summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-02-24Bug Fix for 7751, 7753, 7757Mohit Mehta
Add commit checks for 'state-policy' sub-tree
2012-01-060.13.62debian/0.13.62Mohit Mehta
2012-01-06Fix help string of state-policy for related connectionsMohit Mehta
2011-12-270.13.61debian/0.13.61John Southworth
2011-12-27Create VRRP output filter to filter IGMP from vmac interfacesJohn Southworth
2011-12-120.13.60debian/0.13.60John Southworth
2011-12-12Setup filter for VRRP vmac interfacesJohn Southworth
2011-12-020.13.59debian/0.13.59John Southworth
2011-12-02Merge branch 'oxnard' of git.vyatta.com:/git/vyatta-cfg-firewall into oxnardJohn Southworth
2011-12-02Add vrrp interface parameters for bonding vifsJohn Southworth
2011-12-020.13.58debian/0.13.58Mohit Mehta
2011-12-02Warn users when stateful rules are set with state-policy configuredMohit Mehta
2011-12-010.13.57debian/0.13.57John Southworth
2011-12-01generate firewall templates for vrrp interfacesJohn Southworth
2011-12-01Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-12-010.13.56debian/0.13.56Mohit Mehta
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
* add code to set global policy for established, related, invalid states
2011-11-30Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-240.13.55debian/0.13.55Daniil Baturin
2011-11-15Move check-params-on-reboot script for conntrack hash size toDaniil Baturin
vyatta-conntrack, update automake rules and debian controls accordingly.
2011-11-09Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-080.13.54debian/0.13.54Daniil Baturin
2011-11-08Remove conntrack-related code from firewall top level templateDaniil Baturin
(it was moved to vyatta-conntrack).
2011-11-07Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-050.13.53debian/0.13.53Daniil Baturin
2011-11-05Force releaseDaniil Baturin
2011-11-050.13.52debian/0.13.52Daniil Baturin
2011-11-05Fix automake rules to reflect version change and removal of conntrack ↵Daniil Baturin
modprobe config.
2011-11-05Change firewall version from 4 to 5.Daniil Baturin
2011-11-04Delete conntrack modprobe config file from automake rules.Daniil Baturin
2011-11-04Remove conntrack modprobe config file (will be in vyatta-conntrack now).Daniil Baturin
2011-11-04Remove remaining conntrack-related templates.Daniil Baturin
2011-11-04Remove conntrack-related templates from firewallDaniil Baturin
2011-11-05Remove conntrack modprobe config file (will be in vyatta-conntrack now).Daniil Baturin
2011-11-05Remove remaining conntrack-related templates.Daniil Baturin
2011-11-05Remove conntrack-related templates from firewallDaniil Baturin
2011-11-030.13.51debian/0.13.51Stephen Hemminger
2011-11-03Add dependency on version of vyatta-cfg-systemStephen Hemminger
Need version with pseudo-ethernet vif support
2011-11-03fix duplicate definiton in MakefileStephen Hemminger
Causes warning in Debian testing
2011-11-03Add support for vif on pseudo-ethernetStephen Hemminger
2011-08-290.13.50debian/0.13.50Mohit Mehta
2011-08-29Fix Bug 7477 firewall group negation doesn't work in vc6.3Stig
* use Ipset.pm method rather than CLI path to validate group name when using group as a match condition in a firewall ruleset
2011-07-180.13.49debian/0.13.49Mohit Mehta
2011-07-18Fix READMEMohit Mehta
2011-07-150.13.48debian/0.13.48Mohit Mehta
2011-07-15Fix Bug 7340 Unable to apply modify firewall to interface when zone policy ↵Mohit Mehta
exists * change commit check to only check if the interface being applied firewall ruleset is in a zone if only the ruleset type is either name|ipv6-name. Thus, ignoring the check when modify rule-set is being applied to an interface (cherry picked from commit 8b2b85a129d3cf23565efe7b0ee15871ebff15c0)
2011-07-070.13.47debian/0.13.47Deepti Kulkarni
2011-07-07new branchDeepti Kulkarni
2011-05-200.13.46debian/0.13.46An-Cheng Huang
2011-05-20add "two-stage commit" equivalent to previous fix for bug 5227.An-Cheng Huang