 Kevin Darbyshire-Bryant
|
24ba465b8a
firewall3: remove redundant syn check
|
3 jaren geleden |
 Rui Salvaterra
|
a4355a6fae
firewall3: clean up the flow table detection logic
|
4 jaren geleden |
|
Rui Salvaterra
|
00f27ab1fd
firewall3: fix duplicate defaults section detection
|
4 jaren geleden |
 Jo-Philipp Wich
|
f62a52b105
treewide: replace unsafe string functions
|
4 jaren geleden |
|
Jo-Philipp Wich
|
23cc543f4f
improve reload logic
|
4 jaren geleden |
 WangYanlong
|
f87d0b0f60
firewall3: defaults: fix uci flow_offloading option
|
4 jaren geleden |
|
Rui Salvaterra
|
7cc2a84d5f
defaults: robustify flow table detection.
|
4 jaren geleden |
 Hauke Mehrtens
|
4d0c703e75
firewall3: Fix some format string problems
|
5 jaren geleden |
|
Jo-Philipp Wich
|
1c4d5bcd11
defaults: fix check_kmod() function
|
6 jaren geleden |
 Joe Holden
|
06fa692c80
defaults: use a generic check_kmod() function
|
6 jaren geleden |
 Alin Nastac
|
d2bbeb7d42
firewall3: make reject types selectable by user
|
6 jaren geleden |
 Felix Fietkau
|
35b3e74a18
defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule
|
6 jaren geleden |
|
Jo-Philipp Wich
|
d5923f1924
Reword rule comments
|
6 jaren geleden |
|
Jo-Philipp Wich
|
c1a295a500
defaults: add support for xt_FLOWOFFLOAD rule
|
6 jaren geleden |
|
Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
6 jaren geleden |
 Pierre Lebleu
|
6039c7f4b0
firewall3: check the return value of fw3_parse_options()
|
7 jaren geleden |
 Florian Fainelli
|
18f4c6fda6
utils.h: Avoid name clashes for setbit/delbit/hasbit
|
8 jaren geleden |
|
Jo-Philipp Wich
|
b33f78371e
defaults: disable drop_invalid by default
|
8 jaren geleden |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 jaren geleden |
 Alexandru Ardelean
|
4e11ee3704
defaults.c: remove toplevel_rule struct
|
8 jaren geleden |
 Jo-Philipp Wich
|
8957be6c02
defaults: emit ctstate INVALID drop rules by default
|
9 jaren geleden |
|
Jo-Philipp Wich
|
60f1444644
Remove commented code
|
9 jaren geleden |
|
Jo-Philipp Wich
|
410cff5e62
Use xt_id match to track own rules
|
9 jaren geleden |
|
Jo-Philipp Wich
|
8002b8454f
Change set_default() to take value as integer, required for tcp_ecn > 1
|
11 jaren geleden |
|
Jo-Philipp Wich
|
c114b1e380
Treat option tcp_ecn as integer, not bool
|
11 jaren geleden |
|
Jo-Philipp Wich
|
224d93afe9
Reorganize chain layout for raw/NOTRACK rules to fix support for custom rules with target "NOTRACK"
|
11 jaren geleden |
|
Jo-Philipp Wich
|
52d62c3d46
Keep all basic chains on reload and only flush them, this allows user rules to jump to targets like "reject" or "notrack"
|
11 jaren geleden |
|
Jo-Philipp Wich
|
d7988a8aae
Further fixes for zone reloads
|
11 jaren geleden |
|
Jo-Philipp Wich
|
a7d923052f
Fix rules for custom filter chains
|
11 jaren geleden |
|
Jo-Philipp Wich
|
f12271d15d
Rename struct fw3_rule_spec to struct fw3_chain_spec and move the declaration to options.h
|
11 jaren geleden |
