summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-06-24Merge branch 'current' into lithiumlithiumDaniil Baturin
Conflicts: debian/changelog
2018-06-22T704: add libsnmp-perl to dependencies until the script is rewritten.Daniil Baturin
2018-04-20Merge pull request #11 from mtudosoiu/currentDaniil Baturin
Task T35 - enable prune-deleted-sets for inet6 family firewall templates
2018-04-19Task T35 - enable prune-deleted-sets for inet6 family firewall templatesMarian Tudosoiu
2018-04-17Merge pull request #10 from mtudosoiu/currentDaniil Baturin
Task T35 - fixing prune_deleted_sets for inet6 family
2018-04-11Task T35 - fixing prune_deleted_sets for inet6 familyMarian Tudosoiu
2018-03-26Merge pull request #9 from mtudosoiu/currentDaniil Baturin
Task T35 change to solve port-group issue
2018-03-26Task T35 - fixing scoping rulesmtudosoiu
2018-03-23Task T35 change to solve port-group issueMarian Tudosoiu
2018-03-16Merge pull request #8 from mtudosoiu/currentDaniil Baturin
Task T35 place ipv6 groups under global group config tree
2018-03-14Task T35 place ipv6 groups under group config treeMarian Tudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-14Task T35 change to place ipv6 address-groups and network groups under group ↵Marian Tudosoiu
config tree
2018-03-12Merge pull request #7 from mtudosoiu/currentDaniil Baturin
Task T35 - add support for IPv6 firewall adddress and network groups
2018-03-12Task T35 add generation of SNMP traps on firewall config changesMarian Tudosoiu
2018-03-12Task T35 - add support for IPv6 firewall adddress and network groupsMarian Tudosoiu
2018-03-02Merge branch 'current' of https://github.com/vyos/vyatta-cfg-firewall into ↵Daniil Baturin
current
2018-03-02Show uncommited groups and table in policy route rules completion (fixes T572).Daniil Baturin
2018-02-23Merge pull request #6 from mtudosoiu/currentDaniil Baturin
Bug #T171 fix Open Task T171 Unable to Delte Rule
2018-02-19Bug #T171 fix Open Task T171 Unable to Delte Rulemtudosoiu
2017-09-14Revert "Added support for local PBR to gen-interface-policy-templates.pl"Daniil Baturin
This reverts commit b30b5c66b7d6f4c12c37a642319dd39f8613f74a.
2017-04-27update the way status of snmpd is calledKim
2016-05-20Revert "vyatta-cfg-firewall: update nfct commands to use the new syntax"Kim Hagen
Debian jessie version still uses older syntax This reverts commit 8c08408d1309b2664067b3a793d7df3b24d36cf3.
2016-01-240.14.0+vyos2+current1debian/0.14.0+vyos2+current1Kim Hagen
2015-12-24Fix runtime depends.Thomas Jepp
2015-12-220.14.0+vyos2+lithium17debian/0.14.0+vyos2+lithium17Daniil Baturin
2015-12-22Remove dead code from the IPset module.Daniil Baturin
Slightly related to #628.
2015-12-16Fix build depends.Thomas Jepp
2015-12-120.14.0+vyos2+lithium16debian/0.14.0+vyos2+lithium16Alex Harpin
2015-12-12vyatta-cfg-firewall: update network-group check to allow "this" networkAlex Harpin
Update the check for network-groups to allow zero net addresses as they are accepted by the current version of ipset used in VyOS, rejecting only the 0.0.0.0/0 address. This allows the "this" network (0.0.0.0/8) to be used in network-groups. Bug #628 http://bugzilla.vyos.net/show_bug.cgi?id=628
2015-12-12vyatta-cfg-firewall: formatting changes for style consistencyAlex Harpin
Update lib/Vyatta/Iptables/AddressFilter.pm, IpSet.pm, Mgr.pm and Rule.pm to maintain style and consistency.
2015-11-290.14.0+vyos2+lithium15debian/0.14.0+vyos2+lithium15Alex Harpin
2015-11-28vyatta-cfg-firewall: drop executable permissions on node.defsAlex Harpin
Drop the executable permissions present on a number of node.defs to remove lintian warnings.
2015-11-28vyatta-cfg-firewall: check rules for errors before processing themAlex Harpin
Errors in firewall rules can cause either rules to be overwritten (completely or partially), dropped entirely, or just ending up with an inconsistent state in comparison to the current configuration. This can lead to unpredictable firewall results, which can't even be corrected by deleting all the firewall rules, only a reboot or manual intervention will correct the issue. Checking these rules for consistency in a separate loop before they are applied allows the errors to flagged up and the commit failed before the iptables are touched. Bug #623 http://bugzilla.vyos.net/show_bug.cgi?id=623
2015-11-28vyatta-cfg-firewall: formatting changes for style consistencyAlex Harpin
Update scripts/firewall/vyatta-firewall.pl to maintain style and consistency.
2015-11-28vyatta-cfg-firewall: update nfct commands to use the new syntaxAlex Harpin
Update the nfcft commands to use the new style syntax rather than the old, following the update of conntrack-tools to 1.4.3.
2015-10-240.14.0+vyos2+lithium14debian/0.14.0+vyos2+lithium14Alex Harpin
2015-10-24vyatta-cfg-firewall: temporarily disable p2p option in firewall configAlex Harpin
Both the userspace library and the associated kernel module for the iptables ipp2p match target are currently missing and so this configuration returns an error when used. Disabling this option temporarily until the above issue has been resolved. Bug #602 http://bugzilla.vyos.net/show_bug.cgi?id=602
2015-06-240.14.0+vyos2+lithium13debian/0.14.0+vyos2+lithium13Alex Harpin
2015-06-24vyatta-cfg-firewall: add port 1536 to the initial ct helper chainAlex Harpin
Add port 1536 to the initial VYATTA_CT_HELPER chain inline with the conntrack sqlnet module change in vyatta-conntrack. Bug #412 http://bugzilla.vyos.net/show_bug.cgi?id=412
2015-06-150.14.0+vyos2+lithium12debian/0.14.0+vyos2+lithium12Alex Harpin
2015-06-15vyatta-cfg-firewall: update dh_gencontrol with new development flagAlex Harpin
2015-05-15Merge pull request #4 from pasikarkkainen/local-pbrDaniil Baturin
Bug #252: Add support for local PBR
2015-05-14Added support for local PBR to gen-interface-policy-templates.plPasi Karkkainen
2015-05-14Added support for local PBR to vyatta-firewall.plPasi Karkkainen
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-09 06:15:07 +0000