Compile conntrack rules into raw-priority chains #22

Merged

benvin merged 12 commits from benvin/notrack-raw into main 2026-10-04 13:55:37 +11:00

Conversation 6 Commits 12 Files Changed 9

+480 -87

12 Commits

Author	SHA1	Message	Date
unkin-agent	9078f410ee	Reject conntrack fw DEST without an address in prerouting	2026-10-03 23:56:29 +10:00
unkin-agent	da65c5d0a8	Treat conntrack SOURCE all/any as global like an omitted source	2026-10-03 23:54:37 +10:00
unkin-agent	90d2875301	Reject zone exclusions in conntrack entries	2026-10-03 23:53:09 +10:00
unkin-agent	bf235291d0	Fail closed on unknown/none conntrack DEST and pair all+ symmetrically	2026-10-03 23:50:18 +10:00
unkin-agent	1c379bf5f1	Merge remote-tracking branch 'origin/main' into benvin/notrack-raw	2026-10-03 23:49:40 +10:00
unkin-agent	b6d67897de	Expand all!zone exclusions and fail closed on unknown zones	2026-10-03 23:48:08 +10:00
unkin-agent	9432bb05c9	Reject unknown and excluded zone names in rule, blrule and conntrack specs	2026-10-03 23:48:08 +10:00
benvin	3c5d23a811	Merge pull request 'Match source/dest zones on conntrack rules' (#24) from benvin/conntrack-zones into benvin/notrack-raw ... Reviewed-on: #24	2026-10-03 23:44:11 +10:00
unkin-agent	337490d995	Reject fw source on prerouting conntrack and pin global omitted-zone entries	2026-10-03 23:01:29 +10:00
unkin-agent	6af17a4c02	Restrict raw_output to fw sources and reject unmatched prerouting dest zones	2026-10-03 22:59:14 +10:00
unkin-agent	3c5f1cacd4	Match source/dest zones and addresses on conntrack rules	2026-10-03 22:56:26 +10:00
unkin-agent	c9adff32f6	Compile conntrack rules into raw-priority chains	2026-10-03 22:54:34 +10:00