summaryrefslogtreecommitdiffstats
path: root/iptables
Commit message (Expand)AuthorAgeFilesLines
* nft: Exit if nftnl_alloc_expr failsPhil Sutter2022-06-211-15/+16
* iptables.8: mention that iptables exits when setuidFlorian Westphal2022-06-171-0/+5
* ebtables-restore: Deny --init-tablePhil Sutter2022-06-111-0/+3
* tests: shell: Extend zero counters test a bit furtherPhil Sutter2022-06-111-0/+15
* tests: shell: Extend iptables-xml test a bitPhil Sutter2022-06-111-9/+1
* tests: shell: Add some more rules to 0002-verbose-output_0Phil Sutter2022-06-111-0/+15
* Makefile: Add --enable-profiling configure optionPhil Sutter2022-06-111-0/+1
* xshared: Make some functions staticPhil Sutter2022-06-102-34/+17
* iptables-legacy: Drop redundant include of xtables-multi.hPhil Sutter2022-06-101-4/+0
* arptables: Support -x/--exact flagPhil Sutter2022-06-081-1/+1
* tests: shell: Check overhead in iptables-save and -restorePhil Sutter2022-06-021-0/+37
* treewide: use uint* instead of u_int*Nick Hainke2022-05-182-2/+2
* xshared: Fix build for -Werror=format-securityPhil Sutter2022-05-131-1/+1
* nft: Fix EPERM handling for extensions without rev 0Phil Sutter2022-05-112-4/+13
* libxtables: Drop xtables_globals 'optstring' fieldPhil Sutter2022-05-117-7/+20
* xshared: Extend xtables_printhelp() for arptablesPhil Sutter2022-05-116-118/+43
* xshared: Move arp_opcodes into shared spacePhil Sutter2022-05-117-28/+21
* nft: split gen_payload() to allocate register and initialize expressionPablo Neira Ayuso2022-05-021-4/+14
* nft: prepare for dynamic register allocationPablo Neira Ayuso2022-05-026-94/+137
* nft: pass handle to helper functions to build netlink payloadPablo Neira Ayuso2022-05-027-66/+73
* nft: native mark matching supportPablo Neira Ayuso2022-05-022-0/+59
* nft: pass struct nft_xt_ctx to parse_meta()Pablo Neira Ayuso2022-05-026-10/+10
* nft-shared: update context register for bitwise expressionPablo Neira Ayuso2022-05-021-0/+2
* libxtables: Boost rule target checks by announcing chain namesPhil Sutter2022-03-172-0/+2
* nft: Reject standard targets as chain names when restoringPhil Sutter2022-03-173-7/+4
* tests: shell: Fix 0004-return-codes_0 for static buildsPhil Sutter2022-03-151-1/+1
* nft: Review static extension loadingPhil Sutter2022-03-154-16/+13
* xtables: Call init_extensions{,a,b}() for static buildsEtienne Champetier2022-03-157-3/+26
* Simplify static build extension loadingPhil Sutter2022-03-1511-29/+0
* nft: Don't pass command state opaque to family ops callbacksPhil Sutter2022-03-108-102/+84
* xshared: Prefer xtables_chain_protos lookup over getprotoentPhil Sutter2022-03-101-4/+4
* nft: Speed up immediate parsingPhil Sutter2022-03-102-19/+19
* nft: Simplify immediate parsingPhil Sutter2022-03-106-47/+14
* Improve error messages for unsupported extensionsPhil Sutter2022-03-021-3/+9
* xshared: Implement xtables lock timeout using signalsJethro Beekman2022-02-158-77/+36
* iptables.8: Describe the effect of multiple -v flagsPhil Sutter2022-02-111-1/+5
* nft: cache: Dump rules if debuggingPhil Sutter2022-02-081-2/+16
* nft: Add debug output to table creationPhil Sutter2022-02-081-0/+15
* ebtables: Support verbose modePhil Sutter2022-02-083-9/+30
* nft: Set NFTNL_CHAIN_FAMILY in new chainsPhil Sutter2022-02-081-4/+8
* iptables-restore: Support for extra debug outputPhil Sutter2022-02-044-5/+17
* nft: Use verbose flag to toggle debug outputPhil Sutter2022-02-044-19/+22
* nft: add support for native tcp flag matchingFlorian Westphal2022-01-291-2/+29
* nft-shared: add tcp flag dissectionFlorian Westphal2022-01-291-0/+26
* nft: prefer native expressions instead of tcp matchFlorian Westphal2022-01-291-0/+32
* nft: prefer native expressions instead of udp matchFlorian Westphal2022-01-291-0/+122
* nft-shared: support native udp port delinearizeFlorian Westphal2022-01-292-4/+122
* nft-shared: support native tcp port range delinearizeFlorian Westphal2022-01-293-1/+116
* nft-shared: support native tcp port delinearizeFlorian Westphal2022-01-292-2/+179
* xshared: Fix response to unprivileged usersPhil Sutter2022-01-203-2/+66