| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
implement "limit" and "limit_burst" options for rules - implement "extra" option to rules and redirects for passing arbritary flags to iptables - implement negations for "src_port", "dest_port", "src_dport", "src_mac", "proto" and "icmp_type" options - allow wildcard (*) "src" and "dest" options in rules to allow specifying "any" source or destination - validate symbolic icmp-type names against the selected iptables binary - properly handle forwarded ICMPv6 traffic in the default configuration
SVN-Revision: 27317
|
|
|
|
|
|
| |
confusing
SVN-Revision: 26961
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
passthrough Two examples of potentially useful configurations (commented out, of course):
(a) map the ssh service running on the firewall to 22001 externally, without modifying the configuration of the daemon itself. this allows port 22 on the WAN side to then be port-forwarded to a
LAN-based machine if desired, or if not, simply obscures the port from external attack.
(b) allow IPsec/ESP and ISAKMP (UDP-based key exchange) to happen by default. useful for most modern VPN clients you might have on your WAN.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
SVN-Revision: 26805
|
|
|
|
| |
SVN-Revision: 21509
|
|
|
|
| |
SVN-Revision: 21505
|
|
|
|
| |
SVN-Revision: 20261
|
|
|
|
| |
SVN-Revision: 17762
|
|
|
|
|
|
| |
#4781)
SVN-Revision: 17238
|
|
|
|
|
|
| |
firewall.user file
SVN-Revision: 15221
|
|
|
|
|
|
| |
http://lists.openwrt.org/pipermail/openwrt-devel/2009-January/003724.html for more information
SVN-Revision: 14293
|
|
|
|
|
|
| |
workaround for MTU problems, only some do). this should give a nice speedup for routing on standard-compliant ISPs
SVN-Revision: 13788
|
|
|
|
|
|
| |
the one of previous versions
SVN-Revision: 12766
|
|
|
|
|
|
| |
reject packets with approriate response (closes: #3970) - cleanup syn_flood and remove logging
SVN-Revision: 12688
|
|
|
|
| |
SVN-Revision: 12391
|
|
dependencies
SVN-Revision: 12284
|