index
:
nftables
1.0.6.y
master
nft command line tool
pablo@netfilter.org
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
Commit message (
Expand
)
Author
Age
Files
Lines
*
evaluate: fix get element for concatenated set
Florian Westphal
2023-11-03
1
-4
/
+7
*
evaluate: revisit anonymous set with single element optimization
Pablo Neira Ayuso
2023-11-03
1
-20
/
+40
*
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
Thomas Haller
2023-11-03
1
-1
/
+1
*
evaluate: do not remove anonymous set with protocol flags and single element
Pablo Neira Ayuso
2023-11-02
1
-1
/
+6
*
evaluate: Drop dead code from expr_evaluate_mapping()
Phil Sutter
2023-11-02
1
-11
/
+8
*
parser: permit gc-interval in map declarations
Florian Westphal
2023-11-02
1
-0
/
+5
*
parser: allow ct timeouts to use time_spec values
Florian Westphal
2023-11-02
2
-6
/
+13
*
libnftables: Drop cache in -c/--check mode
Pablo Neira Ayuso
2023-11-02
1
-2
/
+5
*
netlink: delinearize: copy set keytype if needed
Florian Westphal
2023-11-02
1
-0
/
+2
*
expression: define .clone for catchall set element
Pablo Neira Ayuso
2023-11-02
1
-2
/
+13
*
parser: reject zero-length interface names in flowtables
Florian Westphal
2023-11-02
1
-8
/
+12
*
parser: reject zero-length interface names
Florian Westphal
2023-11-02
1
-5
/
+31
*
parser: don't assert on scope underflows
Florian Westphal
2023-11-02
1
-2
/
+1
*
evaluate: do not abort when prefix map has non-map element
Florian Westphal
2023-11-02
1
-4
/
+13
*
cache: include set elements in "nft set list"
Florian Westphal
2023-11-02
2
-7
/
+3
*
evaluate: set NFT_SET_EVAL flag if dynamic set already exists
Pablo Neira Ayuso
2023-11-02
1
-0
/
+8
*
optimize: do not remove counter in verdict maps
Pablo Neira Ayuso
2023-11-02
1
-7
/
+43
*
evaluate: skip optimization if anonymous set uses stateful statement
Pablo Neira Ayuso
2023-11-02
1
-1
/
+1
*
evaluate: allow stateful statements with anonymous verdict maps
Pablo Neira Ayuso
2023-11-02
1
-1
/
+2
*
netlink: restore typeof interval map data type
Florian Westphal
2023-11-02
1
-1
/
+6
*
netlink_delinearize: do not reset protocol context for nat protocol expression
Pablo Neira Ayuso
2023-11-02
1
-3
/
+1
*
evaluate: bogus missing transport protocol
Pablo Neira Ayuso
2023-11-02
1
-3
/
+8
*
optimize: support for redirect and masquerade
Pablo Neira Ayuso
2023-11-02
1
-32
/
+119
*
optimize: assert nat type on nat statement helper
Pablo Neira Ayuso
2023-11-02
1
-0
/
+4
*
xt: Fix translation error path
Phil Sutter
2023-11-02
1
-4
/
+6
*
intervals: use expression location when translating to intervals
Pablo Neira Ayuso
2023-11-02
1
-2
/
+2
*
evaluate: insert byte-order conversions for expressions between 9 and 15 bits
Jeremy Sowden
2023-11-02
1
-1
/
+1
*
xt: Fix fallback printing for extensions matching keywords
Phil Sutter
2023-11-02
2
-2
/
+2
*
parser_bison: allow to use quota in sets
Pablo Neira Ayuso
2023-11-02
1
-0
/
+16
*
src: expand table command before evaluation
Pablo Neira Ayuso
2023-11-02
3
-41
/
+26
*
netlink_delinearize: Sanitize concat data element decoding
Phil Sutter
2023-11-02
1
-1
/
+1
*
evaluate: expand value to range when nat mapping contains intervals
Pablo Neira Ayuso
2023-11-02
1
-2
/
+45
*
evaluate: infer family from mapping
Pablo Neira Ayuso
2023-11-02
1
-5
/
+40
*
evaluate: print error on missing family in nat statement
Pablo Neira Ayuso
2023-11-02
1
-3
/
+29
*
optimize: infer family for nat mapping
Pablo Neira Ayuso
2023-11-02
1
-2
/
+21
*
optimize: ignore existing nat mapping
Pablo Neira Ayuso
2023-11-02
1
-0
/
+7
*
rule: expand standalone chain that contains rules
Pablo Neira Ayuso
2023-11-02
1
-3
/
+12
*
optimize: select merge criteria based on candidates rules
Pablo Neira Ayuso
2023-11-02
1
-11
/
+11
*
rule: add helper function to expand chain rules into commands
Pablo Neira Ayuso
2023-11-02
1
-17
/
+22
*
optimize: fix incorrect expansion into concatenation with verdict map
Pablo Neira Ayuso
2023-11-02
1
-11
/
+22
*
optimize: wrap code to build concatenation in helper function
Pablo Neira Ayuso
2023-11-02
1
-7
/
+15
*
evaluate: set eval ctx for add/update statements with integer constants
Florian Westphal
2023-11-02
1
-2
/
+30
*
optimize: Do not return garbage from stack
Phil Sutter
2023-11-02
1
-1
/
+1
*
intervals: restrict check missing elements fix to sets with no auto-merge
Pablo Neira Ayuso
2023-11-02
1
-5
/
+6
*
mnl: dump_nf_hooks() leaks memory in error path
Phil Sutter
2023-11-02
1
-2
/
+9
*
meta: parse_iso_date() returns boolean
Phil Sutter
2023-11-02
1
-1
/
+1
*
netlink: Fix for potential NULL-pointer deref
Phil Sutter
2023-11-02
1
-1
/
+2
*
optimize: Clarify chain_optimize() array allocations
Phil Sutter
2023-11-02
1
-3
/
+4
*
ct: use inet_service_type for proto-src and proto-dst
Pablo Neira Ayuso
2023-11-02
1
-2
/
+2
*
evaluate: fix shift exponent underflow in concatenation evaluation
Pablo Neira Ayuso
2023-11-02
1
-1
/
+1
[next]