| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2009-08-06 | prevent possible situation where the two iptables rules for match condition | Mohit Mehta | |
| 'recent' have different match conditions by moving code for recent to last (cherry picked from commit 0bd1f3013d93c0cf688cda075a3548fb94e6c6d2) | |||
| 2009-08-05 | 0.13.7-57debian/0.13.7-57 | Mohit Mehta | |
| 2009-08-05 | add tcp_udp as a valid key to hash. feature developer is responsible | Mohit Mehta | |
| for allowing user to use tcp_udp as a valid protocol. currently, this option is planned to be used for NAT and firewall only | |||
| 2009-07-31 | Another attempt to fix 4760. | Stig Thormodsrud | |
| (cherry picked from commit 4dadce6ebca29e6f6d7120a44541fd99034417f2) | |||
| 2009-07-31 | Fix 4683: Firewall Rule number maximum 1024 reached | Stig Thormodsrud | |
| (cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a) | |||
| 2009-07-10 | 0.13.7-56debian/0.13.7-56 | Stig Thormodsrud | |
| 2009-07-10 | remove pseudo-ethernet vif | Stephen Hemminger | |
| (cherry picked from commit 8e62427eda81ce7c0f88c4f815a4ca7e3e891e11) | |||
| 2009-06-15 | 0.13.7-55debian/0.13.7-55 | Stig Thormodsrud | |
| 2009-06-15 | Fix negate of firewall group. | Stig Thormodsrud | |
| 2009-06-15 | Firewall groups fail on bootup - change syntax check to commit check. | Stig Thormodsrud | |
| 2009-06-14 | 0.13.7-54debian/0.13.7-54 | Stig Thormodsrud | |
| 2009-06-14 | Fix 4581: Firewall name issue causes failed commit | Stig Thormodsrud | |
| 2009-06-02 | 0.13.7-53debian/0.13.7-53 | Stig Thormodsrud | |
| 2009-06-02 | Change syntax err msg from default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | 0.13.7-52debian/0.13.7-52 | Stig Thormodsrud | |
| 2009-06-02 | Change firewall default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | 0.13.7-51debian/0.13.7-51 | Mohit Mehta | |
| 2009-06-02 | * fix syntax error message | Mohit Mehta | |
| 2009-06-02 | 0.13.7-50debian/0.13.7-50 | Stig Thormodsrud | |
| 2009-06-02 | Make firewall group comp_help more consistent with the rest of the cli. | Stig Thormodsrud | |
| 2009-06-02 | 0.13.7-49debian/0.13.7-49 | Mohit Mehta | |
| 2009-06-02 | * add default value of 1 for 'limit burst' in its node.def | Mohit Mehta | |
| * add comp_help for 'limit rate' * make sure 'limit rate' is not less than 1/time unit | |||
| 2009-05-29 | 0.13.7-48debian/0.13.7-48 | An-Cheng Huang | |
| 2009-05-28 | 0.13.7-47debian/0.13.7-47 | Bob Gilligan | |
| 2009-05-28 | Bugfix 4462: Fix typo in interface name references. | Bob Gilligan | |
| 2009-05-27 | 0.13.7-46debian/0.13.7-46 | Mohit Mehta | |
| 2009-05-27 | explicitly set conntrack table size to 16384 on system boot | Mohit Mehta | |
| 2009-05-22 | remove unused ifrename | Stephen Hemminger | |
| 2009-05-14 | 0.13.7-45debian/0.13.7-45 | Stig Thormodsrud | |
| 2009-05-14 | Fix 4390: Firewall config error: Cannot specify multiple ports when both | Stig Thormodsrud | |
| source and destination ports are specified. | |||
| 2009-05-13 | 0.13.7-44debian/0.13.7-44 | Mohit Mehta | |
| 2009-05-13 | rectify regex check | Mohit Mehta | |
| 2009-05-12 | 0.13.7-43debian/0.13.7-43 | Mohit Mehta | |
| 2009-05-12 | Fix Bug 4394 reject is an invalid action for rules in modify rulesets | Mohit Mehta | |
| * remove reject as an allowed value for action field in modify & ipv6-modify firewall rulesets | |||
| 2009-05-11 | 0.13.7-42debian/0.13.7-42 | Mohit Mehta | |
| 2009-05-11 | Add 'reject' as a configurable value for default-policy | Mohit Mehta | |
| under name and ipv6-name rulesets | |||
| 2009-05-08 | 0.13.7-41debian/0.13.7-41 | Mohit Mehta | |
| 2009-05-08 | Fix Bug 4388 firewall name shouldn't have been set after commit failed | Mohit Mehta | |
| * undo chain setup and refcnt work if chain rule failed during chain creation | |||
| 2009-05-08 | Bugfix 4340: Enable net.netfilter.nf_conntrack_tcp_be_liberal by default. | Bob Gilligan | |
| The parameter in question loosens the "acceptability" check on TCP sequence and ACK numbers in the TCP conntrack module. This allows connection tracking to survive certain cases where packet loss would cause it to loose sync with the TCP endpoints. | |||
| 2009-05-05 | 0.13.7-40debian/0.13.7-40 | Mohit Mehta | |
| 2009-05-05 | * don't allow user to create a chain that exists in the system. This may be | Mohit Mehta | |
| either vyatta/user defined chains or system chains such as INPUT, OUTPUT etc. * don't allow user to create chains with name starting from 'VZONE'. This is reserved for zone chains created by us. | |||
| 2009-05-01 | 0.13.7-39debian/0.13.7-39 | Mohit Mehta | |
| 2009-05-01 | * setup table only for specific tree, not both filter and mangle | Mohit Mehta | |
| as we teardown table only for the tree that was in the CLI * remove 'next' statement for removed for loop * fix Bug 4244 - Committing firewall changes breaks WAN Load-balancing (WLB) we only delete chains that are configured under firewall and don't touch chains that might be owned by other features such as zone based firewall, WLB * remove unused code, code cleanup | |||
| 2009-04-29 | 0.13.7-38debian/0.13.7-38 | Bob Gilligan | |
| 2009-04-29 | Handle files moved from other packages to this package. | Bob Gilligan | |
| Add "Replace:" clause for each package from which files were moved. | |||
| 2009-04-29 | 0.13.7-37debian/0.13.7-37 | Stephen Hemminger | |
| 2009-04-29 | Rename virtual-ethernet to pseudo-ethernet | Stephen Hemminger | |
| 2009-04-27 | 0.13.7-36debian/0.13.7-36 | Mohit Mehta | |
| 2009-04-27 | outlaw applying firewall to an interface that is defined under a zone | Mohit Mehta | |
| 2009-04-27 | 0.13.7-35debian/0.13.7-35 | Stig Thormodsrud | |
 |
index : vyatta-cfg-firewall.git | |
| Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git) |
| summaryrefslogtreecommitdiff |