| Commit message (Expand) | Author | Age | Files | Lines |
* | firewall3: ipset: Handle reload_set properly | Kristian Evensen | 2019-08-19 | 1 | -0/+1 |
* | firewall3: Improve ipset support | Kristian Evensen | 2019-08-16 | 1 | -5/+11 |
* | helpers: implement explicit CT helper assignment support | Jo-Philipp Wich | 2018-02-20 | 1 | -0/+5 |
* | firewall3: add UBUS support for include scripts | Pierre Lebleu | 2017-05-09 | 1 | -1/+1 |
* | firewall3: add UBUS support for ipset sections | Pierre Lebleu | 2017-05-09 | 1 | -1/+1 |
* | firewall3: add UBUS support for forwarding sections | Pierre Lebleu | 2017-05-09 | 1 | -1/+1 |
* | firewall3: add UBUS support for redirect sections | Pierre Lebleu | 2017-05-09 | 1 | -1/+1 |
* | main: make failing ubus connection nonfatal | Jo-Philipp Wich | 2016-11-06 | 1 | -1/+1 |
* | treewide: replace jow@openwrt.org with jo@mein.io | Jo-Philipp Wich | 2016-06-07 | 1 | -1/+1 |
* | load running state after lock is acquired | Alin Năstac | 2016-05-02 | 1 | -2/+11 |
* | Use xt_id match to track own rules | Jo-Philipp Wich | 2016-01-24 | 1 | -0/+37 |
* | Selectively flush conntrack | Jo-Philipp Wich | 2014-08-11 | 1 | -9/+5 |
* | use calloc instead of malloc+memset | Felix Fietkau | 2014-06-30 | 1 | -3/+1 |
* | Add fw3 zone call to list devices in a zone | Steven Barth | 2014-06-26 | 1 | -0/+34 |
* | Add support for netifd-generated rules | Steven Barth | 2014-04-14 | 1 | -2/+6 |
* | Fix building with newer toolchains | Steven Barth | 2014-04-14 | 1 | -2/+2 |
* | Reapply SNAT/MASQUERADE rules on firewall reloads | Jo-Philipp Wich | 2014-04-11 | 1 | -0/+1 |
* | Initial support for "config nat" rules - this allows configuring zone-indepen... | Jo-Philipp Wich | 2014-04-06 | 1 | -1/+7 |
* | Decouple handle destroying from committing, add fw3_ipt_close() instead | Jo-Philipp Wich | 2013-06-03 | 1 | -0/+5 |
* | Make IPv6 support optional | Jo-Philipp Wich | 2013-05-27 | 1 | -2/+11 |
* | Only perform selective reload if firewall was already running, else do a norm... | Jo-Philipp Wich | 2013-05-22 | 1 | -20/+16 |
* | Wait for ipsets to appear before continuing | Jo-Philipp Wich | 2013-05-17 | 1 | -14/+2 |
* | Restore iptables-save include functionality | Jo-Philipp Wich | 2013-05-17 | 1 | -2/+3 |
* | Only process selected family for print | Jo-Philipp Wich | 2013-05-17 | 1 | -15/+16 |
* | Add debug prints for policy setting, don't commit ruleset in print mode | Jo-Philipp Wich | 2013-05-17 | 1 | -1/+3 |
* | Drop iptables-restore and create rules through libiptc and libxtables | Jo-Philipp Wich | 2013-05-17 | 1 | -52/+30 |
* | Use libiptc to clear current ruleset | Jo-Philipp Wich | 2013-05-13 | 1 | -28/+19 |
* | Make reload atomic | Jo-Philipp Wich | 2013-05-08 | 1 | -29/+121 |
* | Don't track family of ipsets | Jo-Philipp Wich | 2013-04-30 | 1 | -11/+10 |
* | Split runtime and config states, store runtime state in UCI format | Jo-Philipp Wich | 2013-04-30 | 1 | -88/+113 |
* | Consolidate and unify argument order for functions | Jo-Philipp Wich | 2013-03-14 | 1 | -14/+14 |
* | Only perform locking for start, stop, restart, reload and flush operations, t... | Jo-Philipp Wich | 2013-03-14 | 1 | -14/+31 |
* | Implement reload option for includes to decide whether includes should get re... | Jo-Philipp Wich | 2013-03-14 | 1 | -5/+2 |
* | Emit hotplug calls when flushing / creating zone chains | Jo-Philipp Wich | 2013-03-13 | 1 | -3/+9 |
* | Rework zone flush logic | Jo-Philipp Wich | 2013-03-11 | 1 | -18/+11 |
* | Cosmetic output changes | Jo-Philipp Wich | 2013-03-10 | 1 | -8/+5 |
* | Only run includes and set sysctls if either v4 or v6 firewall was actually st... | Jo-Philipp Wich | 2013-03-10 | 1 | -6/+9 |
* | Separate running from current state flags in ipset handling, remove ipsets pe... | Jo-Philipp Wich | 2013-03-10 | 1 | -6/+8 |
* | Get rid of redundant fw3_defaults object, instead add a running_flags bitfiel... | Jo-Philipp Wich | 2013-03-10 | 1 | -1/+1 |
* | add support for per-zone user chains | Jo-Philipp Wich | 2013-03-08 | 1 | -2/+2 |
* | clear conntrack table on flush | Jo-Philipp Wich | 2013-02-27 | 1 | -0/+10 |
* | add debug flag to monitor fw3_pr() calls, set policies to drop during reload | Jo-Philipp Wich | 2013-02-27 | 1 | -7/+12 |
* | add support for setting sysctls, remove tcp_westwood option, its not present ... | Jo-Philipp Wich | 2013-02-22 | 1 | -4/+8 |
* | run/load includes on start | Jo-Philipp Wich | 2013-02-22 | 1 | -3/+9 |
* | add reload command to selectively rebuild rules (to be invoked from hotplug h... | Jo-Philipp Wich | 2013-02-22 | 1 | -4/+12 |
* | add support for includes | Jo-Philipp Wich | 2013-02-22 | 1 | -0/+5 |
* | rework runtime state tracking | Jo-Philipp Wich | 2013-02-21 | 1 | -35/+22 |
* | rework ipset removal logic to only purge sets that are not in use by any family | Jo-Philipp Wich | 2013-02-20 | 1 | -6/+3 |
* | do not save state when printing rules | Jo-Philipp Wich | 2013-02-20 | 1 | -2/+5 |
* | introduce global string array for enum names, remove private arrays | Jo-Philipp Wich | 2013-02-20 | 1 | -29/+14 |