10 commits

Author	SHA1	Message	Date
Sergey G. Brester	363c0d5fd0	nftables.conf: fixed comment (since 7f1b578af4, gh-488 actioncheck would be never invoked in regular case)	2024-09-07 13:15:45 +02:00
Yaroslav Halchenko	8ef0d3c7a9	[DATALAD RUNCMD] run codespell throughout fixing typo automagically ... === Do not change lines below === { "chain": [], "cmd": "codespell -w", "exit": 0, "extra_inputs": [], "inputs": [], "outputs": [], "pwd": "." } ^^^ Do not change lines above ^^^	2023-11-18 10:04:04 -05:00
sebres	309c8dddd7	action.d/nftables.conf (type=multiport only): fixed port range selector (replacing : with -)	2020-06-24 19:20:36 +02:00
sebres	85ec605358	nftables: amend to gh-2254 - implemented shutdown of action (proper clean-up) - at stop it checks now the last set was deleted and removes table completely (if table does not contain any set); ... this is avoided if some sets were added manually or can be avoided via overwriting of parameter `_nft_shutdown_table`, for example: banaction = nftables[_nft_shutdown_table=''][...]	2019-10-18 19:01:16 +02:00
sebres	51af193402	nftables: add options allowing to specify own table (default f2b-table) and chain (default f2b-chain)	2019-10-18 18:54:02 +02:00
sebres	955d690e56	regrouping expressions with curly braces, added more escapes (better handling in posix shell)	2019-10-18 18:34:48 +02:00
sebres	8ea00c1d5d	fixed mistake in config (semicolon after space as comment in configs?) and coverage, suppress errors by unsupported flush, better space handling in helper _nft_get_handle_id, etc	2019-09-25 13:47:29 +02:00
sebres	492205d30e	action.d/nftables.conf: implemented actionflush (allows flushing nftables sets resp. fast unban of all jail tickets at all)	2019-09-24 20:00:29 +02:00
sebres	abc4d9fe37	allow to use multiple protocols in multiport (single set with multiple rules in chain): ... `banaction = nftables[type=multiport]` with `protocol="tcp,udp,sctp"` in jail replace 3 separate actions. more robust if deleting multiple references to set (rules in chain)	2019-09-24 19:44:59 +02:00
sebres	c753ffb11d	combine nftables actions to single action: ... - nftables-common is removed - nftables-allports is obsolete, replaced by nftables[type=allports] - nftables-multiport is obsolete, replaced by nftables[type=multiport]	2019-09-24 18:53:38 +02:00

Renamed from config/action.d/nftables-common.conf (Browse further)