KOVACS Krisztian e84392707e netfilter: iptables TPROXY target ...

The TPROXY target implements redirection of non-local TCP/UDP traffic to local
sockets. Additionally, it's possible to manipulate the packet mark if and only
if a socket has been found. (We need this because we cannot use multiple
targets in the same iptables rule.)

Signed-off-by: KOVACS Krisztian <hidden@sch.bme.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>

2008-10-08 11:35:12 +02:00

..

Kbuild

netfilter: rename ipt_recent to xt_recent

2008-10-08 11:35:00 +02:00

nf_conntrack_amanda.h

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15 12:26:29 -07:00

nf_conntrack_common.h

netfilter: accounting rework: ct_extend + 64bit counters (v4)

2008-07-21 10:10:58 -07:00

nf_conntrack_dccp.h

[NETFILTER]: nf_conntrack: add DCCP protocol support

2008-04-14 11:15:49 +02:00

nf_conntrack_ftp.h

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15 12:26:29 -07:00

nf_conntrack_h323_asn1.h

[NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port

2006-12-02 22:08:46 -08:00

nf_conntrack_h323_types.h

[NETFILTER]: nf_conntrack_h323: fix ASN.1 types

2007-05-24 16:42:26 -07:00

nf_conntrack_h323.h

[NETFILTER]: Introduce nf_inet_address

2008-01-28 14:59:07 -08:00

nf_conntrack_irc.h

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15 12:26:29 -07:00

nf_conntrack_pptp.h

[NETFILTER]: nf_{conntrack,nat}_pptp: annotate PPtP helper with const

2008-01-31 19:28:09 -08:00

nf_conntrack_proto_gre.h

netfilter: netns nf_conntrack: GRE conntracking in netns

2008-10-08 11:35:10 +02:00

nf_conntrack_sane.h

[NETFILTER]: Add SANE connection tracking helper

2007-02-08 12:39:09 -08:00

nf_conntrack_sctp.h

[NETFILTER]: nf_conntrack_sctp: remove unused ttag field from conntrack data

2008-01-28 15:02:38 -08:00

nf_conntrack_sip.h

netfilter: nf_conntrack_sip: restrict RTP expect flushing on error to last request

2008-05-08 01:15:21 -07:00

nf_conntrack_tcp.h

netfilter: nf_conntrack_tcp: decrease timeouts while data in unacknowledged

2008-07-31 00:38:01 -07:00

nf_conntrack_tftp.h

[NETFILTER]: Replace sk_buff ** with sk_buff *

2007-10-15 12:26:29 -07:00

nf_conntrack_tuple_common.h

…

nfnetlink_compat.h

[NETFILTER]: nfnetlink: fix ifdef in nfnetlink_compat.h

2008-03-10 16:41:06 -07:00

nfnetlink_conntrack.h

netfilter: accounting rework: ct_extend + 64bit counters (v4)

2008-07-21 10:10:58 -07:00

nfnetlink_log.h

netfilter: nfnetlink_log: send complete hardware header

2008-07-21 10:11:00 -07:00

nfnetlink_queue.h

[NETFILTER]: nfnetlink_queue: allow changing queue length through netlink

2006-12-02 21:31:29 -08:00

nfnetlink.h

[NETFILTER]: nfnetlink: kill nlattr_bad_size

2007-10-10 16:53:35 -07:00

x_tables.h

netfilter: Use unsigned types for hooknum and pf vars

2008-10-08 11:35:00 +02:00

xt_CLASSIFY.h

…

xt_comment.h

…

xt_connbytes.h

…

xt_connlimit.h

[NETFILTER]: Annotate start of kernel fields in NF headers

2008-01-28 15:02:19 -08:00

xt_connmark.h

[NETFILTER]: xt_connmark match, revision 1

2008-01-28 15:02:21 -08:00

xt_CONNMARK.h

[NETFILTER]: xt_CONNMARK target, revision 1

2008-01-28 15:02:20 -08:00

xt_CONNSECMARK.h

[SECMARK]: Add CONNSECMARK xtables target

2006-06-17 21:30:03 -07:00

xt_conntrack.h

[NETFILTER]: xt_conntrack: add port and direction matching

2008-01-31 19:27:31 -08:00

xt_dccp.h

…

xt_dscp.h

[NETFILTER]: IPv6 capable xt_tos v1 match

2008-01-28 14:56:00 -08:00

xt_DSCP.h

[NETFILTER]: IPv6 capable xt_TOS v1 target

2008-01-28 14:56:00 -08:00

xt_esp.h

…

xt_hashlimit.h

[NETFILTER]: xt_hashlimit: remove unneeded struct member

2008-02-19 17:19:44 -08:00

xt_helper.h

…

xt_iprange.h

[NETFILTER]: Rename ipt_iprange to xt_iprange

2008-01-28 15:02:27 -08:00

xt_length.h

…

xt_limit.h

…

xt_mac.h

…

xt_mark.h

[NETFILTER]: xt_mark match, revision 1

2008-01-28 15:02:23 -08:00

xt_MARK.h

[NETFILTER]: xt_MARK target, revision 2

2008-01-28 15:02:21 -08:00

xt_multiport.h

…

xt_NFLOG.h

[NETFILTER]: x_tables: add NFLOG target

2006-12-02 21:31:31 -08:00

xt_NFQUEUE.h

…

xt_owner.h

[NETFILTER]: xt_owner: allow matching UID/GID ranges

2008-01-31 19:27:43 -08:00

xt_physdev.h

…

xt_pkttype.h

…

xt_policy.h

[NETFILTER]: xt_policy: use the new union nf_inet_addr

2008-01-28 15:02:25 -08:00

xt_quota.h

[NETFILTER]: Annotate start of kernel fields in NF headers

2008-01-28 15:02:19 -08:00

xt_rateest.h

[NETFILTER]: Annotate start of kernel fields in NF headers

2008-01-28 15:02:19 -08:00

xt_RATEEST.h

[NETFILTER]: Annotate start of kernel fields in NF headers

2008-01-28 15:02:19 -08:00

xt_realm.h

…

xt_recent.h

netfilter: rename ipt_recent to xt_recent

2008-10-08 11:35:00 +02:00

xt_sctp.h

[NETFILTER]: xt_sctp: simplify xt_sctp.h

2008-04-14 09:56:04 +02:00

xt_SECMARK.h

[SECMARK]: Add xtables SECMARK target

2006-06-17 21:29:59 -07:00

xt_state.h

…

xt_statistic.h

[NETFILTER]: Annotate start of kernel fields in NF headers

2008-01-28 15:02:19 -08:00

xt_string.h

netfilter: fix string extension for case insensitive pattern matching

2008-07-08 02:38:56 -07:00

xt_tcpmss.h

…

xt_TCPMSS.h

[NETFILTER]: add IPv6-capable TCPMSS target

2007-02-08 12:39:16 -08:00

xt_TCPOPTSTRIP.h

[NETFILTER]: x_tables: add TCPOPTSTRIP target

2008-01-28 14:55:51 -08:00

xt_tcpudp.h

…

xt_time.h

[NETFILTER]: x_tables: add xt_time match

2007-10-10 16:53:40 -07:00

xt_TPROXY.h

netfilter: iptables TPROXY target

2008-10-08 11:35:12 +02:00

xt_u32.h

[NETFILTER]: Add u32 match

2007-07-10 22:17:13 -07:00