summaryrefslogtreecommitdiffstats
path: root/iptables
Commit message (Expand)AuthorAgeFilesLines
* nft: Fix EPERM handling for extensions without rev 0Phil Sutter2022-05-112-4/+13
* libxtables: Drop xtables_globals 'optstring' fieldPhil Sutter2022-05-117-7/+20
* xshared: Extend xtables_printhelp() for arptablesPhil Sutter2022-05-116-118/+43
* xshared: Move arp_opcodes into shared spacePhil Sutter2022-05-117-28/+21
* nft: split gen_payload() to allocate register and initialize expressionPablo Neira Ayuso2022-05-021-4/+14
* nft: prepare for dynamic register allocationPablo Neira Ayuso2022-05-026-94/+137
* nft: pass handle to helper functions to build netlink payloadPablo Neira Ayuso2022-05-027-66/+73
* nft: native mark matching supportPablo Neira Ayuso2022-05-022-0/+59
* nft: pass struct nft_xt_ctx to parse_meta()Pablo Neira Ayuso2022-05-026-10/+10
* nft-shared: update context register for bitwise expressionPablo Neira Ayuso2022-05-021-0/+2
* libxtables: Boost rule target checks by announcing chain namesPhil Sutter2022-03-172-0/+2
* nft: Reject standard targets as chain names when restoringPhil Sutter2022-03-173-7/+4
* tests: shell: Fix 0004-return-codes_0 for static buildsPhil Sutter2022-03-151-1/+1
* nft: Review static extension loadingPhil Sutter2022-03-154-16/+13
* xtables: Call init_extensions{,a,b}() for static buildsEtienne Champetier2022-03-157-3/+26
* Simplify static build extension loadingPhil Sutter2022-03-1511-29/+0
* nft: Don't pass command state opaque to family ops callbacksPhil Sutter2022-03-108-102/+84
* xshared: Prefer xtables_chain_protos lookup over getprotoentPhil Sutter2022-03-101-4/+4
* nft: Speed up immediate parsingPhil Sutter2022-03-102-19/+19
* nft: Simplify immediate parsingPhil Sutter2022-03-106-47/+14
* Improve error messages for unsupported extensionsPhil Sutter2022-03-021-3/+9
* xshared: Implement xtables lock timeout using signalsJethro Beekman2022-02-158-77/+36
* iptables.8: Describe the effect of multiple -v flagsPhil Sutter2022-02-111-1/+5
* nft: cache: Dump rules if debuggingPhil Sutter2022-02-081-2/+16
* nft: Add debug output to table creationPhil Sutter2022-02-081-0/+15
* ebtables: Support verbose modePhil Sutter2022-02-083-9/+30
* nft: Set NFTNL_CHAIN_FAMILY in new chainsPhil Sutter2022-02-081-4/+8
* iptables-restore: Support for extra debug outputPhil Sutter2022-02-044-5/+17
* nft: Use verbose flag to toggle debug outputPhil Sutter2022-02-044-19/+22
* nft: add support for native tcp flag matchingFlorian Westphal2022-01-291-2/+29
* nft-shared: add tcp flag dissectionFlorian Westphal2022-01-291-0/+26
* nft: prefer native expressions instead of tcp matchFlorian Westphal2022-01-291-0/+32
* nft: prefer native expressions instead of udp matchFlorian Westphal2022-01-291-0/+122
* nft-shared: support native udp port delinearizeFlorian Westphal2022-01-292-4/+122
* nft-shared: support native tcp port range delinearizeFlorian Westphal2022-01-293-1/+116
* nft-shared: support native tcp port delinearizeFlorian Westphal2022-01-292-2/+179
* xshared: Fix response to unprivileged usersPhil Sutter2022-01-203-2/+66
* extensions: libxt_NFLOG: don't truncate log prefix on print/saveKyle Bowman2022-01-182-0/+56
* extensions: libxt_NFLOG: use nft built-in logging instead of xt_NFLOGKyle Bowman2022-01-182-0/+29
* nft: fix indentation error.Jeremy Sowden2022-01-151-21/+21
* ip6tables: Use the shared do_parse, tooPhil Sutter2022-01-122-466/+40
* iptables: Use xtables' do_parse() functionPhil Sutter2022-01-122-451/+39
* nft: Move proto_parse and post_parse callbacks to xsharedPhil Sutter2022-01-124-131/+139
* xshared: Store parsed wait and wait_interval in xtables_argsPhil Sutter2022-01-122-5/+5
* xshared: Move do_parse to shared spacePhil Sutter2022-01-125-559/+560
* xtables: Do not pass nft_handle to do_parse()Phil Sutter2022-01-128-50/+64
* xtables: Pass xtables_args to check_inverse()Phil Sutter2022-01-121-13/+13
* xtables: Pass xtables_args to check_empty_interface()Phil Sutter2022-01-121-4/+4
* xtables: Move struct nft_xt_cmd_parse to xshared.hPhil Sutter2022-01-125-21/+21
* xtables: Pull table validity check out of do_parse()Phil Sutter2022-01-121-4/+4