Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-12-01 | 0.13.57debian/0.13.57 | John Southworth | |
2011-12-01 | generate firewall templates for vrrp interfaces | John Southworth | |
2011-12-01 | Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard | John Southworth | |
2011-12-01 | 0.13.56debian/0.13.56 | Mohit Mehta | |
2011-12-01 | Bug 6063 ENH: Provide option(s) to globally allow stateful return traffic | Mohit Mehta | |
* add code to set global policy for established, related, invalid states | |||
2011-11-30 | Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard | John Southworth | |
2011-11-24 | 0.13.55debian/0.13.55 | Daniil Baturin | |
2011-11-15 | Move check-params-on-reboot script for conntrack hash size to | Daniil Baturin | |
vyatta-conntrack, update automake rules and debian controls accordingly. | |||
2011-11-09 | Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard | John Southworth | |
2011-11-08 | 0.13.54debian/0.13.54 | Daniil Baturin | |
2011-11-08 | Remove conntrack-related code from firewall top level template | Daniil Baturin | |
(it was moved to vyatta-conntrack). | |||
2011-11-07 | Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard | John Southworth | |
2011-11-05 | 0.13.53debian/0.13.53 | Daniil Baturin | |
2011-11-05 | Force release | Daniil Baturin | |
2011-11-05 | 0.13.52debian/0.13.52 | Daniil Baturin | |
2011-11-05 | Fix automake rules to reflect version change and removal of conntrack ↵ | Daniil Baturin | |
modprobe config. | |||
2011-11-05 | Change firewall version from 4 to 5. | Daniil Baturin | |
2011-11-04 | Delete conntrack modprobe config file from automake rules. | Daniil Baturin | |
2011-11-04 | Remove conntrack modprobe config file (will be in vyatta-conntrack now). | Daniil Baturin | |
2011-11-04 | Remove remaining conntrack-related templates. | Daniil Baturin | |
2011-11-04 | Remove conntrack-related templates from firewall | Daniil Baturin | |
2011-11-05 | Remove conntrack modprobe config file (will be in vyatta-conntrack now). | Daniil Baturin | |
2011-11-05 | Remove remaining conntrack-related templates. | Daniil Baturin | |
2011-11-05 | Remove conntrack-related templates from firewall | Daniil Baturin | |
2011-11-03 | 0.13.51debian/0.13.51 | Stephen Hemminger | |
2011-11-03 | Add dependency on version of vyatta-cfg-system | Stephen Hemminger | |
Need version with pseudo-ethernet vif support | |||
2011-11-03 | fix duplicate definiton in Makefile | Stephen Hemminger | |
Causes warning in Debian testing | |||
2011-11-03 | Add support for vif on pseudo-ethernet | Stephen Hemminger | |
2011-08-29 | 0.13.50debian/0.13.50 | Mohit Mehta | |
2011-08-29 | Fix Bug 7477 firewall group negation doesn't work in vc6.3 | Stig | |
* use Ipset.pm method rather than CLI path to validate group name when using group as a match condition in a firewall ruleset | |||
2011-07-18 | 0.13.49debian/0.13.49 | Mohit Mehta | |
2011-07-18 | Fix README | Mohit Mehta | |
2011-07-15 | 0.13.48debian/0.13.48 | Mohit Mehta | |
2011-07-15 | Fix Bug 7340 Unable to apply modify firewall to interface when zone policy ↵ | Mohit Mehta | |
exists * change commit check to only check if the interface being applied firewall ruleset is in a zone if only the ruleset type is either name|ipv6-name. Thus, ignoring the check when modify rule-set is being applied to an interface (cherry picked from commit 8b2b85a129d3cf23565efe7b0ee15871ebff15c0) | |||
2011-07-07 | 0.13.47debian/0.13.47 | Deepti Kulkarni | |
2011-07-07 | new branch | Deepti Kulkarni | |
2011-05-20 | 0.13.46debian/0.13.46 | An-Cheng Huang | |
2011-05-20 | add "two-stage commit" equivalent to previous fix for bug 5227. | An-Cheng Huang | |
2011-05-10 | 0.13.45debian/0.13.45 | An-Cheng Huang | |
2011-05-03 | modify firewall groups to work with new commitnapa-dev | An-Cheng Huang | |
2011-04-18 | 0.13.44debian/0.13.44 | Mohit Mehta | |
2011-04-18 | * Fix Bug 6915 conntrack-hash-size reverts to default after upgrade | Mohit Mehta | |
add script conntrack-hash-size in check-params-on-reboot.d to fix problem of 'firewall conntrack-hash-size' value being out-of-sync with the underlying value when newly installed image boots for the first time | |||
2011-03-07 | 0.13.43debian/0.13.43 | An-Cheng Huang | |
2011-03-07 | more ipset 6.0 change | An-Cheng Huang | |
2011-03-04 | 0.13.42debian/0.13.42 | An-Cheng Huang | |
2011-03-04 | changes for ipset 6.0 | An-Cheng Huang | |
2011-02-02 | 0.13.41debian/0.13.41 | Mohit Mehta | |
2011-02-02 | Partial fix for bug 6759 serial packages are incorrectly included in virt ISO | Mohit Mehta | |
* make vyatta-cfg-firewall-serial depend on vyatta-serial | |||
2011-01-10 | 0.13.40debian/0.13.40 | Mohit Mehta | |
2011-01-10 | Fix Bug 6292 iptables chain-name must be reduced to 28 characters max | Mohit Mehta | |
* change syntax check to limit firewall ruleset names to 28 chars and bump firewall cfg-version to enable config migration (cherry picked from commit a0e5b2107d6073a103e0f0c04cc8656f8dc3816b) |