| Commit message (Expand) | Author | Age | Files | Lines |
* | Add support for DSCP matches and target | Jo-Philipp Wich | 2018-08-03 | 1 | -11/+22 |
* | firewall3: make reject types selectable by user | Alin Nastac | 2018-07-16 | 1 | -0/+12 |
* | helpers: make the proto field as a list rather than one option | Pierre Lebleu | 2018-05-14 | 1 | -1/+1 |
* | defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule | Felix Fietkau | 2018-04-05 | 1 | -0/+1 |
* | defaults: add support for xt_FLOWOFFLOAD rule | Jo-Philipp Wich | 2018-03-13 | 1 | -0/+1 |
* | ipsets: add support for specifying entries | Jo-Philipp Wich | 2018-03-10 | 1 | -0/+10 |
* | zones: allow per-table log control | Stijn Tintel | 2018-02-26 | 1 | -1/+1 |
* | helpers: implement explicit CT helper assignment support | Jo-Philipp Wich | 2018-02-20 | 1 | -12/+46 |
* | zones: drop outgoing invalid traffic in masqueraded zones | Jo-Philipp Wich | 2017-04-27 | 1 | -0/+1 |
* | global: remove automatic notrack rules | Jo-Philipp Wich | 2016-11-29 | 1 | -1/+0 |
* | musl-compat: avoid kernel header conflicts | Ralph Sennhauser | 2016-11-06 | 1 | -0/+2 |
* | treewide: replace jow@openwrt.org with jo@mein.io | Jo-Philipp Wich | 2016-06-07 | 1 | -1/+1 |
* | ubus: print rule name when reporting errors | Jo-Philipp Wich | 2015-04-18 | 1 | -1/+1 |
* | Selectively flush conntrack | Jo-Philipp Wich | 2014-08-11 | 1 | -0/+2 |
* | Use netmasks instead of prefix lengths internally | Jo-Philipp Wich | 2014-07-19 | 1 | -3/+2 |
* | Add support for netifd-generated rules | Steven Barth | 2014-04-14 | 1 | -0/+3 |
* | Add support for device and direction parameters | Steven Barth | 2014-04-14 | 1 | -0/+5 |
* | snat: add support for connlimiting port-range SNAT | Steven Barth | 2014-04-14 | 1 | -0/+1 |
* | Initial support for "config nat" rules - this allows configuring zone-indepen... | Jo-Philipp Wich | 2014-04-06 | 1 | -9/+45 |
* | Treat option tcp_ecn as integer, not bool | Jo-Philipp Wich | 2013-12-17 | 1 | -1/+1 |
* | Change fw3_parse_options() to indicate whether all options where parsed succe... | Jo-Philipp Wich | 2013-11-18 | 1 | -1/+1 |
* | Treat redirects as port redirections if the specified dest_ip belongs to the ... | Jo-Philipp Wich | 2013-07-16 | 1 | -0/+1 |
* | Implement limit and limit_burst options for rules. | Jo-Philipp Wich | 2013-06-06 | 1 | -0/+1 |
* | Extend ipset option syntax to support specifying directions inplace. | Jo-Philipp Wich | 2013-06-05 | 1 | -7/+13 |
* | Mark fw3_address objects that got resolved by fw3_parse_network() | Jo-Philipp Wich | 2013-05-26 | 1 | -0/+1 |
* | Rename struct fw3_rule_spec to struct fw3_chain_spec and move the declaration... | Jo-Philipp Wich | 2013-05-17 | 1 | -0/+7 |
* | Remove now unused fw3_format_*() functions | Jo-Philipp Wich | 2013-05-17 | 1 | -16/+0 |
* | Drop iptables-restore and create rules through libiptc and libxtables | Jo-Philipp Wich | 2013-05-17 | 1 | -0/+5 |
* | Record device-network relation in state file, fix zone hotplug events | Jo-Philipp Wich | 2013-05-02 | 1 | -1/+1 |
* | Store ipset storage method and matches in state file, keep iprange and ports ... | Jo-Philipp Wich | 2013-04-30 | 1 | -0/+8 |
* | Add common fw3_address_to_string() helper function | Jo-Philipp Wich | 2013-04-30 | 1 | -0/+3 |
* | Remove referenced to unused FW3_FLAG_DELETED flag | Jo-Philipp Wich | 2013-04-30 | 1 | -1/+0 |
* | Split runtime and config states, store runtime state in UCI format | Jo-Philipp Wich | 2013-04-30 | 1 | -9/+0 |
* | Add support for fwmark matches and targets | Jo-Philipp Wich | 2013-04-09 | 1 | -11/+26 |
* | Properly handle deleted zones and ipsets on restarts | Jo-Philipp Wich | 2013-03-19 | 1 | -0/+1 |
* | Rework option parsing to support emitting multiple values from within a parse... | Jo-Philipp Wich | 2013-03-19 | 1 | -26/+25 |
* | Implement support for "network" datatype and use it for masq_src / masq_dest | Jo-Philipp Wich | 2013-03-19 | 1 | -0/+1 |
* | Implement reload option for includes to decide whether includes should get re... | Jo-Philipp Wich | 2013-03-14 | 1 | -0/+2 |
* | Make nat reflection src address configurable by introducing a reflection_src ... | Jo-Philipp Wich | 2013-03-13 | 1 | -0/+8 |
* | Emit hotplug calls when flushing / creating zone chains | Jo-Philipp Wich | 2013-03-13 | 1 | -0/+1 |
* | Unify fw3_default and fw3_target enums | Jo-Philipp Wich | 2013-03-13 | 1 | -30/+26 |
* | Track used networks and devices in state file | Jo-Philipp Wich | 2013-03-12 | 1 | -0/+4 |
* | Rework zone flush logic | Jo-Philipp Wich | 2013-03-11 | 1 | -12/+8 |
* | Remove src_flags and running_src_flags from fw3_zone struct, rename dst_flags... | Jo-Philipp Wich | 2013-03-10 | 1 | -5/+2 |
* | Introduce new enum values for zone src policies and map src policy to dst_fla... | Jo-Philipp Wich | 2013-03-10 | 1 | -6/+9 |
* | Separate running from current state flags in ipset handling, remove ipsets pe... | Jo-Philipp Wich | 2013-03-10 | 1 | -0/+1 |
* | Get rid of redundant fw3_defaults object, instead add a running_flags bitfiel... | Jo-Philipp Wich | 2013-03-10 | 1 | -1/+1 |
* | Properly handle per zone user chain rules by fixing multiple logic errors | Jo-Philipp Wich | 2013-03-10 | 1 | -10/+14 |
* | add support for per-zone user chains | Jo-Philipp Wich | 2013-03-08 | 1 | -7/+8 |
* | introduce support for enabled option in zones, forwards, rules, redirects, ip... | Jo-Philipp Wich | 2013-03-02 | 1 | -0/+6 |