summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* parser_bison: add variable_expr rulePablo Neira Ayuso2016-08-291-10/+13
* evaluate: validate maximum hash and numgen valuePablo Neira Ayuso2016-08-292-8/+28
* evaluate: add expr_evaluate_integer()Pablo Neira Ayuso2016-08-291-15/+23
* src: add hash expressionPablo Neira Ayuso2016-08-2911-2/+191
* src: add numgen expressionPablo Neira Ayuso2016-08-2912-3/+197
* src: add quota statementPablo Neira Ayuso2016-08-299-5/+178
* tests: py: adapt it to new add element command semanticsPablo Neira Ayuso2016-08-292-5/+5
* include: refresh uapi/linux/netfilter/nf_tables.h copyPablo Neira Ayuso2016-08-261-1/+79
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-251-0/+15
* src: create element commandPablo Neira Ayuso2016-08-254-14/+20
* tests: shell: cover add and create set commandPablo Neira Ayuso2016-08-241-0/+14
* src: add create set commandPablo Neira Ayuso2016-08-244-12/+29
* parser_bison: explicit indication on export rulesetPablo Neira Ayuso2016-08-231-1/+7
* src: Simplify parser rule_spec treeCarlos Falgueras GarcĂ­a2016-08-232-89/+22
* ct: display bit number instead of raw valueFlorian Westphal2016-08-223-1/+16
* ct: allow numeric conntrack labelsFlorian Westphal2016-08-221-8/+22
* tests: shell: add testcase for reject exprLiping Zhang2016-08-221-0/+9
* parser_bison: keep snat/dnat existing syntax unchangedLiping Zhang2016-08-221-1/+14
* parser_bison: redirect to :port for consistency with nat/masq statementPablo Neira Ayuso2016-08-185-38/+47
* src: meta priority support using tc classidPablo Neira Ayuso2016-08-188-22/+132
* src: simplify classid printing using %x instead of %04xPablo Neira Ayuso2016-08-181-8/+1
* src: rename datatype name from tc_handle to classidPablo Neira Ayuso2016-08-182-5/+5
* scanner: remove range expressionPablo Neira Ayuso2016-08-181-1/+0
* scanner: allow strings starting by underscores and dotsPablo Neira Ayuso2016-08-181-1/+1
* parser_bison: missing token string in QUOTED_ASTERISK and ASTERISK_STRINGPablo Neira Ayuso2016-08-181-2/+2
* src: support for RFC2732 IPv6 address format with bracketsPablo Neira Ayuso2016-08-186-10/+46
* src: add 'to' for snat and dnatPablo Neira Ayuso2016-08-1810-40/+40
* src: quote user-defined strings when used from rule selectorsPablo Neira Ayuso2016-08-1827-157/+161
* ct: release ct_label table on exitPablo Neira Ayuso2016-08-171-0/+5
* ct: add missing slash to connlabel pathPablo Neira Ayuso2016-08-171-1/+1
* tests: tests to include filesPablo Neira Ayuso2016-08-104-0/+107
* scanner: don't break line on include error messagePablo Neira Ayuso2016-08-101-1/+1
* scanner: don't fall back on current directory if include is not foundPablo Neira Ayuso2016-08-101-7/+6
* scanner: honor absolute and relative paths via include filePablo Neira Ayuso2016-08-101-7/+17
* tests: ip payload set support for ecn and dscpFlorian Westphal2016-08-014-0/+123
* netlink: make checksum fixup work with odd-sized header fieldsFlorian Westphal2016-08-011-4/+35
* tests: ip6 dscp, flowlabel and ecn test casesFlorian Westphal2016-08-013-0/+140
* netlink: decode payload statmentFlorian Westphal2016-08-011-5/+178
* evaluate: add support to set IPv6 non-byte header fieldsFlorian Westphal2016-08-011-4/+76
* evaluate: add small helper to check if payload expr needs binop adjustmentFlorian Westphal2016-08-011-2/+7
* payload: print base and raw values for unknown payloadsFlorian Westphal2016-08-012-1/+14
* netlink: add __binop_adjust helperFlorian Westphal2016-08-011-4/+9
* parser_bison: keep map flag around when flags are specifiedPablo Neira Ayuso2016-07-272-1/+22
* xt: use struct xt_xlate_{mt,tg}_paramsPablo Neira Ayuso2016-07-251-5/+15
* tests: add ether payload set testFlorian Westphal2016-07-223-0/+11
* tests: add basic payload testsFlorian Westphal2016-07-2112-0/+180
* ct: use nftables sysconf location for connlabel configurationFlorian Westphal2016-07-211-2/+5
* meta: add tests for meta randomFlorian Westphal2016-07-192-0/+12
* meta: add random supportFlorian Westphal2016-07-192-0/+5
* tests: shell: make sure split table definition works via nft -fPablo Neira Ayuso2016-07-131-0/+50