summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
...
* Initial support for "config nat" rules - this allows configuring zone-indepen...Jo-Philipp Wich2014-04-067-15/+469
* utils: define _GNU_SOURCE to get clearenv()Felix Fietkau2014-03-201-0/+1
* Several ipset bugfixesJo-Philipp Wich2014-02-211-2/+12
* Change set_default() to take value as integer, required for tcp_ecn > 1Jo-Philipp Wich2013-12-171-1/+1
* Treat option tcp_ecn as integer, not boolJo-Philipp Wich2013-12-172-2/+2
* Properly check strtol() results when paring values as integersJo-Philipp Wich2013-12-171-2/+3
* Clean up dead codeJo-Philipp Wich2013-11-182-57/+2
* Skip redirects with invalid optionsJo-Philipp Wich2013-11-181-1/+6
* Skip rules with invalid optionsJo-Philipp Wich2013-11-181-1/+6
* Change fw3_parse_options() to indicate whether all options where parsed succe...Jo-Philipp Wich2013-11-182-2/+11
* Use a global -m conntrack --ctstate DNAT rule to accept all port forwards of ...Jo-Philipp Wich2013-11-072-52/+65
* Improve ubus supportSteven Barth2013-10-233-79/+113
* Use fw3_ipt_rule_replace() when setting up zone interface rulesJo-Philipp Wich2013-10-101-10/+10
* Use fw3_ipt_rule_replace() when setting up reflectionJo-Philipp Wich2013-10-101-3/+3
* Allow any protocol for reflection rulesJo-Philipp Wich2013-10-101-1/+1
* Reorganize chain layout for raw/NOTRACK rules to fix support for custom rules...Jo-Philipp Wich2013-08-142-7/+17
* Use "-j CT --notrack" instead of deprecated "-j NOTRACK"Jo-Philipp Wich2013-08-141-1/+2
* Revert "Make sure that NOTRACK is linked into firewall3 if it is part of libe...Jo-Philipp Wich2013-08-141-1/+0
* Make sure that NOTRACK is linked into firewall3 if it is part of libext*.aJo-Philipp Wich2013-08-141-0/+1
* Treat redirects as port redirections if the specified dest_ip belongs to the ...Jo-Philipp Wich2013-07-162-6/+55
* Properly dereference struct ether_addrJo-Philipp Wich2013-06-291-2/+2
* Do not rely on ether_ntoa() when formatting mac addresses.Jo-Philipp Wich2013-06-291-1/+7
* Don't mistreat unknown protocol names as "any protocol"Jo-Philipp Wich2013-06-181-2/+3
* Fix processing of CIDRs with mask 0Jo-Philipp Wich2013-06-181-1/+4
* Fix processing of negated optionsJo-Philipp Wich2013-06-131-2/+3
* Properly handle reject target in rules with specific destinationJo-Philipp Wich2013-06-131-2/+4
* Keep all basic chains on reload and only flush them, this allows user rules t...Jo-Philipp Wich2013-06-064-78/+209
* Fix endian issue in compare_addr(), solves auto detection of "option dest" fo...Jo-Philipp Wich2013-06-061-1/+1
* For ingress rules, only jump into zone_name_src_ACTION chains if the target i...Jo-Philipp Wich2013-06-061-2/+8
* Implement limit and limit_burst options for rules.Jo-Philipp Wich2013-06-062-0/+9
* Use zone_name_src_ACTION chain for input rules with non-wildcard sourceJo-Philipp Wich2013-06-051-4/+12
* Extend ipset option syntax to support specifying directions inplace.Jo-Philipp Wich2013-06-057-44/+96
* Fix wrong signature of fw3_xt_print_matches()Jo-Philipp Wich2013-06-042-2/+2
* Add abstract fw3_xt_print_matches() and fw3_xt_print_target() functions since...Jo-Philipp Wich2013-06-043-21/+60
* Fix wrong chain emitted for zone forward policy, the terminal chain is source...Jo-Philipp Wich2013-06-041-3/+3
* Decouple handle destroying from committing, add fw3_ipt_close() insteadJo-Philipp Wich2013-06-033-0/+11
* Do not let libxtables implicitely load extensions, do it directly from fw3 an...Jo-Philipp Wich2013-06-033-8/+69
* Make IPv6 support optionalJo-Philipp Wich2013-05-274-11/+72
* Add abstract fw3_xt_reset() implementationJo-Philipp Wich2013-05-274-10/+24
* Dynamically create rules for available libext*.a libraries, clean up rulesJo-Philipp Wich2013-05-271-14/+23
* Fix compatibility with older libiptc/libip6tcJo-Philipp Wich2013-05-274-37/+321
* Only emit different ip family warnings if the ip wasn't automatically resolvedJo-Philipp Wich2013-05-262-2/+8
* Mark fw3_address objects that got resolved by fw3_parse_network()Jo-Philipp Wich2013-05-262-0/+2
* Change wording of inferred destination warning for redirectsJo-Philipp Wich2013-05-261-1/+1
* Replace fw3_free_zone() with the generic implementationJo-Philipp Wich2013-05-262-21/+2
* Avoid segfault when freeing rules whose target could not be foundJo-Philipp Wich2013-05-261-1/+3
* Infer destination zone of DNAT redirects from dest_ip optionJo-Philipp Wich2013-05-261-19/+72
* Add fw3_resolve_zone_addresses() helper to obtain a list of all subnets cover...Jo-Philipp Wich2013-05-262-0/+47
* Remove fw3_ubus_address_free() and use fw3_free_list() insteadJo-Philipp Wich2013-05-264-18/+3
* Add fw3_free_list() helperJo-Philipp Wich2013-05-262-0/+18
View Lorry Controller Status