Martin Barrow Cliff
fa1348455d
xt_TARPIT: honeypot and reset modes
...
Honeypot mode attempts to maintain a normal connection for the purpose
of capturing payload packets.
Reset mode provides the ability to send a reset packet in lieu of
using the DROP or REJECT targets.
2011-05-31 22:41:51 +02:00
Jan Engelhardt
1a5c079e6b
Merge branch 'ipset-6'
2011-05-31 16:56:26 +02:00
Jan Engelhardt
75b3762ef4
build: support for Linux up to 3.0
2011-05-31 16:56:23 +02:00
Jan Engelhardt
cfb72bf468
ipset: update to 6.6a-genl
2011-05-31 16:14:44 +02:00
Jan Engelhardt
1b0790d151
ipset-6: move manpage into src/
2011-05-31 16:09:03 +02:00
Changli Gao
a5355e74ea
xt_geoip: avoid recursive function calls
...
The stack memory is very limited in Linux kernel.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de >
2011-04-14 09:07:25 +02:00
Jan Engelhardt
757bf0e993
Xtables-addons 1.35
...
Trim the changelog to only reveal changes relevant to the end user.
2011-04-11 18:37:32 +02:00
Jan Engelhardt
cea4817a46
Merge branch 'ipset-6'
...
Conflicts:
INSTALL
mconfig
2011-04-11 04:23:18 +02:00
Jan Engelhardt
2dc79fe008
ipset; update to ipset-6.3 (genl)
...
* Handle EAGAIN from autoloading code.
* Turn one nfgenmsg site into genlmsg to avoid protocol mismatch
2011-04-11 04:11:30 +02:00
Jan Engelhardt
b60f8f1de2
Xtables-addons 1.34
2011-04-07 15:15:39 +02:00
Jan Engelhardt
499c6db75e
ipset: update to ipset-6.2
2011-04-04 00:39:50 +02:00
Jan Engelhardt
509953daec
build: notify of unsupported Linux kernel versions
2011-04-04 00:18:54 +02:00
Jan Engelhardt
c53a86874d
build: notify of unsupported Linux kernel versions
...
I would like to move forward a bit, and today, two issues prompted
me to start removing old code:
* make 3.82 does not like mixing normal rules with implicit rules,
which rejects Makefiles of Linux kernels before 2.6.34.
* xt_DNETMAP uses functionality not available before 2.6.29.
2011-04-04 00:10:23 +02:00
Jan Engelhardt
309b960012
Merge branch 'dnetmap'
2011-04-03 23:59:18 +02:00
Marek Kierdelewicz
f4882ca029
xt_DNETMAP: support for kernels below 2.6.34
2011-04-03 23:50:10 +02:00
Jan Engelhardt
8fd3eb56eb
xt_DNETMAP: add missing alias
2011-04-03 23:49:53 +02:00
Jan Engelhardt
94574fb829
Merge branch 'pknock'
...
Kernel warnings and oopses resulting from the inversion (HEAD^2)
reported by user mancha (mancha!debian-tor@gateway/tor-sasl/mancha) on
irc.freenode.net/#netfilter.
2011-02-28 20:51:25 +01:00
Jan Engelhardt
32871bad39
xt_pknock: avoid inversion of rule lookup that led to warnings
...
Commit v1.18-48-g58839b9 had this screwed up.
2011-02-25 01:22:16 +01:00
Jan Engelhardt
0ba44bd461
xt_pknock: avoid crash when hash TFM could not be allocated
2011-02-25 01:22:16 +01:00
Jan Engelhardt
d4e6e3d155
xt_pknock: indent
2011-02-25 01:20:12 +01:00
Jan Engelhardt
18043f3e3a
ipset: update to 6.0
2011-02-24 00:40:23 +01:00
Jan Engelhardt
ff27f61477
ipset: rename ipset-5 directory to ipset-6
2011-02-24 00:02:18 +01:00
Jan Engelhardt
9f59f21614
Xtables-addons 1.33
2011-02-02 05:21:56 +01:00
Jan Engelhardt
7a8bfed52c
xt_geoip: keep compiling for <= 2.6.23
2011-02-02 05:21:56 +01:00
Jan Engelhardt
1edc9b943b
build: do not forget including path for compat_user.h
2011-02-02 05:15:09 +01:00
Jan Engelhardt
ebfa77795a
build: preliminary support for iptables 1.4.11
2011-02-02 05:09:58 +01:00
Jan Engelhardt
4a8aa505c4
build: support for Linux up to 2.6.38
...
No API changes that needed to be taken care of, so just bump the
version check in configure.ac.
2011-02-02 04:59:58 +01:00
Jan Engelhardt
4654ee127f
xt_DNETMAP: disable by default for now
...
I wanted xt_DNETMAP to be included in the release already, though
because it only compiled with Linux >= 2.6.34 currently (some work
will be needed), deactive it by default.
2011-02-02 04:55:34 +01:00
Jan Engelhardt
a7a77d7146
Merge branch 'dnetmap'
2011-02-02 04:54:25 +01:00
Jan Engelhardt
2a61ca7d4b
build: fix missing inclusion of dependency rules
2011-02-02 04:53:30 +01:00
Jan Engelhardt
39de351a91
libxt_geoip: update manual page with new tool syntax
2011-02-02 04:51:38 +01:00
Jan Engelhardt
07bf41a294
Merge branch 'geoip'
2011-02-02 04:48:40 +01:00
Jan Engelhardt
07cd29d9ce
xt_geoip: IPv6 support
2011-02-02 04:47:28 +01:00
Jan Engelhardt
eb9634aee6
xt_geoip: v4/v6 name preparations
2011-02-02 04:43:36 +01:00
Jan Engelhardt
19f241a09c
xt_geoip: cleanups, preparations for IPv6 geoip
2011-02-02 01:55:09 +01:00
Jan Engelhardt
0a29c1d32f
xt_DNETMAP: style considerations
...
Clean up the files a bit. For one, break dangerously right-indented
function headers, and correct some spaces that should be tab.
2011-01-27 03:23:22 +01:00
Jan Engelhardt
93a17fdde0
geoipdb builder: get rid of some global variables
2011-01-27 03:05:30 +01:00
Jan Engelhardt
80444b0d31
geoipdb builder: separate into functions
2011-01-27 03:02:39 +01:00
Jan Engelhardt
f180c0e5c6
geoipdb tools: IPv6 support
2011-01-27 02:57:00 +01:00
Jan Engelhardt
ca8ebe4467
Merge remote branch 'origin/master'
2011-01-22 18:10:18 +01:00
Jan Engelhardt
e82410735a
xt_DNETMAP: use compat_xtables layer to run on older kernels
2011-01-22 18:09:15 +01:00
Jan Engelhardt
89e72bb0f4
doc: Add version information to README
2011-01-22 17:34:48 +01:00
Jan Engelhardt
77b9f2024c
Merge branch 'account'
2011-01-22 17:34:43 +01:00
Jan Engelhardt
0edb572f6e
ACCOUNT: update to 1.16
...
There are no changes to integrate from ipt_ACCOUNT because xt_ACCOUT
already, by way of the compat_xtables layer, supports multiple kernel
versions.
2011-01-22 17:34:06 +01:00
Jan Engelhardt
8b1ff64b8b
Merge branch 'pknock'
2011-01-22 17:33:45 +01:00
Jan Engelhardt
ebb61aa3c9
pknock: resolve warnings about unused variables
2011-01-22 17:32:38 +01:00
Jan Engelhardt
bd2e6108f3
pknock: use build flags in pknock Makefile
2011-01-22 17:31:53 +01:00
Jan Engelhardt
288492c820
xt_DNETMAP: order mconfig
2011-01-22 17:24:51 +01:00
Jan Engelhardt
e425c8f277
xt_DNETMAP: use more appropriate format specifiers
...
Substitute %i -> %d. Use %u for prefix length.
2011-01-22 17:23:13 +01:00
Jan Engelhardt
e3e88827fb
xt_DNETMAP: use permission mnemonic constants
2011-01-22 15:59:15 +01:00
