summaryrefslogtreecommitdiffstats
path: root/package/kernel/linux/modules/netfilter.mk
Commit message (Collapse)AuthorAgeFilesLines
* kernel: remove duplicate br-netfilter file and Kconfig symbol from kmod-ebtablesMatthias Schiffer2016-09-241-5/+2
| | | | | | | br_netfilter.ko and the corresponding Kconfig symbol are already provided by kmod-br-netfilter, which is a dependency of kmod-ebtables. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* kernel: modularize bridge netfilter support a bit further to get rid of some ↵Felix Fietkau2016-08-031-4/+19
| | | | | | kernel bloat Signed-off-by: Felix Fietkau <nbd@nbd.name>
* conntrack: enable support for netfilter conntrack zonesAlin Năstac2016-05-241-0/+1
| | | | | | | Storage of such zones is provided by a nf_ct_ext struct, hence conntrack memory foot print will not be increased if zones are not used. Signed-off-by: Alin Năstac <alin.nastac@gmail.com>
* Revert "kernel: Linux IP Virtual Server kernel modules (netfilter.mk patch)"Jo-Philipp Wich2016-03-111-54/+0
| | | | | | This reverts commit 845d82da156781135b027ecf75ff67e2253e06dd. SVN-Revision: 49005
* kernel: Linux IP Virtual Server kernel modules (netfilter.mk patch)John Crispin2016-03-101-0/+54
| | | | | | | | | | | | IPVS (IP Virtual Server) implements transport-layer load balancing inside the Linux kernel so called Layer-4 switching. IPVS running on a host acts as a load balancer at the front of a cluster of real servers, it can direct requests for TCP/UDP based services to the real servers, and makes services of the real servers to appear as a virtual service on a single IP address. Signed-off-by: Mauro Mozzarelli <mauro@ezplanet.net> SVN-Revision: 48982
* package: kernel: update dependencies for 4.4Jonas Gorski2015-12-021-1/+1
| | | | | | | | | Update dependencies for linux 4.4 and mark as broken where source code needs updating. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 47700
* package: Remove dependencies to kmod-ipv6Steven Barth2015-09-211-3/+3
| | | | | | | | | Since r46834, IPv6 support is builtin if selected. Therefor, dependencies on kmod-ipv6 can no longer be fulfilled, since it is not a module anymore. Signed-off-by: Arjen de Korte <arjen+openwrt@de-korte.org> SVN-Revision: 47022
* nf-conntrack: enable netlink eventsSteven Barth2015-07-021-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46160
* package/kernel: remove reference to 3.12 kernel versionNicolas Thill2015-05-241-1/+0
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 45742
* kernel: finally remove layer7 filter supportFelix Fietkau2015-04-131-1/+0
| | | | | | | | | | | it has been non-functional for years and caused numerous memleaks and crashes for people that tried to enable it. it has no maintained upstream source, and it does not look like it's going to be fixed any time soon Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45423
* kernel: remove kernel module checks/dependencies for 3.14Felix Fietkau2015-04-111-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45377
* kernel: fix ipset related build error (#19231)Felix Fietkau2015-03-201-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44912
* netfilter: clean up compatibility code for old kernelsFelix Fietkau2015-03-201-17/+0
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44904
* kernel: remove obsolete kernel version dependenciesFelix Fietkau2015-03-191-1/+0
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44892
* ipset: use in-tree kernel modules to fix crash issuesFelix Fietkau2015-03-191-0/+48
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44883
* netfilter: Enable compiling iptables match clusterFelix Fietkau2014-11-031-0/+48
| | | | | | | | | | | | | | | | | | This patch adds the userspace and kernelspace for - match NETFILTER_XT_MATCH_CLUSTER This match can be used to deploy gateway and back-end load-sharing clusters. - target IP_NF_TARGET_CLUSTERIP This module allows you to configure a simple cluster of nodes that share a certain IP and MAC address without an explicit load balancer in front of them. Connections are statically distributed between the nodes in this cluster. This is used i.e. by strongswan-ha. Signed-off-by: Christian Scheele <cs@embedd.com> SVN-Revision: 43174
* netfilter: some more dependency hell fixesSteven Barth2014-09-171-0/+3
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 42602
* netfilter: fix dependencies of kmod-ipt-nat6Steven Barth2014-09-171-3/+1
| | | | SVN-Revision: 42601
* netfilter: add missing symbol to disable nft_queueNicolas Thill2014-09-171-0/+1
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 42600
* Reorganize netfilter kernel modules and package nftables kernel supportSteven Barth2014-09-171-21/+145
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 42596
* iptables: NFLOG and NFQUEUE targets' full supportSteven Barth2014-08-071-10/+48
| | | | | | | | | | | | | | | | NFLOG and NFQUEUE targets' full support for iptables. Includes all needed kernel modules (Xtables's and Netlink's) and userspace libraries. All added kernel modules can be individually disabled, all other new libraries get their own individual packages. Reported-by: Fabian Hugelshofer <hugelshofer2006@gmx.ch> Reported-by: Rainer Poisel <rainer.poisel@fhstp.ac.at> Reported-by: Derek LaHousse <dlahouss@mtu.edu> Signed-off-by: Guillaume Déflache <guillaume.deflache@ibwag.com> SVN-Revision: 42022
* netfilter: split off header matching modules not used by the default config ↵Felix Fietkau2014-06-021-0/+15
| | | | | | | | (reduces rootfs size and memory usage) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40983
* ipt-tproxy: nf_tproxy_core was moved out of 3.12, adding a check for kernel ↵Zoltan Herpai2014-01-141-1/+1
| | | | | | | | version Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu> SVN-Revision: 39287
* kernel: make most modules use AutoProbeJohn Crispin2013-09-171-29/+29
| | | | | | | | now that we have modprobe we can set more than half of the modules to AutoProbe Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38021
* netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam ↵Steven Barth2013-09-011-1/+18
| | | | | | Novak and Sedat Dilek for patches and inspiration SVN-Revision: 37866
* kernel: ebtables depends on bridgeJonas Gorski2013-07-231-1/+1
| | | | | | Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 37520
* linux: kmod-ipt-filter depends on kmod-ipt-conntrackJo-Philipp Wich2013-07-191-1/+1
| | | | SVN-Revision: 37427
* kernel: change ipt depends to a selectJonas Gorski2013-07-191-1/+1
| | | | | | | | Fixes recursive dependencies with kmod-ipt-core. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 37426
* linux: add missing netfilter dependenciesJo-Philipp Wich2013-07-181-1/+5
| | | | SVN-Revision: 37401
* linux: add missing dependencies to kmod-ip6tablesJo-Philipp Wich2013-07-181-1/+1
| | | | SVN-Revision: 37389
* packages: clean up the package folderJohn Crispin2013-06-211-0/+575
Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 37007