aboutsummaryrefslogtreecommitdiffstats
path: root/package/firewall/files/reflection.hotplug
Commit message (Collapse)AuthorAgeFilesLines
* [package] firewall: also set up nat reflection rules for redirects with ↵Jo-Philipp Wich2012-07-091-1/+2
| | | | | | proto all and/or no src_dport set git-svn-id: svn://svn.openwrt.org/openwrt/trunk@32652 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [packages] firewall: fix nat reflection after netifd status format changeJo-Philipp Wich2012-05-281-47/+9
| | | | | | | - use /lib/functions/network.sh - simplify nat reflection code git-svn-id: svn://svn.openwrt.org/openwrt/trunk@31936 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: rework interface address determination to skip ipv6 ↵Jo-Philipp Wich2012-05-161-9/+19
| | | | | | addresses git-svn-id: svn://svn.openwrt.org/openwrt/trunk@31755 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: fix nat reflection after netifd switch (#11460)Jo-Philipp Wich2012-05-161-3/+33
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@31754 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: further tune ICMPv6 default rules according to RFC4890 ↵Jo-Philipp Wich2011-08-141-1/+1
| | | | | | (#9893) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27979 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: fix port range quirk in previous commitJo-Philipp Wich2011-07-011-2/+2
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27335 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: properly handle negated ports in nat reflectionJo-Philipp Wich2011-07-011-4/+12
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27334 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall:Jo-Philipp Wich2011-06-301-0/+1
| | | | | | | | | | | | | - allow multiple ports, protocols, macs, icmp types per rule - implement "limit" and "limit_burst" options for rules - implement "extra" option to rules and redirects for passing arbritary flags to iptables - implement negations for "src_port", "dest_port", "src_dport", "src_mac", "proto" and "icmp_type" options - allow wildcard (*) "src" and "dest" options in rules to allow specifying "any" source or destination - validate symbolic icmp-type names against the selected iptables binary - properly handle forwarded ICMPv6 traffic in the default configuration git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27317 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: also establish forward rules when setting up nat ↵Jo-Philipp Wich2010-10-031-6/+15
| | | | | | reflection, back out early if reflection is disabled git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23201 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: don't setup nat reflection if negations are usedJo-Philipp Wich2010-09-281-0/+3
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23142 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: introduce SNAT support for redirect sectionsJo-Philipp Wich2010-09-051-1/+4
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22937 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: add option to disable NAT reflectionJo-Philipp Wich2010-09-041-0/+4
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22908 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall:Jo-Philipp Wich2010-09-041-1/+1
| | | | | | | | - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22888 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firwall: fix nat reflection for zones covering multiple networksJo-Philipp Wich2010-07-311-34/+56
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22442 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] firewall: add basic NAT reflection/NAT loopback supportJo-Philipp Wich2010-07-311-0/+79
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22441 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-07 11:09:41 +0000