summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-08-290.13.83debian/0.13.83Gaurav Sinha
2012-08-29fix 8200, don't allow shim6 in allowed list of ipv4 protocols for firewallGaurav Sinha
2012-08-220.13.82debian/0.13.82Gaurav Sinha
2012-08-22Merge branch 'pacifica' of git.vyatta.com:/git/vyatta-cfg-firewall into pacificaGaurav Sinha
2012-08-22move CT_IGNORE chain up, first in raw tableGaurav Sinha
2012-08-090.13.81debian/0.13.81John Southworth
2012-08-090.13.80John Southworth
2012-08-09Bugfix 8271: Remove Vestigial VRRP hooks. The implementation changed and ↵John Southworth
these are no longer needed.
2012-08-090.13.79debian/0.13.79Saurabh Mohan
2012-08-090.13.78Saurabh Mohan
2012-08-09Bugfix 8217: VTI: add firewall cfg commands under interfaces vtiSaurabh Mohan
Add support for interface vti for cfg commands for firewall.
2012-08-07add conntrack raw table ignore chainGaurav Sinha
2012-06-220.13.77debian/0.13.77Gaurav Sinha
2012-06-22fixing 8173: moving CT_HELPER chain just before CTTIMEOUTGaurav Sinha
(cherry picked from commit faacba00db46c29fc652217653f9fe0564c1ebac)
2012-06-180.13.76debian/0.13.76Gaurav Sinha
2012-06-18fix 8112Gaurav Sinha
2012-06-080.13.75debian/0.13.75John Southworth
2012-06-08Bugfix 8042: increase number of firewall groups to a reasonable numberJohn Southworth
2012-06-070.13.74debian/0.13.74Gaurav Sinha
2012-06-07Adding functions to conditionally add CT_HELPER chain and remove when not in ↵Gaurav Sinha
use, neither by FW nor by NAT.
2012-06-060.13.73debian/0.13.73Gaurav Sinha
2012-06-06create nfct helper policies and prepare VYATTA_CT_HELPER chainGaurav Sinha
2012-06-06Merge branch 'user_space_helpers' into pacificaGaurav Sinha
2012-06-030.13.72debian/0.13.72John Southworth
2012-06-03Remove sudo from port-group syntax check callJohn Southworth
2012-06-020.13.71debian/0.13.71John Southworth
2012-06-02Make firewall syntax checks use the vyatta-util libraryJohn Southworth
2012-05-150.13.70debian/0.13.70John Southworth
2012-05-15No need to have vrrp specific interface templates anymoreJohn Southworth
2012-05-14don't add CTHELPER chain by default on boot. add when needed.Gaurav Sinha
2012-04-300.13.69debian/0.13.69Gaurav Sinha
2012-04-30service names with hyphen need to be escaped using square brackets.Gaurav Sinha
2012-04-16create CT_HELPER chain in PREROUTING and OUTPUTGaurav Sinha
2012-04-160.13.68debian/0.13.68Gaurav Sinha
2012-04-16fixing 7998Gaurav Sinha
2012-03-230.13.67debian/0.13.67Gaurav
2012-03-23include CT_TIMEOUT chain for conntrack timeouts.Gaurav
2012-03-030.13.66debian/0.13.66Deepti Kulkarni
2012-03-03new branchDeepti Kulkarni
2012-02-290.13.65debian/0.13.65Gaurav
2012-02-297047:use DEFLT instead of defaultGaurav
2012-02-290.13.64debian/0.13.64Gaurav
2012-02-29Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardGaurav
2012-02-29fixing 7047Gaurav
2012-02-240.13.63debian/0.13.63Mohit Mehta
2012-02-24Bug Fix for 7751, 7753, 7757Mohit Mehta
Add commit checks for 'state-policy' sub-tree
2012-01-060.13.62debian/0.13.62Mohit Mehta
2012-01-06Fix help string of state-policy for related connectionsMohit Mehta
2011-12-270.13.61debian/0.13.61John Southworth
2011-12-27Create VRRP output filter to filter IGMP from vmac interfacesJohn Southworth