- a8a4f5d Adds missing explanations about FIN in mask part of '--syn' in libip[6]_tcp.c by Patrick McHardyYasuyuki KOZAKAI · 17 years ago
- a70d29f Adds missing FIN to mask part generated by '--syn' of libip6t_tcp by Yasuyuki KOZAKAI · 17 years ago
- ef329f2 Fixes compile error of connlimit where NO_SHARED_LIBS=1 is specified by Yasuyuki KOZAKAI · 17 years ago
- 21df4af PATCH: Add connlimit to iptables. by Jan Engelhardt · 17 years ago
- 0c6bf10 libipt_statistic: add a few missing validity checks by Nicolas Bouliane · 17 years ago
- fde3953 Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer by Yasuyuki KOZAKAI · 17 years ago
- 06e88dd Add Jozsef's TRACE target. by Patrick McHardy · 17 years ago
- f4cb71c Fixes build error of conntrack match because of missing ip_conntrack_tuple.h by Yasuyuki KOZAKAI · 17 years ago
- 1d9872d libipt_hashlimit doc update by Jan Engelhardt · 17 years ago
- ef399a3 Add --random option to DNAT and REDIRECT targets and fix the manpage mess this option left behind. by Patrick McHardy · 17 years ago
- b8c0b78 update quota manpage for SMP (Phil Oester) by Phil Oester · 17 years ago
- 9c67def Fix iptables-save with --random option by Patrick McHardy · 17 years ago
- e656e26 Remove unnecessary IP_NAT_RANGE_PROTO_RANDOM ifdefs. by Patrick McHardy · 17 years ago
- 40d5475 Use nf_conntrack headers instead of ip_conntrack ones and add sanitized versions. by Patrick McHardy · 17 years ago
- 10a234a Remove unnecessary ip_conntrack/ip_nat includes by Patrick McHardy · 17 years ago
- 191e3ff Fix cut and paste error breaking use of groups != 0 by Patrick McHardy · 17 years ago
- ae4b0b3 iptables: add random option to SNAT (Eric Leblond) by Eric Leblond · 17 years ago
- ee9e220 Reverted r6754. libipt_icmp has the option 'any', so it's unnecessary by Yasuyuki KOZAKAI · 17 years ago
- d9e7e65 Remove and readd with executable bit set. SVN doesn't seem to have a proper way of doing this. by Patrick McHardy · 17 years ago
- 6f9c09e Fixes man page for tcp, udp, icmp{,6}. They are not loaded when only '-p' is by Yasuyuki KOZAKAI · 17 years ago
- bee2bf9 Forgot to add TCPMSS target to PF6_EXT_SLIB by Patrick McHardy · 17 years ago
- 3122ce9 Error if no ICMP type is specified even though user intended to use icmp match. by Yasuyuki KOZAKAI · 17 years ago
- 00d46e1 Add ip6tables mh extension (Masahide NAKAMURA <nakam@linux-ipv6.org>) by Masahide NAKAMURA · 17 years ago
- 4fc6669 Bugzilla #535 by Patrick McHardy · 17 years ago
- c8c2ce3 Bugzilla #534: by Patrick McHardy · 17 years ago
- e407617 Add ip6tables TCPMSS extension (Arnaud Ebalard <arno@natisbad.org>) by Arnaud Ebalard · 17 years ago
- 9561606 Add UDPLITE multiport support by Patrick McHardy · 18 years ago
- 8a0b6ea Fix missing space in ruleset listing by Patrick McHardy · 18 years ago
- b1f5683 Remove extensions for unmaintained/obsolete patchlets by Patrick McHardy · 18 years ago
- a565d4e fix typo in manpage (thomas@aktaia.intevation.org) by thomas · 18 years ago
- 29f9184 Move extensions for pom patches to individual patchlets. by Patrick McHardy · 18 years ago
- e342bf7 Add target extensions for new NFLOG target by Patrick McHardy · 18 years ago
- 267a570 Fix /etc/network usage (Pablo Neira) by Pablo Neira Ayuso · 18 years ago
- 00524b2 Add ip6tables support for hashlimit match by Patrick McHardy · 18 years ago
- 3810013 Add ip6tables support for sctp match by Patrick McHardy · 18 years ago
- 0665217 - Add revision support to ip6tables. by Rémi Denis-Courmont · 18 years ago
- ed26b7b iptables segfaults when given "" to --log-prefix (Mike Frysinger <vapier@gentoo.org>) by Mike Frysinger · 18 years ago
- 48b46a6 Use correct types at error reporting (patch sent by H. Nakano) by Joszef Kadlecsik · 18 years ago
- ca9d8c2 Named realm (Simon Lodal <simon@parknet.dk>) by Simon Lodal · 18 years ago
- 10e0fbb Add statistic match extension by Patrick McHardy · 18 years ago
- 09c8e30 iptables: fix ipt_MARK documentation (Eric Leblond) by Eric Leblond · 18 years ago
- ae35309 update quota match for xtables + fix -D bug (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- c1eae41 Revert "proto_to_name duplication" patch, as noticed by Yasuyuki it can cause by Patrick McHardyJesper Brouer · 18 years ago
- a6c1d92 proto_to_name duplication (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- dbac8ad reduce parse_*_port duplication (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 58179b1 reduce service_to_port duplication (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 8a173ef please kill santa-claus (Pierre-Yves Ritschard <pierre-yves@spootnik.org>) by Pierre-Yves Ritschard · 18 years ago
- b1cda88 - force user to specify --icmpv6-type if icmpv6 match is required to load by Yasuyuki KOZAKAI · 18 years ago
- b46d0b2 ip6tables multiport does not support x:y (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 1da8351 iptables trivial compile warning cleanup (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 45ce294 size_t changed to socklen_t in getsockopt call by Joszef Kadlecsik · 18 years ago
- a05720b set match negation bug fixed by Joszef Kadlecsik · 18 years ago
- 3836fcc REDIRECT does not accept IP (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 75efcae trivial connlimit manpage fix (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- a895b9c Use lowercase letters for match name (Simon Lodal <simonl@parknet.dk>) by Simon Lodal · 18 years ago
- 8185801 Add information about :<port> syntax (Evan Miller <evanm@frap.net>) by Evan Miller · 18 years ago
- 630da41 secmark: Add libip6t_CONNSECMARK by James Morris · 18 years ago
- ff96830 D'oh .. I'm not too smart, forgot to add the new files in the previous patches :) by Patrick McHardy · 18 years ago
- 517ac15 secmark: Add libipt_CONNSECMARK by James Morris · 18 years ago
- d718220 secmark: Add libip6t_SECMARK by James Morris · 18 years ago
- 843b959 secmark: Add libipt_SECMARK by James Morris · 18 years ago
- c81a3f3 secmark: Add libselinux support by James Morris · 18 years ago
- 2452baf Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18. by Patrick McHardy · 18 years ago
- 2c627cf [IPTABLES,IP6TABLES]: check invalid esp spi range by Yasuyuki KOZAKAI · 18 years ago
- 1f312c2 fix loading shared library of ICMPv6 match. by Yasuyuki KOZAKAI · 18 years ago
- 708e058 [IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernel by Harald Welte · 18 years ago
- a52b8fe Correct iptables-save output of osf module (Daniel De Graaf) by Daniel De Graaf · 18 years ago
- d3476b2 make policy match compile independant of kernel headers by Harald Welte · 18 years ago
- 54c603a Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.h by Harald Welte · 18 years ago
- 38315b1 remove other bits of old ip pool code, people should use ipset (ipset.netfilter.org) these days by Harald Welte · 18 years ago
- 02e88f2 Prepare policy match for x_tables unification by making sure both by Patrick McHardy · 18 years ago
- 0829a2b fix 'save' (Michael Rash) by Michael Rash · 18 years ago
- 28e5b79 major manpage update (Yasuyuki Kozakai) by Yasuyuki KOZAKAI · 18 years ago
- 469d18f Add 'copy+paste' support for 'state' and 'connmark' match, as well as by Harald Welte · 18 years ago
- 4b1be69 add note about deprecated state by Harald Welte · 18 years ago
- 599d2a1 fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony) by Harald Welte · 18 years ago
- 3f34756 Fix "empty policy element" complaining in non-strict mode. by Noticed by Tom Eastep · 18 years ago
- 37b7c9b Clarify --tunnel-src/--tunnel-dst options by Patrick McHardy · 19 years ago
- a46d88d Move empty policy element check to also catch last element by Patrick McHardy · 19 years ago
- 1d0f57c Don't allow using --next option without specifying a policy element by Patrick McHardy · 19 years ago
- cddae3d Fix invalid assignment of tunnel-src to dest address (Patrick McHardy) by Patrick McHardy · 19 years ago
- 014a48f Add documentation for string match (Pablo Neira) by Pablo Neira · 19 years ago
- 402c311 fix iptables-save of 'goto' target (Closes: #410) by Harald Welte · 19 years ago
- dbbcf27 Add note that TCPMSS is only valid in the mangle table (not true today, but maybe someday) by Patrick McHardy · 19 years ago
- 11b8591 tcp-rst is the alias, not tcp-reset (Torsten Hilbrich) by Harald Welte · 19 years ago
- 524bb80 Add policy match extensions from patch-o-matic by Patrick McHardy · 19 years ago
- 2739cb8 Fix some gcc-4 warnings by Patrick McHardy · 19 years ago
- 6656e13 Don't eat numeric arguments for other extensions by Patrick McHardy · 19 years ago
- 5a4892b The conntrack match does not print any info for --ctproto, thus by Phil Oester · 19 years ago
- 361bac2 fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de) by Deti Fliegl · 19 years ago
- 55548fd The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep) by Tom Eastep · 19 years ago
- 8cf6591 Kernels higher than 2.6.10 don't support multiple --to arguments in by Phil Oester · 19 years ago
- 3643aca * specifying random seed for the Jenkins hash works as documented by KOVACS Krisztian · 19 years ago
- ae65b52 Make libipt_connbytes.c compile with the ipt_connbytes version that has been merged into the 2.6 kernel by Martin Josefsson · 19 years ago
- a4749bc Update manpage to reflect missing ability to SNAT to multiple ranges in 2.6.11-rc1 and later by Harald Welte · 19 years ago
- d2baafe Update manpage to reflect missing NAT to multiple ranges support in 2.6.11-rc1 and later. by Harald Welte · 19 years ago
- c6fbf41 update string match to reflect new kernel implementation (Pablo Neira) by Pablo Neira · 19 years ago
- e40b11d add support for new 'dccp' protocol match by Harald Welte · 19 years ago
- ae87b8a port Eric Leblond's NFQUEUE missing-break fix to ip6tables by Harald Welte · 19 years ago
- 6fdefcf Add missing 'break' to make parsing of NFQUEUE numbers work (Eric Leblond) by Eric Leblond · 19 years ago