aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/utils/iptables/patches
Commit message (Collapse)AuthorAgeFilesLines
* iptables: patch CVE-2019-11360 (security fix)Jan Pavlinec2019-08-171-0/+13
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* iptables: fix per object LDFLAGS for aggragate object buildsJohn Crispin2018-05-011-5/+5
| | | | | | | Without this patch the extra LDFLAGS of objects were selected based on the name of the extension being built, which breaks for aggregate so builds. Signed-off-by: John Crispin <john@phrozen.org>
* kernel: add support for enabling hardware flow offload via iptablesFelix Fietkau2018-04-051-5/+82
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iptables: fix compile with kernel 3.18Hauke Mehrtens2018-02-261-0/+40
| | | | | | This fixes a compile bug found by build bot with kernel 3.18 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* netfilter: add a xt_FLOWOFFLOAD target for NAT/routing offload supportFelix Fietkau2018-02-211-0/+18
| | | | | | | | | | This makes it possible to add an iptables rule that offloads routing/NAT packet processing to a software fast path. This fast path is much quicker than running packets through the regular tables/chains. Requires Linux 4.14 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iptables: fix nftables compile issue (FS#711)rektide de la faye2017-12-291-0/+20
| | | | | | | | | | | | | | | | Enabling IPTABLES_NFTABLES resulted in an error during build:# *** No rule to make target '../extensions/libext.a', needed by 'xtables-compat-multi'." Comments from Alexander Lochmann and Fedor Konstantinov in FS#711 provided fixes for this build error, allowing iptables to compile. https://bugs.lede-project.org/index.php?do=details&task_id=711. This commit updates the Makefile.am xtables_compat_multi_LDFLAGS and _LDADD, moving linking of extensions to LDFLAGS. Signed-off-by: rektide de la faye <rektide@voodoowarez.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* iptables: fix typos in 600-shared-libext.patch (FS#711)Felix Fietkau2017-05-251-2/+2
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iptables: bump to 1.6.1Ansuel Smith2017-04-128-295/+76
| | | | | | | | | Switch to git repo Removed musl patch Refreshed existing patch Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [cleanup]
* netfilter: drop proprietary xt_id matchJo-Philipp Wich2016-12-141-69/+0
| | | | | | | | The xt_id match was used by the firewall3 package to track its own rules but the approach has been changed to use xt_comment instead now, so we can drop this nonstandard extension. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* iptables: improve iptables listing output of xt_id matchJo-Philipp Wich2016-01-241-2/+12
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 48478
* iptables: reduce binary sizeJo-Philipp Wich2015-05-263-172/+186
| | | | | | | | | | | * drop unused lenient restore patch * instead of statically linking core extensions, build shared libraries for reuse in fw3 * strip outdated match revisions and aliases to trim down library size Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 45758
* iptables: disable unused xml support to save some spaceFelix Fietkau2015-05-061-0/+13
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45617
* iptables: remove layer7 supportFelix Fietkau2015-04-131-371/+0
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45424
* netfilter: introduce xt_id matchJo-Philipp Wich2014-08-011-0/+59
| | | | | | | | | This commit implements a new netfilter match "xt_id" which can be used to attach unsigned 32bit IDs to iptables rules. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 41945
* iptables: refresh patchesFelix Fietkau2014-07-022-14/+10
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 41479
* iptables: fix issues with the new musl versionFelix Fietkau2014-03-203-40/+22
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 39964
* iptables: Update to 1.4.20Steven Barth2013-09-012-17/+4
| | | | SVN-Revision: 37865
* iptables: restore reap functionality to recent moduleSteven Barth2013-07-151-0/+13
| | | | | | | | | | | | | | The reap functionality appears to have been accidentally disabled by commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see: git://git.netfilter.org/iptables.git and subsequently in iptables 1.4.15 and later. This adds a patch to restore reap functionality for recent_opts_v1. Signed-off-by: Russell Senior <russell@personaltelco.net> SVN-Revision: 37328
* iptables: bump to 1.4.19.1Steven Barth2013-05-293-64/+17
| | | | SVN-Revision: 36760
* iptables: redo update to 1.4.18 with old linking-behaviourSteven Barth2013-03-0611-494/+145
| | | | SVN-Revision: 35896
* Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause ↵Steven Barth2013-03-0610-94/+494
| | | | | | segfaults when stripped on ar71xx SVN-Revision: 35894
* iptables: update to 1.4.18Steven Barth2013-03-0510-494/+94
| | | | SVN-Revision: 35892
* iptables: add --lenient switch to iptables-restore and ip6tables-restore ↵Jo-Philipp Wich2013-02-111-0/+172
| | | | | | that allows to skip erroneous lines SVN-Revision: 35568
* iptables: fix typo in iptables musl patch after r34313Florian Fainelli2012-11-251-1/+1
| | | | | | | | Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue. Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 34326
* iptables: add some musl portability fixesFlorian Fainelli2012-11-235-9/+148
| | | | | | Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 34313
* packages: sort network related packages into package/network/Felix Fietkau2012-10-109-0/+957
SVN-Revision: 33688
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-01 19:54:56 +0000