[netfilter-cvslog] [IPtables] annotated tag, svn_t_iptables_1_4_0rc1, created. svn_t_iptables_1_4_0rc1

[Patrick McHardy]

Gitweb:		http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=946261c8b5862aeb91d20233de5c590332723766
Commit:		946261c8b5862aeb91d20233de5c590332723766
Parent:		0000000000000000000000000000000000000000

The annotated tag, svn_t_iptables_1_4_0rc1 has been created
        at  946261c8b5862aeb91d20233de5c590332723766 (tag)
   tagging  f2bc7c0450474653fe637baa4edf30146d9b075e (commit)
  replaces  svn_t_iptables_1_3_8
 tagged by  Patrick McHardy
        on  Wed May 14 18:58:01 2008 +0200

- Log -----------------------------------------------------------------
Tag svn_t_iptables_1_4_0rc1

/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo at netfilter.org (2):
      In <xsl:param name="$node"/>, "$node" is not a valid QName.
      bump version to 1.4.0rc1

/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber at trash.net (53):
      Add Jozsef's TRACE target.
      Fix "iptables getsockopt failed strangely" when querying revisions for non-existant matches and targets
      : libipt_statistic: add a few missing validity checks
      PATCH: Add connlimit to iptables.
      Change default KERNEL_DIR location and add KBUILD_OUTPUT (Sven Wegener <sven.wegener at stealer.net>)
      Ignore generated files
      iptables-xml
      Resync ip6t_REJECT.h with kernel - seems the entire time we had an imcompatible
      Fix dscp match manpage (zhangxiliang <zhangxiliang at cn.fujitsu.com>)
      : Remove last vestiges of NFC (Peter Riley <Peter.Riley at hotpop.com>)
      Build NFLOG target unconditionally
      Build quota match unconditionally
      Build connbytes match unconditionally
      Build statistic match unconditionally
      Build string match unconditionally
      Build dccp match unconditionally
      Build recent match unconditionally
      Resync header file and build CLUSTERIP target unconditionally
      Build IPv6 REJECT target unconditionally
      Resync header file and build IPv6 ah match unconditionally
      Resync header files and build IPv6 frag match unconditionally
      Build IPv6 mh match unconditionally
      Build ipv6header match unconditionally
      Build IPv6 rt match unconditionally
      Build IPv6 hbh/dst matches unconditionally
      Fix strict aliasing warnings
      Fix aligned_u64 type on 64 bit: its an unsigned long, not an unsigned long long.
      Build manpages for xtables extensions (Laszlo Attila Toth <panther at balabit.hu>)
      Remove unsupported connrate extension
      Makefile for man pages of xtables extensions (Laszlo Attila Toth <panther at balabit.hu>)
      Fix sparse warnings: non-ANSI function declarations, 0 used as pointer
      Fix more sparse warnings: non-C99 array declaration, incorrect function prototypes
      Fix unused function warning
      : Adds u32 to iptables.
      : Fix u32 warnings
      : Add the libxt_time iptables match
      Couldn't load/find match `u32'
      : Addrtype match: renaming functions
      Remove stray NULLs
      Delete empty ->init() functions
      Delete empty ->final_check() functions
      Delete empty ->print() and ->save() functions
      Constify data structures
      No ipt in xt
      Unique symbols 1/6
      Unique names 2/6
      Unique names 3/6
      Unique names 4/6
      Unique names 5/6
      Unique symbols 6/6
      Remove redundant dst/hbh lines
      Unique symbols and no '&' characters
      : make print-extensions doesn't show libxt_* extensions

/C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki at netfilter.org (73):
      Removes some KERNEL_64_USERSPACE_32 because linux 2.6 has compat layer
      Removes KERNEL_64_USERSPACE_32
      Fixes compile error of connlimit where NO_SHARED_LIBS=1 is specified
      Adds missing FIN to mask part generated by '--syn' of libip6t_tcp
      Adds missing explanations about FIN in mask part of '--syn' in libip[6]_tcp.c
      Adds xtables.[ch] and change Makefile to compile it
      Moves common fw_malloc() and fw_calloc() to xtables.c
      Moves ip[6]tables_insmod() to xtables.c as xtables_insmod()
      Introduces xtables match/target registration
      Moves some duplicated functions in ip[6]tables.c to xtables.c
      Moves IPPROTO_* and IP[6]T_LIB_DIR definitions to xtables.h
      Replaces ipt_entry_* with xt_entry_* in matches/targets
      Replaces ip6t_entry_* with xt_entry_* in matches/targets
      Fixes warning on compilation of iptables matches/targets
      Fixes warning on compilation of ip6tables matches/targets
      Fixes warning on compilation, part 2
      Introduces DEST_IPT_LIBDIR to simplify $(DESTDIR)$(LIBDIR)/iptables
      Installs libxt_*.so to DEST_IPT_LIBIDR and link libip[6]t_*.so to it.
      Moves all declarations in iptables_common.h to xtables.h.
      Use unified API in NOTRACK target.
      Renames libipt_NOTRACK.c to libxt_NOTRACK.c
      Add IPv6 support to NOTRACK
      Use unified API in multiport match
      Splits ipt_multport into family dependent parts and others
      Moves libipt_multiport.c to libxt_multiport.c
      Unifies libip[6]t_multiport.c into libipxt_multiport.c
      Use unified API in string match
      Moves libipt_string.c to libxt_string.c
      Add IPv6 support to string match
      Use unified API in libipt_mark.c
      Unifies libip[6]_mark.c into libxt_mark.c
      Unifies libip[6]t_udp.c into libxt_udp.c
      Add IPv6 support to tcpmss match
      Unifies libip[6]t_tcp.c into libxt_tcp.c.
      Unifies libip[6]t_standard.c into libxt_standard.c
      Unifies libip[6]t_sctp.c into libxt_sctp.c
      Add IPv6 support to quota match
      Add IPv6 support to pkttype match
      Unifies libip[6]t_physdev.c into libxt_physdev.c
      Unifies libip[6]t_mac.c into libxt_mac.c
      Unifies libip[6]t_limit.c into libxt_limit.c.
      Unifies libip[6]t_length.c into libxt_length.c
      Unifies libip[6]t_esp.c into libxt_esp.c
      Add IPv6 support to dscp match.
      Add IPv6 support to dccp match.
      Add IPv6 support to comment match
      Unifies libip[6]t_TCPMSS.c into libxt_TCPMSS.c
      Unifies libip[6]t_SECMARK.c into libxt_SECMARK.c
      Unifies libip[6]t_NFQUEUE.c into libxt_NFQUEUE.c
      Changes permissions of test scripts of dccp, string, and quota match
      Make xtables_target->extra_opts const (xtables_match->extra_opts already is)
      Remove the .next=NULL field. This is automatically initialized to zero.
      The option struct needs to be terminated, otherwise ip{,6}tables
      Makes it possible to omit extra_opts of matches/targets if unnecessary.
      Make the option structures const.
      Moves libip{,6}t_connlimit to libxt.
      Make @msg argument a const char *, just like printf().
      Tries to load libxt_*.so at first.
      Add IPv6 support to CONNMARK match
      Unifies libip[6]t_CONNSECMARK into libxt_CONNSECMARK
      Unifies libip[6]t_MARK into libxt_MARK
      Unifies libip[6]t_hashlimit into libxt_hashlimit
      Unifies libip[6]t_connmark into libxt_connmark
      Unifies libip[6]t_state into libxt_state
      Unifies libip[6]t_state into libxt_state
      Revert commit 6990.
      Unifies libip[6]t_NFLOG into libxt_NFLOG
      Unifies libip[6]t_TRACE into libxt_TRACE
      Add IPv6 support to CLASSIFY target
      Add IPv6 support to DSCP target
      Add IPv6 support to connbytes match
      Add IPv6 support to helper match
      Add IPv6 support to statistic match

-----------------------------------------------------------------------


hooks/post-receive
--
IPtables