Tag 'v1.4.3' created by Pablo Neira Ayuso <[email protected]> at 2009-03-23
14:40 -0700
iptables 1.4.3 release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAknHkUUACgkQQYf4ZS0Jh+YlTwCgoUxlsApQT10ZlD7sLJDzo3Yl
b/kAoIisEAd2akoGGCjncvgfw4NDCM7d
=CkU5
-----END PGP SIGNATURE-----
Changes since v1.4.2:
Bart De Schuymer (1):
man: fix physdev manpage
Christian Perle (1):
libxt_policy: cannot set spi/reqid numbers higher than 0x7fffffff
Christoph Paasch (1):
libiptc: avoid compile warnings for iptc_insert_chain
Daniel Drake (1):
libxt_owner: add more spaces to output
Eric Leblond (1):
xt_NFLOG: Set default NFLOG qthreshold to 0
Jamal Hadi Salim (12):
libxtables: Introduce global params structuring
libxtables: define xtables_free_opts()
libxtables: Add exit_error cb to xtables_globals
libxtables: Make ip6tables, iptables and iptables-xml use xtables_globals
libxtables: Replace direct exit_error() calls inside libxtables
libxtables: simple aliasing macro for exit_error
libxtables: set names of programs
libxtables: add xtables_set_revision
libxtables: make iptables and ip6tables use xtables_free_opts
libxtables: consolidate merge_options into xtables_merge_options
libxtables: consolidate init calls into one function
libxtables: general follow-up cleanup
Jan Engelhardt (84):
Move libipt_recent to libxt_recent
libxt_recent: add IPv6 support
manpage: use separate paragraphs for command syntax
manpage: explain what rule-specification is
libiptc: remove typedef indirection
libiptc: remove indirections
libiptc: remove unused iptc_get_raw_socket and iptc_check_packet
libiptc: use hex output for hookmask
libxt_conntrack: respect -n option during ruledump
libiptc: make sockfd a per-handle thing
libxt_conntrack: dump ctdir
src: reuse the global modprobe_program variable
src: use NFPROTO_ constants
src: remove inclusion of iptables.h
doc: fix a typo in libip6t_REJECT.man
libiptc: guard chain index allocation for different malloc implementations
src: remove unused include files
iptables-save: output ! in position according to manpage
rateest: guard against segfault
env: augment deprecation notice
build: resolve autotools suggestions
doc: put iptables version into manpage
doc: resynchronize markup in iptables,ip6tables.8.in
doc: escape minus sign in manpages
build: use regular = assignments in Makefile
build: remove non-portable rule
doc: escape minus sign in manpage (2)
doc: augment ICMP manpage by type/code syntax
src: remove redundant returns at end of void-returning functions
src: remove redundant casts
libxt_owner: use correct UID/GID boundaries
extensions: use UINT_MAX constants over open-coded bits (1/2)
extensions: use UINT_MAX constants over open-coded numbers (2/2)
libxtables: prefix/order - fw_xalloc
libxtables: prefix/order - modprobe and xtables.ko loading
libxtables: prefix/order - match/target loading
libxtables: prefix/order - libdir
libxtables: prefix/order - strtoui
libxtables: prefix/order - program_name
libxtables: prefix/order - param_act
libxtables: prefix/order - ipaddr/ipmask to ascii output
libxtables: prefix/order - ascii to ipaddr/ipmask input
libxtables: prefix - misc functions
libxtables: prefix - parse and escaped output func
libxtables: prefix/order - move check_inverse to xtables.c
libxtables: prefix/order - move parse_protocol to xtables.c
libbxtables: prefix names and order it #1
libxtables: prefix names and order it #2
libxtables: prefix names and order #3
libxtables: move afinfo around
Merge branch 'origin/master'
libxtables: recognize IP6TABLES_LIB_DIR old-style environment variable
build: move -ldl to proper LDADD
libxtables: remove unused XT_LIB_DIR macro
libxtables: decouple non-xtables parts from header
src: remove iptables_rule_match indirection macro
src: remove unused ipt_tryload macro
libxtables: move compat defines to xtables.c
src: consolidate duplicate code in iptables/internal.h
libxtables: use const for vars holding literals
libxt_string: fix undefined behavior/incorrect patlen calculation
libxtables: flush before fork
libipq: add missing doc for NF_ values
build: restructure Makefile for include/ directory
libipq: fix compile error
build: remove unneeded -ldl from iptables_xml_LDADD
libiptc: make library available as a shared library
build: trigger reconfigure when extensions/GNUmakefile.in changes
doc: do not put IPv4 doc into ip6tables.8
doc: resynchronize manpage with in-code help
libxtables: inline and remove unused OPTION_OFFSET macro
libxtables: prefix exit_error to xtables_error
extensions: remove unwanted/add needed includes for IPv6 exts
extensions: remove unwanted/add needed includes for IPv4 exts
libxt_policy: use bounded strtoui
include: resynchronize headers with 2.6.29-rc5
extensions: add missing limits.h include
iptables: turn deprecation warning into enforcing mode
Merge commit 'nf/master'
libxt_connbytes: minor manpage adustments
libxt_connbytes: document nf_ct_acct behavior
libxtables: add -I/-L flags to pkgconfig files
libxt_comment: output quotes must be escaped in
iptables-save: module loading corrections
Jesper Dangaard Brouer (3):
libiptc: fix chain rename bug in libiptc
libiptc: fix whitespaces and typos
libiptc: give credits to my self
Jirí Moravec (1):
libxt_TOS: fix compilation error
KOVACS Krisztian (2):
Add iptables support for the TPROXY target
Add iptables support for the socket match
Marc Fournier (1):
doc: fix option typo in libxt_multiport
Pablo Neira Ayuso (5):
iptables: fix error reporting with wrong/missing arguments
state: report spaces in the state list parsing
iptables: refer to dmesg when we hit error
string: fix wrong pattern length calculation
iptables: fix broken options-merging during libxtables rework
Patrick McHardy (5):
Add SCTP/DCCP support to NAT targets
Bump version to 1.4.3-rc1
Merge branch 'master' of git://dev.medozas.de/iptables
Merge branch 'master' of git://dev.medozas.de/iptables
Bump version to 1.4.3
Shaul Karl (1):
doc: fix one layout issue in iptables-restore.8
Stephen Hemminger (1):
iptables: Add limits.h to get INT_MIN, INT_MAX, ...
Thomas Jarosch (2):
Fix compile error in libxt_iprange.c using gcc 4.3.2
Fix compile warnings using gcc 4.3.2
---
extensions/libipt_recent.c | 232 ---------
extensions/libipt_recent.man | 100 ----
include/linux/netfilter/nf_conntrack_tuple.h | 103 ----
include/linux/netfilter/nf_nat.h | 45 -
include/linux/netfilter_ipv4/ipt_DSCP.h | 18
include/linux/netfilter_ipv4/ipt_FTOS.h | 16
include/linux/netfilter_ipv4/ipt_connlimit.h | 12
include/linux/netfilter_ipv4/ipt_dscp.h | 21
include/linux/netfilter_ipv4/ipt_dstlimit.h | 39 -
include/linux/netfilter_ipv4/ipt_recent.h | 27 -
include/linux/netfilter_ipv4/ipt_rpc.h | 35 -
include/linux/netfilter_ipv6/ip6t_TCPMSS.h | 10
include/xtables/internal.h | 66 --
.gitignore | 2
Makefile.am | 57 +-
configure.ac | 35 -
extensions/GNUmakefile.in | 16
extensions/dscp_helper.c | 4
extensions/libip6t_HL.c | 25 -
extensions/libip6t_HL.man | 6
extensions/libip6t_LOG.c | 39 -
extensions/libip6t_LOG.man | 12
extensions/libip6t_REJECT.c | 11
extensions/libip6t_REJECT.man | 29 -
extensions/libip6t_ah.c | 26 -
extensions/libip6t_ah.man | 6
extensions/libip6t_dst.c | 41 -
extensions/libip6t_dst.man | 4
extensions/libip6t_eui64.c | 4
extensions/libip6t_frag.c | 32 -
extensions/libip6t_frag.man | 12
extensions/libip6t_hbh.c | 41 -
extensions/libip6t_hbh.man | 4
extensions/libip6t_hl.c | 29 -
extensions/libip6t_hl.man | 6
extensions/libip6t_icmp6.c | 21
extensions/libip6t_icmp6.man | 6
extensions/libip6t_ipv6header.c | 28 -
extensions/libip6t_ipv6header.man | 8
extensions/libip6t_mh.c | 15
extensions/libip6t_mh.man | 6
extensions/libip6t_policy.c | 77 +--
extensions/libip6t_rt.c | 52 +-
extensions/libip6t_rt.man | 12
extensions/libipt_CLUSTERIP.c | 53 +-
extensions/libipt_CLUSTERIP.man | 16
extensions/libipt_DNAT.c | 56 +-
extensions/libipt_DNAT.man | 14
extensions/libipt_ECN.c | 27 -
extensions/libipt_ECN.man | 4
extensions/libipt_LOG.c | 41 -
extensions/libipt_LOG.man | 12
extensions/libipt_MASQUERADE.c | 47 +-
extensions/libipt_MASQUERADE.man | 10
extensions/libipt_MIRROR.c | 5
extensions/libipt_NETMAP.c | 51 +-
extensions/libipt_NETMAP.man | 2
extensions/libipt_REDIRECT.c | 51 +-
extensions/libipt_REDIRECT.man | 10
extensions/libipt_REJECT.c | 11
extensions/libipt_REJECT.man | 24 -
extensions/libipt_SAME.c | 41 -
extensions/libipt_SAME.man | 8
extensions/libipt_SET.c | 17
extensions/libipt_SET.man | 4
extensions/libipt_SNAT.c | 54 +-
extensions/libipt_SNAT.man | 14
extensions/libipt_TTL.c | 23
extensions/libipt_TTL.man | 6
extensions/libipt_ULOG.c | 37 -
extensions/libipt_ULOG.man | 8
extensions/libipt_addrtype.c | 45 -
extensions/libipt_addrtype.man | 12
extensions/libipt_ah.c | 18
extensions/libipt_ah.man | 2
extensions/libipt_ecn.c | 23
extensions/libipt_ecn.man | 6
extensions/libipt_icmp.c | 21
extensions/libipt_icmp.man | 8
extensions/libipt_policy.c | 83 +--
extensions/libipt_realm.c | 14
extensions/libipt_realm.man | 2
extensions/libipt_set.c | 14
extensions/libipt_set.h | 18
extensions/libipt_set.man | 4
extensions/libipt_ttl.c | 27 -
extensions/libipt_ttl.man | 6
extensions/libipt_unclean.c | 4
extensions/libxt_CLASSIFY.c | 6
extensions/libxt_CLASSIFY.man | 4
extensions/libxt_CONNMARK.c | 84 +--
extensions/libxt_CONNMARK.man | 28 -
extensions/libxt_CONNSECMARK.c | 14
extensions/libxt_CONNSECMARK.man | 4
extensions/libxt_DSCP.c | 21
extensions/libxt_DSCP.man | 4
extensions/libxt_MARK.c | 72 +--
extensions/libxt_MARK.man | 16
extensions/libxt_NFLOG.c | 34 -
extensions/libxt_NFLOG.man | 10
extensions/libxt_NFQUEUE.c | 11
extensions/libxt_NFQUEUE.man | 2
extensions/libxt_NOTRACK.c | 4
extensions/libxt_RATEEST.c | 20
extensions/libxt_RATEEST.man | 6
extensions/libxt_SECMARK.c | 8
extensions/libxt_SECMARK.man | 2
extensions/libxt_TCPMSS.c | 15
extensions/libxt_TCPMSS.man | 12
extensions/libxt_TCPOPTSTRIP.c | 17
extensions/libxt_TCPOPTSTRIP.man | 6
extensions/libxt_TOS.c | 47 +-
extensions/libxt_TOS.man | 18
extensions/libxt_TPROXY.c | 150 ++++++
extensions/libxt_TPROXY.man | 21
extensions/libxt_comment.c | 15
extensions/libxt_comment.man | 4
extensions/libxt_connbytes.c | 16
extensions/libxt_connbytes.man | 24 -
extensions/libxt_connlimit.c | 24 -
extensions/libxt_connlimit.man | 16
extensions/libxt_connmark.c | 28 -
extensions/libxt_connmark.man | 2
extensions/libxt_conntrack.c | 184 ++++---
extensions/libxt_conntrack.man | 30 -
extensions/libxt_dccp.c | 37 -
extensions/libxt_dccp.man | 8
extensions/libxt_dscp.c | 40 -
extensions/libxt_dscp.man | 4
extensions/libxt_esp.c | 20
extensions/libxt_esp.man | 2
extensions/libxt_hashlimit.c | 138 ++---
extensions/libxt_hashlimit.man | 36 -
extensions/libxt_helper.c | 12
extensions/libxt_helper.man | 4
extensions/libxt_iprange.c | 97 ++--
extensions/libxt_iprange.man | 4
extensions/libxt_length.c | 40 -
extensions/libxt_length.man | 2
extensions/libxt_limit.c | 16
extensions/libxt_limit.man | 4
extensions/libxt_mac.c | 12
extensions/libxt_mac.man | 2
extensions/libxt_mark.c | 20
extensions/libxt_mark.man | 2
extensions/libxt_multiport.c | 61 +-
extensions/libxt_multiport.man | 14
extensions/libxt_owner.c | 89 ++-
extensions/libxt_owner.man | 10
extensions/libxt_physdev.c | 22
extensions/libxt_physdev.man | 16
extensions/libxt_pkttype.c | 8
extensions/libxt_pkttype.man | 2
extensions/libxt_policy.man | 26 -
extensions/libxt_quota.c | 10
extensions/libxt_quota.man | 2
extensions/libxt_rateest.c | 72 +--
extensions/libxt_rateest.man | 42 -
extensions/libxt_recent.c | 250 ++++++++++
extensions/libxt_recent.man | 99 ++++
extensions/libxt_sctp.c | 35 -
extensions/libxt_sctp.man | 12
extensions/libxt_socket.c | 39 +
extensions/libxt_socket.man | 2
extensions/libxt_state.c | 17
extensions/libxt_state.man | 2
extensions/libxt_statistic.c | 41 -
extensions/libxt_statistic.man | 14
extensions/libxt_string.c | 56 +-
extensions/libxt_string.man | 10
extensions/libxt_tcp.c | 41 -
extensions/libxt_tcp.man | 22
extensions/libxt_tcpmss.c | 50 --
extensions/libxt_tcpmss.man | 2
extensions/libxt_time.c | 37 -
extensions/libxt_time.man | 38 -
extensions/libxt_tos.c | 18
extensions/libxt_tos.man | 6
extensions/libxt_u32.c | 32 -
extensions/libxt_u32.man | 10
extensions/libxt_udp.c | 21
extensions/libxt_udp.man | 10
extensions/tos_values.c | 14
include/Makefile.am | 12
include/ip6tables.h | 23
include/iptables.h | 25 -
include/iptables/internal.h.in | 13
include/libiptc/libip6tc.h | 66 +-
include/libiptc/libiptc.h | 66 +-
include/linux/netfilter.h | 10
include/linux/netfilter/nf_conntrack_common.h | 2
include/linux/netfilter/xt_TPROXY.h | 14
include/linux/netfilter/xt_connlimit.h | 9
include/linux/netfilter/xt_conntrack.h | 1
include/linux/netfilter/xt_quota.h | 2
include/linux/netfilter/xt_recent.h | 26 +
include/linux/netfilter/xt_sctp.h | 10
include/linux/netfilter/xt_string.h | 6
include/linux/netfilter_ipv4/ip_tables.h | 2
include/linux/netfilter_ipv4/ipt_SAME.h | 2
include/linux/netfilter_ipv6/ip6_tables.h | 2
include/linux/types.h | 21
include/net/netfilter/nf_conntrack_tuple.h | 114 ++++
include/net/netfilter/nf_nat.h | 54 ++
include/xtables.h.in | 170 ++++---
ip6tables-restore.c | 94 ++--
ip6tables-save.8 | 6
ip6tables-save.c | 58 +-
ip6tables-standalone.c | 28 -
ip6tables.8.in | 170 +++----
ip6tables.c | 497 ++++++++-------------
iptables-restore.8 | 1
iptables-restore.c | 89 +--
iptables-save.8 | 6
iptables-save.c | 58 +-
iptables-standalone.c | 29 -
iptables-xml.c | 61 +-
iptables.8.in | 173 +++----
iptables.c | 505 ++++++++-------------
libipq/Makefile.am | 1
libipq/ipq_create_handle.3 | 2
libipq/ipq_set_verdict.3 | 7
libipq/libipq.3 | 2
libipq/libipq.c | 6
libiptc.pc.in | 11
libiptc/libip4tc.c | 9
libiptc/libip6tc.c | 7
libiptc/libiptc.c | 463 +++++++++----------
m4/.gitignore | 2
release.sh | 4
xtables.c | 611 +++++++++++++++++++-------
xtables.pc.in | 3
232 files changed, 4431 insertions(+), 4196 deletions(-)
---
_______________________________________________
svn mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/svn
