aboutsummaryrefslogtreecommitdiff
path: root/package/iptables
Commit message (Collapse)AuthorAgeFilesLines
* package: provide CPE ID details for numerous packagesGravatar Matt Weber2021-01-041-0/+1
| | | | | | | | This patch adds CPE ID information for a significant number of packages. Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/iptables: add SELinux moduleGravatar Maxime Chevallier2020-12-291-0/+2
| | | | | | | | Support for iptables is adde by the system/iptables module in the SELinux refpolicy. Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
* package/iptables: bump to version 1.8.6Gravatar Francois Perrad2020-12-163-60/+2
| | | | | | | remove merged patch Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/iptables: fix static buildGravatar Fabrice Fontaine2020-09-101-0/+58
| | | | | | | | | | | | | | | | Static build of iptables 1.8.5 fails on: /srv/storage/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/8.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: ../libxtables/.libs/libxtables.a(libxtables_la-xtables.o): in function `dlreg_free': /srv/storage/autobuild/run/instance-3/output-1/build/iptables-1.8.5/libxtables/xtables.c:235: undefined reference to `dlclose' Issue has been added with https://git.netfilter.org/iptables/commit/?id=7db4333dc0b6cd8e943fab78d6dab40ff9f4512e Fixes: - http://autobuild.buildroot.org/results/00f551be87507757a78e332f2859b1e7b3190363 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/iptables: bump to version 1.8.5Gravatar Francois Perrad2020-09-082-2/+2
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
* package/iptables: bump version to 1.8.4Gravatar Peter Seiderer2020-06-022-3/+3
| | | | | | | | | For changelog details see [1]. [1] https://netfilter.org/projects/iptables/files/changes-iptables-1.8.4.txt Signed-off-by: Peter Seiderer <ps.report@gmx.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/iptables: bear the kernel options mungingGravatar Yann E. MORIN2020-05-011-0/+7
| | | | | Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/iptables: bump to version 1.8.3Gravatar Baruch Siach2019-07-037-256/+2
| | | | | | | Drop upstream patches. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
* iptables: fix build with kernel headers < 3.12Gravatar Baruch Siach2018-11-251-0/+37
| | | | | | | | | | | Extend the workaround that was added in patch 0003 to cover ipv6 definitions. Fixes: http://autobuild.buildroot.net/results/23f/23ff396a568a865751471bf1f9e5dff2b73c8ab0/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* iptables: bump to version 1.8.2Gravatar Baruch Siach2018-11-237-54/+223
| | | | | | | | | | | | | | | | | | | Drop upstream patch. Add upstream patch for fixing build with musl libc. Add upstream patch fixing build with glibc older that 2.19, and another upstream patch fixing musl build cause by the previous patch. Add yet another upstream patch fixing build with kernel headers before 4.2 Switch download site to https for better security. Add license file hash. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* iptables: fix build with older kernel headersGravatar Baruch Siach2018-03-061-0/+49
| | | | | | | | | | | | | | | iptables version 1.6.2 uses the BPF_OBJ_GET macro that is only available since kernel version 4.4. Add a patch fixing the detection of the feature availability. Fixes: http://autobuild.buildroot.net/results/e67/e670548c4b250e8a102a4929cafa85634fc79a3d/ http://autobuild.buildroot.net/results/1a7/1a7ab509440c9acacf606f238b8989d9b4287d52/ http://autobuild.buildroot.net/results/555/55583e20bcdf602132c074e08d1a49507d5a48ad/ Cc: Antoine Tenart <antoine.tenart@bootlin.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* iptables: bump to version 1.6.2Gravatar Antoine Tenart2018-02-233-48/+4
| | | | | | | | Also removed a patch fixing the build with musl as it made its way into the 1.6.2 version. Signed-off-by: Antoine Tenart <antoine.tenart@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+Gravatar Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: fix build with muslGravatar Baruch Siach2017-03-021-0/+44
| | | | | | | | | | Add a patch that defines _GNU_SOURCE to expose some struct tcphdr fields. Fixes: http://autobuild.buildroot.net/results/bee/bee20b689345b593378cfd91e0abc48bf381d3f9/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Revert "package/iptables: nfsynproxy not available on musl"Gravatar Baruch Siach2017-02-201-4/+0
| | | | | | | | | | | This reverts commit 497f15b301273cd81e54b4fcc5da6ab90e27796c. As the comment says, musl version 1.1.13 contains commit 53f41fb568ae4. Buildroot now ships musl version 1.1.16, so enable build with musl. Cc: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: bump to version 1.6.1Gravatar Adam Duskett2017-01-295-146/+4
| | | | | | | | | Also removed the 3 patches as they have been added into the latest version. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> [Thomas: drop autoreconf, no longer needed.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: add upstream patch to fix AR substitutionGravatar Jordan Yelloz2016-07-052-0/+34
| | | | | | | | | | This ensures the correct AR is used for some of the iptables build process. This is the same fix as <https://bugs.gentoo.org/show_bug.cgi?id=444282> Signed-off-by: Jordan Yelloz <jordan@yelloz.me> [Thomas: use upstream patch instead of passing AR in the environment.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* libnftnl: bump to version 1.0.6Gravatar Gustavo Zacarias2016-06-081-3/+3
| | | | | | | | It now requires 3.12.x series headers so adjust the dependencies to match. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* iptables: fix libpcap static linkingGravatar Gustavo Zacarias2016-02-021-0/+5
| | | | | | | | | | libpcap can depend on other libraries like libusb and doesn't support pkgconfig, so add those libraries to LIBS when building statically. Fixes: http://autobuild.buildroot.net/results/b4a/b4a3d00e9673a7aacc663c81de1d8e887a17951d/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/iptables: nfsynproxy not available on muslGravatar Bernd Kuhls2016-01-251-0/+4
| | | | | | | | | | | | | | | | | | | utils/nfsynproxy.c needs several TCP_* constants which are not yet provided by musl, they were added Jan 17, 2016 to musl: http://git.musl-libc.org/cgit/musl/commit/?id=53f41fb568ae43034c9876cc9bd3961fd6d13671 Until we support a musl version containing the constants we disable the option for building nfsynproxy on musl. Fixes http://autobuild.buildroot.net/results/8ee/8ee299d8697bf488ba94f60785e81f274b2128fd/ http://autobuild.buildroot.net/results/f1a/f1ab3fe59d0dd7dd7b9a7bc6bc10a0019f0fa567/ http://autobuild.buildroot.net/results/4f9/4f904a2913984201ad0bffb63664019c73e0eb77/ http://autobuild.buildroot.net/results/65c/65c7d47fdc0f55fb8deb77e34063320e2af337ee/ http://autobuild.buildroot.net/results/aaa/aaaa1fc92b6a885d223681f40c5df7a962ee1fce/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: add parallel build fix patchGravatar Gustavo Zacarias2015-12-302-0/+41
| | | | | | | | Fixes: http://autobuild.buildroot.net/results/5c4/5c4ca595c4bf744aa00fc58851eeccf81f9c6ecc/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: bump to version 1.6.0Gravatar Gustavo Zacarias2015-12-309-352/+45
| | | | | | | | | | | | | | | Add option for nftables compat utilies and for bpf compiler/nfsynproxy configuration tool. Drop symlink trickery since it's not required any more. Switch homepage to proper one and drop the kernel v2.4+ note since that's not supported by buildroot anyway. Drop most patches (except musl build) since they're upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* iptables: add upstream patch fixing the message 'connlabel.conf not found'Gravatar Thomas De Schampheleire2015-10-191-0/+72
| | | | | | | | | | | | | | | | | | In iptables versions 1.4.20 and 1.4.21, any call to iptables would generate a message cannot open connlabel.conf, not registering 'connlabel' match: No such file or directory This problem was reported at [1] and subsequently fixed with commit [2], but no upstream release has been made since. This patch imports the fix into Buildroot, awaiting a new release of iptables. [1] http://marc.info/?l=netfilter-devel&m=140990442432002&w=2 [2] http://git.netfilter.org/iptables/commit/?id=825fbda5482a7d5ec5a6619c81fe07ff865c7d6e Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/iptables: fix build on muslGravatar Brendan Heading2015-10-043-0/+210
| | | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/68b/68bf8830f87ab32f4fd650c9dd4a8c80592983a9/ http://autobuild.buildroot.net/results/d9b/d9bb677fb5510adf05ffb4afbc63ead83d7e18dd/ http://autobuild.buildroot.net/results/4b8/4b80b6d0131b624301a5cfcd5541897f411043c9/ .. and others. This patch includes two backported patches from iptables git, plus one pending patch not integrated yet. Signed-off-by: Brendan Heading <brendanheading@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove non-IPv6 dependencies and tweaksGravatar Gustavo Zacarias2015-04-221-8/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBSGravatar Thomas Petazzoni2014-12-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
* iptables: rename patches to new conventionGravatar Ryan Coe2014-12-092-0/+0
| | | | | Signed-off-by: Ryan Coe <bluemrp9@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: disable static for dynamic buildsGravatar Gustavo Zacarias2014-10-221-1/+3
| | | | | | | | | | It leads to ugly runtime warnings, see: http://patchwork.ozlabs.org/patch/386215/ It's also required for xtables-addons. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSGravatar Thomas De Schampheleire2014-10-041-1/+1
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: add hashGravatar Gustavo Zacarias2014-09-181-0/+3
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove uninstall commandsGravatar Thomas De Schampheleire2013-12-061-7/+0
| | | | | Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Merge branch 'next'Gravatar Peter Korsgaard2013-12-012-3/+4
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * iptables: bump to version 1.4.21Gravatar Gustavo Zacarias2013-11-262-3/+4
| | | | | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* | iptables: patch another static linking issueGravatar Gustavo Zacarias2013-11-281-0/+47
|/ | | | | | | | Fixes: http://autobuild.buildroot.net/results/e4a/e4a0f93e2abdad0222063b3f71970ee1c5940f3a/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* iptables: add support for connlabel match and nfnl_osfGravatar Gustavo Zacarias2013-11-111-0/+10
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* iptables: bump to version 1.4.20Gravatar Gustavo Zacarias2013-09-012-3/+72
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: fix build after linux-headers changesGravatar Thomas Petazzoni2013-07-071-1/+1
| | | | | | | | | | | | | | | As reported by 'scanf' on IRC, the iptables now fails to build because of a missing <asm/cache.h> header in the kernel headers. The package directly uses $(LINUX_HEADERS_DIR), which is not correct: this is the source directory of the kernel, not where they are installed, and in addition, this directory is empty/does not exist when using external toolchains. Instead, we use $(STAGING_DIR)/usr, which contains the kernel headers, as part of the toolchain headers. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Normalize separator size to 80Gravatar Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump to version 1.4.19.1Gravatar Gustavo Zacarias2013-05-311-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump to version 1.4.18Gravatar Gustavo Zacarias2013-03-041-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump versionGravatar Peter Korsgaard2012-12-271-1/+1
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* packages: switch to host-pkgconfGravatar Gustavo Zacarias2012-10-291-1/+1
| | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump versionGravatar Peter Korsgaard2012-10-181-1/+1
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump to version 1.4.15Gravatar Gustavo Zacarias2012-08-121-1/+3
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* all packages: rename XXXTARGETS to xxx-packageGravatar Arnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | | | Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* iptables: bump to version 1.4.14Gravatar Gustavo Zacarias2012-05-281-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump to version 1.4.13Gravatar Gustavo Zacarias2012-04-022-35/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: fix build with 3.2 kernel headersGravatar Peter Korsgaard2012-02-091-0/+34
| | | | | | | | | | Based on upstream post-1.14.12.2 change. linux/if_packet.h changed to use the newly introduced __aligned_u64 type in 3.2, which iptables' embedded linux/types.h doesn't provide. Fix it by updating linux/types.h. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: no need to autoreconfGravatar Peter Korsgaard2012-02-081-1/+0
| | | | Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* iptables: bump to version 1.4.12.2Gravatar Gustavo Zacarias2012-01-061-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
generated by cgit v1.2.1 (git 2.18.0) at 2021-03-02 08:36:31 +0000