Commit Graph

129 Commits (315ef7e961fc1483b2ce68e22e9b537a18a0d646)

Author SHA1 Message Date
Felix Fietkau d08f0c7353 netfilter.mk: remove obsolete ip_nat_ftp related line
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45516 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-20 13:36:25 +00:00
Felix Fietkau bddffcecf3 netfilter.mk: move IRC conntrack/nat helpers to kmod-nf-nathelper-extra
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45515 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-20 13:36:02 +00:00
Felix Fietkau 9882aa8649 kernel: finally remove layer7 filter support
it has been non-functional for years and caused numerous memleaks and
crashes for people that tried to enable it.
it has no maintained upstream source, and it does not look like it's
going to be fixed any time soon

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45423 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-13 22:23:14 +00:00
Felix Fietkau 7df2b75a96 netfilter.mk: remove bogus NAT related kernel module entries (#19451)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45382 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-11 12:22:39 +00:00
Felix Fietkau 6fdf1449f4 netfilter.mk: drop obsolete kernel version dependencies
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45381 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-11 12:22:28 +00:00
Luka Perkov a4a0fa62d6 include: remove trailing whitespaces
Signed-off-by: Luka Perkov <luka@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45127 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 07:29:18 +00:00
Felix Fietkau 136d504c34 netfilter: add missing module/symbol
ipv4 symbol was added but ipv6 symbol is missing

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45122 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 05:16:13 +00:00
Felix Fietkau dfe43f6c35 netfilter: clean up compatibility code for old kernels
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44904 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-20 11:01:26 +00:00
John Crispin 54ed570f69 netfilter: fix nf_nat_redirect dependencies for 3.19 and 4.0
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44598 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-05 20:24:22 +00:00
Jo-Philipp Wich e51055dc1d include: netfilter: fix packaging of LOG target for Linux >= 3.16 (#19031)
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44488 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-02-18 13:28:28 +00:00
Jo-Philipp Wich 87d1175871 netfilter: add missing symbols and modules for Linux 3.18+
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44187 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-29 10:22:17 +00:00
Imre Kaloz eac842c52b generic: add preliminary 3.19 support
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44126 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-25 15:20:39 +00:00
Imre Kaloz 940416c462 netfilter: handle NFT_MASQ_IPV6
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43966 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-14 08:53:11 +00:00
Imre Kaloz cb36464b83 netfilter: handle nft_masq and nft_masq_ipv4
Signed-off-by: Imre Kaloz <kaloz@openwrt.org>



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43950 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-12 20:16:36 +00:00
Felix Fietkau ce28e880c9 kernel: add a patch to make netfilter conntrack cache routing information
Significantly improves routing / NAT performance

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43587 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-09 11:01:49 +00:00
John Crispin e3890cfcbf keernel: Fixed dependencies in netfilter modules introduced with 3.18 kernel
Building current trunk with 3.18 kernel fired some errors like 'missed
dependancy of module XXX from library kmod_YYY.ko'. These patch fixes 3
of such issues which are critical to have a successful build.

Signed-off-by: Alexey N Vinogradov <a.n.vinogradov@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43318 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-19 14:09:01 +00:00
Steven Barth 5b8dd93794 kernel: 3.18: Fix kmod-ipt-nat
The 3.18 kernel introduced new Kconfig options for the xt_nat and iptable_nat
kernel modules, that both belong to the ipt_nat kernel package.

Enable this new options.

Signed-off-by: Maxime Ripard <maxime.ripard@free-electrons.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43212 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-08 12:17:14 +00:00
Felix Fietkau 224bfe9779 netfilter: Enable compiling iptables match cluster
This patch adds the userspace and kernelspace for

- match NETFILTER_XT_MATCH_CLUSTER
  This match can be used to deploy gateway and back-end load-sharing clusters.
- target IP_NF_TARGET_CLUSTERIP
  This module allows you to configure a simple cluster of nodes
  that share a certain IP and MAC address
  without an explicit load balancer in front of them.
  Connections are statically distributed between the nodes in this cluster.

This is used i.e. by strongswan-ha.

Signed-off-by: Christian Scheele <cs@embedd.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43174 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 22:01:45 +00:00
Steven Barth 7ebbf31d2a netfilter: unbreak kmod-ipt-nat for <3.7
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42696 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-29 05:24:32 +00:00
Steven Barth 297462e03c netfilter: fix a typo in TTL-match module
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42611 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-18 14:53:26 +00:00
Steven Barth 01e854cdc3 netfilter: remove redundant CONFIG_IP_NF_IPTABLES
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42599 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 12:17:01 +00:00
Steven Barth 6aa8fc2901 Reorganize netfilter kernel modules and package nftables kernel support
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42596 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-17 12:10:44 +00:00
Steven Barth a150a9c763 iptables: NFLOG and NFQUEUE targets' full support
NFLOG and NFQUEUE targets' full support for iptables.

Includes all needed kernel modules (Xtables's and Netlink's)
 and userspace libraries.
All added kernel modules can be individually disabled,
 all other new libraries get their own individual packages.

Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch>
Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at>
Reported-by: Derek LaHousse <dlahouss@mtu.edu>
Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42022 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 04:42:22 +00:00
Jo-Philipp Wich 1706a28205 netfilter: introduce xt_id match
This commit implements a new netfilter match "xt_id" which can be used to
attach unsigned 32bit IDs to iptables rules.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41945 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-01 22:49:47 +00:00
Felix Fietkau 79ba645f99 netfilter: split off header matching modules not used by the default config (reduces rootfs size and memory usage)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40983 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-06-02 18:13:38 +00:00
Steven Barth a95e27ea6f iptables/netfilter: add connlimit to conntrack-extra
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39878 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-11 14:58:00 +00:00
Steven Barth 4973dc1153 Fix IPv6 NAT breaking older kernels
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37891 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-03 06:29:46 +00:00
Steven Barth 47c281f29c netfilter: Add IPv6-NAT support for kernel and ipt
Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37866 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-01 17:59:48 +00:00
Luka Perkov a946458c8b netfilter: fix typo
Signed-off-by: Luka Perkov <luka@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37821 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-21 23:17:08 +00:00
Felix Fietkau d44bd53ed9 netfilter: remove use of obsolete compatibility config symbols for mark and connmark
fixes duplication of xt_mark and xt_connmark module entries

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37344 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-15 13:08:20 +00:00
Jo-Philipp Wich 2952cc9bc7 netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36683 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:15 +00:00
Steven Barth d32fdeb4c0 netfilter: Fix typo in last commit
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35899 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-07 09:30:52 +00:00
Steven Barth b15a62570b iptables: Add missing IPv6 builtin modules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35898 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-07 08:48:41 +00:00
Gabor Juhos 3b3c72413c package/kernel: xt_NOTRACK has been removed in 3.7-rc1
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35475 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-04 10:02:52 +00:00
Jo-Philipp Wich 16345d0356 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35155 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-14 16:12:56 +00:00
Florian Fainelli 4cfd926697 netfilter: xt_NOTRACK is incorporated in xt_CT as of 3.8-rc3
Signed-off-by: Florian Fainelli <florian@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35087 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-10 17:20:29 +00:00
John Crispin 78b7242642 [netfilter] fix ipv4 nat on 3.7 by adding missing iptables modules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34841 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-12-22 10:17:29 +00:00
Gabor Juhos be30c6ff99 netfilter: fix module list for 3.7 kernel
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34750 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-12-18 14:50:42 +00:00
Jo-Philipp Wich af0c735653 netfilter.mk: extend nf_add macro to take a version dependency expression
- nf_add now takes an optional 4th argument which specifies a kernel version dependency, e.g. "lt 3.7.0"
	- remove CompareKernelPatchVer conditionals around nf_add invocations, use version depends instead
	- fixes xt_LOG.ko packaging with Linux 3.6.0 and later

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34681 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-12-15 00:05:35 +00:00
Jo-Philipp Wich 491ecb8358 netfilter.mk: fix packaging of xt_LOG.ko, it moved between 3.3.8 and 3.6.x
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34625 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-12-11 09:53:50 +00:00
Hauke Mehrtens 43c79d519d kernel: fix loading of nf_nat_irc
nf_nat_irc depends on nf_conntrack_irc and it should be defined after that.
This fixes a problem introduced in r34247.


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34251 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-11-18 21:18:37 +00:00
Imre Kaloz 43d2eb64cc [generic]: add 3.7-rc6 support (patch 820 still has to be fixed)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34247 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-11-18 18:52:38 +00:00
Felix Fietkau ec4446db90 include/netfilter.mk: remove a few obsolete lines
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33518 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-09-23 08:25:32 +00:00
Felix Fietkau 7f0ce50d3c kmod-ipt-nathelper-extra: fix missing nf_conntrack_broadcast.ko
kmod-ipt-nathelper-extra is missing the package nf_conntrack_broadcast.ko

if it is not included into the kmod-ipt-nathelper-extra packge the modules
nf_conntrack_snmp and nf_nat_snmp_basic cant get loaded:

[   44.500000] nf_conntrack_snmp: Unknown symbol nf_conntrack_broadcast_help (err 0)
[   44.664000] nf_nat_snmp_basic: Unknown symbol nf_nat_snmp_hook (err 0)

Signed-off-by: Peter Wagner <tripolar@gmx.at>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@32434 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-06-18 23:30:48 +00:00
Felix Fietkau f86dd79d2e include/netfilter.mk: clean up, remove junk for old kernel versions
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@32114 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-06-07 16:30:48 +00:00
Jo-Philipp Wich 07fd626a4e [netfilter] fix ipt_ttl and ipt_TTL userspace library packaging
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@30897 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-03-12 02:07:22 +00:00
Jonas Gorski 47f5be9659 kernel: update module names and add new config symbols for linux 3.3
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@29985 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-02-02 08:23:44 +00:00
Jo-Philipp Wich 96373832ca add CT target and TTL/HL match+target
This patch adds the CT target for conntrack (enables manipulation of
conntrack events and supercedes NOTRACK) as well as the TTL/HL target and
match.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@29645 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-01-04 02:52:54 +00:00
Jo-Philipp Wich 43711bfa75 [netfilter] remove current RTSP support
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@29643 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-01-04 00:29:29 +00:00
Jo-Philipp Wich 125e8da50a [netfilter] package CT target
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@29609 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-12-25 13:32:53 +00:00