Commit graph

82 commits

Author SHA1 Message Date
Jo-Philipp Wich
1b890c945c iptables: fix segfault in xtables_parse_protocol() if an unknown protocol is specified for -p
SVN-Revision: 15573
2009-05-03 14:31:36 +00:00
Nicolas Thill
8c7602a3f4 iptables: - add libtool fixups - fix libiptc & libxtables packages, containing only symlinks but missing the actual library files - enable static versions of libiptc & libxtables - install pkgconfig .pc files as well - cleanup & reorg
SVN-Revision: 15572
2009-05-03 06:54:49 +00:00
Jo-Philipp Wich
26f40c4bd4 iptables: install libxtables.so and libiptc.so into staging dir
SVN-Revision: 15550
2009-05-02 00:53:41 +00:00
Jo-Philipp Wich
8738678fbf iptables: replace exot_error() with xtables_error() in layer7 patch
SVN-Revision: 15547
2009-05-01 21:30:43 +00:00
Hauke Mehrtens
e50d6f12f7 Update layer7 rules
SVN-Revision: 15544
2009-05-01 15:20:34 +00:00
Hauke Mehrtens
a93f9f0eee In r15501 the libxt_layer7.c was placed in a wrong location.
SVN-Revision: 15541
2009-05-01 15:15:56 +00:00
Jo-Philipp Wich
2515392870 drop iptables 1.3.8 and switch to to 1.4.3.2, refresh layer7 kernel patches and add packages for libiptc + libxtables
SVN-Revision: 15501
2009-04-29 23:31:23 +00:00
Imre Kaloz
6032279e79 we don't need the libiptc library
SVN-Revision: 15487
2009-04-29 13:55:49 +00:00
Imre Kaloz
3671591480 upgrade iptables to 1.4.3.2
SVN-Revision: 15478
2009-04-29 11:31:20 +00:00
Felix Fietkau
34939cad39 get rid of $Id$ - it has never helped us and it has broken too many patches ;)
SVN-Revision: 15242
2009-04-17 14:09:46 +00:00
Felix Fietkau
b72191aa74 fix a description which still mentioned ipp2p
SVN-Revision: 14603
2009-02-21 19:33:10 +00:00
Felix Fietkau
68d73be80c remove support for ipp2p - it's unmaintained, broken, overmatching and undermatching => not that useful for QoS
SVN-Revision: 14596
2009-02-21 16:30:44 +00:00
Gabor Juhos
e5c9f00637 netfilter: remove CHAOS, TARPIT and DELUDE references
SVN-Revision: 14461
2009-02-09 13:27:39 +00:00
Gabor Juhos
2b2541ebad iptables: remove CHAOS and TARPIT patches
SVN-Revision: 14447
2009-02-08 17:25:26 +00:00
Claudio Mignanti
7c2c6da09a fix table alignment for cris (#4104)
SVN-Revision: 14407
2009-02-04 14:40:37 +00:00
Nicolas Thill
28a92fe717 fix userland netfilter headers installed by iptables
SVN-Revision: 14083
2009-01-18 06:35:54 +00:00
Nicolas Thill
704402ab56 temp fix for iptables build failure after [13931]
SVN-Revision: 13932
2009-01-08 02:18:45 +00:00
Felix Fietkau
98677bd970 fix iptables compile with 2.6.26
SVN-Revision: 13747
2008-12-27 01:55:48 +00:00
Imre Kaloz
9d93e2a4e0 upgrade iptables to 1.4.1.1, needed for proper 2.6.27 support
SVN-Revision: 13458
2008-12-01 20:27:46 +00:00
Florian Fainelli
61863b4bed Finally fix iptables -m conntrack (#988), bump release numnber
SVN-Revision: 13235
2008-11-16 17:40:49 +00:00
Gabor Juhos
7613c343b5 netfilter/iptables: disable IMQ on 2.6.27
SVN-Revision: 12984
2008-10-15 10:56:13 +00:00
Nicolas Thill
2c8010b2dc make the whole iptables/netfiter modular (closes: #3871, #3527)
SVN-Revision: 12649
2008-09-22 15:19:59 +00:00
Felix Fietkau
e9ea28b0af use $(FPIC) in a few places where it matters
SVN-Revision: 12225
2008-08-06 22:10:29 +00:00
John Crispin
21bbdc24c3 adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
2008-08-04 11:51:58 +00:00
Gabor Juhos
f9518d9a74 netfilter/iptables: enable IMQ on 2.6.25
SVN-Revision: 11335
2008-06-02 19:46:47 +00:00
Florian Fainelli
82247228ea We do not need to make the experimental/install-experimental targets starting with 1.4.x version
SVN-Revision: 11325
2008-06-02 11:54:05 +00:00
Gabor Juhos
1b90498e69 IMQ is not yet available on 2.6.25
SVN-Revision: 11007
2008-05-02 11:29:53 +00:00
Gabor Juhos
d80f43d15f update iptables to 1.4.0 (2.6 kernels only), refresh kernel patches
SVN-Revision: 10843
2008-04-15 06:11:23 +00:00
Florian Fainelli
52315c5150 Fix layer7 user-space iptables compilation (#3307)
SVN-Revision: 10745
2008-04-06 18:01:53 +00:00
Gabor Juhos
4e45a1d1ac iptables: remove obsolete patch
SVN-Revision: 10464
2008-02-15 09:31:07 +00:00
Felix Fietkau
c89de79512 move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
SVN-Revision: 10383
2008-02-04 22:03:18 +00:00
Felix Fietkau
0cf1a58282 Here comes the new UCI. Enjoy :)
SVN-Revision: 10367
2008-02-03 06:48:15 +00:00
Felix Fietkau
2a45adfcda remove uninstalldev templates (no longer necessary)
SVN-Revision: 9906
2007-12-25 01:40:47 +00:00
Felix Fietkau
93575b53a7 Use $(CP) instead of $(INSTALL_BIN) for binaries.
Signed-off-by: Andy Boyett <agb-openwrt@padded-cell.net>

SVN-Revision: 9694
2007-12-09 18:53:06 +00:00
Tim Yardley
85b17a4e9e update stripped subset of l7 patterns to 11-03-2007 patterns
SVN-Revision: 9582
2007-11-19 23:07:00 +00:00
Florian Fainelli
9d7192e5fa Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
SVN-Revision: 9503
2007-11-05 14:19:16 +00:00
Gabor Juhos
79712043cc iptables: update description of the iptables-mod-ipopt
SVN-Revision: 9468
2007-10-31 20:21:58 +00:00
Florian Fainelli
ada8e5dd95 Only masquerade LAN, other settings need manual tweaking
SVN-Revision: 9461
2007-10-29 11:00:33 +00:00
Florian Fainelli
304d5c8845 Only masquerade non routable addresses (#2535)
SVN-Revision: 9460
2007-10-29 10:31:16 +00:00
Florian Fainelli
109d5fbca4 Update description, iptables-mod-ipsec includes libipt_policy.so
SVN-Revision: 9336
2007-10-16 14:04:59 +00:00
Gabor Juhos
8309e3dff2 add TARPIT support to netfilter/iptables * netfilter: add the xt_TARPIT target module required by xt_CHAOS * include/netfilter.mk: reorder, xt_CHAOS depends on xt_TARPIT and xt_DELUDE * iptables: add libipt_TARPIT to the kmod-ipt-extra package, bump release number * original patchset can be found [http://tinyurl.com/2mjk2kx here]
SVN-Revision: 9178
2007-10-07 17:17:04 +00:00
Felix Fietkau
969ac7459e add $(STAGING_DIR) as argument to the InstallDev template and update packages accordingly - this way we can reuse InstallDev to automatically generate UninstallDev or create -dev packages
SVN-Revision: 9052
2007-09-28 01:45:11 +00:00
Nicolas Thill
3a713ff202 move exec permissions fix at Build/Prepare stage
SVN-Revision: 8802
2007-09-16 16:25:53 +00:00
Nicolas Thill
34bb4638e7 move package description to a separate definition, remove it when DESCRIPTION=TITLE
SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
Florian Fainelli
22282193a9 Package ip6tables-utils as well (#2318)
SVN-Revision: 8636
2007-09-05 21:40:11 +00:00
Tim Yardley
782d02ed1b iptables: refresh patches to 1.3.8
SVN-Revision: 8286
2007-07-31 20:28:55 +00:00
Florian Fainelli
2e4f6093c6 Fix the ip6tables dependency (#2079)
SVN-Revision: 7978
2007-07-15 18:53:33 +00:00
Tim Yardley
5f6dfc231a move to iptables 1.3.8
SVN-Revision: 7946
2007-07-12 16:05:28 +00:00
Felix Fietkau
2cc2d7707b make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
SVN-Revision: 7806
2007-06-30 19:30:38 +00:00
Florian Fainelli
01b4fd853a Initialise firewall before network (#1988)
SVN-Revision: 7757
2007-06-28 12:56:55 +00:00