Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-24 | T3115: Add firewall options for bridge vifs | Yuxiang Zhu | |
2021-06-25 | T2023: macsec: fix interface tree reference | Christian Poessinger | |
2021-06-13 | T2023: add macsec interface firewall support | Christian Poessinger | |
(cherry picked from commit 44f91525cc72a26b365bb24cab22344bc5e06540) | |||
2021-06-13 | T3620: rename wirelessmodem -> wwan | Christian Poessinger | |
(cherry picked from commit c5a8a802fa017808ba044d9151dd35a48ae60b94) | |||
2021-04-05 | T3456: add missing priority when removing per interface firewall rules | Christian Poessinger | |
This is the second commit for fixing this issue, the first was for the policy based routing and fixed in commit dc80ce45f95 ("T3456: add missing priority when deleting interface policy"). set firewall name FOO rule 10 action 'accept' set interfaces ethernet eth0 firewall local name 'FOO' commit This was not able to be removed again in one commit, two commits are required. vyos@r4-roll# delete firewall [edit] vyos@r4-roll# delete interfaces ethernet eth0 firewall [edit] vyos@r4-roll# commit [ firewall name FOO ] Firewall configuration error: Cannot delete rule set "FOO" (still in use) delete [ firewall name FOO ] failed delete [ firewall ] failed Commit failed [edit] vyos@r4-roll# (cherry picked from commit 8e1ab2a747a26a3a574c411b95ffb2a3ca7e3854) | |||
2020-02-23 | pppoe: T1318: de-nest pppoe interface | Christian Poessinger | |
2019-06-23 | T1471: Fix wireguard entry in firewall template generator. | Paweł Drewniak | |
2018-12-16 | T1087: add wireguard to interface template generators. | Daniil Baturin | |
2018-07-24 | T666: remove the firewall option from the old VRRP CLI. | Daniil Baturin | |
If left in place, it will create incorrect command definition tree when vyatta-vrrp is removed and cause config loading errors. | |||
2015-05-03 | http://bugzilla.vyos.net/show_bug.cgi?id=494 | Carl Byington | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-05-03 | fix syntax error from sorting | Carl Byington | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-05-03 | fix syntax error from sorting | Carl Byington | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-05-03 | add interfaces/vti/<intf>/policy add ↵ | Carl Byington | |
interfaces/ethernet/<intf>/vrrp/vrrp-group/policy remove interfaces/ethernet/<intf>/pppoa cleanup and sort lists of interfaces Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-05-03 | add firewall config for vrrp interfaces | Carl Byington | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-05-03 | add firewall config for vrrp interfaces | Carl Byington | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2015-04-09 | Sanitize the package. | Daniil Baturin | |
Add dependency on iptables. Don't build the cfg-serial package and don't generate templates for it, serial interfaces support is long dead. Generate templates for dummy interfaces. | |||
2015-02-14 | Bug #487: complete names for added but not commited firewall rulesets. | Daniil Baturin | |
2014-09-20 | Add VXLAN to generated templates. | Daniil Baturin | |
2014-07-02 | Set separate virual interface for QinQ. | Kim Hagen | |
2014-06-26 | Add QinQ to interfaces in template generators node hashes. | Kim Hagen | |
2014-06-26 | Add QinQ to interfaces in template generators. | Kim Hagen | |
2014-04-06 | Bug #170: add L2TPv3 interface type to firewall templates generator. | Daniil Baturin | |
2013-05-22 | Enable generation of SNMP traps on firewall config changes | James Davidson | |
Adds call to vyatta-firewall-trap.pl to end action of firewall nodes. | |||
2012-09-03 | initial checkin for pbr functionality | Robert Bays | |
2012-08-09 | Bugfix 8217: VTI: add firewall cfg commands under interfaces vti | Saurabh Mohan | |
Add support for interface vti for cfg commands for firewall. | |||
2012-05-15 | No need to have vrrp specific interface templates anymore | John Southworth | |
2011-12-02 | Add vrrp interface parameters for bonding vifs | John Southworth | |
2011-12-01 | generate firewall templates for vrrp interfaces | John Southworth | |
2011-11-03 | Add support for vif on pseudo-ethernet | Stephen Hemminger | |
2010-12-06 | Fix help text for firewall interface rules | Stephen Hemminger | |
Bug 6111 Don't use "Set inbound" instead use "Inbound" | |||
2010-12-03 | Fix help text in generated templates | Stephen Hemminger | |
Do not use verb (Set) in help text. Do not put date on generated templates (no useful value). | |||
2010-08-16 | remove low-level config dir usage | An-Cheng Huang | |
2010-04-16 | add input interface templates | Stephen Hemminger | |
2009-12-07 | Add VIF for wireless templates | Stephen Hemminger | |
2009-08-20 | Add templates for wireless devices | Stephen Hemminger | |
2009-07-10 | remove pseudo-ethernet vif | Stephen Hemminger | |
(cherry picked from commit 8e62427eda81ce7c0f88c4f815a4ca7e3e891e11) | |||
2009-05-28 | Bugfix 4462: Fix typo in interface name references. | Bob Gilligan | |
2009-04-29 | Rename virtual-ethernet to pseudo-ethernet | Stephen Hemminger | |
2009-04-24 | bugfix 4297: Don't allow modify rulesets on local traffic. | Bob Gilligan | |
2009-04-24 | Add support for virtual-ethernet | Stephen Hemminger | |
2009-03-31 | Remove extra carriage return that was breaking the generated firewall | Stig Thormodsrud | |
template. | |||
2009-03-30 | Cleanup perl code that generates templates | Stephen Hemminger | |
1. Check for errors in open/mkdir 2. Use mkdir_p in perl rather than calling system 3. Use Perl Best Practices style 3 arg open 4. Put less blank lines in templates 5. reindent with perltidy 6. turn on warnings | |||
2009-03-10 | Bugfix 4203: Name of template should be classical-ipoa, not classical_ipoa | Bob Gilligan | |
2009-03-09 | Automatically generate more per-interface firewall templates. | Bob Gilligan | |
Added code to generate at build time the templates for: bridge, openvpn, multilink, serial, and wirelessmodem interfaces. | |||
2009-03-03 | Fix generated templates for ethernet vifs. | Bob Gilligan | |
2009-02-24 | Allow IPv6 firewall rulesets to be configured on an interface independent of ↵ | Bob Gilligan | |
IPv4. Replaced the hand-coded config templates under each type of interface with script-generated templates. This should be easier to maintain as we add new types of interfaces. Added sub-trees for "modify", "ipv6-name" and "ipv6-modify" under "in", "out" and "local" for all interfaces. Added command-completion for ruleset names being configured on an interface. |