| Commit message (Expand) | Author | Age |
* | firewall: fix port range quirk in previous commit | Jo-Philipp Wich | 2011-07-01 |
* | firewall: properly handle negated ports in nat reflection | Jo-Philipp Wich | 2011-07-01 |
* | firewall: refine default ICMPv6 rules to better conform with RFC4890, do not ... | Jo-Philipp Wich | 2011-06-30 |
* | firewall: restore local port relocation ability from r26617 | Jo-Philipp Wich | 2011-06-30 |
* | firewall: - allow multiple ports, protocols, macs, icmp types per rule - impl... | Jo-Philipp Wich | 2011-06-30 |
* | firewall: ensure that fw_get_subnet4() sets an empty value if no (valid) IPv4... | Jo-Philipp Wich | 2011-06-16 |
* | firewall: allow symbolic names of interfaces and aliases in masq_src and masq... | Jo-Philipp Wich | 2011-06-16 |
* | firewall: explictely mention network in default configuration, makes it less ... | Jo-Philipp Wich | 2011-05-20 |
* | firewall: revert accidential committed changes from r26805 | Jo-Philipp Wich | 2011-05-02 |
* | firewall: provide examples of ssh port relocation on firewall and IPsec passt... | Jo-Philipp Wich | 2011-05-02 |
* | firewall: prevent excessive uci state data aggregation (#9152) | Jo-Philipp Wich | 2011-04-20 |
* | firewall: allow local redirection of ports | Jo-Philipp Wich | 2011-04-12 |
* | firewall: prevent duplicate values in interface state vars | Jo-Philipp Wich | 2011-03-30 |
* | Keep firewall.user during sysupgrades | Travis Kemen | 2011-03-20 |
* | firewall: move include sourcing into a subshell, this makes the firewall init... | Jo-Philipp Wich | 2011-03-02 |
* | firewall: fix rule generation for v4 or v6 only zones (#8955) | Jo-Philipp Wich | 2011-03-01 |
* | firewall: fix wrong rule order if multiple protocols are used | Jo-Philipp Wich | 2011-01-27 |
* | firewall: insert SNAT and DNAT rules according to the order of the configurat... | Jo-Philipp Wich | 2010-10-08 |
* | firewall: mark /etc/firewall.user as conffile | Jo-Philipp Wich | 2010-10-05 |
* | firewall: also establish forward rules when setting up nat reflection, back o... | Jo-Philipp Wich | 2010-10-03 |
* | add maintainer information | Jo-Philipp Wich | 2010-09-30 |
* | firewall: fix chain selection logic, option dest must be ignored for notrack ... | Jo-Philipp Wich | 2010-09-28 |
* | firewall: don't setup nat reflection if negations are used | Jo-Philipp Wich | 2010-09-28 |
* | fireall: - support negations for src_ip, dest_ip, src_dip options in rules an... | Jo-Philipp Wich | 2010-09-28 |
* | firewall: protect iptables invocations with locks in interface ops, it might ... | Jo-Philipp Wich | 2010-09-19 |
* | firewall: make invalid redirects and duplicate zones non-fatal, print a notic... | Jo-Philipp Wich | 2010-09-16 |
* | firewall: run ifdown hotplug events synchronized, fixes a racecondition on "i... | Jo-Philipp Wich | 2010-09-15 |
* | firewall: deliver remove hotplug events for all active zones/networks when re... | Jo-Philipp Wich | 2010-09-14 |
* | firewall: - simplify masquerade rule setup - remove various subshell invocati... | Jo-Philipp Wich | 2010-09-11 |
* | firewall: - fix possible endless loop when the family option is used for forw... | Jo-Philipp Wich | 2010-09-05 |
* | firewall: introduce SNAT support for redirect sections | Jo-Philipp Wich | 2010-09-05 |
* | firewall: add option to disable NAT reflection | Jo-Philipp Wich | 2010-09-04 |
* | firewall: clean up description (#7875) | Jo-Philipp Wich | 2010-09-04 |
* | firewall: - handle NAT reflection in firewall hotplug, solves synchronizing i... | Jo-Philipp Wich | 2010-09-04 |
* | firewall: - fix processing of rules with an ip family option - append interfa... | Jo-Philipp Wich | 2010-08-31 |
* | firwall: fix nat reflection for zones covering multiple networks | Jo-Philipp Wich | 2010-07-31 |
* | firewall: add basic NAT reflection/NAT loopback support | Jo-Philipp Wich | 2010-07-31 |
* | firewall: allow redirecting only destination port (#7197) | Jo-Philipp Wich | 2010-07-16 |
* | firewall: fix another notrack related bug | Jo-Philipp Wich | 2010-07-15 |
* | firewall: - notrack support was broken in multiple ways, fix it - also consid... | Jo-Philipp Wich | 2010-07-15 |
* | firewall: - support alias ifnames different from parent ifname - properly han... | Jo-Philipp Wich | 2010-06-02 |
* | firewall: Initial alias interface support. This allows to define zones coveri... | Jo-Philipp Wich | 2010-06-01 |
* | firewall: change the order of IPv4/IPv6 address detection, fixes mixed notati... | Jo-Philipp Wich | 2010-05-31 |
* | firewall: fix support for netranges in redirect and rule sections | Jo-Philipp Wich | 2010-05-30 |
* | firewall: count rules per chain and family, fix wrong order of ip6tables rule... | Jo-Philipp Wich | 2010-05-22 |
* | firewall: don't apply default udp/68 rule to ip6tables | Jo-Philipp Wich | 2010-05-19 |
* | firewall: - fix ip6tables rules when icmp_type option is set - add "family" o... | Jo-Philipp Wich | 2010-05-19 |
* | firewall: add commented disable_ipv6 option to default config | Jo-Philipp Wich | 2010-05-19 |
* | firewall: implement disable_ipv6 uci option | Jo-Philipp Wich | 2010-05-19 |
* | firewall (#7355) - partially revert r21486, start firewall on init again - sk... | Jo-Philipp Wich | 2010-05-19 |