ca8ebe4467
Merge remote branch 'origin/master'
2011-01-22 18:10:18 +01:00
89e72bb0f4
doc: Add version information to README
2011-01-22 17:34:48 +01:00
77b9f2024c
Merge branch 'account'
2011-01-22 17:34:43 +01:00
0edb572f6e
ACCOUNT: update to 1.16
...
There are no changes to integrate from ipt_ACCOUNT because xt_ACCOUT
already, by way of the compat_xtables layer, supports multiple kernel
versions.
2011-01-22 17:34:06 +01:00
8b1ff64b8b
Merge branch 'pknock'
2011-01-22 17:33:45 +01:00
ebb61aa3c9
pknock: resolve warnings about unused variables
2011-01-22 17:32:38 +01:00
bd2e6108f3
pknock: use build flags in pknock Makefile
2011-01-22 17:31:53 +01:00
6c709fd682
Merge branch 'ipset-5'
2011-01-22 15:56:57 +01:00
1b53724a61
ipset: update to 5.4.1
2011-01-22 15:56:44 +01:00
983b28fe8e
Merge branch 'ipset-5'
2011-01-21 23:26:11 +01:00
3141b2ff86
ipset: update to 5.3
2011-01-19 02:55:23 +01:00
980a53348f
build: use AM_CPPFLAGS in ipset-5/
2011-01-19 02:36:26 +01:00
8ea781e257
build: fix objdir builds for ipset-5 (xt-a specific)
2011-01-19 02:35:49 +01:00
7e39ee66e0
libxt_length: fix name of manpage file
2011-01-15 05:23:38 +01:00
65e97a66e6
build: restore functionality of configure's --without-kbuild option
2011-01-13 20:25:00 +01:00
d82b20ead7
xt_LOGMARK: fix detection of untracked connection for Linux >= 2.6.36
2011-01-12 01:53:38 +01:00
0168f8e8a2
doc: deprecate --with-xtlibdir configure option
2011-01-04 12:47:09 +01:00
dc22ec7bd1
build: mark Linux 2.6.37 as supported
2011-01-04 12:44:55 +01:00
80ded69d77
Xtables-addons 1.32
2011-01-04 04:37:58 +01:00
af1bfd7684
build: relax libmnl checks and document ipset requirements
2011-01-04 04:37:44 +01:00
b05712a14d
Merge branch 'ipset'
2011-01-04 04:32:05 +01:00
7d8ffffd85
ipset: import ipset 5.2+GENL
...
This requires Linux 2.6.35 or newer to build, so it is deactivated by
default in the "mconfig" file.
2011-01-04 04:31:46 +01:00
75212f3972
ipset: move ipset to ipset-4
2011-01-04 03:59:25 +01:00
77027ff8d3
build: use AM_CPPFLAGS
2010-12-30 08:36:15 +01:00
e9a70bbf15
build: workaround fixdep permission error
...
make -C ../../../linux-2.6.36-rc8-32
O=/usr/src/linux-2.6.36-rc8-32-obj/x86_64/desktop/. kernelrelease
HOSTCC scripts/basic/fixdep
/usr/src/linux-2.6.36-rc8-32/scripts/basic/fixdep.c:398:1:
fatal error: opening dependency file scripts/basic/.fixdep.d:
Permission denied
2010-12-30 08:08:24 +01:00
1dc1ae3ec5
build: restore compilation of ipset, add missing CFLAGS
...
ipset_iphash.c: In function "iphash_create_init":
ipset_iphash.c:42: error: "IP_NF_SET_HASHSIZE" undeclared (first use
in this function)
2010-12-11 18:23:44 +01:00
3bbea41b30
build: pass down AM_CFLAGS to sub-makes
...
Honor ipset/Makefile.am's AM_CFLAGS when compiling extensions.
2010-12-11 18:23:21 +01:00
549508499c
build: stop on error in subcommand
...
make only evaluates $? of an entire shell invocation. As such, if any
command in the chain can fail, $? needs to be thrown, and early so.
2010-12-11 03:36:46 +01:00
748498038a
gradm: fix compile error - add missing include
...
Hooray for 2.6.34 ALIGN bug still biting.
libxt_gradm.c:84: warning: implicit declaration of function 'ALIGN'
libxt_gradm.c:84: error: initializer element is not constant
libxt_gradm.c:84: error: (near initialization for 'gradm_mt_reg.size')
2010-12-11 01:50:29 +01:00
3ee2b5fb93
doc: cleanup changelog (and use ISO-8601 format)
2010-12-04 16:38:30 +01:00
5bcdf7f10e
ipset: update to 4.5
2010-12-04 16:32:28 +01:00
6599996ccc
build: remove unused -DXTABLES_LIBDIR from CFLAGS
2010-11-23 21:52:45 +01:00
bf8d44cca4
build: improve kernel version detection again
...
Apparently people don't just begin the EXTRAVERSION with a dash.
So rewrite it all and throw out /anything/ non-numeric.
2010-11-23 21:51:06 +01:00
1721b76a0f
xt_geoip: update manpage with instructions for db build
2010-11-17 15:13:16 +01:00
81ad2519a9
Xtables-addons 1.31
2010-11-05 19:42:22 +01:00
f65ea59795
Merge branch 'gradm'
2010-11-03 23:58:59 +01:00
baf7b1091a
Merge remote branch 'origin/iface'
2010-11-03 23:58:35 +01:00
2ae0413e31
build: properly detect versions like "2.6.36+"
2010-11-03 12:55:09 +01:00
db76ea9a5c
xt_iface: allow matching against incoming/outgoing interface
2010-10-31 01:53:23 +02:00
3ed1a3cbf0
build: autodetect value for --with-xtlibdir
2010-10-31 01:01:13 +02:00
9c4c76f9e2
libxt_gradm: match packets based on status of grsecurity RBAC
...
This patch adds a module which is useful to users of grsecurity's RBAC
system. It matches packets based on whether RBAC is enabled or
disabled.
See: http://grsecurity.net/
Signed-off-by: Anthony G. Basile <basile@opensource.dyc.edu >
Jan Engelhardt> Also, I do not see a xt_gradm.c in this patch.
This [xt_gradm.c] is part of the grsecurity patch which not only adds
the Xtables code, but also the RBAC code. Without the entire RBAC
stuff, xt_gradm does not make sense and so it is included with the
grsecurity patch to the kernel, and not this patch to Xtables-addons.
>Can you elaborate a bit on how this is useful in conjunction with
>rulesets? I could imagine it be used with LSM selctx'es for example,
>or another extension that tests for other RBAC attributes.
The idea here is that when the RBAC rulesets are not being enforced,
the system is more vulnerable and the user wants stricter firewall
rules. When RBAC is being enforced, one can relax the firewall and
access to services which are now better protected. In practice this
usually means allowing only access to some trusted IP(s) on boot
before RBAC is turned on.
2010-10-29 14:54:06 +02:00
7f33590df8
doc: update changelog
2010-10-29 14:48:27 +02:00
6733265358
xt_iface: reorder code for upcoming address checking
...
From now on, info->flags lists the flags to test, not just the flags
to test positively for.
2010-10-24 18:13:28 +02:00
f757049112
xt_iface: reduce indent by early return
2010-10-24 16:35:12 +02:00
21cdf786f7
xt_iface: move XT_IFACE_IFACE out of the public header
...
This flag is only used by the userspace component, so remove it from
the kernel header. Also change the value to 1<<16 for the same reason.
2010-10-24 16:31:26 +02:00
7c248871f8
build: respect LDFLAGS on make
...
Without setting these variables, ./configure LDFLAGS=-m32
would have no effect.
2010-10-20 19:20:34 +02:00
3500a38767
build: improve detection of kernel version and error handling
...
Thanks to Arkadiusz Miskiewicz from PLD for reporting.
make: *** kernelrelease: No such file or directory. Stop.
Found kernel version "...0" in
ERROR: That kernel version is not supported. Please see
INSTALL for minimum configuration.
2010-10-16 15:56:15 +02:00
cf9b60a57e
ACCOUNT: remove uses of obsolete IPT_CONTINUE
...
And replace by XT_CONTINUE, to avoid compilation errors in 2.6.37.
2010-10-16 15:45:31 +02:00
e5eedb25c2
LOGMARK: print remaining ct lifetime
2010-10-12 17:29:26 +02:00
e3ae8dcb81
Xtables-addons 1.30
2010-10-02 00:41:47 +02:00
Jan Engelhardt