- dbac8ad reduce parse_*_port duplication (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 58179b1 reduce service_to_port duplication (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 8a173ef please kill santa-claus (Pierre-Yves Ritschard <pierre-yves@spootnik.org>) by Pierre-Yves Ritschard · 18 years ago
- b1cda88 - force user to specify --icmpv6-type if icmpv6 match is required to load by Yasuyuki KOZAKAI · 18 years ago
- b46d0b2 ip6tables multiport does not support x:y (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 1da8351 iptables trivial compile warning cleanup (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 45ce294 size_t changed to socklen_t in getsockopt call by Joszef Kadlecsik · 18 years ago
- a05720b set match negation bug fixed by Joszef Kadlecsik · 18 years ago
- 3836fcc REDIRECT does not accept IP (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- 75efcae trivial connlimit manpage fix (Phil Oester <kernel@linuxace.com>) by Phil Oester · 18 years ago
- a895b9c Use lowercase letters for match name (Simon Lodal <simonl@parknet.dk>) by Simon Lodal · 18 years ago
- 8185801 Add information about :<port> syntax (Evan Miller <evanm@frap.net>) by Evan Miller · 18 years ago
- 630da41 secmark: Add libip6t_CONNSECMARK by James Morris · 18 years ago
- ff96830 D'oh .. I'm not too smart, forgot to add the new files in the previous patches :) by Patrick McHardy · 18 years ago
- 517ac15 secmark: Add libipt_CONNSECMARK by James Morris · 18 years ago
- d718220 secmark: Add libip6t_SECMARK by James Morris · 18 years ago
- 843b959 secmark: Add libipt_SECMARK by James Morris · 18 years ago
- c81a3f3 secmark: Add libselinux support by James Morris · 18 years ago
- 2452baf Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18. by Patrick McHardy · 18 years ago
- 2c627cf [IPTABLES,IP6TABLES]: check invalid esp spi range by Yasuyuki KOZAKAI · 19 years ago
- 1f312c2 fix loading shared library of ICMPv6 match. by Yasuyuki KOZAKAI · 19 years ago
- 708e058 [IPTABLES,IP6TABLES]: fix the path to detect esp/connbytes support in kernel by Harald Welte · 19 years ago
- a52b8fe Correct iptables-save output of osf module (Daniel De Graaf) by Daniel De Graaf · 19 years ago
- d3476b2 make policy match compile independant of kernel headers by Harald Welte · 19 years ago
- 54c603a Some !%$!*##$@ has modified the kernel include/linux/netfilter_ipv4/ipt_sctp.h by Harald Welte · 19 years ago
- 38315b1 remove other bits of old ip pool code, people should use ipset (ipset.netfilter.org) these days by Harald Welte · 19 years ago
- 02e88f2 Prepare policy match for x_tables unification by making sure both by Patrick McHardy · 19 years ago
- 0829a2b fix 'save' (Michael Rash) by Michael Rash · 19 years ago
- 28e5b79 major manpage update (Yasuyuki Kozakai) by Yasuyuki KOZAKAI · 19 years ago
- 469d18f Add 'copy+paste' support for 'state' and 'connmark' match, as well as by Harald Welte · 19 years ago
- 4b1be69 add note about deprecated state by Harald Welte · 19 years ago
- 599d2a1 fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony) by Harald Welte · 19 years ago
- 3f34756 Fix "empty policy element" complaining in non-strict mode. by Noticed by Tom Eastep · 19 years ago
- 37b7c9b Clarify --tunnel-src/--tunnel-dst options by Patrick McHardy · 19 years ago
- a46d88d Move empty policy element check to also catch last element by Patrick McHardy · 19 years ago
- 1d0f57c Don't allow using --next option without specifying a policy element by Patrick McHardy · 19 years ago
- cddae3d Fix invalid assignment of tunnel-src to dest address (Patrick McHardy) by Patrick McHardy · 19 years ago
- 014a48f Add documentation for string match (Pablo Neira) by Pablo Neira · 19 years ago
- 402c311 fix iptables-save of 'goto' target (Closes: #410) by Harald Welte · 19 years ago
- dbbcf27 Add note that TCPMSS is only valid in the mangle table (not true today, but maybe someday) by Patrick McHardy · 19 years ago
- 11b8591 tcp-rst is the alias, not tcp-reset (Torsten Hilbrich) by Harald Welte · 19 years ago
- 524bb80 Add policy match extensions from patch-o-matic by Patrick McHardy · 19 years ago
- 2739cb8 Fix some gcc-4 warnings by Patrick McHardy · 19 years ago
- 6656e13 Don't eat numeric arguments for other extensions by Patrick McHardy · 19 years ago
- 5a4892b The conntrack match does not print any info for --ctproto, thus by Phil Oester · 19 years ago
- 361bac2 fix connmark, it's now only 32bits (Deti Fliegl <deti@fliegl.de) by Deti Fliegl · 19 years ago
- 55548fd The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep) by Tom Eastep · 19 years ago
- 8cf6591 Kernels higher than 2.6.10 don't support multiple --to arguments in by Phil Oester · 19 years ago
- 3643aca * specifying random seed for the Jenkins hash works as documented by KOVACS Krisztian · 19 years ago
- ae65b52 Make libipt_connbytes.c compile with the ipt_connbytes version that has been merged into the 2.6 kernel by Martin Josefsson · 19 years ago
- a4749bc Update manpage to reflect missing ability to SNAT to multiple ranges in 2.6.11-rc1 and later by Harald Welte · 19 years ago
- d2baafe Update manpage to reflect missing NAT to multiple ranges support in 2.6.11-rc1 and later. by Harald Welte · 19 years ago
- c6fbf41 update string match to reflect new kernel implementation (Pablo Neira) by Pablo Neira · 19 years ago
- e40b11d add support for new 'dccp' protocol match by Harald Welte · 19 years ago
- ae87b8a port Eric Leblond's NFQUEUE missing-break fix to ip6tables by Harald Welte · 19 years ago
- 6fdefcf Add missing 'break' to make parsing of NFQUEUE numbers work (Eric Leblond) by Eric Leblond · 19 years ago
- 7bdfca4 update manpage to reflect QUEUE / nfnetlink_queue / NFQUEUE changes by Harald Welte · 19 years ago
- 36d870c Fix NAT of ICMP ID ranges (Patrick McHardy) by Patrick McHardy · 19 years ago
- efa8fc2 get rid of numerous gcc-4 warnings by Harald Welte · 19 years ago
- daa1ef3 add NFQUEUE support for ipv4 and ipv6 by Harald Welte · 19 years ago
- 893b688 fix various missing header file / #define issues on old kernels. I've now tested compilation with kernels starting 2.4.17 by Harald Welte · 19 years ago
- 195ae91 attempt to fix save/restore of '! --uid-owner squid' problem as reported by Costa Tsaousis (backport from ipv4 owner) by Harald Welte · 19 years ago
- 0c4c91c Add --log-uid support to libip6t_LOG (Patrick McHardy <kaber@trash.net>) by Patrick McHardy · 19 years ago
- 9867e81 reduce code replication of parse_interface() (Yasuyuki Kozakai) by Yasuyuki KOZAKAI · 19 years ago
- a3a9c0d This patch prevents user to set negative port value of SNAT/DNAT. by Yasuyuki KOZAKAI · 19 years ago
- 38eb730 OSF: lib_ipt.c changes to support connector notifications (Evgeniy Polyakov <johnpol@2ka.mipt.ru>) by Evgeniy Polyakov · 19 years ago
- 86c8513 update multiport manpage (Phil Oester <kernel@linuxace.com>) by Phil Oester · 19 years ago
- f3aa491 Fix CONNMARK save/restore (Tom Eastep <teastep@shorewall.net>, Pawel Sikora <pluto@agmk.net>) by Tom Eastep · 19 years ago
- 56506a1 While adding testing for inversion of multiport, noticed that documentation about --ports is *wrong*. Ports do not have to be equal: either dest or src being in list is enough for match. by Rusty Russell · 19 years ago
- 38ed421 include FIN bit in mask of "--syn" bits by Harald Welte · 19 years ago
- e556800 Ignore unknown arguments in libipt_ULOG (Patrick McHardy <kaber@trash.net>) by Patrick McHardy · 19 years ago
- 1c0f236 Fix connbytes command line parsing bug (Piotrek Kaczmarek <kaczorek@daleka.net>) by Piotrek Kaczmarek · 19 years ago
- 7d77451 pull out pmtu changes to fix compilation issues by Harald Welte · 20 years ago
- 7a8bdfd add REJECT with icmp-frag-needed (Florian Lohoff) by Florian Lohoff · 20 years ago
- 182f3f6 don't allow newlines in LOG prefix (Phil Oester) (Closes: #312) by Phil Oester · 20 years ago
- f33c461 add lots of man pages (Jonas Berlin) by Jonas Berlin · 20 years ago
- b9e814c SET target bugfix by Michal Pokrywka applied by Michal Pokrywka · 20 years ago
- 1afcffd Fix TCPLAG version (Torsten Lüttgert <t.luettgert@pressestimmen.de>) by Torsten Lüttgert · 20 years ago
- 8b7cc8a improve REDIRECT manpage (Jonas Berlin <xkr47@outerspace.dyndns.org>) by Jonas Berlin · 20 years ago
- 800938f This fixes rule deletion in CLUSTERIP in iptables (Pablo Neira) by Pablo Neira · 20 years ago
- 8115e54 Kill NFC_* stuff in iptables (Pablo Neira <pablo@eurodev.net>) by Pablo Neira · 20 years ago
- 69558bf Allow "--realm ! foo" and "! --realm foo" (Closes: #297) by Harald Welte · 20 years ago
- 8430fb9 fix missing comma at end of line by Harald Welte · 20 years ago
- 02964b8 Fix CONNMARK/connmark issues with 64bit kernel and 32bit userspace. by Martin Josefsson · 20 years ago
- 61d274f try to fix realm save/restore issue (Adresses: #297) by Harald Welte · 20 years ago
- 77cb03f Fix rule deletion (hinfo pointer initialized by kernel, don't compare it in userspace). (Samuel Jean) by Samuel Jean · 20 years ago
- e6ebb1c fix parameter handling in libipt_hashlimit with iptables-save (Nikolai Malykh) by Nikolai Malykh · 20 years ago
- b2eedcd Add support for inversion to multiport revision 1. by Phil Oester · 20 years ago
- 37963e0 fix compiler warning about discarding const by Harald Welte · 20 years ago
- 58e7285 add missing comma by Harald Welte · 20 years ago
- 3d12187 fix typo by Harald Welte · 20 years ago
- 02aa733 make structure initializers use C99 standard (Harald Welte) by Harald Welte · 20 years ago
- de5ba5d check for colons by Harald Welte · 20 years ago
- fcbab56 Use C99 initializers by Harald Welte · 20 years ago
- 3fb61f3 John McCann points out via bugzilla that iptables happily accepts this by Phil Oester · 20 years ago
- 22a8c93 fix name of 'extra_opts' structure member (Nikolai Malykh) by Nikolai Malykh · 20 years ago
- 2b9a577 Make it compile on current kernels, the future isn't here yet. by Martin Josefsson · 20 years ago
- 225f462 Testsuite found an issue: multiport accepts -p ! tcp. by Rusty Russell · 20 years ago
- 5df9547 Pablo Neira: Multiport revision 1 userspace support. by Pablo Neira · 20 years ago
- 3aef54d Extension revision number support (if kernel supports the getsockopts). by Rusty Russell · 20 years ago