| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-11-24 | Merge pull request #1641 from Rain/T4612-arbitrary-netmasks | Christian Poessinger | |
| firewall: T4612: Support arbitrary netmasks | |||
| 2022-11-03 | firewall: T970: Refactor domain resolver, add firewall source/destination ↵ | sarthurdev | |
| `fqdn` node | |||
| 2022-10-08 | firewall: T4612: Support arbitrary netmasks | Rain | |
| Add support for arbitrary netmasks on source/destination addresses in firewall rules. This is particularly useful with DHCPv6-PD when the delegated prefix changes periodically. | |||
| 2022-09-26 | T4700: Firewall: add interface matching criteria | Nicolas Fort | |
| 2022-09-21 | T4699: Firewall: Add return action, since jump action was added recently | Nicolas Fort | |
| 2022-09-16 | T4699: Firewall: Add jump action in firewall rulest | Nicolas Fort | |
| 2022-09-14 | firewall: nat66: policy: T2199: Fix smoketests for nftables updated output | sarthurdev | |
| 2022-09-13 | zone-policy: T2199: Migrate zone-policy to firewall node | sarthurdev | |
| 2022-09-13 | firewall: T4605: Rename filter tables to vyos_filter | sarthurdev | |
| 2022-09-13 | firewall: T2199: Refactor firewall + zone-policy, move interfaces under ↵ | sarthurdev | |
| firewall node * Refactor firewall and zone-policy rule creation and cleanup * Migrate interface firewall values to `firewall interfaces <name> <direction> name/ipv6-name <name>` * Remove `firewall-interface.py` conf script | |||
| 2022-09-07 | T1024: Firewall and Policy route: add option to match dscp value, both on ↵ | Nicolas Fort | |
| firewall and in policy route | |||
| 2022-09-03 | firewall: T4651: re-implement packet-length CLI option to use <multi/> | Christian Poessinger | |
| 2022-09-03 | smoketest: firewall: add re-usable variables when running testcases | Christian Poessinger | |
| 2022-09-01 | Firewall: T4651: Change proposed cli from ip-length to packet-length | Nicolas Fort | |
| 2022-08-27 | Firewall: T4651: Add options to match packet size on firewall rules. | Nicolas Fort | |
| 2022-08-18 | firewall: T4622: Add TCP MSS option | Viacheslav Hletenko | |
| Ability to drop|accept packets based on TCP MSS size set firewall name <tag> rule <tag> tcp mss '501-1460' | |||
| 2022-07-04 | firewall: T4299: Add ability to inverse match country codes | sarthurdev | |
| 2022-06-14 | firewall: T970: Use set prefix to domain groups | sarthurdev | |
| 2022-06-14 | firewall: T4147: Use named sets for firewall groups | sarthurdev | |
| * Refactor nftables clean-up code * Adds policy route test for using firewall groups | |||
| 2022-06-10 | Merge pull request #1356 from sarthurdev/nested_groups | Christian Poessinger | |
| firewall: T478: Add support for nesting groups | |||
| 2022-06-10 | firewall: T478: Add support for nesting groups | sarthurdev | |
| 2022-06-10 | Firewall:T4458: Add ttl match option in firewall | Nicolas Fort | |
| 2022-06-10 | Merge pull request #1322 from nicolas-fort/T3907-fwall-log | Daniil Baturin | |
| Firewall: T3907: add log-level options in firewall | |||
| 2022-06-10 | smoketest: T970: Add commit after static-host-mapping | Viacheslav Hletenko | |
| Staic-host-mapping 'example.com' should be exists before we configure firewall domain-group FOO address example.com | |||
| 2022-05-28 | firewall: T970: Add firewall group domain-group | Viacheslav Hletenko | |
| Domain group allows to filter addresses by domain main Resolved addresses as elements are stored to named "nft set" that used in the nftables rules Also added a dynamic "resolver" systemd daemon vyos-domain-group-resolve.service which starts python script for the domain-group addresses resolving by timeout 300 sec set firewall group domain-group DOMAINS address 'example.com' set firewall group domain-group DOMAINS address 'example.org' set firewall name FOO rule 10 action 'drop' set firewall name FOO rule 10 source group domain-group 'DOMAINS' set interfaces ethernet eth0 firewall local name 'FOO' nft list table ip filter table ip filter { set DOMAINS { type ipv4_addr flags interval elements = { 192.0.2.1, 192.0.2.85, 203.0.113.55, 203.0.113.58 } } chain NAME_FOO { ip saddr @DOMAINS counter packets 0 bytes 0 drop comment "FOO-10" counter packets 0 bytes 0 return comment "FOO default-action accept" } } | |||
| 2022-05-27 | Firewall: T3907: Revert migration script 6-to-7 and add new 7-to-8 | Nicolas Fort | |
| 2022-05-11 | Firewall: T3907: add log-level options in firewall | Nicolas Fort | |
| 2022-05-09 | Merge pull request #1279 from nicolas-fort/T990 | Christian Poessinger | |
| Firewall: T990: Add snat and dnat connection status on firewall | |||
| 2022-04-25 | smoketest: bugfix on proper inheritance levels for classmethod | Christian Poessinger | |
| 2022-04-23 | Firewall: T990: Modifications for new connection-status cli | Nicolas Fort | |
| 2022-04-14 | smoketest: firewall: ensure we can also run this test on a live system | Christian Poessinger | |
| ... by cleaning existing CLI config first | |||
| 2022-04-11 | Firewall: T990: Add snat and dst connection status on firewall | Nicolas Fort | |
| 2022-04-08 | Firewall: T990: Add snat and dnat connection status on firewall | Nicolas Fort | |
| 2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
| 2022-01-29 | firewall: T4218: Adds a prefix to all user defined chains | sarthurdev | |
| 2022-01-18 | firewall: T3560: Add support for MAC address groups | sarthurdev | |
| 2022-01-17 | firewall: policy: T4178: Migrate and refactor tcp flags | sarthurdev | |
| * Add support for ECN and CWR flags | |||
| 2022-01-05 | firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and ↵ | sarthurdev | |
| zone-policy | |||
| 2022-01-04 | firewall: T4130: Add state-policy test to firewall smoketest | sarthurdev | |
| 2021-12-06 | firewall: T2199: Migrate firewall to XML/Python | sarthurdev | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |