projects / oweals / firewall3.git / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
oweals/firewall3.git
2014-09-19 Jo-Philipp... options: allow '*' as value for protocols and families commit | commitdiff | tree | snapshot
2014-09-18 Jo-Philipp... utils: rework fw3_bitlen2netmask() IPv6 mask calculation commit | commitdiff | tree | snapshot
2014-09-17 Jo-Philipp... redirect: emit -j REDIRECT rules for local port forwards commit | commitdiff | tree | snapshot
2014-09-17 Jo-Philipp... utils: fix invalid memory access in fw3_bitlen2netmask() commit | commitdiff | tree | snapshot
2014-08-11 Jo-Philipp... utils: ifa_addr may be NULL, skip such entries commit | commitdiff | tree | snapshot
2014-08-11 Jo-Philipp... Selectively flush conntrack commit | commitdiff | tree | snapshot
2014-07-21 Jo-Philipp... zones: make forward policy destination bound commit | commitdiff | tree | snapshot
2014-07-19 Jo-Philipp... options: fix logic flaw when parsing ipaddr/mask notation commit | commitdiff | tree | snapshot
2014-07-19 Jo-Philipp... Use netmasks instead of prefix lengths internally commit | commitdiff | tree | snapshot
2014-07-10 Jo-Philipp... ubus: handle attribute access after NULL check in parse... commit | commitdiff | tree | snapshot
2014-07-10 Jo-Philipp... ubus: fix fw3_ubus_address() commit | commitdiff | tree | snapshot
2014-07-10 Jo-Philipp... ubus: fix fw3_ubus_device() to only return a pointer... commit | commitdiff | tree | snapshot
2014-07-03 Jo-Philipp... options: fix fw3_parse_network() when destination point... commit | commitdiff | tree | snapshot
2014-07-02 Felix Fietkauubus: add support for fetching firewall rules from... commit | commitdiff | tree | snapshot
2014-06-30 Felix Fietkauubus: use blobmsg_parse to validate device attributes... commit | commitdiff | tree | snapshot
2014-06-30 Felix Fietkaumake fw3_ubus_address take a list_head * argument inste... commit | commitdiff | tree | snapshot
2014-06-30 Felix Fietkauuse calloc instead of malloc+memset commit | commitdiff | tree | snapshot
2014-06-30 Felix Fietkauubus: use blobmsg_parse to validate data from network... commit | commitdiff | tree | snapshot
2014-06-26 Steven BarthAdd fw3 zone call to list devices in a zone commit | commitdiff | tree | snapshot
2014-04-14 Steven BarthAdd support for netifd-generated rules commit | commitdiff | tree | snapshot
2014-04-14 Steven BarthAdd support for device and direction parameters commit | commitdiff | tree | snapshot
2014-04-14 Steven Barthsnat: add support for connlimiting port-range SNAT commit | commitdiff | tree | snapshot
2014-04-14 Steven BarthFix building with newer toolchains commit | commitdiff | tree | snapshot
2014-04-14 Steven Barthsnat: ICMP can be port-natted as well commit | commitdiff | tree | snapshot
2014-04-14 Steven Barthnat: allow ACCEPT-target to explicitely disable NAT commit | commitdiff | tree | snapshot
2014-04-11 Jo-Philipp... Reapply SNAT/MASQUERADE rules on firewall reloads commit | commitdiff | tree | snapshot
2014-04-06 Jo-Philipp... Initial support for "config nat" rules - this allows... commit | commitdiff | tree | snapshot
2014-03-20 Felix Fietkauutils: define _GNU_SOURCE to get clearenv() commit | commitdiff | tree | snapshot
2014-02-21 Jo-Philipp... Several ipset bugfixes commit | commitdiff | tree | snapshot
2013-12-17 Jo-Philipp... Change set_default() to take value as integer, required... commit | commitdiff | tree | snapshot
2013-12-17 Jo-Philipp... Treat option tcp_ecn as integer, not bool commit | commitdiff | tree | snapshot
2013-12-17 Jo-Philipp... Properly check strtol() results when paring values... commit | commitdiff | tree | snapshot
2013-11-18 Jo-Philipp... Clean up dead code commit | commitdiff | tree | snapshot
2013-11-18 Jo-Philipp... Skip redirects with invalid options commit | commitdiff | tree | snapshot
2013-11-18 Jo-Philipp... Skip rules with invalid options commit | commitdiff | tree | snapshot
2013-11-18 Jo-Philipp... Change fw3_parse_options() to indicate whether all... commit | commitdiff | tree | snapshot
2013-11-07 Jo-Philipp... Use a global -m conntrack --ctstate DNAT rule to accept... commit | commitdiff | tree | snapshot
2013-10-23 Steven BarthImprove ubus support commit | commitdiff | tree | snapshot
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up zone interfa... commit | commitdiff | tree | snapshot
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up reflection commit | commitdiff | tree | snapshot
2013-10-10 Jo-Philipp... Allow any protocol for reflection rules commit | commitdiff | tree | snapshot
2013-08-14 Jo-Philipp... Reorganize chain layout for raw/NOTRACK rules to fix... commit | commitdiff | tree | snapshot
2013-08-14 Jo-Philipp... Use "-j CT --notrack" instead of deprecated "-j NOTRACK" commit | commitdiff | tree | snapshot
2013-08-14 Jo-Philipp... Revert "Make sure that NOTRACK is linked into firewall3... commit | commitdiff | tree | snapshot
2013-08-14 Jo-Philipp... Make sure that NOTRACK is linked into firewall3 if... commit | commitdiff | tree | snapshot
2013-07-16 Jo-Philipp... Treat redirects as port redirections if the specified... commit | commitdiff | tree | snapshot
2013-06-29 Jo-Philipp... Properly dereference struct ether_addr commit | commitdiff | tree | snapshot
2013-06-29 Jo-Philipp... Do not rely on ether_ntoa() when formatting mac addresses. commit | commitdiff | tree | snapshot
2013-06-18 Jo-Philipp... Don't mistreat unknown protocol names as "any protocol" commit | commitdiff | tree | snapshot
2013-06-18 Jo-Philipp... Fix processing of CIDRs with mask 0 commit | commitdiff | tree | snapshot
2013-06-13 Jo-Philipp... Fix processing of negated options commit | commitdiff | tree | snapshot
2013-06-13 Jo-Philipp... Properly handle reject target in rules with specific... commit | commitdiff | tree | snapshot
2013-06-06 Jo-Philipp... Keep all basic chains on reload and only flush them... commit | commitdiff | tree | snapshot
2013-06-06 Jo-Philipp... Fix endian issue in compare_addr(), solves auto detecti... commit | commitdiff | tree | snapshot
2013-06-06 Jo-Philipp... For ingress rules, only jump into zone_name_src_ACTION... commit | commitdiff | tree | snapshot
2013-06-06 Jo-Philipp... Implement limit and limit_burst options for rules. commit | commitdiff | tree | snapshot
2013-06-05 Jo-Philipp... Use zone_name_src_ACTION chain for input rules with... commit | commitdiff | tree | snapshot
2013-06-05 Jo-Philipp... Extend ipset option syntax to support specifying direct... commit | commitdiff | tree | snapshot
2013-06-04 Jo-Philipp... Fix wrong signature of fw3_xt_print_matches() commit | commitdiff | tree | snapshot
2013-06-04 Jo-Philipp... Add abstract fw3_xt_print_matches() and fw3_xt_print_ta... commit | commitdiff | tree | snapshot
2013-06-04 Jo-Philipp... Fix wrong chain emitted for zone forward policy, the... commit | commitdiff | tree | snapshot
2013-06-03 Jo-Philipp... Decouple handle destroying from committing, add fw3_ipt... commit | commitdiff | tree | snapshot
2013-06-03 Jo-Philipp... Do not let libxtables implicitely load extensions,... commit | commitdiff | tree | snapshot
2013-05-27 Jo-Philipp... Make IPv6 support optional commit | commitdiff | tree | snapshot
2013-05-27 Jo-Philipp... Add abstract fw3_xt_reset() implementation commit | commitdiff | tree | snapshot
2013-05-27 Jo-Philipp... Dynamically create rules for available libext*.a librar... commit | commitdiff | tree | snapshot
2013-05-27 Jo-Philipp... Fix compatibility with older libiptc/libip6tc commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Only emit different ip family warnings if the ip wasn... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Mark fw3_address objects that got resolved by fw3_parse... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Change wording of inferred destination warning for... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Replace fw3_free_zone() with the generic implementation commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Avoid segfault when freeing rules whose target could... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Infer destination zone of DNAT redirects from dest_ip... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Add fw3_resolve_zone_addresses() helper to obtain a... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Remove fw3_ubus_address_free() and use fw3_free_list... commit | commitdiff | tree | snapshot
2013-05-26 Jo-Philipp... Add fw3_free_list() helper commit | commitdiff | tree | snapshot
2013-05-25 Jo-Philipp... Fix output rules with "option dest *" commit | commitdiff | tree | snapshot
2013-05-25 Jo-Philipp... Allow devices for src_ip, src_dip and dest_ip options commit | commitdiff | tree | snapshot
2013-05-24 Jo-Philipp... Pass -Wl,--whole-archive and -Wl,--no-whole-archive... commit | commitdiff | tree | snapshot
2013-05-23 Jo-Philipp... Don't leak memory when encountering unknown match or... commit | commitdiff | tree | snapshot
2013-05-23 Jo-Philipp... Use weak function pointers to call extension init funct... commit | commitdiff | tree | snapshot
2013-05-22 Jo-Philipp... Limit zone names to 14 bytes commit | commitdiff | tree | snapshot
2013-05-22 Jo-Philipp... Add required ipset declarations for kernels < 3.7 commit | commitdiff | tree | snapshot
2013-05-22 Jo-Philipp... Further fixes for zone reloads commit | commitdiff | tree | snapshot
2013-05-22 Jo-Philipp... Only perform selective reload if firewall was already... commit | commitdiff | tree | snapshot
2013-05-21 Jo-Philipp... Fix another crash bug if ipsets are supported but none... commit | commitdiff | tree | snapshot
2013-05-21 Jo-Philipp... Fix rules for custom filter chains commit | commitdiff | tree | snapshot
2013-05-21 Jo-Philipp... Do not print to pipe or close command if nothing was... commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Add missing libip6t_REJECT initialization commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Only initialize extensions we actually use commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Wait for ipsets to appear before continuing commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Restore iptables-save include functionality commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Also add comments for unnamed rules commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Only process selected family for print commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Include iptables command and table name in iptables... commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Add debug prints for policy setting, don't commit rules... commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Rename struct fw3_rule_spec to struct fw3_chain_spec... commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Remove now unused fw3_pr_rulespec() commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Remove now unused fw3_format_*() functions commit | commitdiff | tree | snapshot
2013-05-17 Jo-Philipp... Drop iptables-restore and create rules through libiptc... commit | commitdiff | tree | snapshot
next
Unnamed repository; edit this file 'description' to name the repository.