summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* src: add nat support for the inet familyFlorian Westphal2019-04-091-40/+84
* evaluate: improve error reporting in tproxy with inet familyPablo Neira Ayuso2019-04-041-2/+5
* evaluate: skip binary transfer for named setsPablo Neira Ayuso2019-03-261-0/+3
* evaluate: misleading error reporting with sets and mapsPablo Neira Ayuso2019-03-061-4/+6
* src: expr: add expression etypeFlorian Westphal2019-02-081-36/+36
* src: expr: add and use expr_name helperFlorian Westphal2019-02-081-11/+11
* src: remove deprecated code for export/import commandsPablo Neira Ayuso2018-12-271-1/+1
* src: Reject 'export vm json' commandPhil Sutter2018-12-211-0/+3
* src: introduce simple hints on incorrect objectPablo Neira Ayuso2018-12-011-3/+20
* src: introduce simple hints on incorrect setPablo Neira Ayuso2018-11-191-27/+41
* src: introduce simple hints on incorrect chainPablo Neira Ayuso2018-11-191-9/+22
* src: introduce simple hints on incorrect tablePablo Neira Ayuso2018-11-191-57/+48
* evaluate: stmt_evaluate_map() needs right hand side evaluation tooPablo Neira Ayuso2018-10-251-0/+8
* evaluate: do not pass EXPR_SET_ELEM to stmt_evaluate_arg() for set/map evalua...Pablo Neira Ayuso2018-10-251-2/+2
* src: pass struct nft_ctx through struct netlink_ctxPablo Neira Ayuso2018-10-221-37/+18
* src: pass struct nft_ctx through struct eval_ctxPablo Neira Ayuso2018-10-221-67/+67
* evaluate: bogus bail out with raw expression from dynamic setsPablo Neira Ayuso2018-10-171-1/+11
* src: add support for setting secmarkChristian Göttsche2018-10-151-0/+5
* src: add ipsec (xfrm) expressionMáté Eckl2018-09-211-0/+19
* evaluate: throw distinct error if map exists but contains no objectsFlorian Westphal2018-09-201-2/+4
* src: osf: load pf.os from expr_evaluate_osf()Fernando Fernandez Mancera2018-08-311-0/+11
* src: add ct timeout supportHarsha Sharma2018-08-311-1/+35
* src: tproxy: relax family restrictionsFlorian Westphal2018-08-291-17/+13
* src: Make invalid chain priority error more specificMáté Eckl2018-08-241-5/+6
* src: integrate stateful expressions into sets and mapsPablo Neira Ayuso2018-08-241-0/+14
* src: simplify map statementPablo Neira Ayuso2018-08-241-1/+24
* evaluate: reject: Allow icmpx in inet/bridge familiesPhil Sutter2018-08-141-6/+1
* src: Set/print standard chain prios with textual namesMáté Eckl2018-08-141-0/+27
* src: introduce passive OS fingerprint matchingFernando Fernandez Mancera2018-08-041-0/+7
* src: Expose socket mark via socket expressionMáté Eckl2018-08-031-1/+5
* src: Add tproxy supportMáté Eckl2018-08-031-0/+82
* evaluate: skip evaluation of datatype concatenationsPablo Neira Ayuso2018-07-071-4/+5
* src: do not reset generation ID on ruleset flushPablo Neira Ayuso2018-06-071-1/+2
* src: Introduce socket matchingMáté Eckl2018-06-061-0/+9
* expr: extend fwd statement to support address and familyPablo Neira Ayuso2018-06-061-3/+24
* src: connlimit supportPablo Neira Ayuso2018-06-061-0/+1
* nat: Eliminate misuse of AF_*Máté Eckl2018-06-061-3/+3
* evaluate: explicitly deny concatenated types in interval setsPhil Sutter2018-06-061-0/+4
* log: Add support for audit loggingPhil Sutter2018-06-031-0/+4
* evaluate: Return ENOENT if rule index is too largePhil Sutter2018-05-111-1/+1
* Support 'add/insert rule index <IDX>'Phil Sutter2018-05-091-0/+45
* src: use location to display error messagesPablo Neira Ayuso2018-05-061-62/+94
* src: add obj_specPablo Neira Ayuso2018-05-061-2/+2
* src: add set_specPablo Neira Ayuso2018-05-061-18/+18
* src: add chain_specPablo Neira Ayuso2018-05-061-2/+2
* src: add table_specPablo Neira Ayuso2018-05-061-21/+21
* meter: enforce presence of a max sizeFlorian Westphal2018-05-021-0/+1
* evaluate: missing flowtable evaluation from nested notationPablo Neira Ayuso2018-04-261-0/+7
* src: fix --debug mnl not producing outputDuncan Roe2018-04-261-15/+15
* evaluate: clear expression context before cmd evaluationFlorian Westphal2018-04-191-0/+2