Commit Graph

  • c3e8dbd413 ebtables: add test cases Florian Westphal 2018-11-02 16:19:20 +01:00
  • cd90cef0c1 ebtables: relax -t table restriction, add snat/dnat test cases Florian Westphal 2018-11-02 16:24:24 +01:00
  • fd95f1f022 ebtables: fix -j CONTINUE handling for add/delete Florian Westphal 2018-11-02 14:36:54 +01:00
  • fb747f8ae0 tests: add basic ebtables test support Florian Westphal 2018-11-02 12:06:30 +01:00
  • d4bc5a3859 iptables-nft: fix bogus handling of zero saddr/daddr Florian Westphal 2018-11-02 10:47:25 +01:00
  • 9ff99156b6 iptables-test: fix netns test Taehee Yoo 2018-11-01 23:32:50 +09:00
  • 8c918db6a7 xtables: Fix for matching rules with wildcard interfaces Phil Sutter 2018-10-31 20:13:34 +01:00
  • b2fc2a3685 extensions: limit: unbreak build without libnftnl Florian Westphal 2018-10-24 12:00:11 +02:00
  • 682f39afe6 xtables: Fix for spurious errors from iptables-translate Phil Sutter 2018-10-23 16:59:14 +02:00
  • 90f7dc3c28 configure: bump versions for 1.8.1 release Florian Westphal 2018-10-22 18:48:53 +02:00
  • 0123183f43 iptables-test: add -N option to exercise netns removal path Pablo Neira Ayuso 2018-10-19 12:13:37 +02:00
  • abae556c88 libxtables: expose new etherdb lookup function through libxtables API Pablo Neira Ayuso 2018-10-19 13:06:53 +02:00
  • c2d9ed9931 libxtables: prefix exported new functions for etherdb lookups Pablo Neira Ayuso 2018-10-19 12:55:16 +02:00
  • 5a44360e54 Revert "extensions: libxt_quota: Allow setting the remaining quota" Pablo Neira Ayuso 2018-10-19 11:48:59 +02:00
  • 2673fafaaf xtables: Remove target_maxnamelen field Phil Sutter 2018-10-11 13:30:38 +02:00
  • 8ca343624d extensions: cgroup: fix option parsing for v2 Pablo Neira Ayuso 2018-10-09 20:36:36 +02:00
  • 0a8f2bcadf extensions: libxt_quota: Allow setting the remaining quota Chenbo Feng 2018-10-01 18:23:07 -07:00
  • b373a91b24 nft-shared: Use xtables_calloc() Phil Sutter 2018-09-24 19:25:26 +02:00
  • 5a40961582 arptables: Use the shared nft_ipv46_parse_target() Phil Sutter 2018-09-24 19:25:25 +02:00
  • 9f075031a1 Combine parse_target() and command_jump() implementations Phil Sutter 2018-09-24 19:25:24 +02:00
  • 7373297262 Combine command_match() implementations Phil Sutter 2018-09-24 19:25:23 +02:00
  • a76ba54e28 libiptc: NULL-terminate errorname Phil Sutter 2018-09-24 19:25:22 +02:00
  • a3716cc1a5 libxtables: Check extension real_name length Phil Sutter 2018-09-24 19:25:21 +02:00
  • 0195b6428f iptables: Gitignore xtables-{legacy, nft}-multi scripts Phil Sutter 2018-09-19 15:17:09 +02:00
  • 671e40a5f6 xtables: Drop pointless check Phil Sutter 2018-09-19 15:17:08 +02:00
  • 7c9a152110 arptables: Fix incorrect strcmp() in nft_arp_rule_find() Phil Sutter 2018-09-19 15:17:07 +02:00
  • 11e91a4875 xtables: Don't read garbage in nft_ipv4_parse_payload() Phil Sutter 2018-09-19 15:17:06 +02:00
  • d95c1e8b65 libxtables: Use posix_spawn() instead of vfork() Phil Sutter 2018-09-19 15:17:05 +02:00
  • 7e50ebabbf Fix a few cases of pointless assignments Phil Sutter 2018-09-19 15:17:04 +02:00
  • f40ce2d853 extensions: libebt_ip{, 6}: Drop pointless error checking Phil Sutter 2018-09-19 15:17:03 +02:00
  • 47fb86cef5 nft-arp: Drop ineffective conditional Phil Sutter 2018-09-19 15:17:02 +02:00
  • 80aae9b3b7 iptables: Use print_ifaces() from xtables Phil Sutter 2018-09-19 15:17:00 +02:00
  • 8da04ffdca Share print_ipv{4,6}_addr() from xtables Phil Sutter 2018-09-19 15:16:59 +02:00
  • b686594b97 iptables-apply: Replace signal numbers by names Phil Sutter 2018-09-19 15:16:58 +02:00
  • f175deed20 iptables-apply: Quote strings passed to echo Phil Sutter 2018-09-19 15:16:57 +02:00
  • 52aa15098e nfnl_osf: Replace deprecated nfnl_talk() by nfnl_query() Phil Sutter 2018-09-19 15:16:56 +02:00
  • 61ebf3f72a libxtables: Don't read garbage in xtables_strtoui() Phil Sutter 2018-09-19 15:16:55 +02:00
  • ab639f236f libxtables: Avoid calling memcpy() with NULL source Phil Sutter 2018-09-19 15:16:54 +02:00
  • 22ef371abe libiptc: Simplify alloc_handle() function signature Phil Sutter 2018-09-19 15:16:53 +02:00
  • 6b7145fa21 libxt_time: Drop initialization of variable 'year' Phil Sutter 2018-09-19 15:16:52 +02:00
  • 749d3c2ecd libxt_ipvs: Avoid potential buffer overrun Phil Sutter 2018-09-19 15:16:51 +02:00
  • 8e798e0503 libxt_conntrack: Avoid potential buffer overrun Phil Sutter 2018-09-19 15:16:50 +02:00
  • 74eb2395c8 libxt_conntrack: Version 0 does not support XT_CONNTRACK_DIRECTION Phil Sutter 2018-09-19 15:16:49 +02:00
  • d0c1f1b4ad libxt_LED: Avoid string overrun while parsing led-trigger-id Phil Sutter 2018-09-19 15:16:48 +02:00
  • 23ef6f06c8 xtables: Remove unused variable in nft_is_table_compatible() Phil Sutter 2018-09-19 15:16:47 +02:00
  • 4e499d53d5 ip{, 6}tables-restore: Fix for uninitialized array 'curtable' Phil Sutter 2018-09-19 15:16:46 +02:00
  • 1788f545aa Mark fall through cases in switch() statements Phil Sutter 2018-09-19 15:16:45 +02:00
  • 31f1434dfe libxtables: Integrate getethertype.c from xtables core Phil Sutter 2018-09-19 15:16:44 +02:00
  • 7ae4fb1348 xtables: Fix for wrong assert() in __nft_table_flush() Phil Sutter 2018-09-19 15:16:43 +02:00
  • 8c786a351a nfnl_osf: Drop pointless check in xt_osf_strchr() Phil Sutter 2018-09-19 15:16:42 +02:00
  • 6fc7762f6f libxt_string: Fix array out of bounds check Phil Sutter 2018-09-17 13:38:33 +02:00
  • 2a68be109c xtables-save: Ignore uninteresting tables Phil Sutter 2018-09-10 23:32:34 +02:00
  • f9efc8cb79 extensions: add cgroup revision 2 Pablo Neira Ayuso 2018-09-04 11:49:15 +02:00
  • 9b8cb16e25 extensions: REJECT: Merge reject tables Phil Sutter 2018-09-10 23:35:17 +02:00
  • 56d7ab42f3 libxt_string: Avoid potential array out of bounds access Phil Sutter 2018-09-10 23:35:16 +02:00
  • bfd41c8d99 ebtables: Fix for potential array boundary overstep Phil Sutter 2018-09-10 23:35:15 +02:00
  • e6f9867626 libiptc: Avoid side-effect in memset() calls Phil Sutter 2018-09-10 23:35:14 +02:00
  • 4144571f87 libxtables: Fix potential array overrun in xtables_option_parse() Phil Sutter 2018-09-10 23:35:13 +02:00
  • 9242b5d934 xtables: Accept --wait in iptables-nft-restore Phil Sutter 2018-09-05 19:14:40 +02:00
  • c9f4f04baf xtables: Don't check all rules for being compatible Phil Sutter 2018-09-07 17:06:21 +02:00
  • 15606f264c doc: Improve layout of u32 instructions Joseph C. Sible 2018-09-02 14:09:15 -04:00
  • 7345037e08 xtables-restore: Fix flushing referenced custom chains Phil Sutter 2018-09-06 19:33:20 +02:00
  • 7df11d1699 xtables: Drop use of IP6T_F_PROTO Phil Sutter 2018-08-31 22:30:58 +02:00
  • b6a06c1a21 xtables: Align return codes with legacy iptables Phil Sutter 2018-08-31 12:29:57 +02:00
  • 3bb497c61d xtables: Fix for deleting rules with comment Phil Sutter 2018-08-28 21:44:16 +02:00
  • 0800d9b46b ip6tables-translate: Fix libip6t_mh.txlate test Phil Sutter 2018-08-23 17:43:29 +02:00
  • 4cf650c427 ebtables-translate: Fix for libebt_limit.txlate Phil Sutter 2018-08-23 17:43:28 +02:00
  • 783e9c2308 xtables: Add missing deinitialization Phil Sutter 2018-08-23 17:43:27 +02:00
  • 9771d067ef ebtables: Review match/target lookup once more Phil Sutter 2018-08-23 17:43:26 +02:00
  • 85ed1ab6f3 extensions: libebt_mark: Drop mark_supplied check Phil Sutter 2018-08-23 17:43:25 +02:00
  • 6a46ca09ae xtables: Add a few missing exit calls Phil Sutter 2018-08-23 17:43:24 +02:00
  • acde6be320 ebtables-translate: Fix segfault while parsing extension options Phil Sutter 2018-08-23 17:43:23 +02:00
  • 2c4e4d2a74 ebtables: trivial: Leverage C99-style initializers a bit more Phil Sutter 2018-08-23 17:43:22 +02:00
  • 9f5b28acf2 xlate-test: Fix for calling wrong command name Phil Sutter 2018-08-23 17:43:21 +02:00
  • 1a878a7990 extensions: AUDIT: Provide translation Phil Sutter 2018-08-23 17:43:20 +02:00
  • 5ee03e6df4 xtables: Use meta l4proto for -p match Phil Sutter 2018-08-20 15:30:03 +02:00
  • 37b68b2bc9 xtables: Fix for segfault when registering hashlimit extension Heena Sirwani 2018-08-21 17:25:56 +05:30
  • 92f7b04fbd xtables: Fix for segfault in iptables-nft Phil Sutter 2018-08-17 15:35:47 +02:00
  • 294f9ef5ee ebtables: Fix entries count in chain listing Phil Sutter 2018-08-16 18:14:36 +02:00
  • 6f29aa8e34 xtables: Make 'iptables -S nonexisting' return non-zero Phil Sutter 2018-08-16 18:07:07 +02:00
  • 7bccf30750 ebtables: Fix for listing of non-existent chains Phil Sutter 2018-08-15 12:34:24 +02:00
  • 3d9a13dda3 xtables: Fix for no output in iptables-nft -S Phil Sutter 2018-08-14 20:28:03 +02:00
  • a33c6fda8c arptables: Drop extensions/libxt_mangle.c Phil Sutter 2018-08-10 17:07:37 +02:00
  • 02b80972c4 ebtables: Merge libebt_limit.c into libxt_limit.c Phil Sutter 2018-08-10 17:07:36 +02:00
  • 5de8dcf759 xtables: Use native nftables limit expression Phil Sutter 2018-08-10 17:07:35 +02:00
  • 514de4801b ebtables: Remove flags misinterpretations Phil Sutter 2018-08-10 11:42:16 +02:00
  • 528cbf99ff xtables: Fix for wrong counter format in -S output Phil Sutter 2018-08-07 12:29:35 +02:00
  • 9ca32c40ed xtables: Don't pass full invflags to add_compat() Phil Sutter 2018-08-09 18:06:56 +02:00
  • e055aebe63 xtables: Improve xtables-monitor first impression Phil Sutter 2018-08-07 13:06:39 +02:00
  • b925733032 tests: Fix skipping for recent nft-only tests Phil Sutter 2018-08-09 18:06:28 +02:00
  • 277f374075 xtables: Spelling fixes in xtables-monitor Phil Sutter 2018-08-07 13:15:34 +02:00
  • a9d9f64b7c xtables: Fix potential segfault in nft_rule_append() Phil Sutter 2018-08-06 17:23:23 +02:00
  • fbf0bf7c07 tests: Add ebtables-{save,restore} testcases Phil Sutter 2018-08-06 17:21:59 +02:00
  • f1d8508fd6 tests: Add arptables-{save,restore} testcases Phil Sutter 2018-08-06 17:21:58 +02:00
  • 63c3dae305 xtables: Implement arptables-{save,restore} Phil Sutter 2018-08-06 17:21:57 +02:00
  • aa7fb04fcf ebtables: Review match/target lookup Phil Sutter 2018-08-06 17:21:56 +02:00
  • 3f123dcf55 ebtables-restore: Use xtables_restore_parse() Phil Sutter 2018-08-06 17:21:55 +02:00
  • 295d5a809c xtables-restore: Make COMMIT support configurable Phil Sutter 2018-08-06 17:21:54 +02:00
  • 1679b2cb2c xtables-restore: Improve user-defined chain detection Phil Sutter 2018-08-06 17:21:53 +02:00
  • 2ce9f65a37 xtables: Match verbose ip{,6}tables output with legacy Phil Sutter 2018-08-04 13:10:19 +02:00