Commit Graph

32 Commits (0cf7cba67b649cb7bd0e9381f401f9219e85e61d)

Author SHA1 Message Date
Steven Barth ddbd2cf781 iptables: add kmod-ipt-nf* to dependency list of iptables-mod-nf*.
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

SVN-Revision: 42034
2014-08-07 12:32:33 +00:00
Steven Barth 9f2a17103f iptables: NFLOG and NFQUEUE targets' full support
NFLOG and NFQUEUE targets' full support for iptables.

Includes all needed kernel modules (Xtables's and Netlink's)
 and userspace libraries.
All added kernel modules can be individually disabled,
 all other new libraries get their own individual packages.

Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch>
Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at>
Reported-by: Derek LaHousse <dlahouss@mtu.edu>
Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

SVN-Revision: 42022
2014-08-07 04:42:22 +00:00
Jo-Philipp Wich baa7c211f5 netfilter: introduce xt_id match
This commit implements a new netfilter match "xt_id" which can be used to
attach unsigned 32bit IDs to iptables rules.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41945
2014-08-01 22:49:47 +00:00
Felix Fietkau 3445645d18 iptables: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41479
2014-07-02 19:18:09 +00:00
Jo-Philipp Wich 1c891e0d45 iptables: pass --disable-ipv6 is CONFIG_IPV6 is unset
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41458
2014-07-02 11:39:24 +00:00
Felix Fietkau 4b241e9827 netfilter: split off header matching modules not used by the default config (reduces rootfs size and memory usage)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40983
2014-06-02 18:13:38 +00:00
John Crispin af4769e298 iptables: Makefile: only build ip6tc, if IPv6 is enabled
when disabling ipv6, the iptables build breaks without a manul clean or this patch

Signed-off-by: Bastian Bittorf <bittorf@bluebottle.com>

SVN-Revision: 40916
2014-06-02 12:43:25 +00:00
Felix Fietkau 0ccec8179d iptables: fix issues with the new musl version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39964
2014-03-20 13:51:40 +00:00
Steven Barth 97ea9e3c2a iptables/netfilter: add connlimit to conntrack-extra
SVN-Revision: 39878
2014-03-11 14:58:00 +00:00
Steven Barth 09fd40c28f iptables: bump to 1.4.21
SVN-Revision: 39877
2014-03-11 14:57:55 +00:00
Steven Barth 0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration
SVN-Revision: 37866
2013-09-01 17:59:48 +00:00
Steven Barth 3e647ac9b6 iptables: Update to 1.4.20
SVN-Revision: 37865
2013-09-01 13:46:10 +00:00
Steven Barth 0444e32acd Bump iptables version
SVN-Revision: 37329
2013-07-15 06:12:07 +00:00
Steven Barth ea6a5d0c22 iptables: restore reap functionality to recent module
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
2013-07-15 06:12:03 +00:00
Jo-Philipp Wich e94cf1c72b iptables: install libext*.a into staging dir
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
Steven Barth 56a3396bf2 iptables: bump to 1.4.19.1
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
Jo-Philipp Wich 8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
Felix Fietkau d481486aad package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
Jo-Philipp Wich a0b655b8f2 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
Steven Barth 5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
Steven Barth 62ea398cd8 iptables: Add missing IPv6 builtin modules
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
Steven Barth 9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
Steven Barth bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
Steven Barth d023a08753 iptables: update to 1.4.18
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich 916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
Jo-Philipp Wich 03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
SVN-Revision: 35155
2013-01-14 16:12:56 +00:00
Florian Fainelli 062d3c1e67 iptables: fix typo in iptables musl patch after r34313
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34326
2012-11-25 11:40:59 +00:00
Florian Fainelli 14ed3f0f22 iptables: add some musl portability fixes
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34313
2012-11-23 20:02:23 +00:00
Felix Fietkau 16c72b09cc iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
SVN-Revision: 34069
2012-11-04 17:01:23 +00:00
Felix Fietkau 405e21d167 packages: sort network related packages into package/network/
SVN-Revision: 33688
2012-10-10 12:32:29 +00:00