summaryrefslogtreecommitdiff
path: root/python/vyos/firewall.py
AgeCommit message (Expand)Author
2024-05-15T3900: add support for raw table in firewall.Nicolas Fort
2024-04-26T6269: policy: ensure correct rule parsing when using, and when not using <se...Nicolas Fort
2024-04-16T6191: do not append action to firewall and policy route|route6 when its not ...Nicolas Fort
2024-04-05T6204: cleanup shebang lineskhramshinr
2024-04-03T6199: drop unused Python importsChristian Breunig
2024-04-01firewall: T2199: always use full nft command name (e.g. --file over -f)Christian Breunig
2024-03-05T6061: fix rule parsing when connection-status is usedNicolas Fort
2024-02-27vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is req...sarthurdev
2024-02-01Merge pull request #2756 from nicolas-fort/T4839Christian Breunig
2024-01-25T4839: firewall: Add dynamic address group in firewall configuration, and app...Nicolas Fort
2024-01-22T5957: fix removal of interface in firewall rules.Nicolas Fort
2023-11-10T5729: firewall: switch to valueless in order to remove unnecessary <enable|d...Nicolas Fort
2023-10-25T5681: Firewall,Nat and Nat66: simplified and standarize interface matcher (v...Nicolas Fort
2023-09-29T5616: firewall: add option to be able to match firewall marks in firewall fi...Nicolas Fort
2023-09-28firewall: T5217: Synproxy bugfix and ct state conflict checkingsarthurdev
2023-09-28Merge pull request #2295 from sever-sever/T5217-synproxyChristian Breunig
2023-09-24firewall: T5614: Add support for matching on conntrack helpersarthurdev
2023-09-21T5217: Add firewall synproxyViacheslav Hletenko
2023-09-19firewall: T4502: Update to flowtable CLIsarthurdev
2023-09-18T5590: firewall log rule: fix order which rule are processed. Log options sho...Nicolas Fort
2023-09-07T4072: add firewall bridge filtering. First implementation only applies for f...Nicolas Fort
2023-08-23T5450: update smoketest and interface definition in order to work with new fi...Nicolas Fort
2023-08-11T5160: firewall refactor: move <set firewall ipv6 ipv6-name ...> to <set fire...Nicolas Fort
2023-08-11T5160: firewal refactor: fix tabulation for geo-ip parsing code. Typo fix in ...Nicolas Fort
2023-08-11T5160: firewall refactor: change firewall ip to firewall ipv4Nicolas Fort
2023-08-11T5160: firewall refactor: new cli structure. Update jinja templates, python s...Nicolas Fort
2023-07-31T5416: fix ipsec matcherNicolas Fort
2023-07-14T5195: vyos.util -> vyos.utils package refactoring (#2093)Christian Breunig
2023-03-21T5050: fix smoketest policy_route, which was failing after previos commit was...Nicolas Fort
2023-03-21T5050: Firewall: Add log optionsNicolas Fort
2023-03-06T5055: Firewall: add packet-type matcher in firewall and route policyNicolas Fort
2023-02-28T5037: Firewall: Add queue action and options to firewallNicolas Fort
2022-12-19T4886: Firewall and route policy: Add connection-mark feature to vyos.Nicolas Fort
2022-12-17Merge pull request #1626 from nicolas-fort/fwall_group_interfaceChristian Poessinger
2022-11-24Merge pull request #1641 from Rain/T4612-arbitrary-netmasksChristian Poessinger
2022-11-19T4780: Firewall: add firewall groups in firewall. Extend matching criteria so...Nicolas Fort
2022-11-03nat: T1877: T970: Add firewall groups to NATsarthurdev
2022-11-03firewall: T970: Refactor domain resolver, add firewall source/destination `fq...sarthurdev
2022-10-08firewall: T4612: Support arbitrary netmasksRain
2022-09-26T4700: Firewall: add interface matching criteriaNicolas Fort
2022-09-16T4699: Firewall: Add jump action in firewall rulestNicolas Fort
2022-09-13firewall: T4605: Rename filter tables to vyos_filtersarthurdev
2022-09-07T1024: Firewall and Policy route: add option to match dscp value, both on fir...Nicolas Fort
2022-09-03firewall: T4651: re-implement packet-length CLI option to use <multi/>Christian Poessinger
2022-09-01Firewall: T4651: Change proposed cli from ip-length to packet-lengthNicolas Fort
2022-08-27Firewall: T4651: Add options to match packet size on firewall rules.Nicolas Fort
2022-08-18firewall: T4622: Add TCP MSS optionViacheslav Hletenko
2022-07-04firewall: T4299: Add ability to inverse match country codessarthurdev
2022-06-14firewall: T970: Use set prefix to domain groupssarthurdev
2022-06-14firewall: T4147: Use named sets for firewall groupssarthurdev