Kevin Krakauer
31e49f4b19
Merge branch 'master' into iptables-write-input-drop
2020-01-13 12:22:15 -08:00
gVisor bot
b30cfb1df7
Merge pull request #1528 from kevinGC:iptables-write
...
PiperOrigin-RevId: 289479774
2020-01-13 11:26:26 -08:00
Kevin Krakauer
d147e6d1b2
Cleaned up logs.
2020-01-10 13:58:46 -08:00
Kevin Krakauer
06e2366e96
Merge branch 'iptables-write' into iptables-write-input-drop
2020-01-08 20:05:02 -08:00
Kevin Krakauer
ae060a63d9
More GH comments.
2020-01-08 17:30:08 -08:00
Kevin Krakauer
0999ae8b34
Getting a panic when running tests. For some reason the filter table is
...
ending up with the wrong chains and is indexing -1 into rules.
2020-01-08 15:57:25 -08:00
Kevin Krakauer
b2a881784c
Built dead-simple traversal, but now getting depedency cycle error :'(
2020-01-08 14:48:47 -08:00
Kevin Krakauer
8cc1c35bbd
Write simple ACCEPT rules to the filter table.
...
This gets us closer to passing the iptables tests and opens up iptables
so it can be worked on by multiple people.
A few restrictions are enforced for security (i.e. we don't want to let
users write a bunch of iptables rules and then just not enforce them):
- Only the filter table is writable.
- Only ACCEPT rules with no matching criteria can be added.
2020-01-08 10:08:14 -08:00
Kevin Krakauer
810cc07aab
Plumbing for iptables sockopts.
...
PiperOrigin-RevId: 261413396
2019-08-02 16:26:48 -07:00
Kevin Krakauer
06a83df533
Address more comments.
...
Change-Id: I83ae1079f3dcba6b018f59ab7898decab5c211d2
2019-06-10 12:43:54 -07:00
Kevin Krakauer
8afbd974da
Address Ian's comments.
...
Change-Id: I7445033b1970cbba3f2ed0682fe520dce02d8fad
2019-06-07 12:54:53 -07:00
Kevin Krakauer
d58eb9ce82
Add basic iptables structures to netstack.
...
Change-Id: Ib589906175a59dae315405a28f2d7f525ff8877f
2019-05-31 16:14:04 -07:00