vyatta-cfg-firewall.git - Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git)

Age	Commit message (Collapse)	Author
2009-02-13	Add show-set to display all sets.	Stig Thormodsrud

2009-02-13	Cache exists() to reduce calls to external /usr/sbin/ipset.	Stig Thormodsrud

2009-02-13	Add support for "show firewall group".	Stig Thormodsrud

2009-02-12	Add check for combining network-group and address-group.	Stig Thormodsrud

2009-02-12	Add firewall group nodes to firewall modify.	Stig Thormodsrud

2009-02-12	Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner	Stig Thormodsrud

2009-02-12	Add allow values for firewall groups.	Stig Thormodsrud

2009-02-12	no need to use loop to echo allowed values	Mohit Mehta

2009-02-12	0.13.7-6debian/0.13.7-6	Mohit Mehta

2009-02-12	better off storing icmp type-names than depend on iptables help	Mohit Mehta

2009-02-11	Add check for combination of IP range and network-group.	Stig Thormodsrud

2009-02-10	Change sudo usage to be more consistent.	Stig Thormodsrud

2009-02-10	Clean up mapping between vyatta firewall group_type vs ipset set_type.	Stig Thormodsrud

2009-02-10	Add space in front of match rule just in case other match rules don't.	Stig Thormodsrud

2009-02-10	Add more validation of firewall network-group before calling ipset.	Stig Thormodsrud

2009-02-10	Add more firewall group validation before calling ipset.	Stig Thormodsrud

2009-02-09	Add back parameter that was dropped when converting to use run_cmd().	Stig Thormodsrud

2009-02-09	0.13.7-5debian/0.13.7-5	Stig Thormodsrud

2009-02-06	Add carriage return to error message.	Stig Thormodsrud

2009-02-06	Add validation of group type.	Stig Thormodsrud

2009-02-06	Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner	Stig Thormodsrud

2009-02-05	0.13.7-4debian/0.13.7-4	Mohit Mehta

2009-02-05	changing debian version string	Mohit Mehta

2009-02-05	debian/0.13.7-3debian/debian/0.13.7-3 debian/0.13.7-3	Mohit Mehta

2009-02-05	display appropriate anywhere address depending on IPv4 or IPv6	Mohit Mehta
	protocol should be displayed as all when no protocol set
2009-02-04	Delete commented out code.	Stig Thormodsrud

2009-02-04	Reduce duplicate code in setup/setupOrig.	Stig Thormodsrud

2009-02-03	Add validation that group and non-groups can't be used in the same src/dst rule.	Stig Thormodsrud

2009-02-03	Reduce duplicate code in setup/setupOrig.	Stig Thormodsrud

2009-02-03	Reduce duplicate code.	Stig Thormodsrud

2009-02-03	0.13.7-2debian/0.13.7-2	Stephen Hemminger

2009-02-03	Turn on strict checking and fix warnings	Stephen Hemminger
	Turn on strict checking and fix the resulting errors. Get rid of perlcritic warnings.
2009-02-03	Fix perlcritic warnings	Stephen Hemminger
	Should not explicitly return undef
2009-02-03	Enable strict checking	Stephen Hemminger
	Enable strict perl checking.
2009-02-03	Remove prototype	Stephen Hemminger
	Perl prototypes are broken and should never be used (see Perl Best Practices).
2009-02-03	Fix call to returnValue that should be returnOrigValue.	Stig Thormodsrud

2009-02-02	Add 1st pass of firewall group support (ipset netfilter module	Stig Thormodsrud
	integration).
2009-02-02	Bugfix 4052: Support PPPOE over an ethernet VIF.	Bob Gilligan

2009-02-02	Rever to specific IP version in help text.	Bob Gilligan

2009-01-30	0.13.7-1debian/0.13.7-1	Mohit Mehta

2009-01-30	Fix Bug 2741 ENH: filter based on ICMP Type/code by name	Mohit Mehta

2009-01-30	0.13.7debian/0.13.7	Mohit Mehta

2009-01-29	Use iptables comment to identify CLI rule numbers in iptables output	Mohit Mehta

2009-01-26	Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner	Bob Gilligan

2009-01-26	Add support for IPv6 address ranges.	Bob Gilligan

2009-01-26	0.13.6debian/0.13.6	Mohit Mehta

2009-01-26	Fix Bug 2474 https://bugzilla.vyatta.com/show_bug.cgi?id=2474	Mohit Mehta

2009-01-23	0.13.5debian/0.13.5	Bob Gilligan

2009-01-23	Bugfix 4062: Don't reference parameters outside the config tree.	Bob Gilligan
	The AddressFilter module was reaching up the config tree to find a config parameter that was used to determine whether the address type was IPv4 or IPv6. This breaks when the functions are called from some locations in the config tree. I added explicity function calls to allow the caller to to set the IP version, obviating the need to reference a config parameter to determin the IP version.
2009-01-22	0.13.4debian/0.13.4	Bob Gilligan