summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* src: add quota statementPablo Neira Ayuso2016-08-299-5/+178
* tests: py: adapt it to new add element command semanticsPablo Neira Ayuso2016-08-292-5/+5
* include: refresh uapi/linux/netfilter/nf_tables.h copyPablo Neira Ayuso2016-08-261-1/+79
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-251-0/+15
* src: create element commandPablo Neira Ayuso2016-08-254-14/+20
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-241-0/+14
* src: add create set commandPablo Neira Ayuso2016-08-244-12/+29
* parser_bison: explicit indication on export rulesetPablo Neira Ayuso2016-08-231-1/+7
* src: Simplify parser rule_spec treeCarlos Falgueras García2016-08-232-89/+22
* ct: display bit number instead of raw valueFlorian Westphal2016-08-223-1/+16
* ct: allow numeric conntrack labelsFlorian Westphal2016-08-221-8/+22
* tests: shell: add testcase for reject exprLiping Zhang2016-08-221-0/+9
* parser_bison: keep snat/dnat existing syntax unchangedLiping Zhang2016-08-221-1/+14
* parser_bison: redirect to :port for consistency with nat/masq statementPablo Neira Ayuso2016-08-185-38/+47
* src: meta priority support using tc classidPablo Neira Ayuso2016-08-188-22/+132
* src: simplify classid printing using %x instead of %04xPablo Neira Ayuso2016-08-181-8/+1
* src: rename datatype name from tc_handle to classidPablo Neira Ayuso2016-08-182-5/+5
* scanner: remove range expressionPablo Neira Ayuso2016-08-181-1/+0
* scanner: allow strings starting by underscores and dotsPablo Neira Ayuso2016-08-181-1/+1
* parser_bison: missing token string in QUOTED_ASTERISK and ASTERISK_STRINGPablo Neira Ayuso2016-08-181-2/+2
* src: support for RFC2732 IPv6 address format with bracketsPablo Neira Ayuso2016-08-186-10/+46
* src: add 'to' for snat and dnatPablo Neira Ayuso2016-08-1810-40/+40
* src: quote user-defined strings when used from rule selectorsPablo Neira Ayuso2016-08-1827-157/+161
* ct: release ct_label table on exitPablo Neira Ayuso2016-08-171-0/+5
* ct: add missing slash to connlabel pathPablo Neira Ayuso2016-08-171-1/+1
* tests: tests to include filesPablo Neira Ayuso2016-08-104-0/+107
* scanner: don't break line on include error messagePablo Neira Ayuso2016-08-101-1/+1
* scanner: don't fall back on current directory if include is not foundPablo Neira Ayuso2016-08-101-7/+6
* scanner: honor absolute and relative paths via include filePablo Neira Ayuso2016-08-101-7/+17
* tests: ip payload set support for ecn and dscpFlorian Westphal2016-08-014-0/+123
* netlink: make checksum fixup work with odd-sized header fieldsFlorian Westphal2016-08-011-4/+35
* tests: ip6 dscp, flowlabel and ecn test casesFlorian Westphal2016-08-013-0/+140
* netlink: decode payload statmentFlorian Westphal2016-08-011-5/+178
* evaluate: add support to set IPv6 non-byte header fieldsFlorian Westphal2016-08-011-4/+76
* evaluate: add small helper to check if payload expr needs binop adjustmentFlorian Westphal2016-08-011-2/+7
* payload: print base and raw values for unknown payloadsFlorian Westphal2016-08-012-1/+14
* netlink: add __binop_adjust helperFlorian Westphal2016-08-011-4/+9
* parser_bison: keep map flag around when flags are specifiedPablo Neira Ayuso2016-07-272-1/+22
* xt: use struct xt_xlate_{mt,tg}_paramsPablo Neira Ayuso2016-07-251-5/+15
* tests: add ether payload set testFlorian Westphal2016-07-223-0/+11
* tests: add basic payload testsFlorian Westphal2016-07-2112-0/+180
* ct: use nftables sysconf location for connlabel configurationFlorian Westphal2016-07-211-2/+5
* meta: add tests for meta randomFlorian Westphal2016-07-192-0/+12
* meta: add random supportFlorian Westphal2016-07-192-0/+5
* tests: shell: make sure split table definition works via nft -fPablo Neira Ayuso2016-07-131-0/+50
* parser_bison: fix typo in symbol redefinition error reportingPablo Neira Ayuso2016-07-131-1/+1
* src: add xt compat supportPablo Neira Ayuso2016-07-139-1/+511
* src: expose delinearize/linearize structures and stmt_error()Pablo Neira2016-07-135-36/+43
* include: cache ip_tables.h, ip6_tables.h, arp_tables.h and ebtables.hPablo Neira Ayuso2016-07-1310-1/+976
* netlink_linearize: skip NFTNL_EXPR_DYNSET_TIMEOUT attribute if timeout is unsetPablo Neira Ayuso2016-07-121-2/+3