Tag 'v1.3.5' created by Harald Welte <[email protected]> at 2006-02-01 13:05 
-0800

iptables 1.3.5

Changes since v1.3.4:
Harald Welte (13):
      - Fix memory leak in TC_COMMIT()  (Markus Sundberg)
      tcp-rst is the alias, not tcp-reset (Torsten Hilbrich)
      note that we can only delete chains that are empty
      fix compilation of iptables on [old] systems that don't have IPT_F_GOTO
      fix iptables-save of 'goto' target (Closes: #410)
      fix spelling 'adress' -> 'address' (Closes: #431) (MJ Anthony)
      add note about deprecated state
      Add 'copy+paste' support for 'state' and 'connmark' match, as well as
      remove ippool
      remove other bits of old ip pool code, people should use ipset 
(ipset.netfilter.org) these days
      fix ipt_conntrack compilation against very early (2.4.0) kernel releases
      Some !%$!*##$@ has modified the kernel 
include/linux/netfilter_ipv4/ipt_sctp.h
      make policy match compile independant of kernel headers

Henrik Nordstrom (1):
      add 'goto' support (Henrik Nordstrom <[email protected]>)

Jones Desougi (1):
      Fix probing for supported revisions (Jones Desougi <[email protected]>)

Michael Rash (1):
      fix 'save' (Michael Rash)

Noticed by Tom Eastep (1):
      Fix "empty policy element" complaining in non-strict mode.

Pablo Neira (2):
      only set revisions on real targets, not on jumps. (Pablo Neira)
      Add documentation for string match (Pablo Neira)

Patrick McHardy (9):
      Don't eat numeric arguments for other extensions
      Fix some gcc-4 warnings
      Add policy match extensions from patch-o-matic
      Add note that TCPMSS is only valid in the mangle table (not true today, 
but maybe someday)
      Fix invalid assignment of tunnel-src to dest address (Patrick McHardy)
      Don't allow using --next option without specifying a policy element
      Move empty policy element check to also catch last element
      Clarify --tunnel-src/--tunnel-dst options
      Prepare policy match for x_tables unification by making sure both

Phil Oester (1):
      The conntrack match does not print any info for --ctproto, thus

Yasuyuki KOZAKAI (1):
      major manpage update (Yasuyuki Kozakai)

---
 extensions/.pool-test                        |    2 
 extensions/libipt_POOL.c                     |  152 ------
 extensions/libipt_pool.c                     |  141 ------
 include/libippool/ip_pool_support.h          |   26 -
 ippool/Makefile                              |   18 
 ippool/ippool.c                              |  589 ---------------------------
 ippool/libippool.c                           |   72 ---
 Makefile                                     |    4 
 extensions/Makefile                          |    4 
 extensions/libip6t_CONNMARK.c                |  220 ++++++++++
 extensions/libip6t_HL.man                    |   18 
 extensions/libip6t_REJECT.man                |    4 
 extensions/libip6t_ah.man                    |    9 
 extensions/libip6t_condition.man             |    2 
 extensions/libip6t_connmark.c                |  151 ++++++
 extensions/libip6t_dst.man                   |   10 
 extensions/libip6t_esp.man                   |    2 
 extensions/libip6t_eui64.man                 |   11 
 extensions/libip6t_frag.man                  |   21 
 extensions/libip6t_fuzzy.man                 |    2 
 extensions/libip6t_hbh.man                   |   10 
 extensions/libip6t_hl.man                    |   14 
 extensions/libip6t_icmpv6.man                |   11 
 extensions/libip6t_ipv6header.man            |   35 +
 extensions/libip6t_length.man                |    6 
 extensions/libip6t_mark.man                  |    4 
 extensions/libip6t_multiport.man             |    3 
 extensions/libip6t_owner.man                 |    2 
 extensions/libip6t_physdev.man               |   10 
 extensions/libip6t_policy.c                  |  478 +++++++++++++++++++++
 extensions/libip6t_policy.man                |   48 ++
 extensions/libip6t_rt.man                    |   14 
 extensions/libip6t_state.c                   |  163 +++++++
 extensions/libipt_CLASSIFY.c                 |    2 
 extensions/libipt_CLUSTERIP.c                |    4 
 extensions/libipt_DNAT.man                   |    2 
 extensions/libipt_REJECT.c                   |    2 
 extensions/libipt_SNAT.man                   |    2 
 extensions/libipt_TCPMSS.man                 |    5 
 extensions/libipt_ah.man                     |    2 
 extensions/libipt_condition.man              |    2 
 extensions/libipt_connbytes.c                |    4 
 extensions/libipt_conntrack.c                |    7 
 extensions/libipt_dstlimit.man               |    2 
 extensions/libipt_esp.man                    |    2 
 extensions/libipt_fuzzy.man                  |    2 
 extensions/libipt_length.man                 |    2 
 extensions/libipt_mark.man                   |    4 
 extensions/libipt_physdev.man                |   10 
 extensions/libipt_policy.c                   |  436 +++++++++++++++++++
 extensions/libipt_policy.man                 |   48 ++
 extensions/libipt_sctp.c                     |   13 
 extensions/libipt_string.c                   |   10 
 extensions/libipt_string.man                 |   15 
 extensions/libipt_tos.c                      |    2 
 extensions/libipt_ttl.c                      |   16 
 include/ip6tables.h                          |    1 
 include/iptables.h                           |    1 
 include/linux/netfilter_ipv4/ipt_conntrack.h |    2 
 include/linux/netfilter_ipv4/ipt_policy.h    |   62 ++
 include/linux/netfilter_ipv6/ip6t_policy.h   |   58 ++
 ip6tables.8.in                               |   25 -
 ip6tables.c                                  |    8 
 iptables-save.c                              |    4 
 iptables.8.in                                |   17 
 iptables.c                                   |   38 +
 libiptc/libiptc.c                            |   48 +-
 67 files changed, 1965 insertions(+), 1149 deletions(-)
---
_______________________________________________
svn mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/svn

Reply via email to