Skip to content

v1.55.0

Choose a tag to compare

View all tags
@DannyRuizB DannyRuizB released this 08 Oct 08:33
· 8 commits to main since this release
v1.55.0
3a95957
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Two new error smells for one-word slips that stop the file from loading:

  • ct-state-unknown — a conntrack state/status the tool does not know: --ctstate ESTABLISHED,RELATD, a trailing comma, SNAT under -m state, --ctstatus SEEN-REPLY; in nft, ct state ESTABLISHED (lower case only) and ct status seen_reply (nft writes seen-reply). Every accepted word was loaded for real.
  • comment-match-without-text — -m comment without its mandatory --comment.

Measured with iptables 1.8.13 (nf_tables and legacy agree) and nftables 1.1.x, real loads. Two new samples, both refused as shipped and loading once fixed. 67 smells, tests 349. (#77)

Assets 2
Loading