projects
/
oweals
/
firewall3.git
/ shortlog
commit
grep
author
committer
pickaxe
?
search:
re
summary
| shortlog |
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
oweals/firewall3.git
2016-11-04
Ralph Sennhauser
iptables: add support for version 1.6.0
commit
|
commitdiff
|
tree
|
snapshot
2016-11-01
Jo-Philipp...
zones: properly handle multiple masq_src / masq_dest...
commit
|
commitdiff
|
tree
|
snapshot
2016-11-01
Jo-Philipp...
iptables: use different approach for managing loadable...
commit
|
commitdiff
|
tree
|
snapshot
2016-09-18
Florian Fainelli
utils.h: Avoid name clashes for setbit/delbit/hasbit
commit
|
commitdiff
|
tree
|
snapshot
2016-08-08
Jo-Philipp...
zones: allow untracked traffic as well
commit
|
commitdiff
|
tree
|
snapshot
2016-08-08
Jo-Philipp...
defaults: disable drop_invalid by default
commit
|
commitdiff
|
tree
|
snapshot
2016-08-08
Jo-Philipp...
zones: restrict default ACCEPT rules to NEW ctstate
commit
|
commitdiff
|
tree
|
snapshot
2016-07-24
Florian Fainelli
cmake: Find uci.h
commit
|
commitdiff
|
tree
|
snapshot
2016-06-07
Jo-Philipp...
treewide: replace jow@openwrt.org with jo@mein.io
commit
|
commitdiff
|
tree
|
snapshot
2016-05-02
Alin Năstac
load running state after lock is acquired
commit
|
commitdiff
|
tree
|
snapshot
2016-04-28
Daniel Golle
set mark for locally generated traffic in OUTPUT chain
commit
|
commitdiff
|
tree
|
snapshot
2016-04-27
Alexandru Ardelean
defaults.c: remove toplevel_rule struct
commit
|
commitdiff
|
tree
|
snapshot
2016-01-29
Jo-Philipp...
defaults: emit ctstate INVALID drop rules by default
commit
|
commitdiff
|
tree
|
snapshot
2016-01-29
Len White
iptables: fix inversion flags
commit
|
commitdiff
|
tree
|
snapshot
2016-01-24
Jo-Philipp...
Remove commented code
commit
|
commitdiff
|
tree
|
snapshot
2016-01-24
Jo-Philipp...
Use xt_id match to track own rules
commit
|
commitdiff
|
tree
|
snapshot
2015-05-26
Jo-Philipp...
redirects: only emit REDIRECT rules if dest_ip is unset
commit
|
commitdiff
|
tree
|
snapshot
2015-05-26
Jo-Philipp...
Rework match initialization
commit
|
commitdiff
|
tree
|
snapshot
2015-05-26
Jo-Philipp...
Link libext dynamically
commit
|
commitdiff
|
tree
|
snapshot
2015-05-22
Jo-Philipp...
iptables: initialize multiport match
commit
|
commitdiff
|
tree
|
snapshot
2015-05-21
Jo-Philipp...
ubus: allow proto handlers to override device in announ...
commit
|
commitdiff
|
tree
|
snapshot
2015-04-18
Jo-Philipp...
ubus: print rule name when reporting errors
commit
|
commitdiff
|
tree
|
snapshot
2015-04-18
Jo-Philipp...
ubus: store rule origin as comment
commit
|
commitdiff
|
tree
|
snapshot
2015-02-26
Hans Dedecker
firewall3: fix null pointer access when no target is...
commit
|
commitdiff
|
tree
|
snapshot
2015-01-13
Jo-Philipp...
redirects: fix possible null pointer access
commit
|
commitdiff
|
tree
|
snapshot
2015-01-08
Ulrich Weber
firewall3: fix left shift on 64 bit systems in fw3_bitl...
commit
|
commitdiff
|
tree
|
snapshot
2015-01-08
Jo-Philipp...
redirects: respect src_dip option for reflection rules
commit
|
commitdiff
|
tree
|
snapshot
2014-09-19
Jo-Philipp...
options: allow '*' as value for protocols and families
commit
|
commitdiff
|
tree
|
snapshot
2014-09-18
Jo-Philipp...
utils: rework fw3_bitlen2netmask() IPv6 mask calculation
commit
|
commitdiff
|
tree
|
snapshot
2014-09-17
Jo-Philipp...
redirect: emit -j REDIRECT rules for local port forwards
commit
|
commitdiff
|
tree
|
snapshot
2014-09-17
Jo-Philipp...
utils: fix invalid memory access in fw3_bitlen2netmask()
commit
|
commitdiff
|
tree
|
snapshot
2014-08-11
Jo-Philipp...
utils: ifa_addr may be NULL, skip such entries
commit
|
commitdiff
|
tree
|
snapshot
2014-08-11
Jo-Philipp...
Selectively flush conntrack
commit
|
commitdiff
|
tree
|
snapshot
2014-07-21
Jo-Philipp...
zones: make forward policy destination bound
commit
|
commitdiff
|
tree
|
snapshot
2014-07-19
Jo-Philipp...
options: fix logic flaw when parsing ipaddr/mask notation
commit
|
commitdiff
|
tree
|
snapshot
2014-07-19
Jo-Philipp...
Use netmasks instead of prefix lengths internally
commit
|
commitdiff
|
tree
|
snapshot
2014-07-10
Jo-Philipp...
ubus: handle attribute access after NULL check in parse...
commit
|
commitdiff
|
tree
|
snapshot
2014-07-10
Jo-Philipp...
ubus: fix fw3_ubus_address()
commit
|
commitdiff
|
tree
|
snapshot
2014-07-10
Jo-Philipp...
ubus: fix fw3_ubus_device() to only return a pointer...
commit
|
commitdiff
|
tree
|
snapshot
2014-07-03
Jo-Philipp...
options: fix fw3_parse_network() when destination point...
commit
|
commitdiff
|
tree
|
snapshot
2014-07-02
Felix Fietkau
ubus: add support for fetching firewall rules from...
commit
|
commitdiff
|
tree
|
snapshot
2014-06-30
Felix Fietkau
ubus: use blobmsg_parse to validate device attributes...
commit
|
commitdiff
|
tree
|
snapshot
2014-06-30
Felix Fietkau
make fw3_ubus_address take a list_head * argument inste...
commit
|
commitdiff
|
tree
|
snapshot
2014-06-30
Felix Fietkau
use calloc instead of malloc+memset
commit
|
commitdiff
|
tree
|
snapshot
2014-06-30
Felix Fietkau
ubus: use blobmsg_parse to validate data from network...
commit
|
commitdiff
|
tree
|
snapshot
2014-06-26
Steven Barth
Add fw3 zone call to list devices in a zone
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
Add support for netifd-generated rules
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
Add support for device and direction parameters
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
snat: add support for connlimiting port-range SNAT
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
Fix building with newer toolchains
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
snat: ICMP can be port-natted as well
commit
|
commitdiff
|
tree
|
snapshot
2014-04-14
Steven Barth
nat: allow ACCEPT-target to explicitely disable NAT
commit
|
commitdiff
|
tree
|
snapshot
2014-04-11
Jo-Philipp...
Reapply SNAT/MASQUERADE rules on firewall reloads
commit
|
commitdiff
|
tree
|
snapshot
2014-04-06
Jo-Philipp...
Initial support for "config nat" rules - this allows...
commit
|
commitdiff
|
tree
|
snapshot
2014-03-20
Felix Fietkau
utils: define _GNU_SOURCE to get clearenv()
commit
|
commitdiff
|
tree
|
snapshot
2014-02-21
Jo-Philipp...
Several ipset bugfixes
commit
|
commitdiff
|
tree
|
snapshot
2013-12-17
Jo-Philipp...
Change set_default() to take value as integer, required...
commit
|
commitdiff
|
tree
|
snapshot
2013-12-17
Jo-Philipp...
Treat option tcp_ecn as integer, not bool
commit
|
commitdiff
|
tree
|
snapshot
2013-12-17
Jo-Philipp...
Properly check strtol() results when paring values...
commit
|
commitdiff
|
tree
|
snapshot
2013-11-18
Jo-Philipp...
Clean up dead code
commit
|
commitdiff
|
tree
|
snapshot
2013-11-18
Jo-Philipp...
Skip redirects with invalid options
commit
|
commitdiff
|
tree
|
snapshot
2013-11-18
Jo-Philipp...
Skip rules with invalid options
commit
|
commitdiff
|
tree
|
snapshot
2013-11-18
Jo-Philipp...
Change fw3_parse_options() to indicate whether all...
commit
|
commitdiff
|
tree
|
snapshot
2013-11-07
Jo-Philipp...
Use a global -m conntrack --ctstate DNAT rule to accept...
commit
|
commitdiff
|
tree
|
snapshot
2013-10-23
Steven Barth
Improve ubus support
commit
|
commitdiff
|
tree
|
snapshot
2013-10-10
Jo-Philipp...
Use fw3_ipt_rule_replace() when setting up zone interfa...
commit
|
commitdiff
|
tree
|
snapshot
2013-10-10
Jo-Philipp...
Use fw3_ipt_rule_replace() when setting up reflection
commit
|
commitdiff
|
tree
|
snapshot
2013-10-10
Jo-Philipp...
Allow any protocol for reflection rules
commit
|
commitdiff
|
tree
|
snapshot
2013-08-14
Jo-Philipp...
Reorganize chain layout for raw/NOTRACK rules to fix...
commit
|
commitdiff
|
tree
|
snapshot
2013-08-14
Jo-Philipp...
Use "-j CT --notrack" instead of deprecated "-j NOTRACK"
commit
|
commitdiff
|
tree
|
snapshot
2013-08-14
Jo-Philipp...
Revert "Make sure that NOTRACK is linked into firewall3...
commit
|
commitdiff
|
tree
|
snapshot
2013-08-14
Jo-Philipp...
Make sure that NOTRACK is linked into firewall3 if...
commit
|
commitdiff
|
tree
|
snapshot
2013-07-16
Jo-Philipp...
Treat redirects as port redirections if the specified...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-29
Jo-Philipp...
Properly dereference struct ether_addr
commit
|
commitdiff
|
tree
|
snapshot
2013-06-29
Jo-Philipp...
Do not rely on ether_ntoa() when formatting mac addresses.
commit
|
commitdiff
|
tree
|
snapshot
2013-06-18
Jo-Philipp...
Don't mistreat unknown protocol names as "any protocol"
commit
|
commitdiff
|
tree
|
snapshot
2013-06-18
Jo-Philipp...
Fix processing of CIDRs with mask 0
commit
|
commitdiff
|
tree
|
snapshot
2013-06-13
Jo-Philipp...
Fix processing of negated options
commit
|
commitdiff
|
tree
|
snapshot
2013-06-13
Jo-Philipp...
Properly handle reject target in rules with specific...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-06
Jo-Philipp...
Keep all basic chains on reload and only flush them...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-06
Jo-Philipp...
Fix endian issue in compare_addr(), solves auto detecti...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-06
Jo-Philipp...
For ingress rules, only jump into zone_name_src_ACTION...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-06
Jo-Philipp...
Implement limit and limit_burst options for rules.
commit
|
commitdiff
|
tree
|
snapshot
2013-06-05
Jo-Philipp...
Use zone_name_src_ACTION chain for input rules with...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-05
Jo-Philipp...
Extend ipset option syntax to support specifying direct...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-04
Jo-Philipp...
Fix wrong signature of fw3_xt_print_matches()
commit
|
commitdiff
|
tree
|
snapshot
2013-06-04
Jo-Philipp...
Add abstract fw3_xt_print_matches() and fw3_xt_print_ta...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-04
Jo-Philipp...
Fix wrong chain emitted for zone forward policy, the...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-03
Jo-Philipp...
Decouple handle destroying from committing, add fw3_ipt...
commit
|
commitdiff
|
tree
|
snapshot
2013-06-03
Jo-Philipp...
Do not let libxtables implicitely load extensions,...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-27
Jo-Philipp...
Make IPv6 support optional
commit
|
commitdiff
|
tree
|
snapshot
2013-05-27
Jo-Philipp...
Add abstract fw3_xt_reset() implementation
commit
|
commitdiff
|
tree
|
snapshot
2013-05-27
Jo-Philipp...
Dynamically create rules for available libext*.a librar...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-27
Jo-Philipp...
Fix compatibility with older libiptc/libip6tc
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Only emit different ip family warnings if the ip wasn...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Mark fw3_address objects that got resolved by fw3_parse...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Change wording of inferred destination warning for...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Replace fw3_free_zone() with the generic implementation
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Avoid segfault when freeing rules whose target could...
commit
|
commitdiff
|
tree
|
snapshot
2013-05-26
Jo-Philipp...
Infer destination zone of DNAT redirects from dest_ip...
commit
|
commitdiff
|
tree
|
snapshot
next