mtk-20170518/package/network/utils/iptables/patches, branch master MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker iptables: fix per object LDFLAGS for aggragate object builds 2018-05-01T09:12:15+00:00 John Crispin john@phrozen.org 2018-04-30T13:18:57+00:00 90e65763a435b6a0e1ec66eb74fd7ee0e5d4b36d Without this patch the extra LDFLAGS of objects were selected based on the name of the extension being built, which breaks for aggregate so builds. Signed-off-by: John Crispin <john@phrozen.org> 
Without this patch the extra LDFLAGS of objects were selected based on the
name of the extension being built, which breaks for aggregate so builds.

Signed-off-by: John Crispin <john@phrozen.org>
kernel: add support for enabling hardware flow offload via iptables 2018-04-05T16:12:30+00:00 Felix Fietkau nbd@nbd.name 2018-03-23T11:53:44+00:00 d073f650cdef24dce957099e55b660124fe2e0a4 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
iptables: fix compile with kernel 3.18 2018-02-26T16:52:15+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-02-26T16:49:37+00:00 fc54256bc8d13cf5f314a41ce03695cb424bbee6 This fixes a compile bug found by build bot with kernel 3.18 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes a compile bug found by build bot with kernel 3.18

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
netfilter: add a xt_FLOWOFFLOAD target for NAT/routing offload support 2018-02-21T19:12:42+00:00 Felix Fietkau nbd@nbd.name 2018-02-20T14:58:42+00:00 820f03099894bd48638fb5be326b5c551f0f2b98 This makes it possible to add an iptables rule that offloads routing/NAT packet processing to a software fast path. This fast path is much quicker than running packets through the regular tables/chains. Requires Linux 4.14 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
This makes it possible to add an iptables rule that offloads routing/NAT
packet processing to a software fast path. This fast path is much
quicker than running packets through the regular tables/chains.

Requires Linux 4.14

Signed-off-by: Felix Fietkau <nbd@nbd.name>
iptables: fix nftables compile issue (FS#711) 2017-12-29T17:06:25+00:00 rektide de la faye rektide@voodoowarez.com 2017-12-14T06:29:11+00:00 0f72690a2df92d8701b96c55c870be22704cc7c7 Enabling IPTABLES_NFTABLES resulted in an error during build:# *** No rule to make target '../extensions/libext.a', needed by 'xtables-compat-multi'." Comments from Alexander Lochmann and Fedor Konstantinov in FS#711 provided fixes for this build error, allowing iptables to compile. https://bugs.lede-project.org/index.php?do=details&task_id=711. This commit updates the Makefile.am xtables_compat_multi_LDFLAGS and _LDADD, moving linking of extensions to LDFLAGS. Signed-off-by: rektide de la faye <rektide@voodoowarez.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> 
Enabling IPTABLES_NFTABLES resulted in an error during build:#
*** No rule to make target '../extensions/libext.a',
needed by 'xtables-compat-multi'."

Comments from Alexander Lochmann and Fedor Konstantinov in FS#711
provided fixes for this build error, allowing iptables to compile.
https://bugs.lede-project.org/index.php?do=details&task_id=711.

This commit updates the Makefile.am xtables_compat_multi_LDFLAGS
and _LDADD, moving linking of extensions to LDFLAGS.

Signed-off-by: rektide de la faye <rektide@voodoowarez.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
iptables: fix typos in 600-shared-libext.patch (FS#711) 2017-05-25T17:30:36+00:00 Felix Fietkau nbd@nbd.name 2017-05-25T17:30:06+00:00 c2dc7321d7fdcc7d86a3b284c04bb77f75d5a048 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
iptables: bump to 1.6.1 2017-04-12T08:51:29+00:00 Ansuel Smith ansuelsmth@gmail.com 2017-03-22T15:02:09+00:00 98e43b13a7f0f747d4625ba0209ba37ae22f3b48 Switch to git repo Removed musl patch Refreshed existing patch Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [cleanup] 
Switch to git repo
Removed musl patch
Refreshed existing patch

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name> [cleanup]
netfilter: drop proprietary xt_id match 2016-12-14T00:05:06+00:00 Jo-Philipp Wich jo@mein.io 2016-12-13T23:36:28+00:00 e2f8d200f598c67534c6292d732f7927b3609473 The xt_id match was used by the firewall3 package to track its own rules but the approach has been changed to use xt_comment instead now, so we can drop this nonstandard extension. Signed-off-by: Jo-Philipp Wich <jo@mein.io> 
The xt_id match was used by the firewall3 package to track its own rules but
the approach has been changed to use xt_comment instead now, so we can drop
this nonstandard extension.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
iptables: improve iptables listing output of xt_id match 2016-01-24T18:01:40+00:00 Jo-Philipp Wich jow@openwrt.org 2016-01-24T18:01:40+00:00 eda1ea9eaab82c4037b6f30cb0eafdcf038fcd47 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 48478 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 48478
iptables: reduce binary size 2015-05-26T09:16:50+00:00 Jo-Philipp Wich jow@openwrt.org 2015-05-26T09:16:50+00:00 1c00b6bc7f6e8cb56aedd1ba86e5d1c49a6538f1 * drop unused lenient restore patch * instead of statically linking core extensions, build shared libraries for reuse in fw3 * strip outdated match revisions and aliases to trim down library size Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 45758 
 * drop unused lenient restore patch
 * instead of statically linking core extensions, build shared libraries
   for reuse in fw3
 * strip outdated match revisions and aliases to trim down library size

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 45758