vyatta-cfg-firewall.git/Makefile.am, branch napa-devConfiguration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git)
https://git.amelek.net/vyos/vyatta-cfg-firewall.git/atom?h=napa-dev2011-04-19T01:14:33+00:00* Fix Bug 6915 conntrack-hash-size reverts to default after upgrade2011-04-19T01:14:33+00:00Mohit Mehtamohit@vyatta.com2011-04-19T01:14:33+00:00urn:sha1:d2a481a204e619b8a47ceed11a87173cc4de892c
add script conntrack-hash-size in check-params-on-reboot.d to fix problem
of 'firewall conntrack-hash-size' value being out-of-sync with the underlying
value when newly installed image boots for the first time
Fix Bug 6292 iptables chain-name must be reduced to 28 characters max2011-01-11T01:35:28+00:00Mohit Mehtamohit@vyatta.com2011-01-11T00:23:06+00:00urn:sha1:435bf038f32a968424030da43b4a85ec50e02767
* change syntax check to limit firewall ruleset names to 28 chars and
bump firewall cfg-version to enable config migration
(cherry picked from commit a0e5b2107d6073a103e0f0c04cc8656f8dc3816b)
Fix Bug 6149 Warning on boot because of modprobe config file names2010-09-13T21:04:13+00:00Mohit Mehtamohit@vyatta.com2010-09-13T21:04:13+00:00urn:sha1:7afe9e82b60be763398531295d03f7215f21d94b
* add .conf suffix to files in /etc/modprobe.d
* remove old files without the suffix [from a previous release] during upgrade
Fix bug 4629 configuration limit of recent count firewall rule is 202010-07-15T17:51:53+00:00Mohit Mehtamohit.mehta@vyatta.com2010-07-15T17:51:53+00:00urn:sha1:7cf567cb1538070ea204b64e53135de876c12dd3
* raise recent count limit to 255. add syntax check to disallow invalid values
Infrastruction needed for bug 5583.2010-06-10T22:00:51+00:00Stig Thormodsrudstig@vyatta.com2010-06-10T22:00:51+00:00urn:sha1:4d6d91dc02492043d31304179038e394227f36d9Fix Bug 5588 Add ability to modify conntrack expectation table size2010-05-17T22:23:22+00:00Mohit Mehtamohit.mehta@vyatta.com2010-05-17T22:23:22+00:00urn:sha1:bf09fe16cc778746c9636c7dd3e596e2c790a7fe
* added 'firewall conntrack-expect-table-size' to modify expect table's size
* added 'firewall conntrack-hash-size' to set hash size for conntrack table
Allow IPv6 firewall rulesets to be configured on an interface independent of IPv4.2009-02-25T00:34:00+00:00Bob Gilligangilligan@vyatta.com2009-02-25T00:34:00+00:00urn:sha1:ed474cdf0e084d653ed06916f0ec297810e23831
Replaced the hand-coded config templates under each type of interface with script-generated
templates. This should be easier to maintain as we add new types of interfaces. Added
sub-trees for "modify", "ipv6-name" and "ipv6-modify" under "in", "out" and
"local" for all interfaces. Added command-completion for ruleset names being
configured on an interface.
Add 1st pass of firewall group support (ipset netfilter module2009-02-03T03:50:21+00:00Stig Thormodsrudstig@io.vyatta.com2009-02-03T03:50:21+00:00urn:sha1:299adf5bb38fa7e026ccd3604fc05ba812520700
integration).
Convert to Vyatta::Config2008-11-24T19:49:54+00:00Stephen Hemmingerstephen.hemminger@vyatta.com2008-11-22T01:08:25+00:00urn:sha1:35b6202c67f3e6d05f66f430aceae30d96e0ea90
Also move AddressFilter here because install is too stupid
to handle directory hierarchy for perl.
Rename VyattaIpTablesRule to Vyatta::IpTables::Rule2008-11-21T17:33:37+00:00Stephen Hemmingerstephen.hemminger@vyatta.com2008-11-21T16:39:37+00:00urn:sha1:6946d499c77aa022ca803a9a27db73f46e62d772