 Jo-Philipp Wich
|
6b27a6665c
Drop iptables-restore and create rules through libiptc and libxtables
|
11 years ago |
|
Jo-Philipp Wich
|
b610915765
Use libiptc to clear current ruleset
|
11 years ago |
|
Jo-Philipp Wich
|
ebe3dbe3e8
Split runtime and config states, store runtime state in UCI format
|
11 years ago |
|
Jo-Philipp Wich
|
54f0b072a0
Add support for fwmark matches and targets
|
11 years ago |
|
Jo-Philipp Wich
|
ab591095d6
Consolidate and unify argument order for functions
|
11 years ago |
|
Jo-Philipp Wich
|
62863ea95d
Unify fw3_default and fw3_target enums
|
11 years ago |
|
Jo-Philipp Wich
|
a2a689ed85
Unify print_chains() implementations in utils.c fw3_pr_rulespec()
|
11 years ago |
|
Jo-Philipp Wich
|
16037f5d80
Rework zone flush logic
|
11 years ago |
|
Jo-Philipp Wich
|
e791a6a39a
Cosmetic output changes
|
11 years ago |
|
Jo-Philipp Wich
|
c320b26725
Get rid of redundant fw3_defaults object, instead add a running_flags bitfield to the existing fw3_defaults structure
|
11 years ago |
|
Jo-Philipp Wich
|
9d72f0ecb5
Properly handle per zone user chain rules by fixing multiple logic errors
|
11 years ago |
|
Jo-Philipp Wich
|
b2b2e69b19
add support for per-zone user chains
|
11 years ago |
|
Jo-Philipp Wich
|
8eb517c569
add debug flag to monitor fw3_pr() calls, set policies to drop during reload
|
11 years ago |
|
Jo-Philipp Wich
|
99499fdbe5
add support for setting sysctls, remove tcp_westwood option, its not present on current kernels
|
12 years ago |
|
Jo-Philipp Wich
|
608e5b8957
add reload command to selectively rebuild rules (to be invoked from hotplug handler) and make the restart command flush and recreate all rules
|
12 years ago |
|
Jo-Philipp Wich
|
5df8137ebc
unify object freeing
|
12 years ago |
|
Jo-Philipp Wich
|
275a37dbf2
rework runtime state tracking
|
12 years ago |
|
Jo-Philipp Wich
|
23741a3279
introduce global string array for enum names, remove private arrays
|
12 years ago |
|
Jo-Philipp Wich
|
6e6afb0c7d
make enum values unique to allow using them in bitfields directly, increase flag members to 16 bit
|
12 years ago |
|
Jo-Philipp Wich
|
5a88c9e513
convert remaining occurences to hasbit() / setbit() helper macros
|
12 years ago |
|
Jo-Philipp Wich
|
1ccbcc2642
rename flag fields in structures
|
12 years ago |
|
Jo-Philipp Wich
|
5b051a66fa
properly deal with only v4 or only v6 start/stop/restart
|
12 years ago |
|
Jo-Philipp Wich
|
ea1e5c25c1
selectively delete chains in filter and nat tables
|
12 years ago |
|
Jo-Philipp Wich
|
8fee8f9c52
initial commit
|
12 years ago |
