 Jo-Philipp Wich
|
a10bf4f278
Make reload atomic
|
11 years ago |
|
Jo-Philipp Wich
|
964b303f77
Don't track family of ipsets
|
11 years ago |
|
Jo-Philipp Wich
|
ebe3dbe3e8
Split runtime and config states, store runtime state in UCI format
|
11 years ago |
|
Jo-Philipp Wich
|
ab591095d6
Consolidate and unify argument order for functions
|
11 years ago |
|
Jo-Philipp Wich
|
93dbca65fc
Only perform locking for start, stop, restart, reload and flush operations, this allows using fw3 network and fw3 device in includes
|
11 years ago |
|
Jo-Philipp Wich
|
8eb2ce1f93
Implement reload option for includes to decide whether includes should get reloaded on firewall reloads (useful when they tap into internal chains)
|
11 years ago |
|
Jo-Philipp Wich
|
6da847c446
Emit hotplug calls when flushing / creating zone chains
|
11 years ago |
|
Jo-Philipp Wich
|
16037f5d80
Rework zone flush logic
|
11 years ago |
|
Jo-Philipp Wich
|
e791a6a39a
Cosmetic output changes
|
11 years ago |
|
Jo-Philipp Wich
|
24e1ba98e4
Only run includes and set sysctls if either v4 or v6 firewall was actually started
|
11 years ago |
|
Jo-Philipp Wich
|
54c0625e83
Separate running from current state flags in ipset handling, remove ipsets per family
|
11 years ago |
|
Jo-Philipp Wich
|
c320b26725
Get rid of redundant fw3_defaults object, instead add a running_flags bitfield to the existing fw3_defaults structure
|
11 years ago |
|
Jo-Philipp Wich
|
b2b2e69b19
add support for per-zone user chains
|
11 years ago |
|
Jo-Philipp Wich
|
c79bb766d5
clear conntrack table on flush
|
11 years ago |
|
Jo-Philipp Wich
|
8eb517c569
add debug flag to monitor fw3_pr() calls, set policies to drop during reload
|
11 years ago |
|
Jo-Philipp Wich
|
99499fdbe5
add support for setting sysctls, remove tcp_westwood option, its not present on current kernels
|
11 years ago |
|
Jo-Philipp Wich
|
83ff4b94b0
run/load includes on start
|
11 years ago |
|
Jo-Philipp Wich
|
608e5b8957
add reload command to selectively rebuild rules (to be invoked from hotplug handler) and make the restart command flush and recreate all rules
|
11 years ago |
|
Jo-Philipp Wich
|
bd574af529
add support for includes
|
11 years ago |
|
Jo-Philipp Wich
|
275a37dbf2
rework runtime state tracking
|
11 years ago |
|
Jo-Philipp Wich
|
bb6873d863
rework ipset removal logic to only purge sets that are not in use by any family
|
11 years ago |
|
Jo-Philipp Wich
|
2d73c2b436
do not save state when printing rules
|
11 years ago |
|
Jo-Philipp Wich
|
23741a3279
introduce global string array for enum names, remove private arrays
|
11 years ago |
|
Jo-Philipp Wich
|
6e6afb0c7d
make enum values unique to allow using them in bitfields directly, increase flag members to 16 bit
|
11 years ago |
|
Jo-Philipp Wich
|
1ccbcc2642
rename flag fields in structures
|
11 years ago |
|
Jo-Philipp Wich
|
5b051a66fa
properly deal with only v4 or only v6 start/stop/restart
|
11 years ago |
|
Jo-Philipp Wich
|
ea1e5c25c1
selectively delete chains in filter and nat tables
|
11 years ago |
|
Jo-Philipp Wich
|
c4b9c253df
destroy ipsets on explicit stop and flush, but not on restart
|
11 years ago |
|
Jo-Philipp Wich
|
a32e331a11
separate state and lock files, use state file information to purge ipsets
|
11 years ago |
|
Jo-Philipp Wich
|
8fee8f9c52
initial commit
|
11 years ago |
