vyatta-cfg-firewall.git/scripts/firewall, branch lithium Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git) https://git.amelek.net/vyos/vyatta-cfg-firewall.git/atom?h=lithium 2018-06-24T10:34:31+00:00 Merge branch 'current' into lithium 2018-06-24T10:34:31+00:00 Daniil Baturin daniil@baturin.org 2018-06-24T10:34:31+00:00 urn:sha1:fbc72527765b236a65740cd5d9f7f2c3f7e9a87e Conflicts: debian/changelog Task T35 - enable prune-deleted-sets for inet6 family firewall templates 2018-04-19T07:57:25+00:00 Marian Tudosoiu marian.tudosoiu@1and1.ro 2018-04-19T07:57:25+00:00 urn:sha1:7272364a23c9f00f17f719c1efee756d960e8984 Task T35 - fixing prune_deleted_sets for inet6 family 2018-04-11T08:13:14+00:00 Marian Tudosoiu marian.tudosoiu@1and1.ro 2018-04-11T08:13:14+00:00 urn:sha1:f6e4c60702f810cc06449782f64c7e5a7e20abb2 Task T35 change to place ipv6 address-groups and network groups under group config tree 2018-03-14T08:27:25+00:00 Marian Tudosoiu marian.tudosoiu@1and1.ro 2018-03-14T08:27:25+00:00 urn:sha1:65410961b33a072addf91dce7879f6a734aa2187 Task T35 - add support for IPv6 firewall adddress and network groups 2018-03-12T10:34:35+00:00 Marian Tudosoiu marian.tudosoiu@1and1.ro 2018-03-12T10:34:35+00:00 urn:sha1:03f1937e7dcb01ce810c9c19eda15149245f4537 Bug #T171 fix Open Task T171 Unable to Delte Rule 2018-02-19T11:06:25+00:00 mtudosoiu marian.tudosoiu@1and1.ro 2018-02-19T11:06:25+00:00 urn:sha1:d1164b989295016436f20caa709603ec5d85a4d3 update the way status of snmpd is called 2017-04-27T14:37:01+00:00 Kim UnicronNL@users.noreply.github.com 2017-04-27T14:37:01+00:00 urn:sha1:c903db0a63b627e1cdfa91ded522c73abb3b0516 Revert "vyatta-cfg-firewall: update nfct commands to use the new syntax" 2016-05-20T09:33:06+00:00 Kim Hagen kim.sidney@gmail.com 2016-05-20T09:33:06+00:00 urn:sha1:6e46ac599ac8351a72d227ae3b96f6e8ed9452f7 Debian jessie version still uses older syntax This reverts commit 8c08408d1309b2664067b3a793d7df3b24d36cf3. Remove dead code from the IPset module. 2015-12-22T20:37:23+00:00 Daniil Baturin daniil@baturin.org 2015-12-22T20:37:23+00:00 urn:sha1:feb23d3cf032d623dcf5d8da781f1e9166164171 Slightly related to #628. vyatta-cfg-firewall: check rules for errors before processing them 2015-11-28T20:00:46+00:00 Alex Harpin development@landsofshadow.co.uk 2015-11-28T20:00:46+00:00 urn:sha1:14bed3ad112362ecf9fabc0bd5d5ecbeef96dd0d Errors in firewall rules can cause either rules to be overwritten (completely or partially), dropped entirely, or just ending up with an inconsistent state in comparison to the current configuration. This can lead to unpredictable firewall results, which can't even be corrected by deleting all the firewall rules, only a reboot or manual intervention will correct the issue. Checking these rules for consistency in a separate loop before they are applied allows the errors to flagged up and the commit failed before the iptables are touched. Bug #623 http://bugzilla.vyos.net/show_bug.cgi?id=623