* iptables >= 1.4.5
- * kernel-devel >= 2.6.32
+ * kernel-devel >= 2.6.33
with prepared build/output directory
- CONFIG_NF_CONNTRACK or CONFIG_IP_NF_CONNTRACK
- CONFIG_NF_CONNTRACK_MARK or CONFIG_IP_NF_CONNTRACK_MARK
echo "WARNING: That kernel version is not officially supported.";
elif test "$kmajor" -eq 3; then
:;
- elif test "$kmajor" -eq 2 -a "$kminor" -eq 6 -a "$kmicro" -ge 32; then
+ elif test "$kmajor" -eq 2 -a "$kminor" -eq 6 -a "$kmicro" -ge 33; then
:;
else
echo "WARNING: That kernel version is not officially supported.";
+++ /dev/null
-match:
-
- /* true/false */
- int
- (*match)(
- const struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- const struct xt_match *match,
- const void *matchinfo,
- int offset,
- unsigned int protoff,
- int *hotdrop,
- );
-
- /* true/false */
- int
- (*checkentry)(
- const char *tablename,
- const void *ip,
- const struct xt_match *match,
- void *matchinfo,
- unsigned int matchinfosize,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_match *match,
- void *matchinfo,
- unsigned int matchinfosize,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff **pskb,
- const struct net_device *in,
- const struct net_device *out,
- unsigned int hooknum,
- const struct xt_target *target,
- const void *targinfo,
- void *userdata,
- );
-
- /* true/false */
- int
- (*checkentry)(
- const char *tablename,
- const void *entry,
- const struct xt_target *target,
- void *targinfo,
- unsigned int targinfosize,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_target *target,
- void *targinfo,
- unsigned int targinfosize,
- );
+++ /dev/null
-match:
-
- /* true/false */
- int
- (*match)(
- const struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- const struct xt_match *match,
- const void *matchinfo,
- int offset,
- unsigned int protoff,
- int *hotdrop,
- );
-
- /* true/false */
- int
- (*checkentry)(
- const char *tablename,
- const void *ip,
- const struct xt_match *match,
- void *matchinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_match *match,
- void *matchinfo,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff **pskb,
- const struct net_device *in,
- const struct net_device *out,
- unsigned int hooknum,
- const struct xt_target *target,
- const void *targinfo,
- );
-
- /* true/false */
- int
- (*checkentry)(
- const char *tablename,
- const void *entry,
- const struct xt_target *target,
- void *targinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_target *target,
- void *targinfo,
- );
+++ /dev/null
-match:
-
- /* true/false */
- bool
- (*match)(
- const struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- const struct xt_match *match,
- const void *matchinfo,
- int offset,
- unsigned int protoff,
- bool *hotdrop,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const char *tablename,
- const void *ip,
- const struct xt_match *match,
- void *matchinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_match *match,
- void *matchinfo,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff **pskb,
- const struct net_device *in,
- const struct net_device *out,
- unsigned int hooknum,
- const struct xt_target *target,
- const void *targinfo,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const char *tablename,
- const void *entry,
- const struct xt_target *target,
- void *targinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_target *target,
- void *targinfo,
- );
+++ /dev/null
-match:
-
- /* true/false */
- bool
- (*match)(
- const struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- const struct xt_match *match,
- const void *matchinfo,
- int offset,
- unsigned int protoff,
- bool *hotdrop,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const char *tablename,
- const void *ip,
- const struct xt_match *match,
- void *matchinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_match *match,
- void *matchinfo,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- unsigned int hooknum,
- const struct xt_target *target,
- const void *targinfo,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const char *tablename,
- const void *entry,
- const struct xt_target *target,
- void *targinfo,
- unsigned int hook_mask,
- );
-
- void
- (*destroy)(
- const struct xt_target *target,
- void *targinfo,
- );
+++ /dev/null
-match:
-
- /* true/false */
- bool
- (*match)(
- const struct sk_buff *skb,
- const struct xt_match_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_mtchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_mtdtor_param *,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff *skb,
- const struct xt_target_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_tgchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_tgdtor_param *,
- );
+++ /dev/null
-match:
-
- /* true/false */
- bool
- (*match)(
- const struct sk_buff *skb,
- const struct xt_match_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_mtchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_mtdtor_param *,
- );
-
-target:
-
- unsigned int
- (*target)(
- struct sk_buff *skb,
- const struct xt_target_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_tgchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_tgdtor_param *,
- );
+++ /dev/null
-match:
-
- /* true/false */
- bool
- (*match)(
- const struct sk_buff *skb,
- const struct xt_match_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_mtchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_mtdtor_param *,
- );
-
-target:
-
- /* verdict */
- unsigned int
- (*target)(
- struct sk_buff *skb,
- const struct xt_target_param *,
- );
-
- /* true/false */
- bool
- (*checkentry)(
- const struct xt_tgchk_param *,
- );
-
- void
- (*destroy)(
- const struct xt_tgdtor_param *,
- );
HEAD
====
Changes:
-- remove support for Linux 2.6.17--2.6.31
+- remove support for Linux 2.6.17--2.6.32
v1.47.1 (2010-10-15)
struct tcphdr;
struct udphdr;
-#if LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 32)
-# define skb_ifindex(skb) (skb)->iif
-# define skb_nfmark(skb) (((struct sk_buff *)(skb))->mark)
-#else
-# define skb_ifindex(skb) (skb)->skb_iif
-# define skb_nfmark(skb) (((struct sk_buff *)(skb))->mark)
-#endif
+#define skb_ifindex(skb) (skb)->skb_iif
+#define skb_nfmark(skb) (((struct sk_buff *)(skb))->mark)
#ifdef CONFIG_NETWORK_SECMARK
# define skb_secmark(skb) ((skb)->secmark)
# define WITH_IPV6 1
#endif
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 32) && \
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 33) && \
LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 34)
static bool xtnu_match_run(const struct sk_buff *skb,
const struct xt_match_param *par)
}
#endif
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 32) && \
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 33) && \
LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 34)
static bool xtnu_match_check(const struct xt_mtchk_param *par)
{
EXPORT_SYMBOL_GPL(xtnu_unregister_matches);
#endif
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 32) && \
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 33) && \
LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 34)
static unsigned int
xtnu_target_run(struct sk_buff *skb, const struct xt_target_param *par)
}
#endif
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 32) && \
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 33) && \
LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 34)
static bool xtnu_target_check(const struct xt_tgchk_param *par)
{
#define DEBUGP Use__pr_debug__instead
-#if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 32)
-# warning Kernels below 2.6.32 not supported.
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 33)
+# warning Kernels below 2.6.33 not supported.
#endif
#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)