Jan Engelhardt 370786f9cf [NETFILTER]: x_tables: add connlimit match ...

ipt_connlimit has been sitting in POM-NG for a long time.
Here is a new shiny xt_connlimit with:

 * xtables'ified
 * will request the layer3 module
   (previously it hotdropped every packet when it was not loaded)
 * fixed: there was a deadlock in case of an OOM condition
 * support for any layer4 protocol (e.g. UDP/SCTP)
 * using jhash, as suggested by Eric Dumazet
 * ipv6 support

Signed-off-by: Jan Engelhardt <jengelh@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2007-07-14 20:47:26 -07:00

..

Kbuild

[NETFILTER]: add IPv6-capable TCPMSS target

2007-02-08 12:39:16 -08:00

nf_conntrack_amanda.h

[NETFILTER]: nf_conntrack/nf_nat: add amanda helper port

2006-12-02 22:08:26 -08:00

nf_conntrack_common.h

…

nf_conntrack_ftp.h

[NETFILTER]: nf_conntrack_ftp: fix newline sequence number calculation

2007-05-24 16:41:50 -07:00

nf_conntrack_h323_asn1.h

[NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port

2006-12-02 22:08:46 -08:00

nf_conntrack_h323_types.h

[NETFILTER]: nf_conntrack_h323: fix ASN.1 types

2007-05-24 16:42:26 -07:00

nf_conntrack_h323.h

[NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port

2006-12-02 22:08:46 -08:00

nf_conntrack_irc.h

[NETFILTER]: nf_conntrack/nf_nat: add IRC helper port

2006-12-02 22:09:06 -08:00

nf_conntrack_pptp.h

[NETFILTER]: Convert DEBUGP to pr_debug

2007-07-10 22:18:20 -07:00

nf_conntrack_proto_gre.h

[NETFILTER]: nf_nat_proto_gre: do not modify/corrupt GREv0 packets through NAT

2007-05-03 03:34:42 -07:00

nf_conntrack_sane.h

[NETFILTER]: Add SANE connection tracking helper

2007-02-08 12:39:09 -08:00

nf_conntrack_sctp.h

[SCTP]: Netfilter sctp annotations.

2006-12-02 21:27:12 -08:00

nf_conntrack_sip.h

[NETFILTER]: nf_conntrack/nf_nat: add SIP helper port

2006-12-02 22:09:57 -08:00

nf_conntrack_tcp.h

[NETFILTER]: ctnetlink: add support for internal tcp connection tracking flags handling

2007-04-25 22:25:57 -07:00

nf_conntrack_tftp.h

[NETFILTER]: nf_conntrack/nf_nat: add TFTP helper port

2006-12-02 22:10:18 -08:00

nf_conntrack_tuple_common.h

…

nfnetlink_conntrack.h

[NETFILTER]: ctnetlink: add support for internal tcp connection tracking flags handling

2007-04-25 22:25:57 -07:00

nfnetlink_log.h

[NETFILTER]: nfnetlink_log: remove useless prefix length limitation

2006-12-02 21:31:30 -08:00

nfnetlink_queue.h

[NETFILTER]: nfnetlink_queue: allow changing queue length through netlink

2006-12-02 21:31:29 -08:00

nfnetlink.h

[NETLINK]: Remove error pointer from netlink message handler

2007-04-25 22:27:30 -07:00

x_tables.h

[NETFILTER]: x_tables: switch xt_target->checkentry to bool

2007-07-10 22:16:59 -07:00

xt_CLASSIFY.h

…

xt_comment.h

…

xt_connbytes.h

…

xt_connlimit.h

[NETFILTER]: x_tables: add connlimit match

2007-07-14 20:47:26 -07:00

xt_connmark.h

…

xt_CONNMARK.h

…

xt_CONNSECMARK.h

…

xt_conntrack.h

[NETFILTER]: trivial annotations

2006-12-02 21:21:25 -08:00

xt_dccp.h

…

xt_dscp.h

…

xt_DSCP.h

…

xt_esp.h

…

xt_hashlimit.h

[NETFILTER]: x_tables: add port of hashlimit match for IPv4 and IPv6

2006-12-02 21:31:31 -08:00

xt_helper.h

…

xt_length.h

…

xt_limit.h

…

xt_mac.h

…

xt_mark.h

…

xt_MARK.h

…

xt_multiport.h

…

xt_NFLOG.h

[NETFILTER]: x_tables: add NFLOG target

2006-12-02 21:31:31 -08:00

xt_NFQUEUE.h

…

xt_physdev.h

…

xt_pkttype.h

…

xt_policy.h

[NETFILTER]: trivial annotations

2006-12-02 21:21:25 -08:00

xt_quota.h

…

xt_realm.h

…

xt_sctp.h

…

xt_SECMARK.h

…

xt_state.h

…

xt_statistic.h

…

xt_string.h

…

xt_tcpmss.h

…

xt_TCPMSS.h

[NETFILTER]: add IPv6-capable TCPMSS target

2007-02-08 12:39:16 -08:00

xt_tcpudp.h

…

xt_u32.h

[NETFILTER]: Add u32 match

2007-07-10 22:17:13 -07:00