nftables - nft command line tool

	Commit message (Collapse)	Author	Age	Files	Lines
*	tests: add tcp option set support / tcp mss mangling test cases	Florian Westphal	2017-08-22	1	-0/+2
\| \| \| \| \|	Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	exthdr: Implement existence check	Phil Sutter	2017-03-10	1	-0/+3
\| \| \| \| \| \| \| \| \| \| \|	This allows to check for existence of an IPv6 extension or TCP option header by using the following syntax: \| exthdr frag exists \| tcpopt window exists Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	src: revisit tcp options support	Pablo Neira Ayuso	2017-02-28	1	-11/+10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Rework syntax, add tokens so we can extend the grammar more easily. This has triggered several syntax changes with regards to the original patch, specifically: tcp option sack0 left 1 There is no space between sack and the block number anymore, no more offset field, now they are a single field. Just like we do with rt, rt0 and rt2. This simplifies our grammar and that is good since it makes our life easier when extending it later on to accomodate new features. I have also renamed sack_permitted to sack-permitted. I couldn't find any option using underscore so far, so let's keep it consistent with what we have. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	tests: py: Add basic tests for ip, ip6 and inet	Manuel Messner	2017-02-12	1	-0/+38
	Signed-off-by: Manuel Messner <mm@skelett.io> Signed-off-by: Florian Westphal <fw@strlen.de>