| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
| |
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
|
|
|
|
|
|
|
| |
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
|
|
|
|
|
|
|
|
|
|
| |
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
|
|
|
|
|
|
|
|
|
|
| |
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
|
|
|
|
|
|
| |
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
|
|
|
|
|
|
|
| |
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
|
|
|
|
| |
SVN-Revision: 35889
|
|
|
|
| |
SVN-Revision: 35845
|
|
|
|
|
|
| |
reload
SVN-Revision: 35820
|
|
|
|
| |
SVN-Revision: 35745
|
|
|
|
| |
SVN-Revision: 35744
|
|
|
|
|
|
| |
certain conditions.
SVN-Revision: 35743
|
|
|
|
|
|
|
|
|
| |
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
|
|
|
|
| |
SVN-Revision: 35643
|
|
|
|
|
|
|
|
|
|
|
|
| |
- reduce mssfix related log spam (#10681)
- separate src and dest terminal chains (#11453, #12945)
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
|
|
|
|
|
|
| |
support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
|
|
|
|
|
|
|
| |
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)
SVN-Revision: 35383
|
|
|
|
| |
SVN-Revision: 35377
|
|
|
|
| |
SVN-Revision: 35369
|
|
|
|
|
|
| |
interfaces
SVN-Revision: 35362
|
|
|
|
| |
SVN-Revision: 35348
|
|
|
|
| |
SVN-Revision: 35347
|
|
|
|
| |
SVN-Revision: 35346
|
|
|
|
| |
SVN-Revision: 35297
|
|
|
|
| |
SVN-Revision: 35296
|
|
|
|
| |
SVN-Revision: 35259
|
|
|
|
| |
SVN-Revision: 35251
|
|
|
|
|
|
| |
increasing the wait time to five seconds
SVN-Revision: 35240
|
|
|
|
|
|
| |
protocol alias
SVN-Revision: 35187
|
|
|
|
| |
SVN-Revision: 35167
|
|
|
|
| |
SVN-Revision: 35140
|
|
|
|
|
|
| |
from leaking out to the internet
SVN-Revision: 35012
|
|
|
|
|
|
| |
proto handlers
SVN-Revision: 34741
|
|
|
|
|
|
| |
shell function
SVN-Revision: 34734
|
|
|
|
|
|
|
|
|
| |
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34704
|
|
|
|
| |
SVN-Revision: 34694
|
|
|
|
|
|
| |
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34679
|
|
|
|
|
|
| |
after ifdown
SVN-Revision: 34664
|
|
|
|
| |
SVN-Revision: 34569
|
|
|
|
|
|
| |
setting changes
SVN-Revision: 34500
|
|
|
|
|
|
|
|
| |
- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down
SVN-Revision: 34472
|
|
|
|
|
|
| |
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>
SVN-Revision: 34468
|
|
|
|
| |
SVN-Revision: 34465
|
|
|
|
| |
SVN-Revision: 34418
|
|
|
|
|
|
|
|
| |
AF_INET* is provided by sys/socket.h
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34310
|
|
|
|
|
|
| |
clientid uci option is given (#12426)
SVN-Revision: 34089
|
|
|
|
|
|
|
|
| |
for an interface that is already up
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 34006
|
|
|
|
| |
SVN-Revision: 33901
|
|
|
|
|
|
|
|
|
| |
introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!
SVN-Revision: 33861
|
|
|
|
|
|
| |
issues when assigning a device to a different bridge
SVN-Revision: 33858
|