Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | firewall: ensure that fw_get_subnet4() sets an empty value if no (valid) ↵ | Jo-Philipp Wich | 2011-06-16 | 1 | -0/+1 |
| | | | | | | IPv4 addr was found SVN-Revision: 27198 | ||||
* | firewall: allow symbolic names of interfaces and aliases in masq_src and ↵ | Jo-Philipp Wich | 2011-06-16 | 1 | -0/+17 |
| | | | | | | masq_dest SVN-Revision: 27196 | ||||
* | fireall: - support negations for src_ip, dest_ip, src_dip options in rules ↵ | Jo-Philipp Wich | 2010-09-28 | 1 | -0/+9 |
| | | | | | | and redirects - add NOTRACK target to rule sections, allows to define fine grained notrack rules SVN-Revision: 23141 | ||||
* | firewall: - simplify masquerade rule setup - remove various subshell ↵ | Jo-Philipp Wich | 2010-09-11 | 1 | -29/+35 |
| | | | | | | invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source SVN-Revision: 23024 | ||||
* | firewall: - fix possible endless loop when the family option is used for ↵ | Jo-Philipp Wich | 2010-09-05 | 1 | -1/+1 |
| | | | | | | forwardings - only generate forwarding rules in SNAT redirect sections if src_dip is specified SVN-Revision: 22938 | ||||
* | firewall: - fix processing of rules with an ip family option - append ↵ | Jo-Philipp Wich | 2010-08-31 | 1 | -9/+13 |
| | | | | | | interface rules at the end of internal zone chains, simplifies injecting user or addon rules - support simple file logging (option log + option log_limit per zone) SVN-Revision: 22847 | ||||
* | firewall: change the order of IPv4/IPv6 address detection, fixes mixed ↵ | Jo-Philipp Wich | 2010-05-31 | 1 | -1/+1 |
| | | | | | | notation v6 improperly detected as v4 address SVN-Revision: 21642 | ||||
* | firewall: - fix ip6tables rules when icmp_type option is set - add "family" ↵ | Jo-Philipp Wich | 2010-05-19 | 1 | -1/+29 |
| | | | | | | option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables SVN-Revision: 21508 | ||||
* | firewall: implement disable_ipv6 uci option | Jo-Philipp Wich | 2010-05-19 | 1 | -4/+4 |
| | | | | SVN-Revision: 21503 | ||||
* | firewall: properly unset position for delete command, fixes rule removal in ↵ | Jo-Philipp Wich | 2010-05-05 | 1 | -2/+2 |
| | | | | | | ifdown SVN-Revision: 21378 | ||||
* | firewall: - replace uci firewall with a modular dual stack implementation ↵ | Jo-Philipp Wich | 2010-05-01 | 1 | -0/+182 |
developed by Malte S. Stretz - bump version to 2 SVN-Revision: 21286 |