summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* exthdr: add support for matching IPv4 optionsStephen Suryaputra2019-07-041-0/+17
* ct: support for NFT_CT_{SRC,DST}_{IP,IP6}Pablo Neira Ayuso2019-06-211-1/+24
* evaluate: do not allow to list/flush anonymous sets via list commandPablo Neira Ayuso2019-06-191-6/+28
* evaluate: allow get/list/flush dynamic sets and maps via list commandPablo Neira Ayuso2019-06-191-3/+3
* src: add cache level flagsPablo Neira Ayuso2019-06-171-1/+2
* src: remove useless parameter from cache_flush()Pablo Neira Ayuso2019-06-171-1/+1
* evaluate: double datatype_free() with dynamic integer datatypesPablo Neira Ayuso2019-06-141-2/+0
* evaluate: update byteorder only for implicit mapsPablo Neira Ayuso2019-06-141-1/+2
* evaluate: use-after-free in meterPablo Neira Ayuso2019-06-131-1/+2
* src: add reference counter for dynamic datatypesPablo Neira Ayuso2019-06-131-18/+19
* src: Support intra-transaction rule referencesPhil Sutter2019-06-071-20/+74
* evaluate: use-after-free in implicit setPablo Neira Ayuso2019-06-071-1/+2
* src: single cache_update() call to build cache before evaluationPablo Neira Ayuso2019-06-061-75/+1
* src: Allow goto and jump to a variableFernando Fernandez Mancera2019-05-241-0/+7
* src: Introduce chain_expr in jump and goto statementsFernando Fernandez Mancera2019-05-241-0/+4
* src: use definitions in include/linux/netfilter/nf_tables.hPablo Neira Ayuso2019-05-121-1/+1
* src: add nat support for the inet familyFlorian Westphal2019-04-091-40/+84
* evaluate: improve error reporting in tproxy with inet familyPablo Neira Ayuso2019-04-041-2/+5
* evaluate: skip binary transfer for named setsPablo Neira Ayuso2019-03-261-0/+3
* evaluate: misleading error reporting with sets and mapsPablo Neira Ayuso2019-03-061-4/+6
* src: expr: add expression etypeFlorian Westphal2019-02-081-36/+36
* src: expr: add and use expr_name helperFlorian Westphal2019-02-081-11/+11
* src: remove deprecated code for export/import commandsPablo Neira Ayuso2018-12-271-1/+1
* src: Reject 'export vm json' commandPhil Sutter2018-12-211-0/+3
* src: introduce simple hints on incorrect objectPablo Neira Ayuso2018-12-011-3/+20
* src: introduce simple hints on incorrect setPablo Neira Ayuso2018-11-191-27/+41
* src: introduce simple hints on incorrect chainPablo Neira Ayuso2018-11-191-9/+22
* src: introduce simple hints on incorrect tablePablo Neira Ayuso2018-11-191-57/+48
* evaluate: stmt_evaluate_map() needs right hand side evaluation tooPablo Neira Ayuso2018-10-251-0/+8
* evaluate: do not pass EXPR_SET_ELEM to stmt_evaluate_arg() for set/map evalua...Pablo Neira Ayuso2018-10-251-2/+2
* src: pass struct nft_ctx through struct netlink_ctxPablo Neira Ayuso2018-10-221-37/+18
* src: pass struct nft_ctx through struct eval_ctxPablo Neira Ayuso2018-10-221-67/+67
* evaluate: bogus bail out with raw expression from dynamic setsPablo Neira Ayuso2018-10-171-1/+11
* src: add support for setting secmarkChristian Göttsche2018-10-151-0/+5
* src: add ipsec (xfrm) expressionMáté Eckl2018-09-211-0/+19
* evaluate: throw distinct error if map exists but contains no objectsFlorian Westphal2018-09-201-2/+4
* src: osf: load pf.os from expr_evaluate_osf()Fernando Fernandez Mancera2018-08-311-0/+11
* src: add ct timeout supportHarsha Sharma2018-08-311-1/+35
* src: tproxy: relax family restrictionsFlorian Westphal2018-08-291-17/+13
* src: Make invalid chain priority error more specificMáté Eckl2018-08-241-5/+6
* src: integrate stateful expressions into sets and mapsPablo Neira Ayuso2018-08-241-0/+14
* src: simplify map statementPablo Neira Ayuso2018-08-241-1/+24
* evaluate: reject: Allow icmpx in inet/bridge familiesPhil Sutter2018-08-141-6/+1
* src: Set/print standard chain prios with textual namesMáté Eckl2018-08-141-0/+27
* src: introduce passive OS fingerprint matchingFernando Fernandez Mancera2018-08-041-0/+7
* src: Expose socket mark via socket expressionMáté Eckl2018-08-031-1/+5
* src: Add tproxy supportMáté Eckl2018-08-031-0/+82
* evaluate: skip evaluation of datatype concatenationsPablo Neira Ayuso2018-07-071-4/+5
* src: do not reset generation ID on ruleset flushPablo Neira Ayuso2018-06-071-1/+2
* src: Introduce socket matchingMáté Eckl2018-06-061-0/+9