The xt_id match was used by the firewall3 package to track its own rules but
the approach has been changed to use xt_comment instead now, so we can drop
this nonstandard extension.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 48478

 * drop unused lenient restore patch
 * instead of statically linking core extensions, build shared libraries
   for reuse in fw3
 * strip outdated match revisions and aliases to trim down library size

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 45758

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 45617

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 45424

This commit implements a new netfilter match "xt_id" which can be used to
attach unsigned 32bit IDs to iptables rules.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41945

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41479

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39964

SVN-Revision: 37865

The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git



and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328

SVN-Revision: 36760

SVN-Revision: 35896

Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx

SVN-Revision: 35894

SVN-Revision: 35892

iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines

SVN-Revision: 35568

Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34326

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34313

SVN-Revision: 33688