Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | firewall: don't clear the mangle table at startup or stop - it doesn't use ↵ | Felix Fietkau | 2009-01-20 | 1 | -4/+0 |
| | | | | | | it and clearing it breaks qos SVN-Revision: 14114 | ||||
* | firewall: introduce drop_invalid option to allow disabling the invalid state ↵ | Jo-Philipp Wich | 2009-01-16 | 1 | -7/+10 |
| | | | | | | match SVN-Revision: 14061 | ||||
* | firewall: allow multiple interfaces to be part of one zone, fix the sanity ↵ | Felix Fietkau | 2009-01-16 | 2 | -39/+52 |
| | | | | | | checks for that SVN-Revision: 14058 | ||||
* | firewall: clear the MSSFIX rules | Felix Fietkau | 2009-01-02 | 1 | -0/+1 |
| | | | | SVN-Revision: 13826 | ||||
* | Unify portrange-support in firewall rule generator fixes #4404 | Steven Barth | 2009-01-01 | 1 | -0/+10 |
| | | | | SVN-Revision: 13791 | ||||
* | disable the MSS fixup hack by default (most ISPs don't require this as a ↵ | Felix Fietkau | 2008-12-31 | 2 | -1/+9 |
| | | | | | | workaround for MTU problems, only some do). this should give a nice speedup for routing on standard-compliant ISPs SVN-Revision: 13788 | ||||
* | fixes firewall for trunk, custom chains were never reched, as policies apply ↵ | John Crispin | 2008-10-14 | 1 | -3/+3 |
| | | | | | | beforehand SVN-Revision: 12978 | ||||
* | fixes firewall rule generation. forwarding rules were inserted in input ↵ | John Crispin | 2008-09-28 | 1 | -3/+6 |
| | | | | | | chains, fixes #4028 SVN-Revision: 12768 | ||||
* | custom chains were never reached on DROP/REJECT policy, fixes #4004 #4029 | John Crispin | 2008-09-28 | 1 | -3/+3 |
| | | | | SVN-Revision: 12767 | ||||
* | set default input policy to ACCEPT to bring the firewall behavior closer to ↵ | Felix Fietkau | 2008-09-28 | 1 | -1/+1 |
| | | | | | | the one of previous versions SVN-Revision: 12766 | ||||
* | firewall: fix default policies, add a check for duplicate defaults sections ↵ | Felix Fietkau | 2008-09-28 | 1 | -18/+34 |
| | | | | | | and make custom chains more generic SVN-Revision: 12765 | ||||
* | firewall changes: - implement a REJECT policy and enable it by default, ↵ | Nicolas Thill | 2008-09-24 | 2 | -33/+57 |
| | | | | | | reject packets with approriate response (closes: #3970) - cleanup syn_flood and remove logging SVN-Revision: 12688 | ||||
* | Fixed a typo in the firewall scripts | Steven Barth | 2008-09-16 | 1 | -1/+1 |
| | | | | SVN-Revision: 12616 | ||||
* | Fixed a typo in firewall scripts, closes #4000 | Steven Barth | 2008-09-15 | 1 | -1/+1 |
| | | | | SVN-Revision: 12613 | ||||
* | make uci firewall backwards compatible to the old firewall.user | John Crispin | 2008-08-27 | 1 | -2/+9 |
| | | | | SVN-Revision: 12408 | ||||
* | add proto tcpudp to firewall | John Crispin | 2008-08-27 | 1 | -38/+51 |
| | | | | SVN-Revision: 12407 | ||||
* | fix device duplication in firewall if the balancing of ifup and ifdown is broken | John Crispin | 2008-08-27 | 1 | -2/+9 |
| | | | | SVN-Revision: 12404 | ||||
* | make sure uci firewall reverts its states when stopped | John Crispin | 2008-08-27 | 1 | -0/+1 |
| | | | | SVN-Revision: 12403 | ||||
* | fixes uci firewall init order, Signed-off-by: Roberto Riggio | John Crispin | 2008-08-27 | 1 | -2/+2 |
| | | | | SVN-Revision: 12402 | ||||
* | firewall: Added support for port-ranges as firstPort-lastPort to redirect ↵ | Steven Barth | 2008-08-27 | 1 | -0/+17 |
| | | | | | | sections SVN-Revision: 12396 | ||||
* | adds 5 new chains to the uci firewall that can be used to hook custom rules | John Crispin | 2008-08-27 | 1 | -1/+16 |
| | | | | SVN-Revision: 12395 | ||||
* | adds more sanity checks to uci firewall | John Crispin | 2008-08-26 | 1 | -0/+4 |
| | | | | SVN-Revision: 12392 | ||||
* | use proto instead of protocol in uci firewall | John Crispin | 2008-08-26 | 2 | -6/+6 |
| | | | | SVN-Revision: 12391 | ||||
* | fix some firewall script typos (patch from #3897) | Felix Fietkau | 2008-08-17 | 1 | -2/+3 |
| | | | | SVN-Revision: 12332 | ||||
* | fix typo, proto should be protocol | Travis Kemen | 2008-08-16 | 1 | -1/+1 |
| | | | | SVN-Revision: 12318 | ||||
* | trigger error if dport is used when no proto is defined | John Crispin | 2008-08-15 | 1 | -0/+4 |
| | | | | SVN-Revision: 12317 | ||||
* | uci firewall - make uci firewall default and remove old code - fix up ↵ | John Crispin | 2008-08-11 | 8 | -270/+0 |
| | | | | | | dependencies SVN-Revision: 12284 | ||||
* | uci_firewall - fixes hotplug.d script | John Crispin | 2008-08-11 | 1 | -1/+1 |
| | | | | SVN-Revision: 12282 | ||||
* | uci firewall - remove implicit creation of zones, based on network interfaces | John Crispin | 2008-08-11 | 2 | -9/+1 |
| | | | | SVN-Revision: 12281 | ||||
* | adds a new uci firewall - iptbales and netfilter packages need to be ↵ | John Crispin | 2008-08-04 | 8 | -0/+696 |
rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ... SVN-Revision: 12089 |