 Jo-Philipp Wich
|
1a94915b5d
fw4: only stage reflection rules if all required addrs are known
|
2 years ago |
|
Jo-Philipp Wich
|
5c21714dc5
fw4: add device iifname/oifname matches to DSCP and MARK rules
|
2 years ago |
|
Jo-Philipp Wich
|
3eacc97415
tests: adjust 01_ruleset test case to latest changes
|
2 years ago |
|
Jo-Philipp Wich
|
a0518b6d02
fw4: gracefully handle unsupported hardware offloading
|
2 years ago |
|
Jo-Philipp Wich
|
ac99eba7d3
init: fix boot action in init script
|
2 years ago |
|
Jo-Philipp Wich
|
b54f462272
fw4: parse traffic rules before forwarding rules
|
2 years ago |
|
Jo-Philipp Wich
|
4d5af8b019
fw4: consolidate helper code
|
2 years ago |
|
Jo-Philipp Wich
|
300c737e48
fw4: fix applying zone family restrictions to forwardings
|
2 years ago |
|
Jo-Philipp Wich
|
eb9c25aaae
tests: implement fs.opendir() mock interface
|
2 years ago |
|
Jo-Philipp Wich
|
d30ff48e17
tests: fix mocked fs.popen() trace log
|
2 years ago |
|
Jo-Philipp Wich
|
52831a00be
fw4: improve flowtable handling
|
2 years ago |
|
Jo-Philipp Wich
|
7cb10c8093
fw4: disable "flow_offloading_hw" option for now
|
2 years ago |
|
Jo-Philipp Wich
|
b2241a1a70
fw4: fix enabling NAT reflection rules for DNATs without explicit family
|
2 years ago |
|
Jo-Philipp Wich
|
3ee6a5c54d
ruleset: fix undeclared variable access uncovered by strict mode
|
2 years ago |
|
Jo-Philipp Wich
|
bd5dc4beaa
tests: run testcases in strict mode
|
2 years ago |
|
Jo-Philipp Wich
|
ac8a7378c9
ruleset: remove redundant syn check
|
2 years ago |
|
Jo-Philipp Wich
|
e479eff366
fw4: add RFC-8622 'Least Effort' (LE) DSCP mark
|
2 years ago |
|
Jo-Philipp Wich
|
60a2518bbd
tests: add test coverage for redirect rules
|
2 years ago |
|
Jo-Philipp Wich
|
0df6ba035b
fw4: fix address selection logic for DNAT reflection rules
|
2 years ago |
|
Jo-Philipp Wich
|
c08eb4478d
fw4: fix redirect destination zone resolving
|
2 years ago |
|
Jo-Philipp Wich
|
8fec51a148
fw4: fix potential crashes when parsing invalid redirect sections
|
2 years ago |
|
Jo-Philipp Wich
|
e60bb4b47f
ruleset: support non-contiguous address masks
|
2 years ago |
|
Jo-Philipp Wich
|
ca88fcdfd1
tests: update interface dump mock data
|
2 years ago |
|
Jo-Philipp Wich
|
fff9779978
fw4: fix family selection logic for redirect rules
|
2 years ago |
|
Jo-Philipp Wich
|
94f03e0a5e
ruleset: properly render redirect targets without port
|
2 years ago |
|
Jo-Philipp Wich
|
5669bc71d8
fw4: consolidate device grouping logic
|
2 years ago |
|
Jo-Philipp Wich
|
f85bb2d21d
ruleset: consolidate zone matches for raw_prerouting and raw_output chains
|
2 years ago |
|
Jo-Philipp Wich
|
8c8a86728b
fw4: fix wrong `parse_network()` return value on `parse_subnet()` failure
|
2 years ago |
|
Jo-Philipp Wich
|
d63cb89505
fw4: fix parsing inverted numeric DSCP values
|
2 years ago |
|
Jo-Philipp Wich
|
127dbc0558
ruleset: emit AF specific rules for DSCP matches
|
2 years ago |
