[netfilter-cvslog] [IPtables] annotated tag, svn_t_iptables_1_4_0rc1, created. svn_t_iptables_1_4_0rc1
Patrick McHardy
netfilter-cvslog-bounces at lists.netfilter.org
Wed May 14 19:11:25 CEST 2008
Gitweb: http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=946261c8b5862aeb91d20233de5c590332723766
Commit: 946261c8b5862aeb91d20233de5c590332723766
Parent: 0000000000000000000000000000000000000000
The annotated tag, svn_t_iptables_1_4_0rc1 has been created
at 946261c8b5862aeb91d20233de5c590332723766 (tag)
tagging f2bc7c0450474653fe637baa4edf30146d9b075e (commit)
replaces svn_t_iptables_1_3_8
tagged by Patrick McHardy
on Wed May 14 18:58:01 2008 +0200
- Log -----------------------------------------------------------------
Tag svn_t_iptables_1_4_0rc1
/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo at netfilter.org (2):
In <xsl:param name="$node"/>, "$node" is not a valid QName.
bump version to 1.4.0rc1
/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber at trash.net (53):
Add Jozsef's TRACE target.
Fix "iptables getsockopt failed strangely" when querying revisions for non-existant matches and targets
: libipt_statistic: add a few missing validity checks
PATCH: Add connlimit to iptables.
Change default KERNEL_DIR location and add KBUILD_OUTPUT (Sven Wegener <sven.wegener at stealer.net>)
Ignore generated files
iptables-xml
Resync ip6t_REJECT.h with kernel - seems the entire time we had an imcompatible
Fix dscp match manpage (zhangxiliang <zhangxiliang at cn.fujitsu.com>)
: Remove last vestiges of NFC (Peter Riley <Peter.Riley at hotpop.com>)
Build NFLOG target unconditionally
Build quota match unconditionally
Build connbytes match unconditionally
Build statistic match unconditionally
Build string match unconditionally
Build dccp match unconditionally
Build recent match unconditionally
Resync header file and build CLUSTERIP target unconditionally
Build IPv6 REJECT target unconditionally
Resync header file and build IPv6 ah match unconditionally
Resync header files and build IPv6 frag match unconditionally
Build IPv6 mh match unconditionally
Build ipv6header match unconditionally
Build IPv6 rt match unconditionally
Build IPv6 hbh/dst matches unconditionally
Fix strict aliasing warnings
Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.
Build manpages for xtables extensions (Laszlo Attila Toth <panther at balabit.hu>)
Remove unsupported connrate extension
Makefile for man pages of xtables extensions (Laszlo Attila Toth <panther at balabit.hu>)
Fix sparse warnings: non-ANSI function declarations, 0 used as pointer
Fix more sparse warnings: non-C99 array declaration, incorrect function prototypes
Fix unused function warning
: Adds u32 to iptables.
: Fix u32 warnings
: Add the libxt_time iptables match
Couldn't load/find match `u32'
: Addrtype match: renaming functions
Remove stray NULLs
Delete empty ->init() functions
Delete empty ->final_check() functions
Delete empty ->print() and ->save() functions
Constify data structures
No ipt in xt
Unique symbols 1/6
Unique names 2/6
Unique names 3/6
Unique names 4/6
Unique names 5/6
Unique symbols 6/6
Remove redundant dst/hbh lines
Unique symbols and no '&' characters
: make print-extensions doesn't show libxt_* extensions
/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki at netfilter.org (73):
Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer
Removes KERNEL_64_USERSPACE_32
Fixes compile error of connlimit where NO_SHARED_LIBS=1 is specified
Adds missing FIN to mask part generated by '--syn' of libip6t_tcp
Adds missing explanations about FIN in mask part of '--syn' in libip[6]_tcp.c
Adds xtables.[ch] and change Makefile to compile it
Moves common fw_malloc() and fw_calloc() to xtables.c
Moves ip[6]tables_insmod() to xtables.c as xtables_insmod()
Introduces xtables match/target registration
Moves some duplicated functions in ip[6]tables.c to xtables.c
Moves IPPROTO_* and IP[6]T_LIB_DIR definitions to xtables.h
Replaces ipt_entry_* with xt_entry_* in matches/targets
Replaces ip6t_entry_* with xt_entry_* in matches/targets
Fixes warning on compilation of iptables matches/targets
Fixes warning on compilation of ip6tables matches/targets
Fixes warning on compilation, part 2
Introduces DEST_IPT_LIBDIR to simplify $(DESTDIR)$(LIBDIR)/iptables
Installs libxt_*.so to DEST_IPT_LIBIDR and link libip[6]t_*.so to it.
Moves all declarations in iptables_common.h to xtables.h.
Use unified API in NOTRACK target.
Renames libipt_NOTRACK.c to libxt_NOTRACK.c
Add IPv6 support to NOTRACK
Use unified API in multiport match
Splits ipt_multport into family dependent parts and others
Moves libipt_multiport.c to libxt_multiport.c
Unifies libip[6]t_multiport.c into libipxt_multiport.c
Use unified API in string match
Moves libipt_string.c to libxt_string.c
Add IPv6 support to string match
Use unified API in libipt_mark.c
Unifies libip[6]_mark.c into libxt_mark.c
Unifies libip[6]t_udp.c into libxt_udp.c
Add IPv6 support to tcpmss match
Unifies libip[6]t_tcp.c into libxt_tcp.c.
Unifies libip[6]t_standard.c into libxt_standard.c
Unifies libip[6]t_sctp.c into libxt_sctp.c
Add IPv6 support to quota match
Add IPv6 support to pkttype match
Unifies libip[6]t_physdev.c into libxt_physdev.c
Unifies libip[6]t_mac.c into libxt_mac.c
Unifies libip[6]t_limit.c into libxt_limit.c.
Unifies libip[6]t_length.c into libxt_length.c
Unifies libip[6]t_esp.c into libxt_esp.c
Add IPv6 support to dscp match.
Add IPv6 support to dccp match.
Add IPv6 support to comment match
Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.c
Unifies libip[6]t_SECMARK.c into libxt_SECMARK.c
Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.c
Changes permissions of test scripts of dccp, string, and quota match
Make xtables_target->extra_opts const (xtables_match->extra_opts already is)
Remove the .next=NULL field. This is automatically initialized to zero.
The option struct needs to be terminated, otherwise ip{,6}tables
Makes it possible to omit extra_opts of matches/targets if unnecessary.
Make the option structures const.
Moves libip{,6}t_connlimit to libxt.
Make @msg argument a const char *, just like printf().
Tries to load libxt_*.so at first.
Add IPv6 support to CONNMARK match
Unifies libip[6]t_CONNSECMARK into libxt_CONNSECMARK
Unifies libip[6]t_MARK into libxt_MARK
Unifies libip[6]t_hashlimit into libxt_hashlimit
Unifies libip[6]t_connmark into libxt_connmark
Unifies libip[6]t_state into libxt_state
Unifies libip[6]t_state into libxt_state
Revert commit 6990.
Unifies libip[6]t_NFLOG into libxt_NFLOG
Unifies libip[6]t_TRACE into libxt_TRACE
Add IPv6 support to CLASSIFY target
Add IPv6 support to DSCP target
Add IPv6 support to connbytes match
Add IPv6 support to helper match
Add IPv6 support to statistic match
-----------------------------------------------------------------------
hooks/post-receive
--
IPtables
More information about the netfilter-cvslog
mailing list