5ba9873914
netfilter.mk: extend nf_add macro to take a version dependency expression
...
- nf_add now takes an optional 4th argument which specifies a kernel version dependency, e.g. "lt 3.7.0"
- remove CompareKernelPatchVer conditionals around nf_add invocations, use version depends instead
- fixes xt_LOG.ko packaging with Linux 3.6.0 and later
SVN-Revision: 34681
2012-12-15 00:05:35 +00:00
8420783407
netfilter.mk: fix packaging of xt_LOG.ko, it moved between 3.3.8 and 3.6.x
...
SVN-Revision: 34625
2012-12-11 09:53:50 +00:00
d648dad7fa
kernel: fix loading of nf_nat_irc
...
nf_nat_irc depends on nf_conntrack_irc and it should be defined after that.
This fixes a problem introduced in r34247.
SVN-Revision: 34251
2012-11-18 21:18:37 +00:00
935ca3f3eb
add 3.7-rc6 support (patch 820 still has to be fixed)
...
SVN-Revision: 34247
2012-11-18 18:52:38 +00:00
d406a5208f
include/netfilter.mk: remove a few obsolete lines
...
SVN-Revision: 33518
2012-09-23 08:25:32 +00:00
cfe79471d1
kmod-ipt-nathelper-extra: fix missing nf_conntrack_broadcast.ko
...
kmod-ipt-nathelper-extra is missing the package nf_conntrack_broadcast.ko
if it is not included into the kmod-ipt-nathelper-extra packge the modules
nf_conntrack_snmp and nf_nat_snmp_basic cant get loaded:
[ 44.500000] nf_conntrack_snmp: Unknown symbol nf_conntrack_broadcast_help (err 0)
[ 44.664000] nf_nat_snmp_basic: Unknown symbol nf_nat_snmp_hook (err 0)
Signed-off-by: Peter Wagner <tripolar@gmx.at>
SVN-Revision: 32434
2012-06-18 23:30:48 +00:00
b4b60ab62f
include/netfilter.mk: clean up, remove junk for old kernel versions
...
SVN-Revision: 32114
2012-06-07 16:30:48 +00:00
e6af9d374a
fix ipt_ttl and ipt_TTL userspace library packaging
...
SVN-Revision: 30897
2012-03-12 02:07:22 +00:00
c336de3d85
kernel: update module names and add new config symbols for linux 3.3
...
SVN-Revision: 29985
2012-02-02 08:23:44 +00:00
a529e3f09e
add CT target and TTL/HL match+target
...
This patch adds the CT target for conntrack (enables manipulation of
conntrack events and supercedes NOTRACK) as well as the TTL/HL target and
match.
SVN-Revision: 29645
2012-01-04 02:52:54 +00:00
a788f199c9
remove current RTSP support
...
SVN-Revision: 29643
2012-01-04 00:29:29 +00:00
2ad90a1ec3
package CT target
...
SVN-Revision: 29609
2011-12-25 13:32:53 +00:00
1027d262ef
netfilter.mk: remove a few obsolete CompareKernelPatchVer calls
...
SVN-Revision: 27086
2011-06-01 18:08:12 +00:00
be906f6be5
package u32 match and TEE target, patches by Maxim Uvarov
...
SVN-Revision: 26977
2011-05-24 08:14:29 +00:00
a9977eca91
firewall: allow local redirection of ports
...
Allow a redirect like:
config redirect
option src 'wan'
option dest 'lan'
option src_dport '22001'
option dest_port '22'
option proto 'tcp'
note the absence of the "dest_ip" field, meaning to terminate the connection on the firewall itself.
This patch makes three changes:
(1) moves the conntrack module into the conntrack package (but not any of the conntrack_* helpers).
(2) fixes a bug where the wrong table is used when the "dest_ip" field is absent.
(3) accepts incoming connections on the destination port on the input_ZONE table, but only for DNATted
connections.
In the above example,
ssh -p 22 root@myrouter
would fail from the outside, but:
ssh -p 22001 root@myrouter
would succeed. This is handy if:
(1) you want to avoid ssh probes on your router, or
(2) you want to redirect incoming connections on port 22 to some machine inside your firewall, but
still want to allow firewall access from outside.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
SVN-Revision: 26617
2011-04-12 20:03:59 +00:00
24c1caef5f
iipt-debug: create bundle of netfilter modules for debugging
...
Add a bundle for including commonly useful modules for IPtables debugging and development.
For now, it just contains xt_TRACE.ko
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
SVN-Revision: 26567
2011-04-09 23:23:46 +00:00
5959cd2850
add kmod-ipt-led
...
Netfilter LED target triggers blinkenlichten when a network packet hits
a rule.
LED target requires iptables 1.4.9 or higher
Signed-off-by: Łukasz Stelmach <stlman@poczta.fm>
SVN-Revision: 26451
2011-04-03 18:30:37 +00:00
c864843cbf
netfilter.mk: put ipv6 conntrack in the right package
...
SVN-Revision: 25750
2011-02-27 11:22:30 +00:00
2d14f4e2f8
netfilter: add missing modules for v6 conntrack (patch from #8940 )
...
SVN-Revision: 25731
2011-02-26 15:50:01 +00:00
831e597d7c
move nf_{conntrack,nat}_tftp to ipt-nathelper-extra, most people don't need this
...
SVN-Revision: 25722
2011-02-26 00:35:22 +00:00
9dad83362d
kernel: remove imq support, refresh patches
...
SVN-Revision: 25641
2011-02-21 02:06:51 +00:00
d2d990e41e
netfilter.mk: fix connmark packaging for Kernels >= 2.6.35, thanks Daniel Gimpelevich
...
SVN-Revision: 24729
2010-12-19 16:47:30 +00:00
c32a125607
netfilter: workaround a userspace/kernel mismatch on Linux 2.6.35 and later
...
SVN-Revision: 23521
2010-10-18 20:39:07 +00:00
57d2e57b02
finalize r22241 fixes
...
SVN-Revision: 22242
2010-07-17 08:50:19 +00:00
91468dcf4f
package TPROXY target and module infrastructure
...
SVN-Revision: 21883
2010-06-22 22:39:22 +00:00
b6e28298fe
include/netfilter.mk fix typo on r21795
...
SVN-Revision: 21796
2010-06-14 14:51:51 +00:00
e491939c70
include/netfilter.mk: add 2.6.35 kernel support
...
SVN-Revision: 21795
2010-06-14 14:44:27 +00:00
aa8e2e8685
netfilter: extension fixes (partially closes : #7045 ) * add missing xt_owner (2.6) * enable ipt_quota (2.4), disabled in [8499] is building fine with recent iptables * add missing ipt_nat_tftp (2.4) * add missing nf_nat_amanda (2.6)
...
SVN-Revision: 20693
2010-04-04 12:35:06 +00:00
1b0a9b51c4
include/netfilter.mk: move ebtables definitions at the end
...
SVN-Revision: 20690
2010-04-04 03:43:13 +00:00
42e453a2e3
properly package xt_comment.ko ( #6742 )
...
SVN-Revision: 19861
2010-02-26 00:23:39 +00:00
15c4e22d31
netfilter: add support for raw table and NOTRACK target ( #5504 )
...
SVN-Revision: 19721
2010-02-19 01:36:47 +00:00
e830181f47
iptables: add comment match to the core package
...
SVN-Revision: 18706
2009-12-08 20:52:58 +00:00
72dbf7cdca
netfilter: remove IPset leftovers missed from [17844]
...
SVN-Revision: 18032
2009-10-11 14:08:31 +00:00
e014faf13f
Update ipset to version 3.2
...
SVN-Revision: 17764
2009-09-27 15:03:41 +00:00
0e783dde14
split ebtables packages and modules into ebtables ipv4/6 and watchers ( #5001 )
...
SVN-Revision: 16980
2009-07-25 19:47:48 +00:00
a06b20f5b3
fix ip6tables installation against ip6t_HL which has been merged in xt_HL since 2.6.29 ( #5568 )
...
SVN-Revision: 16964
2009-07-24 11:52:30 +00:00
11b33255ed
netfilter: move iptable_raw, xt_NOTRACK from conntrack-extra to conntrack
...
SVN-Revision: 15854
2009-05-14 21:46:33 +00:00
73cfaa0f2b
ipt_TTL and ipt_ttl moved and were renamed in kernel 2.6.30
...
SVN-Revision: 15851
2009-05-14 19:01:38 +00:00
f3dd32d6fd
adept netfilter.mk to updated imq
...
SVN-Revision: 15656
2009-05-07 03:16:36 +00:00
34939cad39
get rid of $Id$ - it has never helped us and it has broken too many patches ;)
...
SVN-Revision: 15242
2009-04-17 14:09:46 +00:00
e744c3130a
move iptable_raw to the conntrack-extra package
...
SVN-Revision: 15175
2009-04-09 19:42:52 +00:00
3b53bd7ef3
accomodate netfilter module (xt_recent) name change in 2.6.28, add missing kconfig when xt_recent is enabled
...
SVN-Revision: 15123
2009-04-06 19:00:20 +00:00
68d73be80c
remove support for ipp2p - it's unmaintained, broken, overmatching and undermatching => not that useful for QoS
...
SVN-Revision: 14596
2009-02-21 16:30:44 +00:00
e5c9f00637
netfilter: remove CHAOS, TARPIT and DELUDE references
...
SVN-Revision: 14461
2009-02-09 13:27:39 +00:00
24e299f95d
defrag needs to be loaded before conntrack_ipv4
...
SVN-Revision: 13585
2008-12-10 18:44:46 +00:00
a7cac1dc31
fix conntrack on 2.6.28
...
SVN-Revision: 13582
2008-12-10 16:00:04 +00:00
2c8010b2dc
make the whole iptables/netfiter modular ( closes : #3871 , #3527 )
...
SVN-Revision: 12649
2008-09-22 15:19:59 +00:00
5cf0db54c6
Package ip6t_limit and ip6t_frag for 2.4 kernels ( #3760 )
...
SVN-Revision: 12276
2008-08-11 06:38:48 +00:00
a7b3ffc182
cosmetic change: rename IPT_NAT_DEFAULT & IPT_NAT_EXTRA to IPT_NATHELPER & IPT_NATHELPER_EXTRA respectively, to better match package names
...
SVN-Revision: 11073
2008-05-08 11:32:46 +00:00
3c05234962
kmod-ipt-iprange: fix build error on .25
...
SVN-Revision: 10992
2008-04-30 15:42:10 +00:00
Jo-Philipp Wich
Hauke Mehrtens
Imre Kaloz
Felix Fietkau
Jonas Gorski
Florian Fainelli
Alexandros C. Couloumbis
Nicolas Thill
Gabor Juhos