netfilter-svn: trunk/iptables/iptables-save.c

[patch 3/4] iptables --list-rules command

Adds iptables --list-rules (-S) command, acting as a combination of
iptables --list and iptables-save.

The primary motivation behind this patch is to get iptables-save like
output capabilities in iptables-restore, allowing "iptables-restore -n"
to be used as a consistent API to iptables for all kind of operations,
not only blind updates..

As a bonus iptables also gets the capability of printing the rules
as-is.

This completely replaces the earlier patch which added the --rules
option.

Henrik Nordstrom <henrik@henriknordstrom.net>

[patch]iptables-save:remove unnecessary code.

The following code is never be used. It should be removed.

Signed-off-by: Shan Wei <shanwei@cn.fujitsu.com>

[PATCH 08/10] Remove old functions, constants

[PATCH 4/8] iptables: use C99 lists for struct options

[PATCH 05/13] Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR

[PATCH 02/13] Fix all remaining warnings (missing declarations, missing prototypes)

[PATCH 05/24] Fix -Wshadow warnings and clean up xt_sctp.h

Note: xt_sctp.h is still not merged upstream in the kernel as of
this commit. But a refactoring was really needed.

[PATCH]: whitespace cleanup

Max Kellermann <max@duempel.org>

[patch] iptables and NO_SHARED_LIBS/dlfcn.h

if NO_SHARED_LIBS is defined, then iptables shouldnt even include dlfcn.h.
otherwise you hit a build failure when using toolchains that do not provide
dlfcn.h because they do not support shared objects.

Signed-Off-By: Mike Frysinger <vapier@gentoo.org>

[PATCH]: iptables: always print mask in iptables-save

iptables prints the mask as a prefix length if it is valid;
This patch makes iptables-save do the same.

Also, iptables-save will always print "/32" in the "-s addr/32"
case now. This reduces the amount of code external parsing scripts
need to provide to properly parse iptables-save output.

ip6tables-save already does the right thing, so no change there.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>

[PATCH]: Don't silenty exit on failure to open /proc/net/{ip,ip6}_tables_names

Victor Stinner <victor.stinner@inl.fr>

Fix missing newlines in iptables-save/restore output (Pavol Rusnak <prusnak@suse.cz>)

Bugzilla #568

Fix iptables-save not printing -s !0/0 and -d !0/0 as well as ip6tables
unnecessarily printing the address. Base on patch by Daniel De Graaf.

fix compilation of iptables on [old] systems that don't have IPT_F_GOTO

add 'goto' support (Henrik Nordstrom <hno@marasystems.com>)

poll goto specific changes out of trunk

fix iptables-save/restore of goto (Jonas Berlin)

Fix setting lib_dir in ip*tables-{save,restore}

move iptables to new trunk directory

Bastiaan Bakker's patch to combine iptables, iptables-save and iptables-restore
for size reduction applied

Get rid of some warnings when compiling 64bit.

include netdb.h if we use getprotobynumber

use /etc/protocols when printing protocol names (Pedro Lamarão)

add userspace part of SCTP match

Make sure to use matches in the order they are given when calling do_command() multiple times.

fix memory leak(s) in libiptc. Reverts the previous (wrong) patch.  (Martin Josefsson)

copyright / GPL notice

globally replace NETFILTER_VERSION with IPTABLES_VERSION to have consistent naming

Added -d and -t short options to getopt_long() call.

make sure we print the "+" at the end of ppp+ stype interface names

fix bug in iptables-save, ocurring with targets without save() function.
Debian Bug #113011

- added patch to support statically linking of iptables
- iptables-save/-restore is no longer experimental

Fix speling of own name.
Fix EMail address.

ip6tables-save without target fix, scoreboard

A. van Schie: bug report "iptables-save doesn't save fall-through rules correctly"

hopefully fixed the multiple-interface iptables-save problem

fixes '_' in interface names bug (iptables)
fixes '+' in interface names bug (iptables-save)

fixing a lot of bugs / cleaning up
- no more dependency problems with user-defined chains
- cleanup of the old strtok problem ( no more goto)

ip6tables-save/-restore by Kis-Szabo Andras

Fixes bug with inverted destination IP (report+fix by Bart Theunissen)

fix another iptables-save segfault when match doesn't provide save function (bug detected by Emmanuel Roger, fix by HW)

fixes segfault in iptables-save

Fix compile warning about const.

o serveral changes / additions  to libiptc:
  - iptc_set_policy has additional argument 'counters' to be consistent
    with iptc_get_policy
  - added functions for counter manipulation
    (iptc_read_counter, iptc_zero_counter, iptc_set_counter)
o iptables-save and iptables-restore manpage clearifications
o iptables-restore counter restoring for chain counters

make iptables-restore and iptables-save work again!

Minor compile fixes.

A few more fixes.

Module loading now can be compulsory.

Makefile fixes for release.
Whitespace cleanups.

reorganized tree after kernel merge

	Diffs between and
	Generate output suitable for use with a patch program
	Type of Diff should be a Colored Diff Long Colored Diff Unidiff Context Diff Side by Side

---

Sort log by: Not sorted Commit date Revision

---

CVS Admin Powered by ViewCVS 1.0-dev

ViewCVS and CVS Help