summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-03-18Fix firewall group parent delete while still referenced.Stig Thormodsrud
2010-03-170.13.7-77debian/0.13.7-77Stig Thormodsrud
2010-03-17Fix 5453: can't delete "address" under "firewall group <> address-group <> "Stig Thormodsrud
2010-03-170.13.7-76debian/0.13.7-76Stig Thormodsrud
2010-03-17Fix 5453: can't delete "address" under "firewall group <> address-group <>"Stig Thormodsrud
2010-03-050.13.7-75debian/0.13.7-75Stig Thormodsrud
2010-03-05Fix firewall conntrack teardown.Stig Thormodsrud
2010-02-170.13.7-74debian/0.13.7-74An-Cheng Huang
2010-02-150.13.7-73debian/0.13.7-73Stig Thormodsrud
2010-02-15Fix 5227: firewall group config can get out of sync with ipsetStig Thormodsrud
2010-02-120.13.7-72debian/0.13.7-72Stig Thormodsrud
2010-02-12Fix 5326: firewall group address range wraps at 255.Stig Thormodsrud
2010-02-02Remove old Xorp templateStephen Hemminger
2010-01-220.13.7-71debian/0.13.7-71Stig Thormodsrud
2010-01-22Fix 5248: Firewall config and show commands hang when showing and committing ↵Stig Thormodsrud
address groups.
2010-01-040.13.7-70debian/0.13.7-70Stephen Hemminger
2010-01-04Add same restrictions to ipv6-firewall nameStephen Hemminger
See Bug 4156 fix.
2010-01-040.13.7-69debian/0.13.7-69Stephen Hemminger
2010-01-04Don't allow spaces or other shell-confusing characters in firewall nameStephen Hemminger
Don't allow space, verticalbar, semicolon, ampersand, dollar sign, less or greater than in rule name. This is because of lack of quoting in perl processing Bug 4156
2010-01-04Merge branch 'kenwood' of suva.vyatta.com:/git/vyatta-cfg-firewall into kenwoodStephen Hemminger
2009-12-220.13.7-68debian/0.13.7-68Mohit Mehta
2009-12-22Fix Bug 5173 Firewall becomes out of sync with iptables when logging is usedMohit Mehta
with action inspect in a rule - increment num of rules with inspect + log
2009-12-07Add VIF for wireless templatesStephen Hemminger
2009-11-300.13.7-67debian/0.13.7-67Michael Larson
2009-11-30added required keyword to help text.Michael Larson
2009-11-130.13.7-66debian/0.13.7-66Michael Larson
2009-11-13dependencyupdateMichael Larson
2009-10-210.13.7-65debian/0.13.7-65slioch
2009-10-21move priority after tag nodes.slioch
2009-10-200.13.7-64debian/0.13.7-64slioch
2009-10-20add priority to node.def files.slioch
2009-10-020.13.7-63debian/0.13.7-63Stig Thormodsrud
2009-10-02Change syntax exec to syntax pattern.Stig Thormodsrud
2009-09-220.13.7-62debian/0.13.7-62Bob Gilligan
2009-09-22Bugfix 4951: Don't fail if IPv6 kernel module is not loaded.Bob Gilligan
Handle the case where the IPv6 kernel module is not loaded more gracefully.
2009-08-310.13.7-61debian/0.13.7-61Mohit Mehta
2009-08-31fix for bug 4794 SIP Helper/ALG module does not translate RTP traffic...rbays
added new configuration parameters: firewall conntrack-options sip enable-indirect-media firewall conntrack-options sip enable-indirect-signalling (cherry picked from commit 8d73836b37bae1cb8e8211bc483bf55c51241542)
2009-08-200.13.7-60debian/0.13.7-60Stephen Hemminger
2009-08-20Add templates for wireless devicesStephen Hemminger
2009-08-070.13.7-59debian/0.13.7-59Mohit Mehta
2009-08-07* Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDPMohit Mehta
added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule
2009-08-060.13.7-58debian/0.13.7-58Mohit Mehta
2009-08-06prevent possible situation where the two iptables rules for match conditionMohit Mehta
'recent' have different match conditions by moving code for recent to last (cherry picked from commit 0bd1f3013d93c0cf688cda075a3548fb94e6c6d2)
2009-08-050.13.7-57debian/0.13.7-57Mohit Mehta
2009-08-05add tcp_udp as a valid key to hash. feature developer is responsibleMohit Mehta
for allowing user to use tcp_udp as a valid protocol. currently, this option is planned to be used for NAT and firewall only
2009-07-31Another attempt to fix 4760.Stig Thormodsrud
(cherry picked from commit 4dadce6ebca29e6f6d7120a44541fd99034417f2)
2009-07-31Fix 4683: Firewall Rule number maximum 1024 reachedStig Thormodsrud
(cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a)
2009-07-100.13.7-56debian/0.13.7-56Stig Thormodsrud
2009-07-10remove pseudo-ethernet vifStephen Hemminger
(cherry picked from commit 8e62427eda81ce7c0f88c4f815a4ca7e3e891e11)
2009-06-150.13.7-55debian/0.13.7-55Stig Thormodsrud