7 Commits

Include renames

Author	SHA1	Message	Date
Simon Kelley	98189ff988	Fix problems with ipset or nftset and TCP DNS transport. ... If DNS is happening over TCP, the query is handled by a forked process. Of ipset ot nftset is configured, this might include inserting addresses in the *sets. Before this update, that was done by the forked process using handles inherited from the parent "master" process. This is inherently racy. If the master process or another child process tries to do updates at the same time, the updates can clash and fail. To see this, you need a busy server doing lots of DNS queries over TCP, and ipset or nftset configured. Going forward, we use the already established pipe to send the updates from the child back to the master process, which serialises them.	2025-05-08 16:07:19 +01:00
Simon Kelley	6e6a45a7d9	Bump copyrights to 2025.	2025-01-23 17:08:39 +00:00
Simon Kelley	b5820d1fd8	Bump copyright to 2024.	2024-01-13 22:20:04 +00:00
Simon Kelley	b8b5b734b4	Fix misuse of const pointer in src/nftset.c. ... Thanks to Kevin Darbyshire-Bryant for the initial patch, which was modified by srk - any remaining bugs are his.	2023-11-22 15:20:53 +00:00
Simon Kelley	df242de5c6	Bump copyrights to 2023.	2023-04-05 12:34:34 +01:00
Simon Kelley	c6d4c33d61	Bump copyright to 2022.	2022-01-24 15:19:00 +00:00
Simon Kelley	47aefca5e4	Add --nftset option, like --ipset but for the newer nftables. ... Thanks to Chen Zhenge for the original patch, which I've reworked. Any bugs down to SRK.	2021-09-27 21:49:28 +01:00