:03:28 +02:00
John Haxby
33db992c39
xt_SYSRQ: make IPv6 trigger work again
...
IPv6 sysrq never worked because of bad pointer arithmetic.
2011-06-24 23:42:38 +02:00
Martin Barrowcliff
85d8f98dd7
xt_TARPIT: fix a kernel oops in --reset mode
...
1. Moved misplaced code that was causing kernel oops in reset mode.
2. Added payload size calc to honeypot mode, so ack sequence may ACK
the length of client's sent payload packets correctly.
3. Modified TTL for honeypot mode so we look more like a Windows
machine.
2011-06-24 22:09:34 +02:00
Jan Engelhardt
4203259e5a
Xtables-addons 1.36
2011-06-03 16:45:29 +02:00
Changli Gao
a5355e74ea
xt_geoip: avoid recursive function calls
...
The stack memory is very limited in Linux kernel.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de >
2011-04-14 09:07:25 +02:00
Jan Engelhardt
757bf0e993
Xtables-addons 1.35
...
Trim the changelog to only reveal changes relevant to the end user.
2011-04-11 18:37:32 +02:00
Jan Engelhardt
cea4817a46
Merge branch 'ipset-6'
...
Conflicts:
INSTALL
mconfig
2011-04-11 04:23:18 +02:00
Jan Engelhardt
2dc79fe008
ipset; update to ipset-6.3 (genl)
...
* Handle EAGAIN from autoloading code.
* Turn one nfgenmsg site into genlmsg to avoid protocol mismatch
2011-04-11 04:11:30 +02:00
Jan Engelhardt
b60f8f1de2
Xtables-addons 1.34
2011-04-07 15:15:39 +02:00
Jan Engelhardt
499c6db75e
ipset: update to ipset-6.2
2011-04-04 00:39:50 +02:00
Jan Engelhardt
c53a86874d
build: notify of unsupported Linux kernel versions
...
I would like to move forward a bit, and today, two issues prompted
me to start removing old code:
* make 3.82 does not like mixing normal rules with implicit rules,
which rejects Makefiles of Linux kernels before 2.6.34.
* xt_DNETMAP uses functionality not available before 2.6.29.
2011-04-04 00:10:23 +02:00
Marek Kierdelewicz
f4882ca029
xt_DNETMAP: support for kernels below 2.6.34
2011-04-03 23:50:10 +02:00
Jan Engelhardt
8fd3eb56eb
xt_DNETMAP: add missing alias
2011-04-03 23:49:53 +02:00
Jan Engelhardt
32871bad39
xt_pknock: avoid inversion of rule lookup that led to warnings
...
Commit v1.18-48-g58839b9 had this screwed up.
2011-02-25 01:22:16 +01:00
Jan Engelhardt
0ba44bd461
xt_pknock: avoid crash when hash TFM could not be allocated
2011-02-25 01:22:16 +01:00
Jan Engelhardt
18043f3e3a
ipset: update to 6.0
2011-02-24 00:40:23 +01:00
Jan Engelhardt
9f59f21614
Xtables-addons 1.33
2011-02-02 05:21:56 +01:00
Jan Engelhardt
ebfa77795a
build: preliminary support for iptables 1.4.11
2011-02-02 05:09:58 +01:00
Jan Engelhardt
4a8aa505c4
build: support for Linux up to 2.6.38
...
No API changes that needed to be taken care of, so just bump the
version check in configure.ac.
2011-02-02 04:59:58 +01:00
Jan Engelhardt
2a61ca7d4b
build: fix missing inclusion of dependency rules
2011-02-02 04:53:30 +01:00
Jan Engelhardt
07bf41a294
Merge branch 'geoip'
2011-02-02 04:48:40 +01:00
Jan Engelhardt
07cd29d9ce
xt_geoip: IPv6 support
2011-02-02 04:47:28 +01:00
Jan Engelhardt
1b53724a61
ipset: update to 5.4.1
2011-01-22 15:56:44 +01:00
Jan Engelhardt
3141b2ff86
ipset: update to 5.3
2011-01-19 02:55:23 +01:00
Jan Engelhardt
8ea781e257
build: fix objdir builds for ipset-5 (xt-a specific)
2011-01-19 02:35:49 +01:00
Jan Engelhardt
65e97a66e6
build: restore functionality of configure's --without-kbuild option
2011-01-13 20:25:00 +01:00
Jan Engelhardt
d82b20ead7
xt_LOGMARK: fix detection of untracked connection for Linux >= 2.6.36
2011-01-12 01:53:38 +01:00
Jan Engelhardt
80ded69d77
Xtables-addons 1.32
2011-01-04 04:37:58 +01:00
Jan Engelhardt
7d8ffffd85
ipset: import ipset 5.2+GENL
...
This requires Linux 2.6.35 or newer to build, so it is deactivated by
default in the "mconfig" file.
2011-01-04 04:31:46 +01:00
Jan Engelhardt
3ee2b5fb93
doc: cleanup changelog (and use ISO-8601 format)
2010-12-04 16:38:30 +01:00
Jozsef Kadlecsik
5bcdf7f10e
ipset: update to 4.5
2010-12-04 16:32:28 +01:00
Jan Engelhardt
81ad2519a9
Xtables-addons 1.31
2010-11-05 19:42:22 +01:00
Jan Engelhardt
f65ea59795
Merge branch 'gradm'
2010-11-03 23:58:59 +01:00
Jan Engelhardt
baf7b1091a
Merge remote branch 'origin/iface'
2010-11-03 23:58:35 +01:00
Jan Engelhardt
db76ea9a5c
xt_iface: allow matching against incoming/outgoing interface
2010-10-31 01:53:23 +02:00
Jan Engelhardt
3ed1a3cbf0
build: autodetect value for --with-xtlibdir
2010-10-31 01:01:13 +02:00
