summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* src: netlink_delinarize: don't stop when encountering unsupported expressionFlorian Westphal2018-06-071-1/+1
* src: do not reset generation ID on ruleset flushPablo Neira Ayuso2018-06-072-3/+21
* src: Introduce socket matchingMáté Eckl2018-06-067-0/+117
* expr: extend fwd statement to support address and familyPablo Neira Ayuso2018-06-067-19/+117
* src: connlimit supportPablo Neira Ayuso2018-06-065-2/+72
* nat: Eliminate misuse of AF_*Máté Eckl2018-06-062-5/+5
* evaluate: explicitly deny concatenated types in interval setsPhil Sutter2018-06-061-0/+4
* log: Add support for audit loggingPhil Sutter2018-06-033-3/+10
* JSON: Review large number parsing/printingPhil Sutter2018-06-032-25/+29
* JSON: Fix replace command parserPhil Sutter2018-06-031-1/+2
* JSON: Fix add rule with indexPhil Sutter2018-06-031-1/+1
* JSON: Simplify verdict statement parsingPhil Sutter2018-06-031-36/+3
* JSON: Simplify wildcard expressionPhil Sutter2018-06-031-12/+11
* parser_bison: Merge wildcard_rhs_expr and wildcard_stmt_exprPhil Sutter2018-06-031-18/+7
* JSON: Simplify immediate value parsingPhil Sutter2018-06-011-45/+31
* JSON: Fix parsing of meter statement keyPhil Sutter2018-06-011-2/+2
* JSON: Improve prefix expression parsing error message a bitPhil Sutter2018-06-011-1/+1
* JSON: Simplify tcp option expression parsing a bitPhil Sutter2018-06-011-3/+2
* JSON: Fix parsing and printing of limit objectsPhil Sutter2018-06-012-44/+48
* JSON: Review set elem expressionsPhil Sutter2018-06-012-14/+7
* JSON: Review meter statement supportPhil Sutter2018-06-012-7/+9
* JSON: Sort out rule position and handles in generalPhil Sutter2018-06-012-29/+22
* JSON: Disallow non-array concat expression valuesPhil Sutter2018-06-011-3/+1
* JSON: Use "type" for CT helper objectPhil Sutter2018-06-012-3/+3
* objref: Use "ct helper" for NFT_OBJECT_CT_HELPERPhil Sutter2018-06-012-2/+2
* statement: old kernels are allowing burst zero, don't print itPablo Neira Ayuso2018-05-301-1/+1
* statement: don't print burst if equals 5Pablo Neira Ayuso2018-05-291-1/+1
* meters: do not set a defaut meter size from userspaceFlorian Westphal2018-05-291-1/+1
* segtree: incorrect handling of comments and timeouts with mappingPablo Neira Ayuso2018-05-251-21/+46
* fix printing of "tcp flags syn" and "tcp flags == syn" expressionsSabrina Dubroca2018-05-252-1/+6
* segtree: add timeout for range and prefix expressions in setsPablo Neira Ayuso2018-05-241-0/+10
* segtree: missing comments in range and prefix expressions in setsPablo Neira Ayuso2018-05-161-0/+6
* libnftables: Move scanner object into struct nft_ctxPhil Sutter2018-05-151-22/+21
* nftables: xt: don't use hard-coded AF_INETFlorian Westphal2018-05-141-4/+20
* evaluate: Return ENOENT if rule index is too largePhil Sutter2018-05-111-1/+1
* libnftables: Implement JSON parserPhil Sutter2018-05-113-4/+3152
* libnftables: Implement JSON output supportPhil Sutter2018-05-1116-1/+1657
* libnftables: Introduce a few helper functionsPhil Sutter2018-05-112-15/+50
* libnftables: Make some functions globally accessiblePhil Sutter2018-05-114-6/+6
* libnftables: Make some arrays globally accessiblePhil Sutter2018-05-117-9/+9
* libnftables: Put bison parsing into dedicated functionsPhil Sutter2018-05-111-39/+62
* Support 'add/insert rule index <IDX>'Phil Sutter2018-05-094-2/+64
* rule: Copy locations in handle_merge()Phil Sutter2018-05-091-3/+9
* Deprecate add/insert rule 'position' argumentPhil Sutter2018-05-091-0/+8
* src: support timeouts in millisecondsFlorian Westphal2018-05-095-23/+43
* xt: don't BUG if we can't find an extensionsFlorian Westphal2018-05-081-6/+8
* parser: added missing semicolonMáté Eckl2018-05-081-0/+1
* scanner: Support rfc4291 IPv4-compatible addressesPhil Sutter2018-05-061-1/+2
* proto: Fix wrong token in proto_icmp6Phil Sutter2018-05-061-1/+1
* src: use location to display error messagesPablo Neira Ayuso2018-05-061-62/+94