 Hauke Mehrtens
|
6ba9105f88
options: redirects: Fix possible buffer overflows
|
5 years ago |
 Jo-Philipp Wich
|
12a7cf9db1
Add support for DSCP matches and target
|
6 years ago |
 Alin Nastac
|
d2bbeb7d42
firewall3: make reject types selectable by user
|
6 years ago |
|
Jo-Philipp Wich
|
0e77bf2966
options: treat time strings as UTC times
|
6 years ago |
|
Jo-Philipp Wich
|
41c2ab5e5c
ipsets: add support for specifying entries
|
6 years ago |
|
Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
6 years ago |
|
Jo-Philipp Wich
|
359adcfc54
options: emit an empty address item when resolving networks fails
|
7 years ago |
|
Jo-Philipp Wich
|
a4d98aea37
options: remove stray continue statement
|
7 years ago |
|
Jo-Philipp Wich
|
3d2c18a91b
options: improve handling of negations when parsing space separated values
|
7 years ago |
 Florian Fainelli
|
18f4c6fda6
utils.h: Avoid name clashes for setbit/delbit/hasbit
|
8 years ago |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 years ago |
 Jo-Philipp Wich
|
1d0bd45db0
ubus: print rule name when reporting errors
|
9 years ago |
|
Jo-Philipp Wich
|
50e97c52e7
options: allow '*' as value for protocols and families
|
10 years ago |
|
Jo-Philipp Wich
|
8dd290b85e
options: fix logic flaw when parsing ipaddr/mask notation
|
10 years ago |
|
Jo-Philipp Wich
|
bba31cce05
Use netmasks instead of prefix lengths internally
|
10 years ago |
|
Jo-Philipp Wich
|
7db01c8b2f
options: fix fw3_parse_network() when destination pointer is not a list
|
10 years ago |
 Felix Fietkau
|
92281eb747
make fw3_ubus_address take a list_head * argument instead of allocating & returning one
|
10 years ago |
 Steven Barth
|
e678dcbf03
Add support for netifd-generated rules
|
10 years ago |
|
Steven Barth
|
2f392a3b91
Add support for device and direction parameters
|
10 years ago |
|
Jo-Philipp Wich
|
31456301f5
Initial support for "config nat" rules - this allows configuring zone-independant SNAT and MASQUERADE rules
|
10 years ago |
|
Jo-Philipp Wich
|
a25bb666dd
Properly check strtol() results when paring values as integers
|
11 years ago |
|
Jo-Philipp Wich
|
3b4303ddcf
Change fw3_parse_options() to indicate whether all options where parsed successfully
|
11 years ago |
|
Jo-Philipp Wich
|
88227a80c0
Don't mistreat unknown protocol names as "any protocol"
|
11 years ago |
|
Jo-Philipp Wich
|
3a3d85b3c7
Extend ipset option syntax to support specifying directions inplace.
|
11 years ago |
|
Jo-Philipp Wich
|
ea46bc485f
Mark fw3_address objects that got resolved by fw3_parse_network()
|
11 years ago |
|
Jo-Philipp Wich
|
fad5b8a021
Remove fw3_ubus_address_free() and use fw3_free_list() instead
|
11 years ago |
|
Jo-Philipp Wich
|
1fbc7b77f4
Remove now unused fw3_format_*() functions
|
11 years ago |
|
Jo-Philipp Wich
|
6b27a6665c
Drop iptables-restore and create rules through libiptc and libxtables
|
11 years ago |
|
Jo-Philipp Wich
|
78e134ba7c
Simplify ipset external checks and optionally initialize ispet name from external value
|
11 years ago |
|
Jo-Philipp Wich
|
8875f2d067
Record device-network relation in state file, fix zone hotplug events
|
11 years ago |
