 Felix Fietkau
|
1aef9791a2
defaults.c: fix ipv6 flow offloading
|
1 month ago |
 Christian Marangi
|
bf1d5fdf62
iptables: fix regression with unintended free in need_protomatch
|
1 year ago |
|
Christian Marangi
|
ffba75c9cd
iptables: free xtables_match if found in need_protomatch
|
1 year ago |
 Rui Salvaterra
|
4cd7d4f36b
Revert "firewall3: support table load on access on Linux 5.15+"
|
2 years ago |
 Wenli Looi
|
50979cc9c3
firewall3: remove unnecessary fw3_has_table
|
3 years ago |
 Kevin Darbyshire-Bryant
|
0f16ea5f05
options.c: add DSCP code LE Least Effort
|
2 years ago |
|
Kevin Darbyshire-Bryant
|
24ba465b8a
firewall3: remove redundant syn check
|
3 years ago |
 Florian Eckert
|
df1306a961
firewall3: fix locking issue
|
3 years ago |
|
Ansuel Smith
|
3624c37866
firewall3: support table load on access on Linux 5.15+
|
2 years ago |
|
Kevin Darbyshire-Bryant
|
40e5f6a2bd
ipsets: permit default timeout of 0
|
3 years ago |
|
Rui Salvaterra
|
a4355a6fae
firewall3: clean up the flow table detection logic
|
4 years ago |
|
Rui Salvaterra
|
edd0dc5829
firewall3: create a common helper to find strings in files
|
4 years ago |
 Tony Ambardar
|
61db17eddd
rules: fix device and chain usage for DSCP/MARK targets
|
3 years ago |
|
Tony Ambardar
|
7b844f4fb3
zone: avoid duplicates in devices list
|
3 years ago |
 Philip Prindeville
|
c2c72c6fc2
firewall3: remove last remaining sprintf()
|
3 years ago |
 Jo-Philipp Wich
|
12f6f14310
iptables: fix serializing multiple weekdays
|
4 years ago |
|
Rui Salvaterra
|
00f27ab1fd
firewall3: fix duplicate defaults section detection
|
4 years ago |
 Daniel Harding
|
e8f2d8f2e5
ipsets: allow blank/commented lines with loadfile
|
4 years ago |
 Alexey Dobrovolsky
|
8c2f9fad9c
fw3: zones: limit zone names to 11 bytes
|
4 years ago |
 Remi NGUYEN VAN
|
78d52a28c6
options: fix parsing of boolean attributes
|
4 years ago |
 Yousong Zhou
|
e9b90dfac2
zones: apply tcp mss clamping also on ingress path
|
4 years ago |
 Alin Nastac
|
050816af32
redirects: fix segmentation fault
|
4 years ago |
|
Jo-Philipp Wich
|
f62a52b105
treewide: replace unsafe string functions
|
4 years ago |
|
Jo-Philipp Wich
|
23cc543f4f
improve reload logic
|
4 years ago |
 Anton Engelhardt
|
9d7f49df47
redurects: add support to define multiple zones for dnat reflection rules
|
6 years ago |
 WangYanlong
|
f87d0b0f60
firewall3: defaults: fix uci flow_offloading option
|
4 years ago |
|
Yousong Zhou
|
fe9602cd24
rules: fix typo
|
4 years ago |
|
Rui Salvaterra
|
7cc2a84d5f
defaults: robustify flow table detection.
|
4 years ago |
|
Jo-Philipp Wich
|
8174814a50
utils: persist effective extra_src and extra_dest options in state file
|
5 years ago |
|
Jo-Philipp Wich
|
72a486f7fe
zones: fix emitting match rules for zones with only "extra" options
|
5 years ago |
