 Andris PE
|
698a53354f
ruleset: apply egress MSS fixup later to apply final MTU before wire
|
1 year ago |
|
Andris PE
|
a5553dae70
ruleset: reduce ksoftirqd load by refering to looopback by numeric id
|
1 year ago |
|
Andris PE
|
19a8caf614
ruleset: dispatch ct states using verdict map
|
1 year ago |
 Jo-Philipp Wich
|
22c53921c1
Revert "ruleset: dispatch ct states using verdict map"
|
1 year ago |
 User User-User
|
785798c8fd
ruleset: dispatch ct states using verdict map
|
1 year ago |
|
Jo-Philipp Wich
|
23a434d0d1
tests: fix expected test output
|
1 year ago |
 Baptiste Jonglez
|
6443ec7805
config: drop input traffic by default
|
2 years ago |
|
Jo-Philipp Wich
|
119ee1a06d
ruleset: drop ctstate invalid traffic for masq-enabled zones
|
2 years ago |
|
Jo-Philipp Wich
|
b0a6bff4ee
tests: fix testcases
|
2 years ago |
|
Jo-Philipp Wich
|
a4484d4612
fw4: support automatic includes
|
2 years ago |
|
Jo-Philipp Wich
|
5994466353
fw4: simplify `is_loopback_dev()`
|
2 years ago |
|
Jo-Philipp Wich
|
11410b80eb
ruleset: reorder declarations & output tweaks
|
2 years ago |
|
Jo-Philipp Wich
|
e1cb763b65
ruleset: reuse zone-jump.uc template for notrack and helper chain jumps
|
2 years ago |
 Stijn Tintel
|
a063317d96
ruleset: fix conntrack helpers
|
2 years ago |
|
Jo-Philipp Wich
|
fb9a6b2ba8
ruleset: correct mangle_output chain type
|
2 years ago |
|
Jo-Philipp Wich
|
b2682251a1
fw4: filter non hw-offload capable devices when resolving lower devices
|
2 years ago |
|
Jo-Philipp Wich
|
57984e0369
fw4: always resolve lower flowtable devices
|
2 years ago |
|
Jo-Philipp Wich
|
b0b8122cbc
treewide: use modern syntax
|
2 years ago |
|
Jo-Philipp Wich
|
53caa1a762
fw4: resolve zone layer 2 devices for hw flow offloading
|
2 years ago |
|
Jo-Philipp Wich
|
281b1bcd99
tests: change mocked wan interface type to PPPoE
|
2 years ago |
|
Jo-Philipp Wich
|
3eacc97415
tests: adjust 01_ruleset test case to latest changes
|
2 years ago |
|
Jo-Philipp Wich
|
4d5af8b019
fw4: consolidate helper code
|
2 years ago |
|
Jo-Philipp Wich
|
ac8a7378c9
ruleset: remove redundant syn check
|
2 years ago |
|
Jo-Philipp Wich
|
ca88fcdfd1
tests: update interface dump mock data
|
2 years ago |
|
Jo-Philipp Wich
|
5f61dbfe21
ruleset: fix chain selection for mark and dscp targets
|
2 years ago |
|
Stijn Tintel
|
69a89d60ca
tests: add test for unknown rule option
|
2 years ago |
|
Stijn Tintel
|
47c5a5b225
tests: add test for deprecated rule option
|
2 years ago |
|
Stijn Tintel
|
550df40ec7
tests: add test for unknown defaults option
|
2 years ago |
|
Stijn Tintel
|
f121383b6d
tests: enable flow offloading in tests
|
2 years ago |
|
Jo-Philipp Wich
|
29fba84020
tests: expand testing
|
3 years ago |
