Jo-Philipp Wich
|
383eb58f17
ubus: do not overwrite ipset name attribute
|
5 years ago |
Alin Nastac
|
c26f8907d1
firewall3: fix typo that affects ICMPv6 rules with numeric icmp_type
|
5 years ago |
Hauke Mehrtens
|
487bd0d96c
utils: Fix string format message
|
5 years ago |
Hauke Mehrtens
|
4d0c703e75
firewall3: Fix some format string problems
|
5 years ago |
Alexander Couzens
|
8c404ef02f
iptables.c: lock the xtables.lock
|
5 years ago |
Alexander Couzens
|
c1d3a4df49
utils: implement fw3_lock_path() & fw3_unlock_path()
|
5 years ago |
Kristian Evensen
|
bf29c1e7e9
firewall3: ipset: Handle reload_set properly
|
5 years ago |
Kristian Evensen
|
509e673dab
firewall3: Improve ipset support
|
5 years ago |
Kevin Darbyshire-Bryant
|
de9409762d
utils: coverity resource leak warning
|
5 years ago |
Hans Dedecker
|
70f8785b9e
zones: add zone identifying local traffic in raw OUTPUT chain
|
6 years ago |
Hauke Mehrtens
|
6920de7e4c
utils: Free args in __fw3_command_pipe()
|
6 years ago |
Hauke Mehrtens
|
6ba9105f88
options: redirects: Fix possible buffer overflows
|
6 years ago |
Hans Dedecker
|
14589c80cd
redirects: properly handle src_dport in SNAT rules
|
6 years ago |
Jo-Philipp Wich
|
1c4d5bcd11
defaults: fix check_kmod() function
|
6 years ago |
Joe Holden
|
06fa692c80
defaults: use a generic check_kmod() function
|
6 years ago |
Jo-Philipp Wich
|
12a7cf9db1
Add support for DSCP matches and target
|
6 years ago |
Jo-Philipp Wich
|
aa8846bb10
ubus: avoid dumping interface state with NULL message
|
6 years ago |
Alin Nastac
|
d2bbeb7d42
firewall3: make reject types selectable by user
|
6 years ago |
Rosen Penev
|
72684e5bb8
firewall3: Fix GCC8 warnings by replacing sprintf with snprintf
|
6 years ago |
Jo-Philipp Wich
|
30463d0805
zones: add interface/subnet bound LOG rules
|
6 years ago |
Jo-Philipp Wich
|
0e77bf2966
options: treat time strings as UTC times
|
6 years ago |
Pierre Lebleu
|
b45e162eca
helpers: fix the set_helper in the rule structure
|
6 years ago |
Pierre Lebleu
|
f742ba7d20
helpers.conf: support also tcp in the CT sip helper
|
6 years ago |
Pierre Lebleu
|
08b2c61b4d
helpers: make the proto field as a list rather than one option
|
6 years ago |
Felix Fietkau
|
35b3e74a18
defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule
|
6 years ago |
Hans Dedecker
|
5cdf15eead
helpers.conf: add CT rtsp helper
|
6 years ago |
Jo-Philipp Wich
|
d5923f1924
Reword rule comments
|
6 years ago |
Jo-Philipp Wich
|
c1a295a500
defaults: add support for xt_FLOWOFFLOAD rule
|
6 years ago |
Jo-Philipp Wich
|
41c2ab5e5c
ipsets: add support for specifying entries
|
6 years ago |
Jo-Philipp Wich
|
8ef12cb54d
iptables: fix possible NULL pointer access on constructing rule masks
|
6 years ago |