| 2016-01-29 |
Jo-Philipp... | defaults: emit ctstate INVALID drop rules by default |
commit | commitdiff | tree | snapshot |
| 2016-01-29 |
Len White | iptables: fix inversion flags |
commit | commitdiff | tree | snapshot |
| 2016-01-24 |
Jo-Philipp... | Remove commented code |
commit | commitdiff | tree | snapshot |
| 2016-01-24 |
Jo-Philipp... | Use xt_id match to track own rules |
commit | commitdiff | tree | snapshot |
| 2015-05-26 |
Jo-Philipp... | redirects: only emit REDIRECT rules if dest_ip is unset |
commit | commitdiff | tree | snapshot |
| 2015-05-26 |
Jo-Philipp... | Rework match initialization |
commit | commitdiff | tree | snapshot |
| 2015-05-26 |
Jo-Philipp... | Link libext dynamically |
commit | commitdiff | tree | snapshot |
| 2015-05-22 |
Jo-Philipp... | iptables: initialize multiport match |
commit | commitdiff | tree | snapshot |
| 2015-05-21 |
Jo-Philipp... | ubus: allow proto handlers to override device in announ... |
commit | commitdiff | tree | snapshot |
| 2015-04-18 |
Jo-Philipp... | ubus: print rule name when reporting errors |
commit | commitdiff | tree | snapshot |
| 2015-04-18 |
Jo-Philipp... | ubus: store rule origin as comment |
commit | commitdiff | tree | snapshot |
| 2015-02-26 |
Hans Dedecker | firewall3: fix null pointer access when no target is... |
commit | commitdiff | tree | snapshot |
| 2015-01-13 |
Jo-Philipp... | redirects: fix possible null pointer access |
commit | commitdiff | tree | snapshot |
| 2015-01-08 |
Ulrich Weber | firewall3: fix left shift on 64 bit systems in fw3_bitl... |
commit | commitdiff | tree | snapshot |
| 2015-01-08 |
Jo-Philipp... | redirects: respect src_dip option for reflection rules |
commit | commitdiff | tree | snapshot |
| 2014-09-19 |
Jo-Philipp... | options: allow '*' as value for protocols and families |
commit | commitdiff | tree | snapshot |
| 2014-09-18 |
Jo-Philipp... | utils: rework fw3_bitlen2netmask() IPv6 mask calculation |
commit | commitdiff | tree | snapshot |
| 2014-09-17 |
Jo-Philipp... | redirect: emit -j REDIRECT rules for local port forwards |
commit | commitdiff | tree | snapshot |
| 2014-09-17 |
Jo-Philipp... | utils: fix invalid memory access in fw3_bitlen2netmask() |
commit | commitdiff | tree | snapshot |
| 2014-08-11 |
Jo-Philipp... | utils: ifa_addr may be NULL, skip such entries |
commit | commitdiff | tree | snapshot |
| 2014-08-11 |
Jo-Philipp... | Selectively flush conntrack |
commit | commitdiff | tree | snapshot |
| 2014-07-21 |
Jo-Philipp... | zones: make forward policy destination bound |
commit | commitdiff | tree | snapshot |
| 2014-07-19 |
Jo-Philipp... | options: fix logic flaw when parsing ipaddr/mask notation |
commit | commitdiff | tree | snapshot |
| 2014-07-19 |
Jo-Philipp... | Use netmasks instead of prefix lengths internally |
commit | commitdiff | tree | snapshot |
| 2014-07-10 |
Jo-Philipp... | ubus: handle attribute access after NULL check in parse... |
commit | commitdiff | tree | snapshot |
| 2014-07-10 |
Jo-Philipp... | ubus: fix fw3_ubus_address() |
commit | commitdiff | tree | snapshot |
| 2014-07-10 |
Jo-Philipp... | ubus: fix fw3_ubus_device() to only return a pointer... |
commit | commitdiff | tree | snapshot |
| 2014-07-03 |
Jo-Philipp... | options: fix fw3_parse_network() when destination point... |
commit | commitdiff | tree | snapshot |
| 2014-07-02 |
Felix Fietkau | ubus: add support for fetching firewall rules from... |
commit | commitdiff | tree | snapshot |
| 2014-06-30 |
Felix Fietkau | ubus: use blobmsg_parse to validate device attributes... |
commit | commitdiff | tree | snapshot |
| 2014-06-30 |
Felix Fietkau | make fw3_ubus_address take a list_head * argument inste... |
commit | commitdiff | tree | snapshot |
| 2014-06-30 |
Felix Fietkau | use calloc instead of malloc+memset |
commit | commitdiff | tree | snapshot |
| 2014-06-30 |
Felix Fietkau | ubus: use blobmsg_parse to validate data from network... |
commit | commitdiff | tree | snapshot |
| 2014-06-26 |
Steven Barth | Add fw3 zone call to list devices in a zone |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | Add support for netifd-generated rules |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | Add support for device and direction parameters |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | snat: add support for connlimiting port-range SNAT |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | Fix building with newer toolchains |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | snat: ICMP can be port-natted as well |
commit | commitdiff | tree | snapshot |
| 2014-04-14 |
Steven Barth | nat: allow ACCEPT-target to explicitely disable NAT |
commit | commitdiff | tree | snapshot |
| 2014-04-11 |
Jo-Philipp... | Reapply SNAT/MASQUERADE rules on firewall reloads |
commit | commitdiff | tree | snapshot |
| 2014-04-06 |
Jo-Philipp... | Initial support for "config nat" rules - this allows... |
commit | commitdiff | tree | snapshot |
| 2014-03-20 |
Felix Fietkau | utils: define _GNU_SOURCE to get clearenv() |
commit | commitdiff | tree | snapshot |
| 2014-02-21 |
Jo-Philipp... | Several ipset bugfixes |
commit | commitdiff | tree | snapshot |
| 2013-12-17 |
Jo-Philipp... | Change set_default() to take value as integer, required... |
commit | commitdiff | tree | snapshot |
| 2013-12-17 |
Jo-Philipp... | Treat option tcp_ecn as integer, not bool |
commit | commitdiff | tree | snapshot |
| 2013-12-17 |
Jo-Philipp... | Properly check strtol() results when paring values... |
commit | commitdiff | tree | snapshot |
| 2013-11-18 |
Jo-Philipp... | Clean up dead code |
commit | commitdiff | tree | snapshot |
| 2013-11-18 |
Jo-Philipp... | Skip redirects with invalid options |
commit | commitdiff | tree | snapshot |
| 2013-11-18 |
Jo-Philipp... | Skip rules with invalid options |
commit | commitdiff | tree | snapshot |
| 2013-11-18 |
Jo-Philipp... | Change fw3_parse_options() to indicate whether all... |
commit | commitdiff | tree | snapshot |
| 2013-11-07 |
Jo-Philipp... | Use a global -m conntrack --ctstate DNAT rule to accept... |
commit | commitdiff | tree | snapshot |
| 2013-10-23 |
Steven Barth | Improve ubus support |
commit | commitdiff | tree | snapshot |
| 2013-10-10 |
Jo-Philipp... | Use fw3_ipt_rule_replace() when setting up zone interfa... |
commit | commitdiff | tree | snapshot |
| 2013-10-10 |
Jo-Philipp... | Use fw3_ipt_rule_replace() when setting up reflection |
commit | commitdiff | tree | snapshot |
| 2013-10-10 |
Jo-Philipp... | Allow any protocol for reflection rules |
commit | commitdiff | tree | snapshot |
| 2013-08-14 |
Jo-Philipp... | Reorganize chain layout for raw/NOTRACK rules to fix... |
commit | commitdiff | tree | snapshot |
| 2013-08-14 |
Jo-Philipp... | Use "-j CT --notrack" instead of deprecated "-j NOTRACK" |
commit | commitdiff | tree | snapshot |
| 2013-08-14 |
Jo-Philipp... | Revert "Make sure that NOTRACK is linked into firewall3... |
commit | commitdiff | tree | snapshot |
| 2013-08-14 |
Jo-Philipp... | Make sure that NOTRACK is linked into firewall3 if... |
commit | commitdiff | tree | snapshot |
| 2013-07-16 |
Jo-Philipp... | Treat redirects as port redirections if the specified... |
commit | commitdiff | tree | snapshot |
| 2013-06-29 |
Jo-Philipp... | Properly dereference struct ether_addr |
commit | commitdiff | tree | snapshot |
| 2013-06-29 |
Jo-Philipp... | Do not rely on ether_ntoa() when formatting mac addresses. |
commit | commitdiff | tree | snapshot |
| 2013-06-18 |
Jo-Philipp... | Don't mistreat unknown protocol names as "any protocol" |
commit | commitdiff | tree | snapshot |
| 2013-06-18 |
Jo-Philipp... | Fix processing of CIDRs with mask 0 |
commit | commitdiff | tree | snapshot |
| 2013-06-13 |
Jo-Philipp... | Fix processing of negated options |
commit | commitdiff | tree | snapshot |
| 2013-06-13 |
Jo-Philipp... | Properly handle reject target in rules with specific... |
commit | commitdiff | tree | snapshot |
| 2013-06-06 |
Jo-Philipp... | Keep all basic chains on reload and only flush them... |
commit | commitdiff | tree | snapshot |
| 2013-06-06 |
Jo-Philipp... | Fix endian issue in compare_addr(), solves auto detecti... |
commit | commitdiff | tree | snapshot |
| 2013-06-06 |
Jo-Philipp... | For ingress rules, only jump into zone_name_src_ACTION... |
commit | commitdiff | tree | snapshot |
| 2013-06-06 |
Jo-Philipp... | Implement limit and limit_burst options for rules. |
commit | commitdiff | tree | snapshot |
| 2013-06-05 |
Jo-Philipp... | Use zone_name_src_ACTION chain for input rules with... |
commit | commitdiff | tree | snapshot |
| 2013-06-05 |
Jo-Philipp... | Extend ipset option syntax to support specifying direct... |
commit | commitdiff | tree | snapshot |
| 2013-06-04 |
Jo-Philipp... | Fix wrong signature of fw3_xt_print_matches() |
commit | commitdiff | tree | snapshot |
| 2013-06-04 |
Jo-Philipp... | Add abstract fw3_xt_print_matches() and fw3_xt_print_ta... |
commit | commitdiff | tree | snapshot |
| 2013-06-04 |
Jo-Philipp... | Fix wrong chain emitted for zone forward policy, the... |
commit | commitdiff | tree | snapshot |
| 2013-06-03 |
Jo-Philipp... | Decouple handle destroying from committing, add fw3_ipt... |
commit | commitdiff | tree | snapshot |
| 2013-06-03 |
Jo-Philipp... | Do not let libxtables implicitely load extensions,... |
commit | commitdiff | tree | snapshot |
| 2013-05-27 |
Jo-Philipp... | Make IPv6 support optional |
commit | commitdiff | tree | snapshot |
| 2013-05-27 |
Jo-Philipp... | Add abstract fw3_xt_reset() implementation |
commit | commitdiff | tree | snapshot |
| 2013-05-27 |
Jo-Philipp... | Dynamically create rules for available libext*.a librar... |
commit | commitdiff | tree | snapshot |
| 2013-05-27 |
Jo-Philipp... | Fix compatibility with older libiptc/libip6tc |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Only emit different ip family warnings if the ip wasn... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Mark fw3_address objects that got resolved by fw3_parse... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Change wording of inferred destination warning for... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Replace fw3_free_zone() with the generic implementation |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Avoid segfault when freeing rules whose target could... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Infer destination zone of DNAT redirects from dest_ip... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Add fw3_resolve_zone_addresses() helper to obtain a... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Remove fw3_ubus_address_free() and use fw3_free_list... |
commit | commitdiff | tree | snapshot |
| 2013-05-26 |
Jo-Philipp... | Add fw3_free_list() helper |
commit | commitdiff | tree | snapshot |
| 2013-05-25 |
Jo-Philipp... | Fix output rules with "option dest *" |
commit | commitdiff | tree | snapshot |
| 2013-05-25 |
Jo-Philipp... | Allow devices for src_ip, src_dip and dest_ip options |
commit | commitdiff | tree | snapshot |
| 2013-05-24 |
Jo-Philipp... | Pass -Wl,--whole-archive and -Wl,--no-whole-archive... |
commit | commitdiff | tree | snapshot |
| 2013-05-23 |
Jo-Philipp... | Don't leak memory when encountering unknown match or... |
commit | commitdiff | tree | snapshot |
| 2013-05-23 |
Jo-Philipp... | Use weak function pointers to call extension init funct... |
commit | commitdiff | tree | snapshot |
| 2013-05-22 |
Jo-Philipp... | Limit zone names to 14 bytes |
commit | commitdiff | tree | snapshot |
| 2013-05-22 |
Jo-Philipp... | Add required ipset declarations for kernels < 3.7 |
commit | commitdiff | tree | snapshot |
| 2013-05-22 |
Jo-Philipp... | Further fixes for zone reloads |
commit | commitdiff | tree | snapshot |
| 2013-05-22 |
Jo-Philipp... | Only perform selective reload if firewall was already... |
commit | commitdiff | tree | snapshot |
| next |
projects / project / firewall3.git / shortlog