summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* netlink_delinearize: Avoid potential null pointer derefPablo Neira Ayuso2016-09-071-0/+13
* tests: py: any: Remove duplicate testsManuel Johannes Messner2016-09-062-15/+0
* tests: py: any: Make tests more generic by using other interfacesManuel Johannes Messner2016-09-062-71/+71
* tests: py: nft-tests.py: Add function for loading and removing kernel modulesManuel Johannes Messner2016-09-061-0/+32
* evaluate: display expression, statement and command name on debugPablo Neira Ayuso2016-09-051-3/+31
* evaluate: Avoid undefined behaviour in concat_subtype_id()Phil Sutter2016-09-051-1/+4
* evaluate: reject: Have a generic fix for missing network contextPhil Sutter2016-09-051-3/+1
* evaluate: Fix datalen checks in expr_evaluate_string()Phil Sutter2016-09-051-1/+2
* meta: fix memory leak in tc classid parserLiping Zhang2016-08-301-1/+2
* tests: py: adapt netlink bytecode output of numgen and hashPablo Neira Ayuso2016-08-302-5/+5
* parser_bison: allow variable references in set elements definitionPablo Neira Ayuso2016-08-292-4/+31
* parser_bison: add variable_expr rulePablo Neira Ayuso2016-08-291-10/+13
* evaluate: validate maximum hash and numgen valuePablo Neira Ayuso2016-08-292-8/+28
* evaluate: add expr_evaluate_integer()Pablo Neira Ayuso2016-08-291-15/+23
* src: add hash expressionPablo Neira Ayuso2016-08-2911-2/+191
* src: add numgen expressionPablo Neira Ayuso2016-08-2912-3/+197
* src: add quota statementPablo Neira Ayuso2016-08-299-5/+178
* tests: py: adapt it to new add element command semanticsPablo Neira Ayuso2016-08-292-5/+5
* include: refresh uapi/linux/netfilter/nf_tables.h copyPablo Neira Ayuso2016-08-261-1/+79
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-251-0/+15
* src: create element commandPablo Neira Ayuso2016-08-254-14/+20
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-241-0/+14
* src: add create set commandPablo Neira Ayuso2016-08-244-12/+29
* parser_bison: explicit indication on export rulesetPablo Neira Ayuso2016-08-231-1/+7
* src: Simplify parser rule_spec treeCarlos Falgueras GarcĂ­a2016-08-232-89/+22
* ct: display bit number instead of raw valueFlorian Westphal2016-08-223-1/+16
* ct: allow numeric conntrack labelsFlorian Westphal2016-08-221-8/+22
* tests: shell: add testcase for reject exprLiping Zhang2016-08-221-0/+9
* parser_bison: keep snat/dnat existing syntax unchangedLiping Zhang2016-08-221-1/+14
* parser_bison: redirect to :port for consistency with nat/masq statementPablo Neira Ayuso2016-08-185-38/+47
* src: meta priority support using tc classidPablo Neira Ayuso2016-08-188-22/+132
* src: simplify classid printing using %x instead of %04xPablo Neira Ayuso2016-08-181-8/+1
* src: rename datatype name from tc_handle to classidPablo Neira Ayuso2016-08-182-5/+5
* scanner: remove range expressionPablo Neira Ayuso2016-08-181-1/+0
* scanner: allow strings starting by underscores and dotsPablo Neira Ayuso2016-08-181-1/+1
* parser_bison: missing token string in QUOTED_ASTERISK and ASTERISK_STRINGPablo Neira Ayuso2016-08-181-2/+2
* src: support for RFC2732 IPv6 address format with bracketsPablo Neira Ayuso2016-08-186-10/+46
* src: add 'to' for snat and dnatPablo Neira Ayuso2016-08-1810-40/+40
* src: quote user-defined strings when used from rule selectorsPablo Neira Ayuso2016-08-1827-157/+161
* ct: release ct_label table on exitPablo Neira Ayuso2016-08-171-0/+5
* ct: add missing slash to connlabel pathPablo Neira Ayuso2016-08-171-1/+1
* tests: tests to include filesPablo Neira Ayuso2016-08-104-0/+107
* scanner: don't break line on include error messagePablo Neira Ayuso2016-08-101-1/+1
* scanner: don't fall back on current directory if include is not foundPablo Neira Ayuso2016-08-101-7/+6
* scanner: honor absolute and relative paths via include filePablo Neira Ayuso2016-08-101-7/+17
* tests: ip payload set support for ecn and dscpFlorian Westphal2016-08-014-0/+123
* netlink: make checksum fixup work with odd-sized header fieldsFlorian Westphal2016-08-011-4/+35
* tests: ip6 dscp, flowlabel and ecn test casesFlorian Westphal2016-08-013-0/+140
* netlink: decode payload statmentFlorian Westphal2016-08-011-5/+178
* evaluate: add support to set IPv6 non-byte header fieldsFlorian Westphal2016-08-011-4/+76