Commit Graph

  • 06a2eb727b configure: bump version for 1.8.6 release Pablo Neira Ayuso 2020-10-31 18:26:57 +01:00
  • ed8c8b9316 tests: shell: Improve concurrent noflush restore test a bit Phil Sutter 2020-10-26 17:25:03 +01:00
  • dac904bdcd nft: Fix for concurrent noflush restore calls Phil Sutter 2020-10-05 16:06:49 +02:00
  • c6cff7ddd4 libiptc: Avoid gcc-10 zero-length array warning Phil Sutter 2020-10-08 14:51:52 +02:00
  • 0bd7a8eaf3 iptables-nft: fix basechain policy configuration Pablo Neira Ayuso 2020-10-02 13:44:36 +02:00
  • e98b825a03 nft: Fix error reporting for refreshed transactions Phil Sutter 2020-10-05 15:54:35 +02:00
  • 0d77e64e8d nft: Make batch_add_chain() return the added batch object Phil Sutter 2020-10-03 17:46:09 +02:00
  • b5f1a3beac libxtables: Register multiple extensions in ascending order Phil Sutter 2020-09-22 20:01:15 +02:00
  • a1eaaceb04 libxtables: Simplify pending extension registration Phil Sutter 2020-09-18 18:48:14 +02:00
  • b3ac87038f libxtables: Make sure extensions register in revision order Phil Sutter 2020-09-21 13:42:06 +02:00
  • ad4b17b98b extensions: libipt_icmp: Fix translation of type 'any' Phil Sutter 2020-10-06 19:07:19 +02:00
  • 72ed608bf1 nft: Fix for broken address mask match detection Phil Sutter 2020-09-28 18:57:18 +02:00
  • f75750ff9d nft: Use nft_chain_find() in nft_chain_builtin_init() Phil Sutter 2020-08-04 17:02:21 +02:00
  • c330a2198e nft: Fold nftnl_rule_list_chain_save() into caller Phil Sutter 2020-07-08 23:03:12 +02:00
  • 79ada320d0 nft: Extend use of nftnl_chain_list_foreach() Phil Sutter 2020-07-08 16:46:14 +02:00
  • b531365ce3 nft: cache: Check consistency with NFT_CL_FAKE, too Phil Sutter 2020-07-29 15:39:31 +02:00
  • c633456410 Makefile: Add missing man pages to CLEANFILES Phil Sutter 2020-08-17 12:29:08 +02:00
  • 4e3c11a6f5 nft: Fix for ruleset flush while restoring Phil Sutter 2020-07-31 18:20:17 +02:00
  • ca69b0290d xtables-monitor: Fix ip6tables rule printing Phil Sutter 2020-08-07 16:42:07 +02:00
  • cd3e83d1b0 tests: shell: Merge and extend return codes test Phil Sutter 2020-08-06 18:52:34 +02:00
  • 3be40dcfb5 nft: Fix command name in ip6tables error message Phil Sutter 2020-08-07 13:48:28 +02:00
  • 27d01216cf nft: Eliminate table list from cache Phil Sutter 2020-07-30 11:54:36 +02:00
  • cf3e9100ee iptables: replace libnftnl table list by linux list Pablo Neira Ayuso 2020-07-23 14:15:53 +02:00
  • 67bef1540e nft: Reorder enum nft_table_type Phil Sutter 2020-07-07 18:40:11 +02:00
  • b906191d4b nft: Use nft_chain_find() in two more places Phil Sutter 2020-07-07 18:35:26 +02:00
  • db3a63237f nft: Turn nft_chain_save() into a foreach-callback Phil Sutter 2020-07-08 15:18:48 +02:00
  • 7a700c47fe nft: Drop pointless nft_xt_builtin_init() call Phil Sutter 2020-07-10 21:12:34 +02:00
  • f63ce59726 nft: cache: Drop duplicate chain check Phil Sutter 2020-07-10 21:53:08 +02:00
  • f1f241db42 nft: Be lazy when flushing Phil Sutter 2020-07-10 20:42:11 +02:00
  • 0b7c22e006 nft: Make table creation purely implicit Phil Sutter 2020-07-10 20:08:35 +02:00
  • 26ec09bf6b extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate Pablo Neira Ayuso 2020-07-22 13:04:34 +02:00
  • 5105e844c2 iptables: accept lock file name at runtime Giuseppe Scrivano 2020-07-17 10:39:40 +02:00
  • c03b3166d6 tests: shell: Add help output to run-tests.sh Phil Sutter 2020-07-06 13:11:36 +02:00
  • 6cb8af1ff3 libxtables: compiler warning fixes for NO_SHARED_LIBS Maciej Żenczykowski 2020-06-23 16:09:02 -07:00
  • 63fa2b1cb9 xtables-translate: Use proper clear_cs function Phil Sutter 2020-06-16 13:06:26 +02:00
  • 2757c0b5e5 xtables-translate: don't fail if help was requested Arturo Borrero Gonzalez 2020-06-16 11:20:42 +02:00
  • 848b488927 build: Fix for failing 'make uninstall' Phil Sutter 2020-06-09 12:40:24 +02:00
  • b40b7d976f xtables-restore: Fix verbose mode table flushing Phil Sutter 2020-05-12 12:59:42 +02:00
  • d4ed0c741f build: resolve iptables-apply not getting installed Jan Engelhardt 2020-06-03 15:38:48 +02:00
  • 63291783a1 doc: document danger of applying REJECT to INVALID CTs Jan Engelhardt 2020-06-03 15:36:04 +02:00
  • 14ac250946 configure: bump version for 1.8.5 release Pablo Neira Ayuso 2020-06-03 11:37:52 +02:00
  • 50564b7add build: bump dependency on libnftnl Phil Sutter 2020-06-03 11:41:55 +02:00
  • 15f8a82a89 include: Avoid undefined left-shift in xt_sctp.h Phil Sutter 2019-12-05 13:35:25 +01:00
  • fe1cfd89c2 tests: shell: Fix syntax in ipt-restore/0010-noflush-new-chain_0 Phil Sutter 2020-05-29 16:39:31 +02:00
  • 7f0a69c8fe doc: libxt_MARK: OUTPUT chain is fine, too Phil Sutter 2020-05-20 01:00:57 +02:00
  • 5906bcf10d nft: Drop save_counters callback from family_ops Phil Sutter 2020-05-08 15:40:52 +02:00
  • e7b6180fcf nft: Merge nft_*_rule_find() functions Phil Sutter 2020-05-07 18:53:47 +02:00
  • 3e09bd1888 nfnl_osf: Improve error handling Phil Sutter 2020-05-09 13:42:56 +02:00
  • c8332553ca nfnl_osf: Fix broken conversion to nfnl_query() Phil Sutter 2020-05-09 13:36:49 +02:00
  • 799a623831 libip6t_srh.t: switch to lowercase, add /128 suffix, require success Maciej Żenczykowski 2020-05-11 14:33:49 -07:00
  • 1a98eb30fe iptables-test: Don't choke on empty lines Phil Sutter 2020-05-08 14:57:36 +02:00
  • d4409d449c nft: Don't exit early after printing help texts Phil Sutter 2020-05-06 14:39:52 +02:00
  • b199aca80d nft: Fix leak when replacing a rule Phil Sutter 2020-05-06 13:33:20 +02:00
  • b3b7eb6ce8 arptables: Fix leak in nft_arp_print_rule() Phil Sutter 2020-05-06 12:27:49 +02:00
  • 381b5569eb nft: Use clear_cs() instead of open coding Phil Sutter 2020-05-05 19:36:13 +02:00
  • 7db4333dc0 libxtables: Introduce xtables_fini() Phil Sutter 2020-05-05 13:56:11 +02:00
  • 869e38fcde ebtables: Free statically loaded extensions again Phil Sutter 2020-05-05 13:45:06 +02:00
  • bbf0db5057 nft: Fix leak when deleting rules Phil Sutter 2020-05-05 13:41:43 +02:00
  • 5fdb447fdf nft: Fix leaks in ebt_add_policy_rule() Phil Sutter 2020-05-04 19:30:29 +02:00
  • 196401937d nft: Clear all lists in nft_fini() Phil Sutter 2020-05-04 19:20:52 +02:00
  • f42bfb344a nft: cache: Re-establish cache consistency check Phil Sutter 2020-05-01 07:59:36 +02:00
  • 7b3558f160 tests: shell: Implement --valgrind mode Phil Sutter 2020-05-05 18:37:49 +02:00
  • 5bd3ab5c77 nft: Fix for '-F' in iptables dumps Phil Sutter 2020-04-24 11:32:08 +02:00
  • ea8bb5100a nft: cache: Optimize caching for flush command Phil Sutter 2020-04-27 12:08:59 +02:00
  • f806ee67b5 nft: cache: Fetch cache for specific chains Phil Sutter 2020-03-19 18:58:29 +01:00
  • 0e1b72a6d7 nft-cache: Introduce __fetch_chain_cache() Phil Sutter 2020-03-20 10:06:16 +01:00
  • 13b351c9ba nft-cache: Fetch cache per table Phil Sutter 2020-03-18 17:08:31 +01:00
  • 6d1d5aa5c9 nft: cache: Introduce struct nft_cache_req Phil Sutter 2020-04-07 14:05:34 +02:00
  • b301f2ed19 nft: cache: Improve fake cache integration Phil Sutter 2020-04-07 13:47:54 +02:00
  • c63b7643bb nft: cache: Simplify rule and set fetchers Phil Sutter 2020-03-26 04:47:11 +01:00
  • 6d8182e9c3 nft: missing nft_fini() call in bridge family Pablo Neira Ayuso 2020-01-06 13:20:18 +01:00
  • 80251bc2a5 nft: remove cache build calls Pablo Neira Ayuso 2020-01-06 13:20:16 +01:00
  • 59e80a8e50 nft: restore among support Pablo Neira Ayuso 2020-01-06 13:20:15 +01:00
  • 9d07514ac5 nft: calculate cache requirements from list of commands Pablo Neira Ayuso 2020-01-06 13:20:14 +01:00
  • a7f1e208cd nft: split parsing from netlink commands Pablo Neira Ayuso 2020-01-06 13:20:13 +01:00
  • 70a3c1a075 ebtables-restore: Table line to trigger implicit commit Phil Sutter 2020-04-07 21:17:21 +02:00
  • accaecdf58 nft: cache: Fetch sets per table Phil Sutter 2020-04-06 16:49:05 +02:00
  • 6957d381df nft: cache: Init per table set list along with chain list Phil Sutter 2020-04-06 14:36:30 +02:00
  • 72470c6632 nft: cache: Eliminate init_chain_cache() Phil Sutter 2020-03-31 03:09:26 +02:00
  • 0c3aded0b6 ebtables-restore: Drop custom table flush routine Phil Sutter 2020-04-24 15:25:26 +02:00
  • 1fd8d5f2e1 iptables: flush stdout after every verbose log. Maciej Żenczykowski 2020-04-21 01:15:42 -07:00
  • 9dd0c48476 libiptc: do not typedef socklen_t on Android Maciej Żenczykowski 2020-05-09 12:23:56 -07:00
  • 9269b8fcf6 tests: shell: Add test for nfbz#1391 Phil Sutter 2020-04-28 16:12:23 +02:00
  • b48cc6328f libxt_IDLETIMER: fix target v1 help alignment and doc Maciej Żenczykowski 2020-04-21 02:45:10 -07:00
  • 1830481957 iptables: include sys/time.h to fix lack of struct timeval declaration Maciej Żenczykowski 2020-04-21 01:15:34 -07:00
  • 47b2095741 extensions: include strings.h for the definition of ffs() Maciej Żenczykowski 2020-04-21 01:15:07 -07:00
  • f2ace0cdf2 tests: shell: Test -F in dump files Phil Sutter 2020-04-21 14:10:53 +02:00
  • 4e0ad5ebf0 tests: shell: Extend ipt-restore/0004-restore-race_0 Phil Sutter 2020-04-21 14:02:59 +02:00
  • 314c5b16b3 tests: shell: Improve ipt-restore/0001load-specific-table_0 a bit Phil Sutter 2019-09-22 13:10:10 +02:00
  • 8062bc9fca xshared: Drop pointless assignment in add_param_to_argv() Phil Sutter 2019-11-06 18:43:06 +01:00
  • 85b9ec8615 extensions: IDLETIMER: Add alarm timer option Manoj Basapathi 2020-04-16 10:23:29 +05:30
  • 18f01acbde nft-shared: skip check for jumpto if cs->target is unset Pablo Neira Ayuso 2020-04-15 21:29:27 +02:00
  • f3d4a3ddbc extensions: libxt_CT: add translation for NOTRACK Pablo Neira Ayuso 2020-04-15 18:16:41 +02:00
  • 74ef6f1c16 iptables: open eBPF programs in read only mode Maciej Żenczykowski 2020-03-31 09:07:03 -07:00
  • 200bc39965 nft: cache: Fix iptables-save segfault under stress Phil Sutter 2020-03-13 13:02:12 +01:00
  • a8afaf7c76 nft: cache: Fix for unused variable warnings Phil Sutter 2020-03-13 13:00:56 +01:00
  • 94c858c866 nft: cache: Review flush_cache() Phil Sutter 2020-03-02 18:29:54 +01:00
  • 39ec645093 nft: cache: Simplify chain list allocation Phil Sutter 2020-03-02 18:17:51 +01:00
  • 40ad7793d1 nft: cache: Make nft_rebuild_cache() respect fake cache Phil Sutter 2020-02-29 02:08:26 +01:00
  • c550c81fd3 nft: cache: Fix nft_release_cache() under stress Phil Sutter 2020-02-28 20:32:13 +01:00