| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
SVN-Revision: 36903
|
|
|
|
| |
SVN-Revision: 36884
|
|
|
|
|
|
|
|
| |
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
|
|
|
|
|
|
|
|
|
| |
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
|
|
|
|
|
|
| |
solves problem with colliding CONFIG_IPV6 symbols
SVN-Revision: 36868
|
|
|
|
|
|
|
| |
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
|
|
|
|
| |
SVN-Revision: 36840
|
|
|
|
| |
SVN-Revision: 36839
|
|
|
|
|
|
| |
head with compatibility fixes for AA
SVN-Revision: 36838
|
|
|
|
| |
SVN-Revision: 36837
|
|
|
|
|
|
| |
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
|
|
|
|
|
|
| |
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
|
|
|
|
|
|
| |
add_list" coercing the value wrongly
SVN-Revision: 36806
|
|
|
|
|
|
| |
Various bugfixes
SVN-Revision: 36771
|
|
|
|
| |
SVN-Revision: 36748
|
|
|
|
|
|
|
|
|
| |
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
|
|
|
|
|
|
|
|
|
| |
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
|
|
|
|
|
|
| |
- fixes linking issues with some toolchains
SVN-Revision: 36703
|
|
|
|
|
|
|
| |
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
|
|
|
|
| |
SVN-Revision: 36692
|
|
|
|
|
|
|
| |
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
|
|
|
|
|
|
|
|
| |
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
|
|
|
|
|
|
|
| |
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
|
|
|
|
| |
SVN-Revision: 36684
|
|
|
|
|
|
|
| |
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
|
|
|
|
|
|
|
|
| |
option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
|
|
|
|
|
|
| |
(DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
SVN-Revision: 36627
|
|
|
|
| |
SVN-Revision: 36626
|
|
|
|
| |
SVN-Revision: 36624
|
|
|
|
| |
SVN-Revision: 36623
|
|
|
|
| |
SVN-Revision: 36622
|
|
|
|
|
|
|
| |
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
- add support for fwmark matches and mark setting targets
SVN-Revision: 36521
|
|
|
|
| |
SVN-Revision: 36463
|
|
|
|
|
|
| |
removing the ifname option
SVN-Revision: 36424
|
|
|
|
|
|
| |
This fixes working behind another router which gives out ULAs.
SVN-Revision: 36416
|
|
|
|
| |
SVN-Revision: 36383
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36336
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36294
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36284
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36282
|
|
|
|
| |
SVN-Revision: 36281
|
|
|
|
| |
SVN-Revision: 36280
|
|
|
|
|
|
| |
prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
SVN-Revision: 36196
|
|
|
|
|
|
| |
assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
SVN-Revision: 36193
|
|
|
|
|
|
|
| |
* fixes parsing of src/dest '*'
* fixes parsing of proto 'all'
SVN-Revision: 36111
|
|
|
|
|
|
| |
* fixes port remapping rules (#13217)
SVN-Revision: 36100
|
|
|
|
|
|
| |
In some cases IPv6 DNS-servers were not added correctly.
SVN-Revision: 36095
|
|
|
|
|
|
| |
* fixes reload handling of zones and ipsets that are still running but already deleted from the config
SVN-Revision: 36092
|
|
|
|
|
|
|
| |
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
|
|
|
|
|
|
|
| |
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
|