- 7bdfca4 update manpage to reflect QUEUE / nfnetlink_queue / NFQUEUE changes by Harald Welte · 19 years ago
- 36d870c Fix NAT of ICMP ID ranges (Patrick McHardy) by Patrick McHardy · 19 years ago
- efa8fc2 get rid of numerous gcc-4 warnings by Harald Welte · 19 years ago
- daa1ef3 add NFQUEUE support for ipv4 and ipv6 by Harald Welte · 19 years ago
- 893b688 fix various missing header file / #define issues on old kernels. I've now tested compilation with kernels starting 2.4.17 by Harald Welte · 19 years ago
- 63d68bf we need to have this header file included, since old kernels don't define IP6T_LOG_UID. by Harald Welte · 19 years ago
- 20900e1 bump version number to 1.3.2 by Harald Welte · 19 years ago
- e2efcfc add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334 by Harald Welte · 19 years ago
- 195ae91 attempt to fix save/restore of '! --uid-owner squid' problem as reported by Costa Tsaousis (backport from ipv4 owner) by Harald Welte · 19 years ago
- 64d900f add pointer to bugzilla by Harald Welte · 19 years ago
- ffd403f we don't have any counter issues in sparc64 by Harald Welte · 19 years ago
- 0c4c91c Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>) by Patrick McHardy · 19 years ago
- 5ee8862 fix deletion of targets where kernel size != userspace size (Pablo Neira) by Pablo Neira · 19 years ago
- 9867e81 reduce code replication of parse_interface() (Yasuyuki Kozakai) by Yasuyuki KOZAKAI · 19 years ago
- a3a9c0d This patch prevents user to set negative port value of SNAT/DNAT. by Yasuyuki KOZAKAI · 19 years ago
- 8d8c8ea Chain name should not start with '!' (Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>) by Yasuyuki KOZAKAI · 19 years ago
- 595e493 Flush chain with noflush when it is redefined (Charlie Brady <charlieb-netfilter-devel@budge.apana.org.au>) by Charlie Brady · 19 years ago
- 38eb730 OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov <johnpol@2ka.mipt.ru>) by Evgeniy Polyakov · 19 years ago
- 86c8513 update multiport manpage (Phil Oester <kernel@linuxace.com>) by Phil Oester · 19 years ago
- f3aa491 Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora <pluto@agmk.net>) by Tom Eastep · 19 years ago
- dfdcd64 Release previously merged options from merge_opts(), reduces memory-usage of iptables-restore dramatically (Pablo Neira) by Pablo Neira · 19 years ago
- 56506a1 While adding testing for inversion of multiport, noticed that documentation about --ports is *wrong*. Ports do not have to be equal: either dest or src being in list is enough for match. by Rusty Russell · 19 years ago
- 38ed421 include FIN bit in mask of "--syn" bits by Harald Welte · 19 years ago
- e556800 Ignore unknown arguments in libipt_ULOG (Patrick McHardy <kaber@trash.net>) by Patrick McHardy · 19 years ago
- 1c0f236 Fix connbytes command line parsing bug (Piotrek Kaczmarek <kaczorek@daleka.net>) by Piotrek Kaczmarek · 19 years ago
- 7d77451 pull out pmtu changes to fix compilation issues by Harald Welte · 19 years ago
- e267792 poll goto specific changes out of trunk by Harald WeltePablo Neira · 19 years ago
- 1a39d1e fix iptables-save/restore of goto (Jonas Berlin) by Jonas Berlin · 19 years ago
- 6b5effc omeone forgot to update ipt_conntrack.h header in user space. So, update it to use ip_conntrack_old_tuple. (Pablo Neira) by Harald WeltePablo Neira · 19 years ago
- 7a8bdfd add REJECT with icmp-frag-needed (Florian Lohoff) by Florian Lohoff · 19 years ago
- 182f3f6 don't allow newlines in LOG prefix (Phil Oester) (Closes: #312) by Phil Oester · 19 years ago
- 1b91e59 re-sync ip6tables with iptables (check for init functions) (Jonas Berlin) by Jonas Berlin · 19 years ago
- f33c461 add lots of man pages (Jonas Berlin) by Jonas Berlin · 19 years ago
- 4a06cf0 the optflags array contains a '3' for the OPT_LINENUMBERS entry while everywhere else '0' is used (Jonas Berlin) by Jonas Berlin · 19 years ago
- b9e814c SET target bugfix by Michal Pokrywka applied by Michal Pokrywka · 19 years ago
- 1afcffd Fix TCPLAG version (Torsten Lüttgert <t.luettgert@pressestimmen.de>) by Torsten Lüttgert · 19 years ago
- 8b7cc8a improve REDIRECT manpage (Jonas Berlin <xkr47@outerspace.dyndns.org>) by Jonas Berlin · 19 years ago
- fc4b10c bump version to 1.3.1 by Harald Welte · 19 years ago
- 800938f This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira) by Pablo Neira · 19 years ago
- 9d3ed77 Restore chain order (Olaf Rempel <razzor@kopf-tisch.de>) by Olaf Rempel · 19 years ago
- 8115e54 Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>) by Pablo Neira · 19 years ago
- 69558bf Allow "--realm ! foo" and "! --realm foo" (Closes: #297) by Harald Welte · 19 years ago
- 8430fb9 fix missing comma at end of line by Harald Welte · 19 years ago
- 02964b8 Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace. by Martin Josefsson · 19 years ago
- c10f251 time to release 1.3.0 final by Harald Welte · 19 years ago
- 21ccef2 remove way outdated files by Harald Welte · 19 years ago
- c271df7 update notes to reflect subversion usage by Harald Welte · 19 years ago
- 61d274f try to fix realm save/restore issue (Adresses: #297) by Harald Welte · 19 years ago
- 77cb03f Fix rule deletion (hinfo pointer initialized by kernel, don't compare it in userspace). (Samuel Jean) by Samuel Jean · 19 years ago
- e6ebb1c fix parameter handling in libipt_hashlimit with iptables-save (Nikolai Malykh) by Nikolai Malykh · 19 years ago
- e37c0dc Revert the recent addition of memset()'s to TC_COMMIT. One of them is bogus and the other one needs more investigation to why valgrind is complaining. by Phil Oester · 19 years ago
- b2eedcd Add support for inversion to multiport revision 1. by Phil Oester · 19 years ago
- 5974683 we now need to exclude .svn instead of CVS by Harald Welte · 20 years ago
- 9fad579 release rc1 by Harald Welte · 20 years ago
- ec30b6c re-implement alphabetic sorting to not confuse users who upgrade to 1.3.0 by Harald Welte · 20 years ago
- 37963e0 fix compiler warning about discarding const by Harald Welte · 20 years ago
- 58e7285 add missing comma by Harald Welte · 20 years ago
- 3d12187 fix typo by Harald Welte · 20 years ago
- 02aa733 make structure initializers use C99 standard (Harald Welte) by Harald Welte · 20 years ago
- 2b9d07b typo by Martin Josefsson · 20 years ago
- de5ba5d check for colons by Harald Welte · 20 years ago
- 579553c be more specific what INPUT means (Matthias Bruestle) by Harald Welte · 20 years ago
- fcbab56 Use C99 initializers by Harald Welte · 20 years ago
- 664c0a3 - Sets the 'iptc_fn' global variable to the pointer to the current functions in all major TC_* functions. This is necessary because in certain cases, an error return from a function that doesn't set 'iptc_fn' will conflict with a function-specific error return from one that does, causing TC_STRERROR() to return the wrong error string. This ensures that the right one will be returned. by Derrik Pates · 20 years ago
- 3fb61f3 John McCann points out via bugzilla that iptables happily accepts this by Phil Oester · 20 years ago
- 22a8c93 fix name of 'extra_opts' structure member (Nikolai Malykh) by Nikolai Malykh · 20 years ago
- 2b9a577 Make it compile on current kernels, the future isn't here yet. by Martin Josefsson · 20 years ago
- 225f462 Testsuite found an issue: multiport accepts -p ! tcp. by Rusty Russell · 20 years ago
- 5df9547 Pablo Neira: Multiport revision 1 userspace support. by Pablo Neira · 20 years ago
- ee9c820 Remove leftover debug printf by Martin Josefsson · 20 years ago
- 93911bf Replace memchr with strlen and fix up one of the statements. by Martin Josefsson · 20 years ago
- 3aef54d Extension revision number support (if kernel supports the getsockopts). by Rusty Russell · 20 years ago
- 708f7b9 Prevent user from using --helper multiple times (Nicolas Bouliane <nib@cookinglinux.org>) by Nicolas Bouliane · 20 years ago
- f46e1af Add --log-uid option (John Lange <john.lange@open-it.ca>) by John Lange · 20 years ago
- daade44 Stupid typo that meant we didn't compare target data when doing delete-by-matching-rule (found by nfsim test). by Rusty Russell · 20 years ago
- 3ef2fb8 Fix compile error introduced by C99 conversion. by Rusty Russell · 20 years ago
- 8caee8b Pablo Neira: extensions conversion to C99 structure initialization by Pablo Neira · 20 years ago
- 357d59d Fix setting lib_dir in ip*tables-{save,restore} by Martin Josefsson · 20 years ago
- 70f758d Use string_to_number. Don't check for no optarg: we set has_arg to 1 in option array, so getopt does that for us. by Rusty Russell · 20 years ago
- 8beb049 Don't need ipt_entry_target()/ip6t_entry_target() now kernel uses static inline instead of extern inline (otherwise it doesn't compile without -O). by Rusty Russell · 20 years ago
- 208d42e Implement IPTABLES_LIB_DIR and IP6TABLES_LIB_DIR environment variables, and set them in testsuite if we're running iptables within tree. by Rusty Russell · 20 years ago
- 0b46d1d Nicolas Bouliane: I was writing an nfsim .sim for the match tos, when I realized that when we enter --tos twice the second overwrite the first. by Nicolas Bouliane · 20 years ago
- 0f9b8b1 Implement some optimization for finding rules to replace in TC_REPLACE_ENTRY. by Martin Josefsson · 20 years ago
- 733e54b Make "is_same" test basics and entries only: targets are generic. by Rusty Russell · 20 years ago
- e45c713 Remove GET_TARGET() define: this was for compiling iptables for debugging (ie. without -O) on old kernels where ipt_get_target() was defined "extern inline". These days it's "static inline", and only developers build without -O anyway. by Rusty Russell · 20 years ago
- 3f29878 ROUTE --tee target extension (Patrick Schaaf) by Patrick Schaaf · 20 years ago
- b9a4938 ipset 2 related updates (JK) by Joszef Kadlecsik · 20 years ago
- 7dc57e2 fix some compiler warnings and errors by Harald Welte · 20 years ago
- 93f4a3d sync with latest patch-o-matic-ng update (support direction and mode parameters) by Harald Welte · 20 years ago
- a5616dc Search backwards when inserting/deleting in/from the top half of the rules in a chain. by Martin Josefsson · 20 years ago
- 10f7f14 Fix module-autoloading in certain cases (Fixse Debian Bug 219686) by Harald Welte · 20 years ago
- 60953f0 minor syntax fixes by Harald Welte · 20 years ago
- 5d4a1b8 - add hashlimit to makefile - fix typo in libipt_hashlimit by Harald Welte · 20 years ago
- 789c7df move ipt_hashlimit to it's correct location by Harald Welte · 20 years ago
- a5374b2 add hashlimit kernel header file by Harald Welte · 20 years ago
- 77e2eca hashlimit port of userspace plugin by Harald Welte · 20 years ago
- a188599 add paragraph about raw table by Harald Welte · 20 years ago
- 373f8e9 Mention owner brokenness in manpage by Patrick McHardy · 20 years ago
- 2608b6e note owner match brokenness in helptext, closes bugzilla #244 (Phil Oester) by Phil Oester · 20 years ago
- 1b68d2e Add comment about time not adhering DST (Phil Oester) (Closes: #75) by Phil Oester · 20 years ago