Felix Fietkau
|
f97b87b6e7
|
remove $(FPIC) from iptables, it is handled internally correctly. saves 2k on mips
SVN-Revision: 18098
|
2009-10-20 11:44:16 +00:00 |
|
Nicolas Thill
|
0e43e71159
|
remove ipset support from core, it is now provided by xtables-addons from the packages feed
SVN-Revision: 17844
|
2009-10-03 23:51:10 +00:00 |
|
Felix Fietkau
|
1b35350431
|
iptables: fix build error with linux 2.6.31
SVN-Revision: 17721
|
2009-09-25 14:10:42 +00:00 |
|
Florian Fainelli
|
34e22309ef
|
libiptc and libxtables should install their libraries as symbolic links (#5313, #5639)
SVN-Revision: 17162
|
2009-08-07 09:36:55 +00:00 |
|
Florian Fainelli
|
034933808a
|
install libiptc/libipulog from iptables (#5549)
SVN-Revision: 17089
|
2009-08-01 23:16:06 +00:00 |
|
Florian Fainelli
|
0c27222ac4
|
force iptables to be configured with ipv6 enabled (#5586)
SVN-Revision: 17076
|
2009-08-01 12:10:59 +00:00 |
|
Florian Fainelli
|
cd64d4ce6e
|
make patches against iptables apply again after update to 1.4.4 (#5540)
SVN-Revision: 16878
|
2009-07-17 12:37:10 +00:00 |
|
Markus Wigge
|
fa7f32c962
|
upgrade to new upstream version 1.4.4
SVN-Revision: 16853
|
2009-07-15 16:33:01 +00:00 |
|
Florian Fainelli
|
67a444c462
|
fix typo in iptables makefile resulting in patches not being applied (#5311)
SVN-Revision: 16392
|
2009-06-09 07:54:46 +00:00 |
|
Florian Fainelli
|
d861885cbf
|
do not apply iptables patches when building with CONFIG_EXTERNAL_KERNEL_TREE
SVN-Revision: 16336
|
2009-06-04 13:14:00 +00:00 |
|
Felix Fietkau
|
01392262c1
|
iptables: export libipq
SVN-Revision: 16164
|
2009-05-29 00:51:33 +00:00 |
|
Jo-Philipp Wich
|
addb4fe33f
|
iptables: update imq userspace part
SVN-Revision: 15653
|
2009-05-07 03:06:56 +00:00 |
|
Jo-Philipp Wich
|
b7569a3a34
|
iptables: install essential headers into staging dir
SVN-Revision: 15621
|
2009-05-05 11:51:51 +00:00 |
|
Jo-Philipp Wich
|
1b890c945c
|
iptables: fix segfault in xtables_parse_protocol() if an unknown protocol is specified for -p
SVN-Revision: 15573
|
2009-05-03 14:31:36 +00:00 |
|
Nicolas Thill
|
8c7602a3f4
|
iptables: - add libtool fixups - fix libiptc & libxtables packages, containing only symlinks but missing the actual library files - enable static versions of libiptc & libxtables - install pkgconfig .pc files as well - cleanup & reorg
SVN-Revision: 15572
|
2009-05-03 06:54:49 +00:00 |
|
Jo-Philipp Wich
|
26f40c4bd4
|
iptables: install libxtables.so and libiptc.so into staging dir
SVN-Revision: 15550
|
2009-05-02 00:53:41 +00:00 |
|
Jo-Philipp Wich
|
8738678fbf
|
iptables: replace exot_error() with xtables_error() in layer7 patch
SVN-Revision: 15547
|
2009-05-01 21:30:43 +00:00 |
|
Hauke Mehrtens
|
e50d6f12f7
|
Update layer7 rules
SVN-Revision: 15544
|
2009-05-01 15:20:34 +00:00 |
|
Hauke Mehrtens
|
a93f9f0eee
|
In r15501 the libxt_layer7.c was placed in a wrong location.
SVN-Revision: 15541
|
2009-05-01 15:15:56 +00:00 |
|
Jo-Philipp Wich
|
2515392870
|
drop iptables 1.3.8 and switch to to 1.4.3.2, refresh layer7 kernel patches and add packages for libiptc + libxtables
SVN-Revision: 15501
|
2009-04-29 23:31:23 +00:00 |
|
Imre Kaloz
|
6032279e79
|
we don't need the libiptc library
SVN-Revision: 15487
|
2009-04-29 13:55:49 +00:00 |
|
Imre Kaloz
|
3671591480
|
upgrade iptables to 1.4.3.2
SVN-Revision: 15478
|
2009-04-29 11:31:20 +00:00 |
|
Felix Fietkau
|
34939cad39
|
get rid of $Id$ - it has never helped us and it has broken too many patches ;)
SVN-Revision: 15242
|
2009-04-17 14:09:46 +00:00 |
|
Felix Fietkau
|
b72191aa74
|
fix a description which still mentioned ipp2p
SVN-Revision: 14603
|
2009-02-21 19:33:10 +00:00 |
|
Felix Fietkau
|
68d73be80c
|
remove support for ipp2p - it's unmaintained, broken, overmatching and undermatching => not that useful for QoS
SVN-Revision: 14596
|
2009-02-21 16:30:44 +00:00 |
|
Gabor Juhos
|
e5c9f00637
|
netfilter: remove CHAOS, TARPIT and DELUDE references
SVN-Revision: 14461
|
2009-02-09 13:27:39 +00:00 |
|
Gabor Juhos
|
2b2541ebad
|
iptables: remove CHAOS and TARPIT patches
SVN-Revision: 14447
|
2009-02-08 17:25:26 +00:00 |
|
Claudio Mignanti
|
7c2c6da09a
|
fix table alignment for cris (#4104)
SVN-Revision: 14407
|
2009-02-04 14:40:37 +00:00 |
|
Nicolas Thill
|
28a92fe717
|
fix userland netfilter headers installed by iptables
SVN-Revision: 14083
|
2009-01-18 06:35:54 +00:00 |
|
Nicolas Thill
|
704402ab56
|
temp fix for iptables build failure after [13931]
SVN-Revision: 13932
|
2009-01-08 02:18:45 +00:00 |
|
Felix Fietkau
|
98677bd970
|
fix iptables compile with 2.6.26
SVN-Revision: 13747
|
2008-12-27 01:55:48 +00:00 |
|
Imre Kaloz
|
9d93e2a4e0
|
upgrade iptables to 1.4.1.1, needed for proper 2.6.27 support
SVN-Revision: 13458
|
2008-12-01 20:27:46 +00:00 |
|
Florian Fainelli
|
61863b4bed
|
Finally fix iptables -m conntrack (#988), bump release numnber
SVN-Revision: 13235
|
2008-11-16 17:40:49 +00:00 |
|
Gabor Juhos
|
7613c343b5
|
netfilter/iptables: disable IMQ on 2.6.27
SVN-Revision: 12984
|
2008-10-15 10:56:13 +00:00 |
|
Nicolas Thill
|
2c8010b2dc
|
make the whole iptables/netfiter modular (closes: #3871, #3527)
SVN-Revision: 12649
|
2008-09-22 15:19:59 +00:00 |
|
Felix Fietkau
|
e9ea28b0af
|
use $(FPIC) in a few places where it matters
SVN-Revision: 12225
|
2008-08-06 22:10:29 +00:00 |
|
John Crispin
|
21bbdc24c3
|
adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
|
2008-08-04 11:51:58 +00:00 |
|
Gabor Juhos
|
f9518d9a74
|
netfilter/iptables: enable IMQ on 2.6.25
SVN-Revision: 11335
|
2008-06-02 19:46:47 +00:00 |
|
Florian Fainelli
|
82247228ea
|
We do not need to make the experimental/install-experimental targets starting with 1.4.x version
SVN-Revision: 11325
|
2008-06-02 11:54:05 +00:00 |
|
Gabor Juhos
|
1b90498e69
|
IMQ is not yet available on 2.6.25
SVN-Revision: 11007
|
2008-05-02 11:29:53 +00:00 |
|
Gabor Juhos
|
d80f43d15f
|
update iptables to 1.4.0 (2.6 kernels only), refresh kernel patches
SVN-Revision: 10843
|
2008-04-15 06:11:23 +00:00 |
|
Florian Fainelli
|
52315c5150
|
Fix layer7 user-space iptables compilation (#3307)
SVN-Revision: 10745
|
2008-04-06 18:01:53 +00:00 |
|
Gabor Juhos
|
4e45a1d1ac
|
iptables: remove obsolete patch
SVN-Revision: 10464
|
2008-02-15 09:31:07 +00:00 |
|
Felix Fietkau
|
c89de79512
|
move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
SVN-Revision: 10383
|
2008-02-04 22:03:18 +00:00 |
|
Felix Fietkau
|
0cf1a58282
|
Here comes the new UCI. Enjoy :)
SVN-Revision: 10367
|
2008-02-03 06:48:15 +00:00 |
|
Felix Fietkau
|
2a45adfcda
|
remove uninstalldev templates (no longer necessary)
SVN-Revision: 9906
|
2007-12-25 01:40:47 +00:00 |
|
Felix Fietkau
|
93575b53a7
|
Use $(CP) instead of $(INSTALL_BIN) for binaries.
Signed-off-by: Andy Boyett <agb-openwrt@padded-cell.net>
SVN-Revision: 9694
|
2007-12-09 18:53:06 +00:00 |
|
Tim Yardley
|
85b17a4e9e
|
update stripped subset of l7 patterns to 11-03-2007 patterns
SVN-Revision: 9582
|
2007-11-19 23:07:00 +00:00 |
|
Florian Fainelli
|
9d7192e5fa
|
Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
SVN-Revision: 9503
|
2007-11-05 14:19:16 +00:00 |
|
Gabor Juhos
|
79712043cc
|
iptables: update description of the iptables-mod-ipopt
SVN-Revision: 9468
|
2007-10-31 20:21:58 +00:00 |
|
Florian Fainelli
|
ada8e5dd95
|
Only masquerade LAN, other settings need manual tweaking
SVN-Revision: 9461
|
2007-10-29 11:00:33 +00:00 |
|
Florian Fainelli
|
304d5c8845
|
Only masquerade non routable addresses (#2535)
SVN-Revision: 9460
|
2007-10-29 10:31:16 +00:00 |
|
Florian Fainelli
|
109d5fbca4
|
Update description, iptables-mod-ipsec includes libipt_policy.so
SVN-Revision: 9336
|
2007-10-16 14:04:59 +00:00 |
|
Gabor Juhos
|
8309e3dff2
|
add TARPIT support to netfilter/iptables * netfilter: add the xt_TARPIT target module required by xt_CHAOS * include/netfilter.mk: reorder, xt_CHAOS depends on xt_TARPIT and xt_DELUDE * iptables: add libipt_TARPIT to the kmod-ipt-extra package, bump release number * original patchset can be found [http://tinyurl.com/2mjk2kx here]
SVN-Revision: 9178
|
2007-10-07 17:17:04 +00:00 |
|
Felix Fietkau
|
969ac7459e
|
add $(STAGING_DIR) as argument to the InstallDev template and update packages accordingly - this way we can reuse InstallDev to automatically generate UninstallDev or create -dev packages
SVN-Revision: 9052
|
2007-09-28 01:45:11 +00:00 |
|
Nicolas Thill
|
3a713ff202
|
move exec permissions fix at Build/Prepare stage
SVN-Revision: 8802
|
2007-09-16 16:25:53 +00:00 |
|
Nicolas Thill
|
34bb4638e7
|
move package description to a separate definition, remove it when DESCRIPTION=TITLE
SVN-Revision: 8659
|
2007-09-07 08:34:51 +00:00 |
|
Florian Fainelli
|
22282193a9
|
Package ip6tables-utils as well (#2318)
SVN-Revision: 8636
|
2007-09-05 21:40:11 +00:00 |
|
Tim Yardley
|
782d02ed1b
|
iptables: refresh patches to 1.3.8
SVN-Revision: 8286
|
2007-07-31 20:28:55 +00:00 |
|
Florian Fainelli
|
2e4f6093c6
|
Fix the ip6tables dependency (#2079)
SVN-Revision: 7978
|
2007-07-15 18:53:33 +00:00 |
|
Tim Yardley
|
5f6dfc231a
|
move to iptables 1.3.8
SVN-Revision: 7946
|
2007-07-12 16:05:28 +00:00 |
|
Felix Fietkau
|
2cc2d7707b
|
make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
SVN-Revision: 7806
|
2007-06-30 19:30:38 +00:00 |
|
Florian Fainelli
|
01b4fd853a
|
Initialise firewall before network (#1988)
SVN-Revision: 7757
|
2007-06-28 12:56:55 +00:00 |
|
Tim Yardley
|
35d1063a75
|
package ipset for use
SVN-Revision: 7517
|
2007-06-07 15:30:59 +00:00 |
|
Felix Fietkau
|
04324c48cf
|
upgrade a few packages to newer versions (includes patch by kaloz) - preparation for 2.6.22
SVN-Revision: 7507
|
2007-06-05 22:46:02 +00:00 |
|
Felix Fietkau
|
9114220553
|
refresh all package patches in the buildroot using quilt
SVN-Revision: 7490
|
2007-06-04 11:25:53 +00:00 |
|
Florian Fainelli
|
908b616d8e
|
Add iprange (#1799)
SVN-Revision: 7462
|
2007-06-02 22:57:33 +00:00 |
|
Imre Kaloz
|
615e8af841
|
break trunk temporary - upgrade to 2.6.21.1 and iptables 1.3.7
SVN-Revision: 7315
|
2007-05-23 19:48:34 +00:00 |
|
Florian Fainelli
|
cd65230eea
|
Add raw and NOTRACK targets (#1583)
SVN-Revision: 6945
|
2007-04-13 11:28:45 +00:00 |
|
Felix Fietkau
|
235692a7d6
|
fix iptables extension issue with mac os x builds
SVN-Revision: 6786
|
2007-04-01 12:28:56 +00:00 |
|
Felix Fietkau
|
c05a061e4e
|
fix a problem with the firewall script (multicast traffic could produce packet loss)
SVN-Revision: 6726
|
2007-03-27 16:45:10 +00:00 |
|
Felix Fietkau
|
8e85262a8b
|
improve autorebuild for iptables when the kernel config changes
SVN-Revision: 6652
|
2007-03-23 19:19:23 +00:00 |
|
Felix Fietkau
|
24faf55360
|
add file type autodetection for the unpack command and nuke PKG_CAT:= in lots of places
SVN-Revision: 6582
|
2007-03-16 20:21:39 +00:00 |
|
Felix Fietkau
|
1d307eea87
|
add a default for PKG_BUILD_DIR and PKG_INSTALL_DIR (will use KERNEL_BUILD_DIR if kernel.mk is included, BUILD_DIR otherwise)
SVN-Revision: 6580
|
2007-03-16 19:18:55 +00:00 |
|
Tim Yardley
|
ccfa4a7af6
|
trunk.. same deal as changeset:6526
SVN-Revision: 6527
|
2007-03-05 01:38:44 +00:00 |
|
Felix Fietkau
|
30ef579f48
|
make the iptables package robust to kernel config changes
SVN-Revision: 6447
|
2007-03-01 11:59:42 +00:00 |
|
Florian Fainelli
|
780712e30e
|
Add ipt_CLASSIFY target for 2.4 kernels (#1338)
SVN-Revision: 6424
|
2007-02-28 12:04:58 +00:00 |
|
Felix Fietkau
|
8e88bb54ba
|
port [6229] to kamikaze
SVN-Revision: 6275
|
2007-02-08 01:25:18 +00:00 |
|
Nicolas Thill
|
574c87a244
|
fix chaostables patch (closes: #1246)
SVN-Revision: 6184
|
2007-01-23 16:08:24 +00:00 |
|
Florian Fainelli
|
acf6ec373e
|
Add chaostable from #1187, also enable netfilter modules for ixp4xx.
SVN-Revision: 6182
|
2007-01-22 23:55:22 +00:00 |
|
Nicolas Thill
|
bed47be36c
|
more use of the INSTALL_DIR variable
SVN-Revision: 6023
|
2007-01-08 00:53:24 +00:00 |
|
Felix Fietkau
|
34272dbc04
|
fix iptables warning about 'wierd' interface names (#1082)
SVN-Revision: 5962
|
2007-01-01 23:31:36 +00:00 |
|
Florian Fainelli
|
343b935afa
|
Forgot kmod-ipt-imq dependency (#1076)
SVN-Revision: 5901
|
2006-12-25 17:43:06 +00:00 |
|
Felix Fietkau
|
4323774d59
|
prepare for moving part of the firewall to hotplug. created new chains {input,forwarding,prerouting}_wan for wan port forwardings and updated the examples. syntax of /etc/config/firewall unchanged and old firewall.user files are still compatible
SVN-Revision: 5878
|
2006-12-20 05:58:41 +00:00 |
|
Felix Fietkau
|
63d865e7a1
|
prepare packages for kernel upgrade to 2.6.19
SVN-Revision: 5786
|
2006-12-14 08:00:20 +00:00 |
|
Tim Yardley
|
c962551b3a
|
install-devel puts this here, kill it too
SVN-Revision: 5652
|
2006-11-26 23:15:20 +00:00 |
|
Tim Yardley
|
7de8690fc7
|
cleanup some of the custom work for devel libs
SVN-Revision: 5651
|
2006-11-26 23:13:49 +00:00 |
|
Felix Fietkau
|
680009ecd0
|
install iptables devel headers into the staging dir
SVN-Revision: 5650
|
2006-11-26 22:34:15 +00:00 |
|
Felix Fietkau
|
c2211dc51e
|
replace lots of manual install commands with INSTALL_* variables
SVN-Revision: 5624
|
2006-11-23 00:29:07 +00:00 |
|
Felix Fietkau
|
105a602ecf
|
implement target profiles in menuconfig
SVN-Revision: 5512
|
2006-11-12 05:06:56 +00:00 |
|
Felix Fietkau
|
223fdb0443
|
replace br0 with $LAN
SVN-Revision: 5492
|
2006-11-09 23:13:15 +00:00 |
|
Florian Fainelli
|
a72fd20a82
|
export WAN variable so that firewall works (#907)
SVN-Revision: 5412
|
2006-11-03 10:10:08 +00:00 |
|
Felix Fietkau
|
afd6539a65
|
add firewall protection for wan_device in addition to wan_ifname (fixes #852)
SVN-Revision: 5136
|
2006-10-15 23:04:23 +00:00 |
|
Felix Fietkau
|
8612d33691
|
init script cleanup, use /etc/rc.d/ for enabled scripts, /etc/init.d/<pkgname> (enable|disable) manages symlinks
SVN-Revision: 5128
|
2006-10-15 21:03:30 +00:00 |
|
Felix Fietkau
|
60c1f0f64d
|
finally move buildroot-ng to trunk
|
2016-03-20 17:29:15 +01:00 |
|