Jan Engelhardt
0de9f38412
ipset: update to 4.2
2010-01-25 11:54:34 +01:00
Jan Engelhardt
b4b0ab9ef4
Xtables-addons 1.22
2010-01-22 20:14:37 +01:00
Jan Engelhardt
ebd603b8fb
doc: update changelog
2009-12-31 16:38:34 +01:00
Jan Engelhardt
1945c545dd
geoip: use /usr/share/xt_geoip instead of /var/geoip
2009-12-31 16:37:42 +01:00
Jan Engelhardt
50c4ee1a5e
Xtables-addons 1.21
2009-12-09 21:24:12 +01:00
Jan Engelhardt
3c0397867b
Xtables-addons 1.20
2009-11-19 12:14:26 +01:00
Chris Blum
3f7288abfe
ipp2p: fix Gnutella line ending detection
...
There is another mistake in the code. I have checked the Gnutella
protocol specification -- looks like the line separation is 0x0d-0x0a
and not 0x0a-0x0d (it seemed obvious but I was not sure and thought
they cannot have possibly got that wrong...). It would certainly
explain why I have never seen a match on any of my systems.
2009-10-16 16:36:12 +02:00
Chris Blum
17a0312848
ipp2p: add more boundary checks
2009-10-14 20:08:20 +02:00
Jan Engelhardt
bc5a7d8e3a
Xtables-addons 1.19
2009-10-12 18:57:08 +02:00
Jan Engelhardt
0628857068
Merge branch 'pknock'
2009-10-12 18:56:10 +02:00
Jan Rafaj
fa601c0fa7
pknock: add manpage for pknock
2009-10-12 18:49:01 +02:00
Jan Engelhardt
00573d0172
Merge branch 'pknock'
2009-10-12 18:46:53 +02:00
Jan Engelhardt
c7036a88f1
doc: pknock changelog
2009-10-12 18:40:34 +02:00
Jan Engelhardt
430723ece1
ipp2p: try to address underflows
...
Report by: Christian Blum <chrblum@users.sourceforge.net >
"I have found that they panic in an interrupt within xt_ipp2p, function
search_all_gnu(). It's a bounds checking problem; when I add this [a
check for plen >= 65535] at the beginning [of the function] the
servers run fine (very similar to find_all_kazaa())."
2009-10-08 17:26:36 +02:00
Jan Engelhardt
379e685b0f
doc: update changelog
...
Sometimes I forget to adjust it with the particular commit and then
this piles up a little..
2009-10-07 00:10:45 +02:00
Jan Engelhardt
48325a209e
build: support for Linux 2.6.32
2009-10-07 00:02:56 +02:00
Jan Rafaj
e0276b4875
pknock: disallow running peer_gc too early
...
It is no longer possible to specify gc_expir_time with a time lower
than its default value (65000 msecs). This is to avoid running
peer_gc() earlier than 1 minute [well, 65 s actually] in the future,
which would otherwise render anti-spoof protection in SPA mode
non-functional.
2009-10-04 21:00:04 +02:00
Jan Rafaj
0d8ae29a60
pknock: "strict" and "checkip" flags were not displayed in iptables -L
2009-10-04 00:42:13 +02:00
Jan Engelhardt
b07434386b
ipset: fix compile error on 2.6.31-rt
...
ip_set.c:42:8: warning: type defaults to 'int' in declaration of
'DECLARE_MUTEX'
2.6.31-rt has cleaned up the naming mess in semaphore.h. Without
making use of #if hackery, we can use struct semaphore as declaration
plus an explicit sema_init() call.
2009-09-12 02:41:36 +02:00
Jan Engelhardt
26f25a43a9
Xtables-addons 1.18
2009-09-09 17:37:07 +02:00
Jan Engelhardt
bcda21a2b0
Merge branch 'psd'
2009-09-09 17:27:28 +02:00
Jan Engelhardt
3e26335cbd
ipset: fast forward to v3.2
2009-09-05 03:49:37 +02:00
Mohd Nawawi Mohamad Jamili
2aa32d4bce
psd: import 20090807 code base
2009-08-12 21:59:33 +02:00
Jan Engelhardt
1c55aec64a
quota2: use strtoull instead of strtoul
2009-07-10 17:18:48 +02:00
Jan Engelhardt
dd26ab476c
quota2: extend locked period during cleanup
2009-07-04 02:11:25 +02:00
Jan Engelhardt
4bf667d8eb
quota2: reduce memory footprint for anonymous counters
...
48/64 bytes (32/64-bit arch, resp.) per counter.
2009-07-04 01:53:35 +02:00
Jan Engelhardt
822c6bebe2
quota2: support nameless counters
2009-07-02 02:21:11 +02:00
Jan Engelhardt
fdf42a3a50
build: support for Linux 2.6.31-rc1
2009-07-02 01:51:40 +02:00
Jan Engelhardt
ee24cd1ac1
Xtables-addons 1.17
2009-06-16 16:25:53 +02:00
kd6lvw
71812a2053
build: support for Linux 2.6.30
...
Fix a compile error with xt_quota2. Linux kernel commit
v2.6.29-7544-g3ba113d removed the "owner" member.
2009-06-12 03:41:00 +02:00
kd6lvw
31e4e18998
build: use readlink -f in extensions/ipset/
...
Supplement to v1.5.7-5-gf373750.
2009-06-12 03:37:18 +02:00
Marek Michalkiewicz
9fb2ffe1d3
IPMARK: print missing --shift parameter
2009-06-12 03:33:54 +02:00
Jan Engelhardt
23e83aa04c
Xtables-addons 1.16
2009-05-27 14:55:51 +02:00
Jan Engelhardt
77ee63ba8b
ipset: fast forward to 3.0
2009-05-27 14:51:15 +02:00
Jan Engelhardt
49e59a6dce
RAWNAT: make iptable_rawpost compile with 2.6.30-rc5
2009-05-15 18:35:53 +02:00
Jan Engelhardt
fe7a66f3cb
Xtables-addons 1.15
2009-04-30 20:58:23 +02:00
Jan Engelhardt
4bcb7077c0
Merge branch 'iface'
2009-04-27 20:50:05 +02:00
Jan Engelhardt
f5ed98fbf5
iface: update documentation
...
For one, the tabs must go as they cause alignment problems. Also
update the manpage with proper markup.
2009-04-26 23:20:38 +02:00
Jan Engelhardt
9d5f4bf468
Merge branch 'RAWNAT'
2009-04-26 21:47:43 +02:00
Jan Engelhardt
637516f2d4
RAWNAT: add extension's kernel and userspace modules
...
RAWNAT provides stateless 1:1 network address translation.
2009-04-26 21:44:54 +02:00
Jan Engelhardt
b427c930f2
build: add kernel version check to configure
2009-04-26 20:22:40 +02:00
Roman Hoog Antink
34f39756ec
condition: fix intrapositional negation sign
2009-04-17 16:12:30 +02:00
Bryan Duff
e36c7575fc
condition: compile fix for 2.6.30-rc
2009-04-17 16:01:45 +02:00
Jan Engelhardt
0a23bd2580
doc: update changelog
2009-04-14 21:43:13 +02:00
Jan Engelhardt
50d14a33c0
ipp2p: fix typo in error message
...
Reference: http://bugs.gentoo.org/show_bug.cgi?id=250407
Reported-by: Mike <empx@gmx.de >
2009-04-10 19:42:59 +02:00
Jan Engelhardt
c64a78ffcc
ipp2p: fix bogus varargs call
...
Reference: http://bugs.gentoo.org/show_bug.cgi?id=250407
Reported-by: Mike <empx@gmx.de >
2009-04-10 19:34:56 +02:00
Jan Engelhardt
4997b326f6
fuzzy: fix bogus comparison logic leftover from move to new 1.4.3 API
2009-04-05 10:36:16 +02:00
Jan Engelhardt
7dd96ec357
Xtables-addons 1.14
2009-03-31 22:55:29 +02:00
Jan Engelhardt
ba6aa51f91
SYSRQ: do proper L4 header access in IPv6 code
2009-03-27 21:06:26 +01:00
Jan Engelhardt
beb7546e20
SYSRQ: ignore non-UDP packets
2009-03-27 20:27:03 +01:00