aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* fallback: trigger no DNS queriesv1.5.31.5-stableKaarle Ritvanen2019-09-081-14/+16
| | | | | fixes race condition where an unnecessary DNS query fails after kernel rules have already been flushed
* services: openvpnv1.5.2Kaarle Ritvanen2018-12-067-0/+19
|
* host.resolve: avoid ANY queryKaarle Ritvanen2018-12-061-2/+2
|
* provide context for host.resolvelistKaarle Ritvanen2018-12-062-3/+3
|
* fallback: suppress superfluous message on SIGINTKaarle Ritvanen2018-12-061-1/+1
|
* test: log: nflogKaarle Ritvanen2018-12-0619-6/+80
|
* Log: deterministic option orderingKaarle Ritvanen2018-12-061-17/+19
|
* deterministic dependency resolverKaarle Ritvanen2018-12-061-4/+5
|
* Log: use nflog-size instead of nflog-rangev1.5.1Kaarle Ritvanen2018-03-062-4/+4
|
* test: remove generated policiesv1.5.0Kaarle Ritvanen2017-11-031-1/+9
|
* host: resolvelist functionKaarle Ritvanen2017-11-034-21/+31
|
* test: filter-limit: service with no-trackKaarle Ritvanen2017-11-034-46542/+46542
|
* Log.optfrags: packet mirroringKaarle Ritvanen2017-11-0322-55096/+129605
|
* Log: simplify structureKaarle Ritvanen2017-11-032-25/+14
|
* LogRule: use mangleoptfrags instead of servoptfragsKaarle Ritvanen2017-11-031-4/+2
|
* test: packet-logKaarle Ritvanen2017-11-0319-0/+100
|
* test: update-limit: make conn and flow limit outputs differKaarle Ritvanen2017-11-024-40/+43
|
* test: address: inet6 without inetKaarle Ritvanen2017-11-014-9118/+12087
|
* test: ulogKaarle Ritvanen2017-11-0121-43529/+98270
|
* generalize pruning based on address familyKaarle Ritvanen2017-11-012-38/+39
| | | | | eliminates source chains without proper destination chains (e.g. IPv6 addresses with pass action and ulog)
* constant for address familiesKaarle Ritvanen2017-11-015-20/+32
|
* test: address: inet6Kaarle Ritvanen2017-11-014-3962/+8318
|
* test: tproxyKaarle Ritvanen2017-11-015-0/+1057
|
* test: route-trackKaarle Ritvanen2017-11-015-0/+1067
|
* test: zone: renumber marksKaarle Ritvanen2017-11-0113-135/+135
|
* Maskable: constant table for address lengthsKaarle Ritvanen2017-11-011-4/+5
|
* ConfigObject.info: order by chain pathKaarle Ritvanen2017-11-015-7257/+7263
|
* test: split to 4 casesKaarle Ritvanen2017-10-1821-12118/+15224
|
* test: filter-limit: single-direction rulesv1.4.8Kaarle Ritvanen2017-10-184-14462/+24983
|
* Rule.combine: ensure one limit per logging ruleKaarle Ritvanen2017-10-184-1046/+1583
|
* Rule.convertchains: eliminate side effectsKaarle Ritvanen2017-10-181-5/+8
|
* Rule: make convertchain a methodKaarle Ritvanen2017-10-181-40/+36
|
* test: addressKaarle Ritvanen2017-10-184-1369/+6697
|
* Rule.combine: include target chains in resultKaarle Ritvanen2017-10-184-1/+513
|
* test: filter-limit: copyright noticev1.4.7Kaarle Ritvanen2017-10-071-0/+7
|
* test: limitKaarle Ritvanen2017-10-075-13184/+31270
|
* LimitReference.recentofrags: add missing error messageKaarle Ritvanen2017-10-071-1/+2
|
* test: filter-limit: rename limitKaarle Ritvanen2017-10-074-4562/+4562
|
* Limit: default value for countKaarle Ritvanen2017-10-074-551/+545
|
* test: filter-limit: intervalKaarle Ritvanen2017-10-074-6177/+19281
|
* test: filter-limit: raise higher rateKaarle Ritvanen2017-10-074-337/+337
|
* test: filter-limit: refactorKaarle Ritvanen2017-10-071-41/+45
|
* Filter: fix simple update-limitKaarle Ritvanen2017-10-075-36/+65
|
* test: filter-limit: addrKaarle Ritvanen2017-10-074-4279/+8788
|
* test: filter-limit: updateKaarle Ritvanen2017-10-074-3295/+5377
|
* test: filter-limit: nameKaarle Ritvanen2017-10-074-3502/+5932
|
* test: filter-limit: complex limit with mere countKaarle Ritvanen2017-10-074-1570/+3179
|
* test: filter-limit: adjust indentationKaarle Ritvanen2017-10-071-19/+19
|
* test: filter-limit: make conn and flow limit outputs differKaarle Ritvanen2017-10-074-572/+392
|
* test: update-limitKaarle Ritvanen2017-09-304-20/+112
|