KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
28154 commits 1 branch 0 tags 154 MiB
Commit graph

31 commits

Author SHA1 Message Date
Steven Barth
9f2a17103f iptables: NFLOG and NFQUEUE targets' full support 
NFLOG and NFQUEUE targets' full support for iptables.

Includes all needed kernel modules (Xtables's and Netlink's)
 and userspace libraries.
All added kernel modules can be individually disabled,
 all other new libraries get their own individual packages.

Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch>
Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at>
Reported-by: Derek LaHousse <dlahouss@mtu.edu>
Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

SVN-Revision: 42022
 2014-08-07 04:42:22 +00:00
Jo-Philipp Wich
baa7c211f5 netfilter: introduce xt_id match 
This commit implements a new netfilter match "xt_id" which can be used to
attach unsigned 32bit IDs to iptables rules.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41945
 2014-08-01 22:49:47 +00:00
Felix Fietkau
3445645d18 iptables: refresh patches 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41479
 2014-07-02 19:18:09 +00:00
Jo-Philipp Wich
1c891e0d45 iptables: pass --disable-ipv6 is CONFIG_IPV6 is unset 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41458
 2014-07-02 11:39:24 +00:00
Felix Fietkau
4b241e9827 netfilter: split off header matching modules not used by the default config (reduces rootfs size and memory usage) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40983
 2014-06-02 18:13:38 +00:00
John Crispin
af4769e298 iptables: Makefile: only build ip6tc, if IPv6 is enabled 
when disabling ipv6, the iptables build breaks without a manul clean or this patch

Signed-off-by: Bastian Bittorf <bittorf@bluebottle.com>

SVN-Revision: 40916
 2014-06-02 12:43:25 +00:00
Felix Fietkau
0ccec8179d iptables: fix issues with the new musl version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39964
 2014-03-20 13:51:40 +00:00
Steven Barth
97ea9e3c2a iptables/netfilter: add connlimit to conntrack-extra 
SVN-Revision: 39878
 2014-03-11 14:58:00 +00:00
Steven Barth
09fd40c28f iptables: bump to 1.4.21 
SVN-Revision: 39877
 2014-03-11 14:57:55 +00:00
Steven Barth
0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration 
SVN-Revision: 37866
 2013-09-01 17:59:48 +00:00
Steven Barth
3e647ac9b6 iptables: Update to 1.4.20 
SVN-Revision: 37865
 2013-09-01 13:46:10 +00:00
Steven Barth
0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
 2013-05-14 15:02:31 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files. 
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
 2013-05-02 08:10:55 +00:00
Steven Barth
5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled 
SVN-Revision: 36125
 2013-03-25 11:22:12 +00:00
Steven Barth
62ea398cd8 iptables: Add missing IPv6 builtin modules 
SVN-Revision: 35898
 2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour 
SVN-Revision: 35896
 2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx 
SVN-Revision: 35894
 2013-03-06 12:55:48 +00:00
Steven Barth
d023a08753 iptables: update to 1.4.18 
SVN-Revision: 35892
 2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit 
SVN-Revision: 35569
 2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines 
SVN-Revision: 35568
 2013-02-11 21:58:42 +00:00
Jo-Philipp Wich
03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra) 
SVN-Revision: 35155
 2013-01-14 16:12:56 +00:00
Florian Fainelli
062d3c1e67 iptables: fix typo in iptables musl patch after r34313 
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34326
 2012-11-25 11:40:59 +00:00
Florian Fainelli
14ed3f0f22 iptables: add some musl portability fixes 
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34313
 2012-11-23 20:02:23 +00:00
Felix Fietkau
16c72b09cc iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels 
SVN-Revision: 34069
 2012-11-04 17:01:23 +00:00
Felix Fietkau
405e21d167 packages: sort network related packages into package/network/ 
SVN-Revision: 33688
 2012-10-10 12:32:29 +00:00