 Andris PE
|
698a53354f
ruleset: apply egress MSS fixup later to apply final MTU before wire
|
10 months ago |
|
Andris PE
|
7392792e76
ruleset: do not emit redundant drop invalid rules
|
6 months ago |
 Jo-Philipp Wich
|
de3483c561
tests: adjust zone log limit testcases
|
6 months ago |
|
Andris PE
|
a5553dae70
ruleset: reduce ksoftirqd load by refering to looopback by numeric id
|
7 months ago |
|
Andris PE
|
19a8caf614
ruleset: dispatch ct states using verdict map
|
8 months ago |
|
Jo-Philipp Wich
|
22c53921c1
Revert "ruleset: dispatch ct states using verdict map"
|
6 months ago |
 User User-User
|
785798c8fd
ruleset: dispatch ct states using verdict map
|
8 months ago |
 Luiz Angelo Daros de Luca
|
1874050759
fw4: add log_limit to rules and redirects
|
9 months ago |
|
Luiz Angelo Daros de Luca
|
597dc90fb7
fw4: add support for zone log_limit
|
9 months ago |
|
Luiz Angelo Daros de Luca
|
a923c88f9f
fw4: pass zone to templates whenever possible
|
9 months ago |
|
Jo-Philipp Wich
|
4101dd4247
fw4: perform strict validation of zone and set names
|
7 months ago |
 Felix Fietkau
|
598d9fbb51
fw4: remove special cases around hw flow offloading
|
8 months ago |
|
Jo-Philipp Wich
|
20da9933fd
fw4: fix another instance of invalid rule jump targets
|
9 months ago |
|
Jo-Philipp Wich
|
840ccdeeab
fw4: avoid emitting invalid rule jump targets
|
9 months ago |
|
Jo-Philipp Wich
|
23a434d0d1
tests: fix expected test output
|
11 months ago |
|
Felix Fietkau
|
04a06bd70b
fw4: enable flowtable counters
|
1 year ago |
|
Felix Fietkau
|
1ecfadd522
fw4: remove accidentally committed .orig and .rej file
|
1 year ago |
|
Jo-Philipp Wich
|
30ee17a9c6
fw4: fix syntax errors in ICMP type declarations
|
1 year ago |
|
Jo-Philipp Wich
|
ce9a37829a
tests: add testcase for automatic includes
|
1 year ago |
 Paul D
|
e6e82a5520
fw4: add further symbolic ICMP type declarations
|
1 year ago |
|
Jo-Philipp Wich
|
39e8c70957
fw4: fix handling the ipset "comment" option
|
1 year ago |
|
Jo-Philipp Wich
|
700a925fd9
fw4: prevent null access when no ipsets are defined
|
1 year ago |
 Baptiste Jonglez
|
6443ec7805
config: drop input traffic by default
|
1 year ago |
|
Jo-Philipp Wich
|
119ee1a06d
ruleset: drop ctstate invalid traffic for masq-enabled zones
|
1 year ago |
|
Jo-Philipp Wich
|
7ae5e14bbd
fw4: gracefully handle `null` return values from `fd.read("line")`
|
1 year ago |
|
Jo-Philipp Wich
|
4fbf6d75a4
ruleset.uc: log forwarded traffic not matched by zone policies
|
1 year ago |
|
Jo-Philipp Wich
|
c7201a3d24
main.uc: reintroduce set reload restriction
|
1 year ago |
|
Jo-Philipp Wich
|
756f1e21ed
ruleset: fix emitting set_mark/set_xmark rules with masks
|
1 year ago |
|
Jo-Philipp Wich
|
3db474135c
ruleset: properly handle zone names starting with a digit
|
1 year ago |
|
Jo-Philipp Wich
|
43d8ef5167
fw4: fix formatting of default log prefix
|
1 year ago |
