summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* json: expose dynamic flagPablo Neira Ayuso2023-11-032-0/+3
* parser_json: Default meter size to zeroPhil Sutter2023-11-031-1/+1
* netlink: handle invalid etype in set_make_key()Thomas Haller2023-11-031-0/+2
* datatype: initialize TYPE_CT_EVENTBIT slot in datatype arrayPablo Neira Ayuso2023-11-032-1/+2
* datatype: initialize TYPE_CT_LABEL slot in datatype arrayPablo Neira Ayuso2023-11-032-1/+2
* parser_json: Catch nonsense ops in match statementPhil Sutter2023-11-031-4/+9
* parser_json: Wrong check in json_parse_ct_timeout_policy()Phil Sutter2023-11-031-1/+1
* parser_json: Fix synproxy object mss/wscale parsingPhil Sutter2023-11-031-3/+4
* parser_json: Fix limit object burst value parsingPhil Sutter2023-11-031-1/+1
* parser_json: Fix flowtable prio value parsingPhil Sutter2023-11-031-1/+1
* parser_json: Proper ct expectation attribute parsingPhil Sutter2023-11-031-6/+7
* parser_json: Fix typo in json_parse_cmd_add_object()Phil Sutter2023-11-031-1/+1
* parser_json: Catch wrong "reset" payloadPhil Sutter2023-11-031-1/+8
* limit: display default burst when listing rulesetPablo Neira Ayuso2023-11-031-3/+1
* evaluate: expand sets and maps before evaluationPablo Neira Ayuso2023-11-033-40/+32
* scanner: restrict include directive to regular filesFlorian Westphal2023-11-031-3/+66
* libnftables: refuse to open onput files other than named pipes or regular filesFlorian Westphal2023-11-031-0/+34
* datatype: fix leak and cleanup reference counting for struct datatypeThomas Haller2023-11-036-50/+77
* evaluate: fix get element for concatenated setFlorian Westphal2023-11-031-4/+7
* evaluate: revisit anonymous set with single element optimizationPablo Neira Ayuso2023-11-031-20/+40
* evaluate: fix check for truncation in stmt_evaluate_log_prefix()Thomas Haller2023-11-031-1/+1
* evaluate: do not remove anonymous set with protocol flags and single elementPablo Neira Ayuso2023-11-021-1/+6
* evaluate: Drop dead code from expr_evaluate_mapping()Phil Sutter2023-11-021-11/+8
* parser: permit gc-interval in map declarationsFlorian Westphal2023-11-021-0/+5
* parser: allow ct timeouts to use time_spec valuesFlorian Westphal2023-11-022-6/+13
* libnftables: Drop cache in -c/--check modePablo Neira Ayuso2023-11-021-2/+5
* netlink: delinearize: copy set keytype if neededFlorian Westphal2023-11-021-0/+2
* expression: define .clone for catchall set elementPablo Neira Ayuso2023-11-021-2/+13
* parser: reject zero-length interface names in flowtablesFlorian Westphal2023-11-021-8/+12
* parser: reject zero-length interface namesFlorian Westphal2023-11-021-5/+31
* parser: don't assert on scope underflowsFlorian Westphal2023-11-021-2/+1
* evaluate: do not abort when prefix map has non-map elementFlorian Westphal2023-11-021-4/+13
* cache: include set elements in "nft set list"Florian Westphal2023-11-022-7/+3
* evaluate: set NFT_SET_EVAL flag if dynamic set already existsPablo Neira Ayuso2023-11-021-0/+8
* optimize: do not remove counter in verdict mapsPablo Neira Ayuso2023-11-021-7/+43
* evaluate: skip optimization if anonymous set uses stateful statementPablo Neira Ayuso2023-11-021-1/+1
* evaluate: allow stateful statements with anonymous verdict mapsPablo Neira Ayuso2023-11-021-1/+2
* netlink: restore typeof interval map data typeFlorian Westphal2023-11-021-1/+6
* netlink_delinearize: do not reset protocol context for nat protocol expressionPablo Neira Ayuso2023-11-021-3/+1
* evaluate: bogus missing transport protocolPablo Neira Ayuso2023-11-021-3/+8
* optimize: support for redirect and masqueradePablo Neira Ayuso2023-11-021-32/+119
* optimize: assert nat type on nat statement helperPablo Neira Ayuso2023-11-021-0/+4
* xt: Fix translation error pathPhil Sutter2023-11-021-4/+6
* intervals: use expression location when translating to intervalsPablo Neira Ayuso2023-11-021-2/+2
* evaluate: insert byte-order conversions for expressions between 9 and 15 bitsJeremy Sowden2023-11-021-1/+1
* xt: Fix fallback printing for extensions matching keywordsPhil Sutter2023-11-022-2/+2
* parser_bison: allow to use quota in setsPablo Neira Ayuso2023-11-021-0/+16
* src: expand table command before evaluationPablo Neira Ayuso2023-11-023-41/+26
* netlink_delinearize: Sanitize concat data element decodingPhil Sutter2023-11-021-1/+1
* evaluate: expand value to range when nat mapping contains intervalsPablo Neira Ayuso2023-11-021-2/+45