 Hauke Mehrtens
|
6ba9105f88
options: redirects: Fix possible buffer overflows
|
5 years ago |
 Hans Dedecker
|
14589c80cd
redirects: properly handle src_dport in SNAT rules
|
6 years ago |
 Rosen Penev
|
72684e5bb8
firewall3: Fix GCC8 warnings by replacing sprintf with snprintf
|
6 years ago |
 Pierre Lebleu
|
08b2c61b4d
helpers: make the proto field as a list rather than one option
|
6 years ago |
 Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
6 years ago |
|
Pierre Lebleu
|
0a7d36d8cf
firewall3: add UBUS support for redirect sections
|
7 years ago |
|
Jo-Philipp Wich
|
13698aafb5
global: remove automatic notrack rules
|
8 years ago |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 years ago |
 Jo-Philipp Wich
|
18a503d012
redirects: only emit REDIRECT rules if dest_ip is unset
|
9 years ago |
|
Jo-Philipp Wich
|
adf87f3a36
redirects: fix possible null pointer access
|
9 years ago |
|
Jo-Philipp Wich
|
b59934331c
redirects: respect src_dip option for reflection rules
|
9 years ago |
|
Jo-Philipp Wich
|
10b9190c9d
redirect: emit -j REDIRECT rules for local port forwards
|
10 years ago |
|
Jo-Philipp Wich
|
bba31cce05
Use netmasks instead of prefix lengths internally
|
10 years ago |
 Felix Fietkau
|
92281eb747
make fw3_ubus_address take a list_head * argument instead of allocating & returning one
|
10 years ago |
|
Felix Fietkau
|
a9c694d5b6
use calloc instead of malloc+memset
|
10 years ago |
|
Jo-Philipp Wich
|
31456301f5
Initial support for "config nat" rules - this allows configuring zone-independant SNAT and MASQUERADE rules
|
10 years ago |
|
Jo-Philipp Wich
|
fa3386a705
Clean up dead code
|
11 years ago |
|
Jo-Philipp Wich
|
5b7969f54a
Skip redirects with invalid options
|
11 years ago |
|
Jo-Philipp Wich
|
d54cb962eb
Use a global -m conntrack --ctstate DNAT rule to accept all port forwards of a given zone in filter
|
11 years ago |
|
Jo-Philipp Wich
|
fca5e39564
Use fw3_ipt_rule_replace() when setting up reflection
|
11 years ago |
|
Jo-Philipp Wich
|
111a3264af
Allow any protocol for reflection rules
|
11 years ago |
|
Jo-Philipp Wich
|
9d900a9f86
Treat redirects as port redirections if the specified dest_ip belongs to the router itself, this is a compatibility fix to firewall2.
|
11 years ago |
|
Jo-Philipp Wich
|
fae8e98bd4
Fix endian issue in compare_addr(), solves auto detection of "option dest" for redirects on little endian systems
|
11 years ago |
|
Jo-Philipp Wich
|
d4980027ea
Implement limit and limit_burst options for rules.
|
11 years ago |
|
Jo-Philipp Wich
|
3a3d85b3c7
Extend ipset option syntax to support specifying directions inplace.
|
11 years ago |
|
Jo-Philipp Wich
|
d2a8a3f6a2
Only emit different ip family warnings if the ip wasn't automatically resolved
|
11 years ago |
|
Jo-Philipp Wich
|
30dd728d1d
Change wording of inferred destination warning for redirects
|
11 years ago |
|
Jo-Philipp Wich
|
1f3cd50c62
Infer destination zone of DNAT redirects from dest_ip option
|
11 years ago |
|
Jo-Philipp Wich
|
fad5b8a021
Remove fw3_ubus_address_free() and use fw3_free_list() instead
|
11 years ago |
|
Jo-Philipp Wich
|
dfc69ba56c
Allow devices for src_ip, src_dip and dest_ip options
|
11 years ago |
