Commit Graph

40 Commits (325bc988756e8ecb159c6e0a06d8dad631cac6e7)

Author SHA1 Message Date
Felix Fietkau 6cbee90d4d iptables: remove obsolete files
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45494 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-18 17:59:31 +00:00
Felix Fietkau 61c2a3ada1 iptables: remove layer7 leftovers (#19506)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45481 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-17 18:52:24 +00:00
Felix Fietkau 250b325fe3 iptables: remove layer7 support
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-13 22:23:19 +00:00
John Crispin 927fd29673 iptables: revert r40916
it causes problems with newer iptables when ipv6 is disabled as iptc uncoditionally links ip6tc

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45350 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-10 08:31:06 +00:00
Felix Fietkau 224bfe9779 netfilter: Enable compiling iptables match cluster
This patch adds the userspace and kernelspace for

- match NETFILTER_XT_MATCH_CLUSTER
  This match can be used to deploy gateway and back-end load-sharing clusters.
- target IP_NF_TARGET_CLUSTERIP
  This module allows you to configure a simple cluster of nodes
  that share a certain IP and MAC address
  without an explicit load balancer in front of them.
  Connections are statically distributed between the nodes in this cluster.

This is used i.e. by strongswan-ha.

Signed-off-by: Christian Scheele <cs@embedd.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43174 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 22:01:45 +00:00
John Crispin 85c10a8a6a license info - revert r43155
turns out that r43155 adds duplicate info.

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43167 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 09:56:44 +00:00
John Crispin b8df8ca970 Add more license tags with SPDX identifiers
Note, that licensing stuff is a nightmare: many packages does not clearly
state their licenses, and often multiple source files are simply copied
together - each with different licensing information in the file headers.

I tried hard to ensure, that the license information extracted into the OpenWRT's
makefiles fit the "spirit" of the packages, e.g. such small packages which
come without a dedicated source archive "inherites" the OpenWRT's own license
in my opinion.

However, I can not garantee that I always picked the correct information
and/or did not miss license information.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43155 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:01:08 +00:00
Steven Barth 2bf2015c24 Add a few SPDX tags
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@43151 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-02 12:20:54 +00:00
Steven Barth 40858eb2d4 iptables: add kmod-ipt-nf* to dependency list of iptables-mod-nf*.
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42034 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 12:32:33 +00:00
Steven Barth a150a9c763 iptables: NFLOG and NFQUEUE targets' full support
NFLOG and NFQUEUE targets' full support for iptables.

Includes all needed kernel modules (Xtables's and Netlink's)
 and userspace libraries.
All added kernel modules can be individually disabled,
 all other new libraries get their own individual packages.

Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch>
Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at>
Reported-by: Derek LaHousse <dlahouss@mtu.edu>
Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42022 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-07 04:42:22 +00:00
Jo-Philipp Wich 1706a28205 netfilter: introduce xt_id match
This commit implements a new netfilter match "xt_id" which can be used to
attach unsigned 32bit IDs to iptables rules.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41945 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-08-01 22:49:47 +00:00
Felix Fietkau d0668e0a94 iptables: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41479 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-07-02 19:18:09 +00:00
Jo-Philipp Wich 4af52fee4e iptables: pass --disable-ipv6 is CONFIG_IPV6 is unset
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41458 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-07-02 11:39:24 +00:00
Felix Fietkau 79ba645f99 netfilter: split off header matching modules not used by the default config (reduces rootfs size and memory usage)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40983 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-06-02 18:13:38 +00:00
John Crispin c6c4c6f4b5 iptables: Makefile: only build ip6tc, if IPv6 is enabled
when disabling ipv6, the iptables build breaks without a manul clean or this patch

Signed-off-by: Bastian Bittorf <bittorf@bluebottle.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40916 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-06-02 12:43:25 +00:00
Felix Fietkau 044c8c897f iptables: fix issues with the new musl version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39964 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-20 13:51:40 +00:00
Steven Barth a95e27ea6f iptables/netfilter: add connlimit to conntrack-extra
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39878 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-11 14:58:00 +00:00
Steven Barth 5ac3f5d136 iptables: bump to 1.4.21
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39877 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-11 14:57:55 +00:00
Steven Barth 47c281f29c netfilter: Add IPv6-NAT support for kernel and ipt
Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37866 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-01 17:59:48 +00:00
Steven Barth 794da7c235 iptables: Update to 1.4.20
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37865 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-01 13:46:10 +00:00
Steven Barth 148e692f60 Bump iptables version
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37329 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-15 06:12:07 +00:00
Steven Barth 0ce0c8ad59 iptables: restore reap functionality to recent module
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37328 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-15 06:12:03 +00:00
Jo-Philipp Wich db43350712 iptables: install libext*.a into staging dir
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36867 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-06 14:02:24 +00:00
Steven Barth 95dbacb74f iptables: bump to 1.4.19.1
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36760 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-29 14:58:04 +00:00
Jo-Philipp Wich 2952cc9bc7 netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36683 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich 7962222d78 iptables: use -ffunction-sections, -fdata-sections and --gc-sections
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36680 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 10:15:10 +00:00
Felix Fietkau a9020a0859 package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36634 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-14 15:02:31 +00:00
Jo-Philipp Wich 07664b6ac3 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36509 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-02 08:10:55 +00:00
Steven Barth a800a4a788 iptables: don't use --enable-ipv6 if IPv6 is disabled
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36125 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-25 11:22:12 +00:00
Steven Barth b15a62570b iptables: Add missing IPv6 builtin modules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35898 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-07 08:48:41 +00:00
Steven Barth bd1e6a2a71 iptables: redo update to 1.4.18 with old linking-behaviour
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35896 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-06 17:05:34 +00:00
Steven Barth bddbaf57c5 Revert "iptables: update to 1.4.18" due to toolchain-issue:
binaries cause segfaults when stripped on ar71xx

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35894 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-06 12:55:48 +00:00
Steven Barth 1942d2db25 iptables: update to 1.4.18
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35892 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich b0036a67c3 iptables: fix bad PKG_RELEASE in previous commit
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35569 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich 543e4fb934 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35568 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 21:58:42 +00:00
Jo-Philipp Wich 16345d0356 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35155 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-14 16:12:56 +00:00
Florian Fainelli 86438fe65e [package] iptables: fix typo in iptables musl patch after r34313
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34326 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-11-25 11:40:59 +00:00
Florian Fainelli ee048e8c32 [package] iptables: add some musl portability fixes
Signed-off-by: Florian Fainelli <florian@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34313 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-11-23 20:02:23 +00:00
Felix Fietkau 466dbc9c08 iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34069 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-11-04 17:01:23 +00:00
Felix Fietkau abe70b1494 packages: sort network related packages into package/network/
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33688 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-10-10 12:32:29 +00:00