| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | re-enable the mss fix by default for now - see discussion at ↵ | Felix Fietkau | 2009-01-31 |
| | | | | | | | http://lists.openwrt.org/pipermail/openwrt-devel/2009-January/003724.html for more information SVN-Revision: 14293 | ||
| * | firewall: don't clear the mangle table at startup or stop - it doesn't use ↵ | Felix Fietkau | 2009-01-20 |
| | | | | | | | it and clearing it breaks qos SVN-Revision: 14114 | ||
| * | firewall: introduce drop_invalid option to allow disabling the invalid state ↵ | Jo-Philipp Wich | 2009-01-16 |
| | | | | | | | match SVN-Revision: 14061 | ||
| * | firewall: allow multiple interfaces to be part of one zone, fix the sanity ↵ | Felix Fietkau | 2009-01-16 |
| | | | | | | | checks for that SVN-Revision: 14058 | ||
| * | firewall: clear the MSSFIX rules | Felix Fietkau | 2009-01-02 |
| | | | | | SVN-Revision: 13826 | ||
| * | Unify portrange-support in firewall rule generator fixes #4404 | Steven Barth | 2009-01-01 |
| | | | | | SVN-Revision: 13791 | ||
| * | disable the MSS fixup hack by default (most ISPs don't require this as a ↵ | Felix Fietkau | 2008-12-31 |
| | | | | | | | workaround for MTU problems, only some do). this should give a nice speedup for routing on standard-compliant ISPs SVN-Revision: 13788 | ||
| * | fixes firewall for trunk, custom chains were never reched, as policies apply ↵ | John Crispin | 2008-10-14 |
| | | | | | | | beforehand SVN-Revision: 12978 | ||
| * | fixes firewall rule generation. forwarding rules were inserted in input ↵ | John Crispin | 2008-09-28 |
| | | | | | | | chains, fixes #4028 SVN-Revision: 12768 | ||
| * | custom chains were never reached on DROP/REJECT policy, fixes #4004 #4029 | John Crispin | 2008-09-28 |
| | | | | | SVN-Revision: 12767 | ||
| * | set default input policy to ACCEPT to bring the firewall behavior closer to ↵ | Felix Fietkau | 2008-09-28 |
| | | | | | | | the one of previous versions SVN-Revision: 12766 | ||
| * | firewall: fix default policies, add a check for duplicate defaults sections ↵ | Felix Fietkau | 2008-09-28 |
| | | | | | | | and make custom chains more generic SVN-Revision: 12765 | ||
| * | firewall changes: - implement a REJECT policy and enable it by default, ↵ | Nicolas Thill | 2008-09-24 |
| | | | | | | | reject packets with approriate response (closes: #3970) - cleanup syn_flood and remove logging SVN-Revision: 12688 | ||
| * | make the whole iptables/netfiter modular (closes: #3871, #3527) | Nicolas Thill | 2008-09-22 |
| | | | | | SVN-Revision: 12649 | ||
| * | Fixed a typo in the firewall scripts | Steven Barth | 2008-09-16 |
| | | | | | SVN-Revision: 12616 | ||
| * | Fixed a typo in firewall scripts, closes #4000 | Steven Barth | 2008-09-15 |
| | | | | | SVN-Revision: 12613 | ||
| * | make uci firewall backwards compatible to the old firewall.user | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12408 | ||
| * | add proto tcpudp to firewall | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12407 | ||
| * | fix device duplication in firewall if the balancing of ifup and ifdown is broken | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12404 | ||
| * | make sure uci firewall reverts its states when stopped | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12403 | ||
| * | fixes uci firewall init order, Signed-off-by: Roberto Riggio | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12402 | ||
| * | firewall: Added support for port-ranges as firstPort-lastPort to redirect ↵ | Steven Barth | 2008-08-27 |
| | | | | | | | sections SVN-Revision: 12396 | ||
| * | adds 5 new chains to the uci firewall that can be used to hook custom rules | John Crispin | 2008-08-27 |
| | | | | | SVN-Revision: 12395 | ||
| * | adds more sanity checks to uci firewall | John Crispin | 2008-08-26 |
| | | | | | SVN-Revision: 12392 | ||
| * | use proto instead of protocol in uci firewall | John Crispin | 2008-08-26 |
| | | | | | SVN-Revision: 12391 | ||
| * | fix some firewall script typos (patch from #3897) | Felix Fietkau | 2008-08-17 |
| | | | | | SVN-Revision: 12332 | ||
| * | fix typo, proto should be protocol | Travis Kemen | 2008-08-16 |
| | | | | | SVN-Revision: 12318 | ||
| * | trigger error if dport is used when no proto is defined | John Crispin | 2008-08-15 |
| | | | | | SVN-Revision: 12317 | ||
| * | fixes firewall makefile description | John Crispin | 2008-08-11 |
| | | | | | SVN-Revision: 12285 | ||
| * | uci firewall - make uci firewall default and remove old code - fix up ↵ | John Crispin | 2008-08-11 |
| | | | | | | | dependencies SVN-Revision: 12284 | ||
| * | uci_firewall - fixes hotplug.d script | John Crispin | 2008-08-11 |
| | | | | | SVN-Revision: 12282 | ||
| * | uci firewall - remove implicit creation of zones, based on network interfaces | John Crispin | 2008-08-11 |
| | | | | | SVN-Revision: 12281 | ||
| * | adds a new uci firewall - iptbales and netfilter packages need to be ↵ | John Crispin | 2008-08-04 |
| rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ... SVN-Revision: 12089 | |||