summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* src: pass struct nft_ctx through struct netlink_ctxPablo Neira Ayuso2018-10-221-37/+18
* src: pass struct nft_ctx through struct eval_ctxPablo Neira Ayuso2018-10-221-67/+67
* evaluate: bogus bail out with raw expression from dynamic setsPablo Neira Ayuso2018-10-171-1/+11
* src: add support for setting secmarkChristian Göttsche2018-10-151-0/+5
* src: add ipsec (xfrm) expressionMáté Eckl2018-09-211-0/+19
* evaluate: throw distinct error if map exists but contains no objectsFlorian Westphal2018-09-201-2/+4
* src: osf: load pf.os from expr_evaluate_osf()Fernando Fernandez Mancera2018-08-311-0/+11
* src: add ct timeout supportHarsha Sharma2018-08-311-1/+35
* src: tproxy: relax family restrictionsFlorian Westphal2018-08-291-17/+13
* src: Make invalid chain priority error more specificMáté Eckl2018-08-241-5/+6
* src: integrate stateful expressions into sets and mapsPablo Neira Ayuso2018-08-241-0/+14
* src: simplify map statementPablo Neira Ayuso2018-08-241-1/+24
* evaluate: reject: Allow icmpx in inet/bridge familiesPhil Sutter2018-08-141-6/+1
* src: Set/print standard chain prios with textual namesMáté Eckl2018-08-141-0/+27
* src: introduce passive OS fingerprint matchingFernando Fernandez Mancera2018-08-041-0/+7
* src: Expose socket mark via socket expressionMáté Eckl2018-08-031-1/+5
* src: Add tproxy supportMáté Eckl2018-08-031-0/+82
* evaluate: skip evaluation of datatype concatenationsPablo Neira Ayuso2018-07-071-4/+5
* src: do not reset generation ID on ruleset flushPablo Neira Ayuso2018-06-071-1/+2
* src: Introduce socket matchingMáté Eckl2018-06-061-0/+9
* expr: extend fwd statement to support address and familyPablo Neira Ayuso2018-06-061-3/+24
* src: connlimit supportPablo Neira Ayuso2018-06-061-0/+1
* nat: Eliminate misuse of AF_*Máté Eckl2018-06-061-3/+3
* evaluate: explicitly deny concatenated types in interval setsPhil Sutter2018-06-061-0/+4
* log: Add support for audit loggingPhil Sutter2018-06-031-0/+4
* evaluate: Return ENOENT if rule index is too largePhil Sutter2018-05-111-1/+1
* Support 'add/insert rule index <IDX>'Phil Sutter2018-05-091-0/+45
* src: use location to display error messagesPablo Neira Ayuso2018-05-061-62/+94
* src: add obj_specPablo Neira Ayuso2018-05-061-2/+2
* src: add set_specPablo Neira Ayuso2018-05-061-18/+18
* src: add chain_specPablo Neira Ayuso2018-05-061-2/+2
* src: add table_specPablo Neira Ayuso2018-05-061-21/+21
* meter: enforce presence of a max sizeFlorian Westphal2018-05-021-0/+1
* evaluate: missing flowtable evaluation from nested notationPablo Neira Ayuso2018-04-261-0/+7
* src: fix --debug mnl not producing outputDuncan Roe2018-04-261-15/+15
* evaluate: clear expression context before cmd evaluationFlorian Westphal2018-04-191-0/+2
* evaluate: reset eval context when evaluating set definitionsFlorian Westphal2018-04-181-0/+1
* Review raw payload allocation pointsPhil Sutter2018-04-141-1/+0
* evaluate: use recursive call for SET_REF handlingFlorian Westphal2018-04-031-29/+1
* evaluate: handle EXPR_MAPPINGFlorian Westphal2018-04-031-0/+4
* evaluate: split binop xfer to separate functionFlorian Westphal2018-04-031-16/+31
* evaluate: move lhs fixup to a helperFlorian Westphal2018-04-031-19/+28
* evaluate: propagate binop_transfer() adjustment to set key sizePablo Neira Ayuso2018-04-031-1/+2
* evaluate: do not inconditionally update cache from flush commandPablo Neira Ayuso2018-04-011-5/+15
* flowtable: Make parsing a little more robustPhil Sutter2018-03-201-0/+6
* Combine redir and masq statements into natPhil Sutter2018-03-171-40/+0
* src: evaluate: add preliminary binop transfer support for vmapsFlorian Westphal2018-03-171-1/+12
* evaluate: handle binop adjustment recursivelyFlorian Westphal2018-03-171-21/+32
* relational: Eliminate meta OPsPhil Sutter2018-03-161-97/+17
* src: support of dynamic map addition and update of elementsLaura Garcia Liebana2018-03-151-0/+10