summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* main: _exit() if setuidFlorian Westphal3 days1-0/+4
* rule: replace three conditionals with oneJeremy Sowden11 days1-5/+3
* rule: fix stateless output after listing sets containing countersJeremy Sowden11 days1-1/+3
* rule: remove fake stateless output of named countersJeremy Sowden11 days1-7/+6
* cache: unset NFT_CACHE_SETELEM with --terse listingPablo Neira Ayuso2021-10-021-3/+12
* cache: filter out sets and maps that are not requestedPablo Neira Ayuso2021-09-301-2/+19
* cache: filter out tables that are not requestedPablo Neira Ayuso2021-09-303-13/+35
* cache: finer grain cache population for list commandsPablo Neira Ayuso2021-09-291-2/+23
* cache: set on cache flags for nested notationPablo Neira Ayuso2021-09-291-0/+10
* evaluate: check for missing transport protocol match in nat map with concaten...Pablo Neira Ayuso2021-09-291-0/+12
* evaluate: check for concatenation in set data datatypePablo Neira Ayuso2021-09-291-1/+2
* monitor: honor NLM_F_EXCL netlink flagPablo Neira Ayuso2021-09-291-1/+7
* monitor: honor NLM_F_APPEND flag for rulesPablo Neira Ayuso2021-09-291-14/+26
* monitor: display rule position handlePablo Neira Ayuso2021-09-291-1/+4
* netlink: dynset: set compound expr dtype based on set key definitionFlorian Westphal2021-09-291-1/+45
* payload: don't adjust offsets of autogenerated dependency expressionsFlorian Westphal2021-09-292-1/+4
* netlink: reset temporary set element stmt list after list splicePablo Neira Ayuso2021-09-161-1/+1
* src: revert hashtable for expression handlersPablo Neira Ayuso2021-09-152-32/+10
* netlink: rework range_expr_to_prefix()Pablo Neira Ayuso2021-09-091-30/+36
* meta: skip -T for hour and date formatPablo Neira Ayuso2021-09-091-24/+9
* src: Check range bounds before converting to prefixXiao Liang2021-09-061-6/+9
* datatype: time_print() ignores -TPablo Neira Ayuso2021-09-061-0/+5
* rule: remove redundant meta protocol from the evaluation stepPablo Neira Ayuso2021-09-031-23/+54
* netlink_delinearize: incorrect meta protocol dependency kill againPablo Neira Ayuso2021-09-031-45/+61
* parser_json: Fix error reporting for invalid syntaxPhil Sutter2021-09-011-10/+8
* netlink_delinearize: incorrect meta protocol dependency killPablo Neira Ayuso2021-08-261-3/+19
* cache: provide a empty list for flowtables and objects when request failsPablo Neira Ayuso2021-08-261-16/+20
* cache: skip set element netlink dump for add/delete element commandPablo Neira Ayuso2021-08-261-2/+14
* src: Optimize prefix match only if is big-endianXiao Liang2021-08-231-1/+2
* src: queue: consolidate queue statement syntaxPablo Neira Ayuso2021-08-202-11/+14
* parser: permit symbolic define for 'queue num' againFlorian Westphal2021-08-201-0/+1
* netlink_delinearize: skip flags / mask notation for singleton bitmask againPablo Neira Ayuso2021-08-151-1/+1
* evaluate: expand variable containing set into multiple mappingsPablo Neira Ayuso2021-08-121-0/+17
* tcpopt: bogus assertion on undefined optionsPablo Neira Ayuso2021-08-111-1/+2
* mnl: revisit hook listingPablo Neira Ayuso2021-08-063-118/+248
* netlink_delinearize: skip flags / mask notation for singleton bitmaskPablo Neira Ayuso2021-07-281-0/+8
* evaluate: disallow negation with binary operationPablo Neira Ayuso2021-07-271-6/+10
* netlink_linearize: incorrect netlink bytecode with binary operation and flagsPablo Neira Ayuso2021-07-271-15/+23
* expression: missing != in flagcmp expression print functionPablo Neira Ayuso2021-07-271-1/+6
* evaluate: error reporting for missing statements in set/map declarationPablo Neira Ayuso2021-07-261-3/+5
* src: promote 'reject with icmp CODE' syntaxPablo Neira Ayuso2021-07-262-3/+23
* parser_bison: parse number as reject icmp codePablo Neira Ayuso2021-07-261-20/+17
* parser_bison: stateful statement support in mapPablo Neira Ayuso2021-07-261-0/+6
* src: expose nft_ctx_clear_vars as APIPablo Neira Ayuso2021-07-242-1/+4
* src: fix nft_ctx_clear_include_paths in libnftables.mapPablo Neira Ayuso2021-07-241-1/+1
* parser_json: inconditionally initialize ct timeout listPablo Neira Ayuso2021-07-221-1/+1
* parser_bison: missing initialization of ct timeout policy listPablo Neira Ayuso2021-07-221-0/+2
* libnftables: missing nft_ctx_add_var() symbol map updatePablo Neira Ayuso2021-07-211-0/+4
* evaluate: fix inet nat with no layer 3 infoPablo Neira Ayuso2021-07-201-2/+3
* src: add --define key=valuePablo Neira Ayuso2021-07-202-1/+116