 Jo-Philipp Wich
|
12a7cf9db1
Add support for DSCP matches and target
|
6 anos atrás |
 Pierre Lebleu
|
b45e162eca
helpers: fix the set_helper in the rule structure
|
6 anos atrás |
|
Pierre Lebleu
|
08b2c61b4d
helpers: make the proto field as a list rather than one option
|
6 anos atrás |
|
Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
6 anos atrás |
|
Pierre Lebleu
|
d44f4189b6
firewall3: add fw3_attr_parse_name_type() function
|
7 anos atrás |
|
Pierre Lebleu
|
e264c8e585
firewall3: replace warn_rule() by warn_section()
|
7 anos atrás |
|
Jo-Philipp Wich
|
d596f728e9
rules: fix UCI context in error reporting
|
7 anos atrás |
 Florian Fainelli
|
18f4c6fda6
utils.h: Avoid name clashes for setbit/delbit/hasbit
|
8 anos atrás |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
8 anos atrás |
 Daniel Golle
|
e92392db91
set mark for locally generated traffic in OUTPUT chain
|
8 anos atrás |
 Jo-Philipp Wich
|
410cff5e62
Use xt_id match to track own rules
|
8 anos atrás |
|
Jo-Philipp Wich
|
1d0bd45db0
ubus: print rule name when reporting errors
|
9 anos atrás |
 Steven Barth
|
e678dcbf03
Add support for netifd-generated rules
|
10 anos atrás |
|
Steven Barth
|
2f392a3b91
Add support for device and direction parameters
|
10 anos atrás |
|
Jo-Philipp Wich
|
e5c8c87ce6
Skip rules with invalid options
|
10 anos atrás |
|
Jo-Philipp Wich
|
14c1539ced
Use "-j CT --notrack" instead of deprecated "-j NOTRACK"
|
11 anos atrás |
|
Jo-Philipp Wich
|
e43e3cc546
Properly handle reject target in rules with specific destination
|
11 anos atrás |
|
Jo-Philipp Wich
|
aeba5741d7
For ingress rules, only jump into zone_name_src_ACTION chains if the target is not ACCEPT and if logging is enabled in the src zone, this cuts some overhead
|
11 anos atrás |
|
Jo-Philipp Wich
|
6e6a38ea87
Use zone_name_src_ACTION chain for input rules with non-wildcard source
|
11 anos atrás |
|
Jo-Philipp Wich
|
3a3d85b3c7
Extend ipset option syntax to support specifying directions inplace.
|
11 anos atrás |
|
Jo-Philipp Wich
|
d2a8a3f6a2
Only emit different ip family warnings if the ip wasn't automatically resolved
|
11 anos atrás |
|
Jo-Philipp Wich
|
1a431c11ce
Fix output rules with "option dest *"
|
11 anos atrás |
|
Jo-Philipp Wich
|
dfc69ba56c
Allow devices for src_ip, src_dip and dest_ip options
|
11 anos atrás |
|
Jo-Philipp Wich
|
ad958ff26d
Also add comments for unnamed rules
|
11 anos atrás |
|
Jo-Philipp Wich
|
6b27a6665c
Drop iptables-restore and create rules through libiptc and libxtables
|
11 anos atrás |
|
Jo-Philipp Wich
|
78e134ba7c
Simplify ipset external checks and optionally initialize ispet name from external value
|
11 anos atrás |
|
Jo-Philipp Wich
|
3488eecf1a
Check whether ipset exists before referencing it in rules or redirects
|
11 anos atrás |
|
Jo-Philipp Wich
|
a1cf3074e2
Remove unused "running" argument form fw3_lookup_ipset()
|
11 anos atrás |
|
Jo-Philipp Wich
|
d59395113f
Remove unused "running" argument form fw3_lookup_zone()
|
11 anos atrás |
|
Jo-Philipp Wich
|
54f0b072a0
Add support for fwmark matches and targets
|
11 anos atrás |
