 Anton Engelhardt
|
9d7f49df47
redurects: add support to define multiple zones for dnat reflection rules
|
vor 6 Jahren |
 Kristian Evensen
|
509e673dab
firewall3: Improve ipset support
|
vor 5 Jahren |
 Jo-Philipp Wich
|
12a7cf9db1
Add support for DSCP matches and target
|
vor 6 Jahren |
 Alin Nastac
|
d2bbeb7d42
firewall3: make reject types selectable by user
|
vor 6 Jahren |
 Pierre Lebleu
|
08b2c61b4d
helpers: make the proto field as a list rather than one option
|
vor 6 Jahren |
 Felix Fietkau
|
35b3e74a18
defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule
|
vor 6 Jahren |
|
Jo-Philipp Wich
|
c1a295a500
defaults: add support for xt_FLOWOFFLOAD rule
|
vor 6 Jahren |
|
Jo-Philipp Wich
|
41c2ab5e5c
ipsets: add support for specifying entries
|
vor 6 Jahren |
 Stijn Tintel
|
a3ef503ed5
zones: allow per-table log control
|
vor 6 Jahren |
|
Jo-Philipp Wich
|
f50a524847
helpers: implement explicit CT helper assignment support
|
vor 6 Jahren |
|
Jo-Philipp Wich
|
e751cde895
zones: drop outgoing invalid traffic in masqueraded zones
|
vor 7 Jahren |
|
Jo-Philipp Wich
|
13698aafb5
global: remove automatic notrack rules
|
vor 7 Jahren |
 Ralph Sennhauser
|
6015fc0761
musl-compat: avoid kernel header conflicts
|
vor 8 Jahren |
|
Jo-Philipp Wich
|
be8ead27f6
treewide: replace jow@openwrt.org with jo@mein.io
|
vor 8 Jahren |
 Jo-Philipp Wich
|
1d0bd45db0
ubus: print rule name when reporting errors
|
vor 9 Jahren |
|
Jo-Philipp Wich
|
2807cc26b8
Selectively flush conntrack
|
vor 10 Jahren |
|
Jo-Philipp Wich
|
bba31cce05
Use netmasks instead of prefix lengths internally
|
vor 10 Jahren |
 Steven Barth
|
e678dcbf03
Add support for netifd-generated rules
|
vor 10 Jahren |
|
Steven Barth
|
2f392a3b91
Add support for device and direction parameters
|
vor 10 Jahren |
|
Steven Barth
|
1097a30f1d
snat: add support for connlimiting port-range SNAT
|
vor 10 Jahren |
|
Jo-Philipp Wich
|
31456301f5
Initial support for "config nat" rules - this allows configuring zone-independant SNAT and MASQUERADE rules
|
vor 10 Jahren |
|
Jo-Philipp Wich
|
c114b1e380
Treat option tcp_ecn as integer, not bool
|
vor 10 Jahren |
|
Jo-Philipp Wich
|
3b4303ddcf
Change fw3_parse_options() to indicate whether all options where parsed successfully
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
9d900a9f86
Treat redirects as port redirections if the specified dest_ip belongs to the router itself, this is a compatibility fix to firewall2.
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
d4980027ea
Implement limit and limit_burst options for rules.
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
3a3d85b3c7
Extend ipset option syntax to support specifying directions inplace.
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
ea46bc485f
Mark fw3_address objects that got resolved by fw3_parse_network()
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
f12271d15d
Rename struct fw3_rule_spec to struct fw3_chain_spec and move the declaration to options.h
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
1fbc7b77f4
Remove now unused fw3_format_*() functions
|
vor 11 Jahren |
|
Jo-Philipp Wich
|
6b27a6665c
Drop iptables-restore and create rules through libiptc and libxtables
|
vor 11 Jahren |
