aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/config/firewall3
Commit message (Collapse)AuthorAgeFilesLines
* firewall3: update to git headJo-Philipp Wich2013-03-221-2/+2
| | | | | | | * fixes parsing of src/dest '*' * fixes parsing of proto 'all' SVN-Revision: 36111
* firewall3: update to git headJo-Philipp Wich2013-03-211-2/+2
| | | | | | * fixes port remapping rules (#13217) SVN-Revision: 36100
* firewall3: update to git headJo-Philipp Wich2013-03-191-2/+2
| | | | | | * fixes reload handling of zones and ipsets that are still running but already deleted from the config SVN-Revision: 36092
* firewall3: update to git headJo-Philipp Wich2013-03-191-2/+2
| | | | | | | - support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197) - do not allow src_mac option for SNAT rules SVN-Revision: 36090
* firewall3: update to git headJo-Philipp Wich2013-03-141-2/+2
| | | | | | | * Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains) * Allow "network" and "device" commands while firewall is running (to make them usable in includes) SVN-Revision: 36009
* firewall3: update to git headJo-Philipp Wich2013-03-133-3/+9
| | | | | | | | | | * Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd) * Make NAT reflection direction configurable * Map init script stop action to flush * Map init script reload action to reload * Respect init script disabled state in hotplug handler SVN-Revision: 35998
* firewall3: update to git headJo-Philipp Wich2013-03-112-2/+5
| | | | | | | | | | * Fixes compilation against eglibc * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall * Fixes tracking logic for user chains by differentiating between reloads and restarts * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule * Supports legacy "tcpudp" protocol notation again SVN-Revision: 35969
* Revert "firewall3: update to git head"Jo-Philipp Wich2013-03-082-5/+2
| | | | | | This reverts commit 89969fa333c90fdb217b7289272f3427add107de. SVN-Revision: 35904
* firewall3: update to git headJo-Philipp Wich2013-03-082-2/+5
| | | | | | | - introduce per-zone user chains - support legacy "tcpudp" protocol notation SVN-Revision: 35903
* firewall3: add default config and firewall.userJo-Philipp Wich2013-03-053-0/+208
| | | | SVN-Revision: 35889
* firewall3: update to git head, introduces support for "enabled" optionJo-Philipp Wich2013-03-021-2/+2
| | | | SVN-Revision: 35845
* firewall3: clear contnrack table on flush, set policies to drop during rule ↵Jo-Philipp Wich2013-02-271-2/+2
| | | | | | reload SVN-Revision: 35820
* firewall3: add support for shell script and iptables-restore style includesJo-Philipp Wich2013-02-222-4/+4
| | | | SVN-Revision: 35744
* firewall3: update to git headJo-Philipp Wich2013-02-212-2/+6
| | | | | | | | | - all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact - properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions - support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100') - support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6') SVN-Revision: 35738
* firewall3 - a C implementation of the current firewall scriptsJo-Philipp Wich2013-02-173-0/+70
SVN-Revision: 35643