summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-12-010.13.57debian/0.13.57John Southworth
2011-12-01generate firewall templates for vrrp interfacesJohn Southworth
2011-12-01Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-12-010.13.56debian/0.13.56Mohit Mehta
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
* add code to set global policy for established, related, invalid states
2011-11-30Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-240.13.55debian/0.13.55Daniil Baturin
2011-11-15Move check-params-on-reboot script for conntrack hash size toDaniil Baturin
vyatta-conntrack, update automake rules and debian controls accordingly.
2011-11-09Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-080.13.54debian/0.13.54Daniil Baturin
2011-11-08Remove conntrack-related code from firewall top level templateDaniil Baturin
(it was moved to vyatta-conntrack).
2011-11-07Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnardJohn Southworth
2011-11-050.13.53debian/0.13.53Daniil Baturin
2011-11-05Force releaseDaniil Baturin
2011-11-050.13.52debian/0.13.52Daniil Baturin
2011-11-05Fix automake rules to reflect version change and removal of conntrack ↵Daniil Baturin
modprobe config.
2011-11-05Change firewall version from 4 to 5.Daniil Baturin
2011-11-04Delete conntrack modprobe config file from automake rules.Daniil Baturin
2011-11-04Remove conntrack modprobe config file (will be in vyatta-conntrack now).Daniil Baturin
2011-11-04Remove remaining conntrack-related templates.Daniil Baturin
2011-11-04Remove conntrack-related templates from firewallDaniil Baturin
2011-11-05Remove conntrack modprobe config file (will be in vyatta-conntrack now).Daniil Baturin
2011-11-05Remove remaining conntrack-related templates.Daniil Baturin
2011-11-05Remove conntrack-related templates from firewallDaniil Baturin
2011-11-030.13.51debian/0.13.51Stephen Hemminger
2011-11-03Add dependency on version of vyatta-cfg-systemStephen Hemminger
Need version with pseudo-ethernet vif support
2011-11-03fix duplicate definiton in MakefileStephen Hemminger
Causes warning in Debian testing
2011-11-03Add support for vif on pseudo-ethernetStephen Hemminger
2011-08-290.13.50debian/0.13.50Mohit Mehta
2011-08-29Fix Bug 7477 firewall group negation doesn't work in vc6.3Stig
* use Ipset.pm method rather than CLI path to validate group name when using group as a match condition in a firewall ruleset
2011-07-180.13.49debian/0.13.49Mohit Mehta
2011-07-18Fix READMEMohit Mehta
2011-07-150.13.48debian/0.13.48Mohit Mehta
2011-07-15Fix Bug 7340 Unable to apply modify firewall to interface when zone policy ↵Mohit Mehta
exists * change commit check to only check if the interface being applied firewall ruleset is in a zone if only the ruleset type is either name|ipv6-name. Thus, ignoring the check when modify rule-set is being applied to an interface (cherry picked from commit 8b2b85a129d3cf23565efe7b0ee15871ebff15c0)
2011-07-070.13.47debian/0.13.47Deepti Kulkarni
2011-07-07new branchDeepti Kulkarni
2011-05-200.13.46debian/0.13.46An-Cheng Huang
2011-05-20add "two-stage commit" equivalent to previous fix for bug 5227.An-Cheng Huang
2011-05-100.13.45debian/0.13.45An-Cheng Huang
2011-05-03modify firewall groups to work with new commitnapa-devAn-Cheng Huang
2011-04-180.13.44debian/0.13.44Mohit Mehta
2011-04-18* Fix Bug 6915 conntrack-hash-size reverts to default after upgradeMohit Mehta
add script conntrack-hash-size in check-params-on-reboot.d to fix problem of 'firewall conntrack-hash-size' value being out-of-sync with the underlying value when newly installed image boots for the first time
2011-03-070.13.43debian/0.13.43An-Cheng Huang
2011-03-07more ipset 6.0 changeAn-Cheng Huang
2011-03-040.13.42debian/0.13.42An-Cheng Huang
2011-03-04changes for ipset 6.0An-Cheng Huang
2011-02-020.13.41debian/0.13.41Mohit Mehta
2011-02-02Partial fix for bug 6759 serial packages are incorrectly included in virt ISOMohit Mehta
* make vyatta-cfg-firewall-serial depend on vyatta-serial
2011-01-100.13.40debian/0.13.40Mohit Mehta
2011-01-10Fix Bug 6292 iptables chain-name must be reduced to 28 characters maxMohit Mehta
* change syntax check to limit firewall ruleset names to 28 chars and bump firewall cfg-version to enable config migration (cherry picked from commit a0e5b2107d6073a103e0f0c04cc8656f8dc3816b)