interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
229 Commits 1 Branch 2 Tags 2 MiB
Commit Graph

229 Commits

Author SHA1 Message Date
Tommie Gannert 0360b9d10a Adds all current datatypes for sets. 
Based on https://git.netfilter.org/nftables/commit/include/datatype.h?id=cca4c856301caa8959ac98aac5811130bc19512c

It makes more sense to point to datatype.h in the comment since the
actual definitions of these types are scattered throughout src/.

uid_t and gid_t sizes are fixed at 4 bytes currently, but that might
of course change. I couldn't find a good way to make this
dynamic. There are a number of Sizeof* constants in x/sys/unix, so
that's probably the right place to add them.
 2021-09-16 16:01:15 +02:00
Michael Stapelberg d553cd2d41 GitHub actions: run on pull requests, too 2021-08-18 09:26:02 +02:00
Michael Stapelberg a285acebca README: switch to GitHub actions badge 2021-05-14 17:48:51 +02:00
pengyuan.dai 5573dab9cc
Add CtStateBit constants and related usage test #121 (#122) 
fixes #121
 2021-05-14 16:05:40 +02:00
pengyuan.dai 523112131a
Add expr.Ct and expr.Range type select in exprsFromMsg (#120) 
fixes #119
 2021-05-11 11:11:10 +02:00
Michael Stapelberg 715e31cb3c switch from travis to GitHub actions 2020-12-30 15:21:48 +01:00
Paul Greenberg c25e4f69b4
fix: unmarshaling verdicts with chain information (#106) 
Before this commit: the unmarshaling of a verdict pointing
to a chain fails.

After this commit: the unmarshaling of a rule with a verdict
pointing to a chain succeeds and the information about the
chain gets put in `Verdict.Chain`.

Resolves: #105

Signed-off-by: Paul Greenberg <greenpau@outlook.com>
 2020-08-02 19:55:06 +02:00
Grégoire Delattre 7127d9d224
Add support for rate limiting (#101) 2020-03-16 08:58:19 +01:00
Alexis PIRES 64aca752d1
Remove Object API (#100) 
Co-authored-by: Alexis PIRES <alexis.pires@atos.net>
 2020-03-09 08:43:47 +01:00
Grégoire Delattre 21c5c5c425
Add missing VerdictKind (#99) 2020-03-06 11:32:18 +01:00
Zackery Field 9caf4234bf
Report whether set has flag configured (#98) 2020-02-27 08:28:57 +01:00
Serguei Bezverkhi 1c56a1906f Add Dynset expression and unit test (#97) 
* Add dynset expression and unit test

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2020-02-10 11:14:20 +01:00
Serguei Bezverkhi 9cdc3d048a
Add support for timeouts for set elements and sets (#96) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2020-02-05 11:33:52 +01:00
Serguei Bezverkhi 26bcabf490 disable lock when no namespace is needed (#95) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2020-01-22 22:39:39 +01:00
Leon Vack 327d5c62cd function to create concatenated SetDatatypes (#93) 
added function to create concatenated SetDatatypes
 2020-01-22 22:37:16 +01:00
Serguei Bezverkhi 88b35b63a9 Add GetSetByName call (#94) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2020-01-21 08:39:40 +01:00
Alexis PIRES fdd795dea1 Add GetObject/GetObjects, ResetObject/ResetObjects (#92) 
GetObj/GetObjReset accidentally returns all objects, GetObject returns only the specified one.
 2020-01-21 08:36:27 +01:00
Michael Stapelberg bf895afbc6
Merge pull request #91 from LogicalOverflow/master 
GetSets/SetAddElements fixes
 2020-01-14 16:49:37 +01:00
Leon Vack 45c777dde0
added a test adding elements to a set in an IPv6 table 2020-01-14 11:07:36 +01:00
Leon Vack 514aa0c301
stored table passed to GetSets as table in all returned sets 2020-01-14 11:06:46 +01:00
Leon Vack 19eb6eac29
fixed extraHeader in SetAddElements 2020-01-14 11:02:28 +01:00
Serguei Bezverkhi 80a905063c Add set's id to newsetelem message (#89) 2020-01-01 17:05:55 +01:00
Alexis PIRES c4896ab7c6 Add insert/replace (#86) 2020-01-01 16:50:27 +01:00
Michael Stapelberg 2228941ec5 remove extra space 2019-12-22 11:45:11 +01:00
Serguei Bezverkhi 1f2240c488 Flush fix (#85) 
Clear messages after netlink return error

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-12-22 11:44:25 +01:00
Michael Stapelberg 7a7d417622
Merge pull request #84 from sbezverk/error_wrap 
Replace %v with %w to wrap netlink error
 2019-12-22 11:43:06 +01:00
Serguei Bezverkhi a63c55f46a Update go vet command line 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-12-20 12:00:14 -05:00
Serguei Bezverkhi c243f4945b Switching to recent golang version 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-12-20 11:57:27 -05:00
Serguei Bezverkhi f528bf5cc6 Replace %v with %w to wrap netlink error 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-12-20 11:51:15 -05:00
Serguei Bezverkhi 756cfa14a8 Fix concatenated key set validation (#83) 2019-12-18 00:02:00 +01:00
Alexis PIRES 9a6c96795b Stateless NAT and notrack support (#82) 2019-12-17 21:54:26 +01:00
Alexis PIRES e2e83d0ff5 Add dup expr support (#81) 2019-12-13 23:35:06 +01:00
Michael Stapelberg fc92ae7899 README: add disclaimer; this is not the upstream nftables repo 2019-12-08 11:03:14 +01:00
Serguei Bezverkhi 4525b500cb Anonymous set creation (#79) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-12-05 18:08:48 +01:00
Serguei Bezverkhi 4f16059f2d Composed set (#78) 2019-12-01 10:10:42 +01:00
Serguei Bezverkhi 9dee196925 Add expression and tests for numgen (#77) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-11-28 09:43:38 +01:00
Timo Beckers 3ba45f5d78 Use NFPROTO_ constants for TableFamily (#76) 2019-11-15 10:17:43 +01:00
Serguei Bezverkhi 14f3137cde protect cc.messages from racing (#75) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-11-14 16:22:42 +01:00
Serguei Bezverkhi 26aec69f06 enable redir and nat decoders (#73) 
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
 2019-11-08 09:17:41 +01:00
Serguei Bezverkhi e0f4f3f8f8 Add bitwise decoder logic (#71) 2019-11-07 15:38:12 +01:00
Michael Stapelberg dc8c451012
Merge pull request #69 from Minaru/flush_functions 
Implement flush functions
 2019-10-31 07:44:21 +01:00
Maxime Demode 9083117872 [test] Add Travis skip for succesful local/Ubuntu 14.04 VM tests that somehow fail on Travis CI. 2019-10-28 14:24:28 +01:00
Maxime Demode 4fed02b227 [test] Add FlushTable case. 2019-10-23 16:02:45 +02:00
Maxime Demode 90c5e7d6f1 [test] Add FlushChain case. 2019-10-23 15:45:01 +02:00
Maxime Demode 606a10c098 [test] Add FlushSet case. 2019-10-23 15:44:09 +02:00
Maxime Demode e3323c2482 [set] Add FlushSet function. 2019-10-23 15:10:52 +02:00
Maxime Demode e49143a9d1 [table] Add FlushTable function. 2019-10-23 14:37:48 +02:00
Maxime Demode 22243d5c70 [chain] Add FlushChain function. 2019-10-23 14:20:20 +02:00
Minaru 35de0a609f Hash expr implementation (#68) 
* [expr] Implement Hash expr.

* [test] Add Hash test case.
 2019-10-19 08:53:53 +02:00
Minaru d379352a0d [set] Add Integer and Mark datatypes for set elements. (#66) 2019-10-19 08:53:01 +02:00