| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
|
|
|
|
|
|
| |
solves problem with colliding CONFIG_IPV6 symbols
SVN-Revision: 36868
|
|
|
|
| |
SVN-Revision: 36867
|
|
|
|
|
|
|
| |
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
|
|
|
|
| |
SVN-Revision: 36840
|
|
|
|
| |
SVN-Revision: 36839
|
|
|
|
|
|
| |
head with compatibility fixes for AA
SVN-Revision: 36838
|
|
|
|
| |
SVN-Revision: 36837
|
|
|
|
|
|
| |
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
|
|
|
|
|
|
| |
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36817
|
|
|
|
|
|
| |
breaks Windows clients
SVN-Revision: 36815
|
|
|
|
| |
SVN-Revision: 36809
|
|
|
|
|
|
| |
add_list" coercing the value wrongly
SVN-Revision: 36806
|
|
|
|
| |
SVN-Revision: 36804
|
|
|
|
|
|
| |
"best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
SVN-Revision: 36772
|
|
|
|
|
|
| |
Various bugfixes
SVN-Revision: 36771
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36770
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36767
|
|
|
|
| |
SVN-Revision: 36764
|
|
|
|
| |
SVN-Revision: 36760
|
|
|
|
| |
SVN-Revision: 36748
|
|
|
|
| |
SVN-Revision: 36745
|
|
|
|
|
|
|
|
| |
tools to connect to APs via injection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36743
|
|
|
|
|
|
| |
using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
SVN-Revision: 36738
|
|
|
|
|
|
|
|
|
| |
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
|
|
|
|
|
|
|
|
|
| |
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
|
|
|
|
| |
SVN-Revision: 36718
|
|
|
|
|
|
| |
- fixes linking issues with some toolchains
SVN-Revision: 36703
|
|
|
|
| |
SVN-Revision: 36702
|
|
|
|
|
|
|
| |
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
|
|
|
|
|
|
|
|
| |
handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
|
|
|
|
| |
SVN-Revision: 36692
|
|
|
|
|
|
|
| |
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
|
|
|
|
| |
SVN-Revision: 36690
|
|
|
|
|
|
|
|
| |
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
|
|
|
|
| |
SVN-Revision: 36687
|
|
|
|
|
|
|
| |
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
|
|
|
|
|
|
| |
depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
|
|
|
|
| |
SVN-Revision: 36684
|
|
|
|
|
|
| |
base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
|
|
|
|
|
|
|
| |
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
|
|
|
|
| |
SVN-Revision: 36680
|
|
|
|
|
|
| |
Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
|
|
|
|
|
|
| |
* Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
|
|
|
|
| |
SVN-Revision: 36675
|
|
|
|
| |
SVN-Revision: 36655
|
|
|
|
|
|
| |
(0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
|
|
|
|
|
|
|
|
| |
option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36644
|