Jan Engelhardt
c23df41f6e
compat_xtables: return bool for match_check and target_check (doc)
2010-09-22 22:30:10 +02:00
Jan Engelhardt
fb2eea69af
compat_xtables: return bool for match_check and target_check in 2.6.23..34
...
Reported-by: Tomasz Pala <gotar@polanet.pl >
2010-09-01 15:02:04 +02:00
Jan Engelhardt
4815e3a8a6
doc: add API helper files
...
These files should be a very quick reference to the Xtables APIs of
previous Linux kernel versions and Xtables-addons. Their contents have
been reformatted so as to be usable with diff -u.
2010-09-01 12:06:27 +02:00
Jan Engelhardt
f9922c6f85
configure: pkglibexecdir requires automake >= 1.10.2
2010-08-28 13:56:12 +02:00
Jan Engelhardt
24491d55d7
Xtables-addons 1.28
2010-07-24 11:33:11 +02:00
Jan Engelhardt
7ab69a17fa
geoip: add -D option to geoip_build_dir.pl
...
This option allows to specify a particular output directory. This help
Makefiles in that they do not need to use cd.
2010-07-24 11:22:37 +02:00
Jan Engelhardt
d2339410b2
geoip: add .gitignore
2010-07-24 11:22:37 +02:00
Jan Engelhardt
649caf61e8
geoip: rename original script to build_db
2010-07-24 11:22:37 +02:00
Jan Engelhardt
922a9be87d
geoip: import scripts for building the xt_geoip database
2010-07-24 11:22:33 +02:00
Jan Engelhardt
4d48511f01
xt_length2: IPv6 jumbogram support
2010-07-24 10:57:03 +02:00
Jan Engelhardt
6dedbef3d4
doc: keep manpage ordered
...
`find` could return entries out of order.
2010-07-19 11:14:29 +02:00
Patrick McHardy
fe49f9b6a4
xt_CHECKSUM: use xtables_param_act
2010-07-15 12:21:16 +02:00
Patrick McHardy
283974cbbe
xt_CHECKSUM: only use __u* in public header files
2010-07-15 12:21:16 +02:00
Patrick McHardy
7deca86132
xt_CHECKSUM: remove unnecessary header inclusions
2010-07-15 12:21:16 +02:00
Jan Engelhardt
7d6435f422
doc: update geoip db url
...
My hopto.org zone disappeared after I left it unattended...
2010-07-12 00:49:23 +02:00
Jan Engelhardt
748f5cfdd0
xt_CHECKSUM: remove pointless $
2010-07-11 17:59:47 +02:00
Michael S. Tsirkin
d402cec807
xt_CHECKSUM: initial import
...
This adds a "CHECKSUM" target, which can be used in the iptables mangle
table.
You can use this target to compute and fill in the checksum in a packet
that lacks a checksum. This is particularly useful, if you need to work
around old applications such as dhcp clients, that do not work well with
checksum offloads, but don't want to disable checksum offload in your
device.
The problem happens in the field with virtualized applications. For
reference, see Red Hat bz 605555, as well as
http://www.spinics.net/lists/kvm/msg37660.html
Signed-off-by: Michael S. Tsirkin <mst@redhat.com >
2010-07-11 17:54:54 +02:00
John Haxby
b42190c04b
xt_SYSRQ: fix a couple of problems
...
The first problem is that the error response from crypto_alloc_hash()
should be extracted from the pointer before setting the pointer to NULL.
The second error is that only the first half of the password hash is
checked which slightly weakens the password checking.
Signed-off-by: John Haxby <john.haxby@oracle.com >
2010-06-25 12:20:26 +02:00
Jan Engelhardt
4dcefe4b95
xt_geoip: fix possible out-of-bounds access
...
It is possible for geoip_bsearch() to pick mid == sizeof(subnets).
Consider a set with a single entry and a "address to test"
higher than the range:
1st call: lo = 0, hi = 1 -> mid will be 0
2nd call: lo = 1, hi = 1 -> mid will be 1
On the 2nd call, we'll examine random data.
Reported-by: Florian Westphal <fw@strlen.de >
2010-06-13 10:40:07 +02:00
Jan Engelhardt
a2662b0121
RAWNAT: IPv6 variants erroneously rejected masks /33-/128
2010-06-12 09:23:59 +02:00
Jan Engelhardt
03354eed44
build: make configure CFLAGS=-ggdb3 have effect on .so files
2010-06-12 09:22:35 +02:00
Changli Gao
ddda6972a4
RAWNAT: fix incorrect mask in rawnat_ipv6_mask
...
I really think it is a typo mistake. :)
Signed-off-by: Changli Gao <xiaosuo@gmail.com >
2010-05-29 12:35:14 +02:00
Jan Engelhardt
8e7359bb92
Merge remote branch 'sf/master'
2010-05-29 10:16:04 +02:00
Jan Engelhardt
40786af1c0
build: update tarball target
2010-05-19 19:32:28 +02:00
Jan Engelhardt
f6e2fb815e
Xtables-addons 1.27
2010-05-16 22:19:02 +02:00
Jan Engelhardt
f171a0f07e
xa-d-m: remove superfluous protos
2010-05-14 13:03:16 +02:00
Jan Engelhardt
d17ddb9c94
Merge branch 'api35'
2010-05-14 11:52:18 +02:00
Jan Engelhardt
54d80a73b4
compat_xtables: more 2.6.35 support
2010-05-14 11:51:34 +02:00
Jan Engelhardt
43921c5834
compat_xtables: move to 2.6.35 xt_action_param (3/3)
...
Since the last merge of the "api35" branch, further changes were
included into nf-next. This set of three commits updates the
xtables-addons API to match that.
2010-05-13 19:45:56 +02:00
Jan Engelhardt
9a18a05d02
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
Jan Engelhardt
5b472be9bb
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
Jan Engelhardt
4dd35fb564
compat_xtables: move 2.6.28+ xtnu_target_run code
2010-05-13 16:52:55 +02:00
Jan Engelhardt
b32d6dad90
compat_xtables: remove unused list member from xtnu_{match,target}
2010-05-13 16:03:05 +02:00
Jan Engelhardt
5b2cb97c06
compat_xtables: annotate struct xtnu_{match,target}->name
2010-05-13 15:58:50 +02:00
Jan Engelhardt
ca894d6687
compat_xtables: improve memory usage in struct xtnu_{match,target}
2010-05-13 15:51:54 +02:00
Jan Engelhardt
db717ec479
xt_quota2: reduce printf complexity
2010-05-13 15:39:29 +02:00
Jan Engelhardt
a46ca95078
Xtables-addons 1.26
2010-04-30 22:54:06 +02:00
Jan Engelhardt
8b2a266db0
compat_xtables: fix 2.6.34 compile error due to a typo
2010-04-30 22:50:52 +02:00
Jan Engelhardt
03e10ff544
Xtables-addons 1.25
2010-04-26 14:14:02 +02:00
Jan Engelhardt
37986fd785
Merge branch 'tee'
2010-04-26 14:12:03 +02:00
Jan Engelhardt
8ff64f4ef4
xt_TEE: move skb cleanup outwards
2010-04-15 23:47:07 +02:00
Jan Engelhardt
93f6c1a312
xt_TEE: remove debug printks
2010-04-15 22:54:05 +02:00
Jan Engelhardt
b535abce2e
xt_TEE: use nf_conntrack_untracked
...
No reason having to use our own nf_conntrack bucket.
2010-04-15 21:29:37 +02:00
Jan Engelhardt
5db988626f
Merge branch 'condition'
2010-04-15 21:10:36 +02:00
Jan Engelhardt
c6f8f72bf1
xt_condition: use non-interruptible check routine
...
Patrick McHardy let's it be known: "No need for interruptible locking,
the section is very short and usually there's only a single iptables
process running at a time."
2010-04-09 12:38:48 +02:00
Jan Engelhardt
47cbb07162
xt_condition: remove unnecessary RCU protection
...
The module does not use the RCU mechanism, so calling
list_add_rcu/list_del_rcu does not make much sense either.
2010-04-09 12:28:12 +02:00
Jan Engelhardt
79c55ab325
Merge branch 'api35'
2010-04-09 12:24:21 +02:00
Jan Engelhardt
11ab4d0acc
compat_xtables: correct compile errors
2010-04-09 12:24:19 +02:00
Jan Engelhardt
8ae9ac5433
xt_TEE: use less expensive pskb_copy
2010-04-07 01:31:18 +02:00
Jan Engelhardt
2060a58912
build: do not print enter/exit during banner
2010-04-05 02:22:49 +02:00
