index
:
delta/openwrt/firewall3.git
master
git.openwrt.org: project/firewall3.git
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
zones.c
Commit message (
Expand
)
Author
Age
Files
Lines
*
zone: avoid duplicates in devices list
Tony Ambardar
2021-03-23
1
-1
/
+8
*
zones: apply tcp mss clamping also on ingress path
Yousong Zhou
2020-07-25
1
-0
/
+8
*
treewide: replace unsafe string functions
Jo-Philipp Wich
2020-06-03
1
-25
/
+54
*
improve reload logic
Jo-Philipp Wich
2020-06-02
1
-9
/
+16
*
zones: fix emitting match rules for zones with only "extra" options
Jo-Philipp Wich
2019-11-22
1
-1
/
+1
*
zones: add zone identifying local traffic in raw OUTPUT chain
Hans Dedecker
2019-01-02
1
-5
/
+9
*
zones: add interface/subnet bound LOG rules
Jo-Philipp Wich
2018-05-19
1
-37
/
+32
*
Reword rule comments
Jo-Philipp Wich
2018-03-13
1
-4
/
+4
*
zones: allow per-table log control
Stijn Tintel
2018-02-26
1
-3
/
+8
*
helpers: implement explicit CT helper assignment support
Jo-Philipp Wich
2018-02-20
1
-2
/
+67
*
zones: disable masq when resolving of all masq_src or masq_dest items failed
Jo-Philipp Wich
2018-02-13
1
-1
/
+33
*
firewall3: check the return value of fw3_parse_options()
Pierre Lebleu
2017-05-09
1
-1
/
+2
*
zones: drop outgoing invalid traffic in masqueraded zones
Jo-Philipp Wich
2017-04-27
1
-0
/
+12
*
zones: do not check conntrack state in zone_*_dest_ACCEPT chains
Jo-Philipp Wich
2017-01-13
1
-5
/
+0
*
global: remove automatic notrack rules
Jo-Philipp Wich
2016-11-29
1
-15
/
+0
*
zones: properly handle multiple masq_src / masq_dest negations (FS#248)
Jo-Philipp Wich
2016-11-01
1
-7
/
+59
*
utils.h: Avoid name clashes for setbit/delbit/hasbit
Florian Fainelli
2016-09-18
1
-13
/
+13
*
zones: allow untracked traffic as well
Jo-Philipp Wich
2016-08-08
1
-2
/
+4
*
zones: restrict default ACCEPT rules to NEW ctstate
Jo-Philipp Wich
2016-08-08
1
-0
/
+8
*
treewide: replace jow@openwrt.org with jo@mein.io
Jo-Philipp Wich
2016-06-07
1
-1
/
+1
*
Use xt_id match to track own rules
Jo-Philipp Wich
2016-01-24
1
-10
/
+10
*
redirects: respect src_dip option for reflection rules
Jo-Philipp Wich
2015-01-08
1
-10
/
+23
*
Selectively flush conntrack
Jo-Philipp Wich
2014-08-11
1
-0
/
+4
*
zones: make forward policy destination bound
Jo-Philipp Wich
2014-07-21
1
-3
/
+3
*
make fw3_ubus_address take a list_head * argument instead of allocating & ret...
Felix Fietkau
2014-06-30
1
-15
/
+2
*
use calloc instead of malloc+memset
Felix Fietkau
2014-06-30
1
-7
/
+2
*
Clean up dead code
Jo-Philipp Wich
2013-11-18
1
-0
/
+2
*
Use a global -m conntrack --ctstate DNAT rule to accept all port forwards of ...
Jo-Philipp Wich
2013-11-07
1
-0
/
+13
*
Improve ubus support
Steven Barth
2013-10-23
1
-0
/
+2
*
Use fw3_ipt_rule_replace() when setting up zone interface rules
Jo-Philipp Wich
2013-10-10
1
-10
/
+10
*
Reorganize chain layout for raw/NOTRACK rules to fix support for custom rules...
Jo-Philipp Wich
2013-08-14
1
-5
/
+15
*
Keep all basic chains on reload and only flush them, this allows user rules t...
Jo-Philipp Wich
2013-06-06
1
-1
/
+7
*
Fix wrong chain emitted for zone forward policy, the terminal chain is source...
Jo-Philipp Wich
2013-06-04
1
-3
/
+3
*
Replace fw3_free_zone() with the generic implementation
Jo-Philipp Wich
2013-05-26
1
-20
/
+0
*
Add fw3_resolve_zone_addresses() helper to obtain a list of all subnets cover...
Jo-Philipp Wich
2013-05-26
1
-0
/
+45
*
Limit zone names to 14 bytes
Jo-Philipp Wich
2013-05-22
1
-0
/
+8
*
Further fixes for zone reloads
Jo-Philipp Wich
2013-05-22
1
-1
/
+4
*
Rename struct fw3_rule_spec to struct fw3_chain_spec and move the declaration...
Jo-Philipp Wich
2013-05-17
1
-3
/
+3
*
Drop iptables-restore and create rules through libiptc and libxtables
Jo-Philipp Wich
2013-05-17
1
-155
/
+213
*
Use libiptc to clear current ruleset
Jo-Philipp Wich
2013-05-13
1
-12
/
+22
*
Record device-network relation in state file, fix zone hotplug events
Jo-Philipp Wich
2013-05-02
1
-20
/
+7
*
Remove referenced to unused FW3_FLAG_DELETED flag
Jo-Philipp Wich
2013-04-30
1
-4
/
+2
*
Remove unused "running" argument form fw3_lookup_zone()
Jo-Philipp Wich
2013-04-30
1
-1
/
+1
*
Split runtime and config states, store runtime state in UCI format
Jo-Philipp Wich
2013-04-30
1
-14
/
+10
*
Properly handle deleted zones and ipsets on restarts
Jo-Philipp Wich
2013-03-19
1
-2
/
+4
*
Accept network names in per-zone subnet option
Jo-Philipp Wich
2013-03-19
1
-2
/
+2
*
Implement support for "network" datatype and use it for masq_src / masq_dest
Jo-Philipp Wich
2013-03-19
1
-4
/
+8
*
Do not accept option src_mac for SNAT rules
Jo-Philipp Wich
2013-03-18
1
-1
/
+1
*
Consolidate and unify argument order for functions
Jo-Philipp Wich
2013-03-14
1
-22
/
+22
*
Emit hotplug calls when flushing / creating zone chains
Jo-Philipp Wich
2013-03-13
1
-0
/
+54
[next]