unkin-agent 6af17a4c02 Restrict raw_output to fw sources and reject unmatched prerouting dest zones

2026-10-03 22:59:14 +10:00

..

agent

Drop agent auto-revert; skip agent apply while a try is pending

2026-10-03 20:52:42 +10:00

config

Match exact all/any zone tokens, skip only interface-less ip zones, keep DNAT free of rule extras, reject '!' inside address lists

2026-10-03 20:50:36 +10:00

nftables

Restrict raw_output to fw sources and reject unmatched prerouting dest zones

2026-10-03 22:59:14 +10:00

shorewall

Add tomswall agent (control-plane pull mode)

2026-07-20 20:05:49 +10:00

tryapply

Refuse mutating commands during a try and scope reverts to the try ID

2026-10-03 20:56:52 +10:00