 Jo-Philipp Wich
|
f62a52b105
treewide: replace unsafe string functions
|
4 jaren geleden |
|
Jo-Philipp Wich
|
23cc543f4f
improve reload logic
|
4 jaren geleden |
|
Jo-Philipp Wich
|
12a7cf9db1
Add support for DSCP matches and target
|
6 jaren geleden |
|
Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
6 jaren geleden |
|
Jo-Philipp Wich
|
bd40ba4584
iptables: move includes into iptables.c to avoid kernel header clashes
|
8 jaren geleden |
 Ralph Sennhauser
|
6015fc0761
musl-compat: avoid kernel header conflicts
|
8 jaren geleden |
|
Jo-Philipp Wich
|
786b15ff14
iptables: remove usage of xt_id
|
8 jaren geleden |
|
Jo-Philipp Wich
|
2275303757
iptables: declare _GNU_SOURCE to define RTLD_NEXT
|
8 jaren geleden |
|
Ralph Sennhauser
|
19acf041bf
iptables: optional loading of static extensions
|
8 jaren geleden |
|
Ralph Sennhauser
|
dd013720b4
iptables: add support for version 1.6.0
|
8 jaren geleden |
|
Jo-Philipp Wich
|
c5c87e4699
iptables: use different approach for managing loadable extensions
|
8 jaren geleden |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 jaren geleden |
 Jo-Philipp Wich
|
410cff5e62
Use xt_id match to track own rules
|
8 jaren geleden |
|
Jo-Philipp Wich
|
980b7859bb
Rework match initialization
|
9 jaren geleden |
|
Jo-Philipp Wich
|
dfc0ed1699
iptables: initialize multiport match
|
9 jaren geleden |
 Steven Barth
|
2f392a3b91
Add support for device and direction parameters
|
10 jaren geleden |
|
Steven Barth
|
1097a30f1d
snat: add support for connlimiting port-range SNAT
|
10 jaren geleden |
|
Jo-Philipp Wich
|
c67adbd07b
Revert "Make sure that NOTRACK is linked into firewall3 if it is part of libext*.a"
|
11 jaren geleden |
|
Jo-Philipp Wich
|
95cc95c7fe
Make sure that NOTRACK is linked into firewall3 if it is part of libext*.a
|
11 jaren geleden |
|
Jo-Philipp Wich
|
52d62c3d46
Keep all basic chains on reload and only flush them, this allows user rules to jump to targets like "reject" or "notrack"
|
11 jaren geleden |
|
Jo-Philipp Wich
|
3a3d85b3c7
Extend ipset option syntax to support specifying directions inplace.
|
11 jaren geleden |
|
Jo-Philipp Wich
|
cecf523b7b
Decouple handle destroying from committing, add fw3_ipt_close() instead
|
11 jaren geleden |
|
Jo-Philipp Wich
|
2dbfd733c3
Do not let libxtables implicitely load extensions, do it directly from fw3 and track the loaded objects for properly closing when destroying the handle.
|
11 jaren geleden |
|
Jo-Philipp Wich
|
73805dcc03
Make IPv6 support optional
|
11 jaren geleden |
|
Jo-Philipp Wich
|
7b63363c22
Add abstract fw3_xt_reset() implementation
|
11 jaren geleden |
|
Jo-Philipp Wich
|
9a41dccb8e
Fix compatibility with older libiptc/libip6tc
|
11 jaren geleden |
|
Jo-Philipp Wich
|
1ce8986798
Use weak function pointers to call extension init functions, this makes firewall3 independant from the features compiled into iptables
|
11 jaren geleden |
|
Jo-Philipp Wich
|
54904110e3
Add missing libip6t_REJECT initialization
|
11 jaren geleden |
|
Jo-Philipp Wich
|
2bcf21ee2e
Only initialize extensions we actually use
|
11 jaren geleden |
|
Jo-Philipp Wich
|
3833ad4b0a
Include iptables command and table name in iptables debug output
|
11 jaren geleden |
