 Kristian Evensen
|
bf29c1e7e9
firewall3: ipset: Handle reload_set properly
|
4 years ago |
|
Kristian Evensen
|
509e673dab
firewall3: Improve ipset support
|
5 years ago |
 Jo-Philipp Wich
|
41c2ab5e5c
ipsets: add support for specifying entries
|
6 years ago |
 Pierre Lebleu
|
5cd4af49ac
firewall3: add UBUS support for ipset sections
|
7 years ago |
|
Pierre Lebleu
|
6039c7f4b0
firewall3: check the return value of fw3_parse_options()
|
7 years ago |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 years ago |
 Jo-Philipp Wich
|
bba31cce05
Use netmasks instead of prefix lengths internally
|
10 years ago |
 Felix Fietkau
|
a9c694d5b6
use calloc instead of malloc+memset
|
10 years ago |
|
Jo-Philipp Wich
|
7dfc240dfa
Several ipset bugfixes
|
10 years ago |
|
Jo-Philipp Wich
|
9767873f92
Fix another crash bug if ipsets are supported but none is declared
|
11 years ago |
|
Jo-Philipp Wich
|
af5aaf3159
Do not print to pipe or close command if nothing was executed
|
11 years ago |
|
Jo-Philipp Wich
|
28df94a5e0
Wait for ipsets to appear before continuing
|
11 years ago |
|
Jo-Philipp Wich
|
30bbaa3692
Family "any" is not applicable to ipsets, default to v4 and disallow "any"
|
11 years ago |
|
Jo-Philipp Wich
|
78e134ba7c
Simplify ipset external checks and optionally initialize ispet name from external value
|
11 years ago |
|
Jo-Philipp Wich
|
3488eecf1a
Check whether ipset exists before referencing it in rules or redirects
|
11 years ago |
|
Jo-Philipp Wich
|
9ce8ca5ec9
Store ipset storage method and matches in state file, keep iprange and ports if set
|
11 years ago |
|
Jo-Philipp Wich
|
b64f6ca3d4
Send quit comment in fw3_destroy_ipsets() and initialize ipset objects with enabled = true
|
11 years ago |
|
Jo-Philipp Wich
|
964b303f77
Don't track family of ipsets
|
11 years ago |
|
Jo-Philipp Wich
|
b6bfb7a067
Add common fw3_address_to_string() helper function
|
11 years ago |
|
Jo-Philipp Wich
|
c6c708a440
Remove referenced to unused FW3_FLAG_DELETED flag
|
11 years ago |
|
Jo-Philipp Wich
|
a1cf3074e2
Remove unused "running" argument form fw3_lookup_ipset()
|
11 years ago |
|
Jo-Philipp Wich
|
ebe3dbe3e8
Split runtime and config states, store runtime state in UCI format
|
11 years ago |
|
Jo-Philipp Wich
|
71d9d82869
Properly handle deleted zones and ipsets on restarts
|
11 years ago |
|
Jo-Philipp Wich
|
16037f5d80
Rework zone flush logic
|
11 years ago |
|
Jo-Philipp Wich
|
a4b7101436
Change fw3_no_family() macro to take bit field value directly
|
11 years ago |
|
Jo-Philipp Wich
|
e791a6a39a
Cosmetic output changes
|
11 years ago |
|
Jo-Philipp Wich
|
c7fc65809a
Introduce fw3_no_family() helper macro and use it
|
11 years ago |
|
Jo-Philipp Wich
|
54c0625e83
Separate running from current state flags in ipset handling, remove ipsets per family
|
11 years ago |
|
Jo-Philipp Wich
|
46536e5263
introduce support for enabled option in zones, forwards, rules, redirects, ipsets and includes
|
11 years ago |
|
Jo-Philipp Wich
|
6a736bbffb
remove ip range list hack since fw3_address can now represent true ranges
|
11 years ago |
