summaryrefslogtreecommitdiff
path: root/include/netfilter.mk
Commit message (Collapse)AuthorAgeFilesLines
* iptables: NFLOG and NFQUEUE targets' full supportSteven Barth2014-08-071-0/+27
| | | | | | | | | | | | | | | | NFLOG and NFQUEUE targets' full support for iptables. Includes all needed kernel modules (Xtables's and Netlink's) and userspace libraries. All added kernel modules can be individually disabled, all other new libraries get their own individual packages. Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch> Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at> Reported-by: Derek LaHousse <dlahouss@mtu.edu> Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com> SVN-Revision: 42022
* netfilter: introduce xt_id matchJo-Philipp Wich2014-08-011-1/+2
| | | | | | | | | This commit implements a new netfilter match "xt_id" which can be used to attach unsigned 32bit IDs to iptables rules. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 41945
* netfilter: split off header matching modules not used by the default config ↵Felix Fietkau2014-06-021-7/+9
| | | | | | | | (reduces rootfs size and memory usage) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40983
* iptables/netfilter: add connlimit to conntrack-extraSteven Barth2014-03-111-0/+1
| | | | SVN-Revision: 39878
* Fix IPv6 NAT breaking older kernelsSteven Barth2013-09-031-2/+0
| | | | SVN-Revision: 37891
* netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam ↵Steven Barth2013-09-011-1/+9
| | | | | | Novak and Sedat Dilek for patches and inspiration SVN-Revision: 37866
* netfilter: fix typoLuka Perkov2013-08-211-1/+1
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 37821
* netfilter: remove use of obsolete compatibility config symbols for mark and ↵Felix Fietkau2013-07-151-8/+4
| | | | | | | | | | connmark fixes duplication of xt_mark and xt_connmark module entries Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 37344
* netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into ↵Jo-Philipp Wich2013-05-211-11/+11
| | | | | | base iptables package - drop iptables-mod-ipset SVN-Revision: 36683
* netfilter: Fix typo in last commitSteven Barth2013-03-071-1/+1
| | | | SVN-Revision: 35899
* iptables: Add missing IPv6 builtin modulesSteven Barth2013-03-071-1/+3
| | | | SVN-Revision: 35898
* package/kernel: xt_NOTRACK has been removed in 3.7-rc1Gabor Juhos2013-02-041-1/+1
| | | | | | Signed-off-by: Gabor Juhos <juhosg@openwrt.org> SVN-Revision: 35475
* netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)Jo-Philipp Wich2013-01-141-2/+1
| | | | SVN-Revision: 35155
* netfilter: xt_NOTRACK is incorporated in xt_CT as of 3.8-rc3Florian Fainelli2013-01-101-1/+1
| | | | | | Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 35087
* fix ipv4 nat on 3.7 by adding missing iptables modulesJohn Crispin2012-12-221-1/+1
| | | | SVN-Revision: 34841
* netfilter: fix module list for 3.7 kernelGabor Juhos2012-12-181-6/+11
| | | | | | | Signed-off-by: David Woodhouse <David.Woodhouse@intel.com> Signed-off-by: Gabor Juhos <juhosg@openwrt.org> SVN-Revision: 34750
* netfilter.mk: extend nf_add macro to take a version dependency expressionJo-Philipp Wich2012-12-151-19/+16
| | | | | | | | - nf_add now takes an optional 4th argument which specifies a kernel version dependency, e.g. "lt 3.7.0" - remove CompareKernelPatchVer conditionals around nf_add invocations, use version depends instead - fixes xt_LOG.ko packaging with Linux 3.6.0 and later SVN-Revision: 34681
* netfilter.mk: fix packaging of xt_LOG.ko, it moved between 3.3.8 and 3.6.xJo-Philipp Wich2012-12-111-2/+6
| | | | SVN-Revision: 34625
* kernel: fix loading of nf_nat_ircHauke Mehrtens2012-11-181-1/+1
| | | | | | | nf_nat_irc depends on nf_conntrack_irc and it should be defined after that. This fixes a problem introduced in r34247. SVN-Revision: 34251
* add 3.7-rc6 support (patch 820 still has to be fixed)Imre Kaloz2012-11-181-3/+12
| | | | SVN-Revision: 34247
* include/netfilter.mk: remove a few obsolete linesFelix Fietkau2012-09-231-8/+0
| | | | SVN-Revision: 33518
* kmod-ipt-nathelper-extra: fix missing nf_conntrack_broadcast.koFelix Fietkau2012-06-181-0/+1
| | | | | | | | | | | | | | kmod-ipt-nathelper-extra is missing the package nf_conntrack_broadcast.ko if it is not included into the kmod-ipt-nathelper-extra packge the modules nf_conntrack_snmp and nf_nat_snmp_basic cant get loaded: [ 44.500000] nf_conntrack_snmp: Unknown symbol nf_conntrack_broadcast_help (err 0) [ 44.664000] nf_nat_snmp_basic: Unknown symbol nf_nat_snmp_hook (err 0) Signed-off-by: Peter Wagner <tripolar@gmx.at> SVN-Revision: 32434
* include/netfilter.mk: clean up, remove junk for old kernel versionsFelix Fietkau2012-06-071-70/+9
| | | | SVN-Revision: 32114
* fix ipt_ttl and ipt_TTL userspace library packagingJo-Philipp Wich2012-03-121-4/+4
| | | | SVN-Revision: 30897
* kernel: update module names and add new config symbols for linux 3.3Jonas Gorski2012-02-021-1/+6
| | | | SVN-Revision: 29985
* add CT target and TTL/HL match+targetJo-Philipp Wich2012-01-041-0/+4
| | | | | | | | This patch adds the CT target for conntrack (enables manipulation of conntrack events and supercedes NOTRACK) as well as the TTL/HL target and match. SVN-Revision: 29645
* remove current RTSP supportJo-Philipp Wich2012-01-041-4/+0
| | | | SVN-Revision: 29643
* package CT targetJo-Philipp Wich2011-12-251-0/+1
| | | | SVN-Revision: 29609
* netfilter.mk: remove a few obsolete CompareKernelPatchVer callsFelix Fietkau2011-06-011-17/+5
| | | | SVN-Revision: 27086
* package u32 match and TEE target, patches by Maxim UvarovJo-Philipp Wich2011-05-241-0/+8
| | | | SVN-Revision: 26977
* firewall: allow local redirection of portsJo-Philipp Wich2011-04-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow a redirect like: config redirect option src 'wan' option dest 'lan' option src_dport '22001' option dest_port '22' option proto 'tcp' note the absence of the "dest_ip" field, meaning to terminate the connection on the firewall itself. This patch makes three changes: (1) moves the conntrack module into the conntrack package (but not any of the conntrack_* helpers). (2) fixes a bug where the wrong table is used when the "dest_ip" field is absent. (3) accepts incoming connections on the destination port on the input_ZONE table, but only for DNATted connections. In the above example, ssh -p 22 root@myrouter would fail from the outside, but: ssh -p 22001 root@myrouter would succeed. This is handy if: (1) you want to avoid ssh probes on your router, or (2) you want to redirect incoming connections on port 22 to some machine inside your firewall, but still want to allow firewall access from outside. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> SVN-Revision: 26617
* iipt-debug: create bundle of netfilter modules for debuggingHauke Mehrtens2011-04-091-0/+5
| | | | | | | | | | Add a bundle for including commonly useful modules for IPtables debugging and development. For now, it just contains xt_TRACE.ko Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> SVN-Revision: 26567
* add kmod-ipt-ledFlorian Fainelli2011-04-031-0/+3
| | | | | | | | | | | Netfilter LED target triggers blinkenlichten when a network packet hits a rule. LED target requires iptables 1.4.9 or higher Signed-off-by: Łukasz Stelmach <stlman@poczta.fm> SVN-Revision: 26451
* netfilter.mk: put ipv6 conntrack in the right packageFelix Fietkau2011-02-271-2/+1
| | | | SVN-Revision: 25750
* netfilter: add missing modules for v6 conntrack (patch from #8940)Felix Fietkau2011-02-261-0/+2
| | | | SVN-Revision: 25731
* move nf_{conntrack,nat}_tftp to ipt-nathelper-extra, most people don't need thisFelix Fietkau2011-02-261-4/+4
| | | | SVN-Revision: 25722
* kernel: remove imq support, refresh patchesFelix Fietkau2011-02-211-8/+0
| | | | SVN-Revision: 25641
* netfilter.mk: fix connmark packaging for Kernels >= 2.6.35, thanks Daniel ↵Jo-Philipp Wich2010-12-191-1/+2
| | | | | | Gimpelevich SVN-Revision: 24729
* netfilter: workaround a userspace/kernel mismatch on Linux 2.6.35 and laterJo-Philipp Wich2010-10-181-1/+6
| | | | SVN-Revision: 23521
* finalize r22241 fixesAlexandros C. Couloumbis2010-07-171-3/+3
| | | | SVN-Revision: 22242
* package TPROXY target and module infrastructureJo-Philipp Wich2010-06-221-0/+7
| | | | SVN-Revision: 21883
* include/netfilter.mk fix typo on r21795Alexandros C. Couloumbis2010-06-141-2/+2
| | | | SVN-Revision: 21796
* include/netfilter.mk: add 2.6.35 kernel supportAlexandros C. Couloumbis2010-06-141-3/+10
| | | | SVN-Revision: 21795
* netfilter: extension fixes (partially closes: #7045) * add missing xt_owner ↵Nicolas Thill2010-04-041-1/+4
| | | | | | (2.6) * enable ipt_quota (2.4), disabled in [8499] is building fine with recent iptables * add missing ipt_nat_tftp (2.4) * add missing nf_nat_amanda (2.6) SVN-Revision: 20693
* include/netfilter.mk: move ebtables definitions at the endNicolas Thill2010-04-041-36/+37
| | | | SVN-Revision: 20690
* properly package xt_comment.ko (#6742)Jo-Philipp Wich2010-02-261-0/+2
| | | | SVN-Revision: 19861
* netfilter: add support for raw table and NOTRACK target (#5504)Jo-Philipp Wich2010-02-191-0/+1
| | | | SVN-Revision: 19721
* iptables: add comment match to the core packageJo-Philipp Wich2009-12-081-1/+1
| | | | SVN-Revision: 18706
* netfilter: remove IPset leftovers missed from [17844]Nicolas Thill2009-10-111-21/+0
| | | | SVN-Revision: 18032
* Update ipset to version 3.2Hauke Mehrtens2009-09-271-0/+3
| | | | SVN-Revision: 17764
generated by cgit v1.1 at 2024-05-16 23:36:50 +0000