vyatta-cfg-firewall.git - Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git)

Age	Commit message (Collapse)	Author
2013-01-22	Fixing 8622	Gaurav Sinha
	(cherry picked from commit 6870e3d05f62ceecf4824f551861106409761b35)
2012-11-20	Fix rc usage as per ispet_delete and other commands	Gaurav Sinha
	(cherry picked from commit caae72ccbf2c7f77c637cc51096546404ea8c837)
2012-11-19	Add signal handler to handle CTRL+C to avoid commit blockade on lock file	Gaurav Sinha
	(cherry picked from commit 69de682b364d7bce7aefecb00a4e06eceaeb834d) (cherry picked from commit ed9540b4a92d2abb6719d36418f3827ac313a59d)
2012-11-19	added reset all groups functions	Gaurav Sinha
	(cherry picked from commit b090e8cf73480ba6bbf967bf1fbd8f59e1a8843d) Conflicts: scripts/firewall/vyatta-ipset.pl (cherry picked from commit 2c2cd1aef9eada852084ecebb3c76e468cc56a2a)
2012-11-19	reset functions for named ipset rule implementation with commit lock	Gaurav Sinha
	(cherry picked from commit 6b7808bf6c8dd9d1d9e993969358db2be135beff) Conflicts: scripts/firewall/vyatta-ipset.pl (cherry picked from commit 977f7ad60c252ed3c23176d5e764cd9231784fc7)
2012-11-19	initial script for reset firewall group command	Gaurav Sinha
	(cherry picked from commit c10ab7f443c581ffd31779f6e32b0d28f5c8366f) (cherry picked from commit 2029744d3b7cc83b7568e3fa474c8d079efece38) Conflicts: scripts/firewall/vyatta-ipset.pl
2012-04-30	service names with hyphen need to be escaped using square brackets.	Gaurav Sinha

2011-05-03	modify firewall groups to work with new commitnapa-dev	An-Cheng Huang

2011-03-04	changes for ipset 6.0	An-Cheng Huang

2010-10-30	Fix 5247: Firewall groups CLI becomes out of sync with ipset when sets and ↵	Stig Thormodsrud
	deletes are contained within a single commit
2010-08-11	get rid of lintian warnings	An-Cheng Huang

2010-07-13	Fix Bug 5744 unable to use firewall group with recent match condition	Mohit Mehta
	* use --match-set instead of --set for ipset match * re-arrange rules when ipset and recent match are used together. instead of appending recent match conditions to the rule; place them before ipset match conditions * add debugging output to look at generated rules
2010-03-17	Fix 5453: can't delete "address" under "firewall group <> address-group <> "	Stig Thormodsrud

2010-02-15	Fix 5227: firewall group config can get out of sync with ipset	Stig Thormodsrud

2010-02-12	Fix 5326: firewall group address range wraps at 255.	Stig Thormodsrud

2010-01-22	Fix 5248: Firewall config and show commands hang when showing and committing ↵	Stig Thormodsrud
	address groups.
2009-06-15	Fix negate of firewall group.	Stig Thormodsrud

2009-02-27	Limit address range to a /24, but make easy to change if it's deam too ↵	Stig Thormodsrud
	restrictive.
2009-02-16	- Add check for address range starting with higher address.	Stig Thormodsrud
	- Add natural-order sort for displaying address/network groups.
2009-02-15	Reduce duplicate code.	Stig Thormodsrud

2009-02-15	Change delete_member_range to use the same subnet prefix.	Stig Thormodsrud

2009-02-15	Add support for ranges in firewall group address & port.	Stig Thormodsrud

2009-02-13	Add description and references to "show firewall group".	Stig Thormodsrud

2009-02-13	Cache exists() to reduce calls to external /usr/sbin/ipset.	Stig Thormodsrud

2009-02-13	Add support for "show firewall group".	Stig Thormodsrud

2009-02-10	Change sudo usage to be more consistent.	Stig Thormodsrud

2009-02-10	Clean up mapping between vyatta firewall group_type vs ipset set_type.	Stig Thormodsrud

2009-02-10	Add space in front of match rule just in case other match rules don't.	Stig Thormodsrud

2009-02-10	Add more validation of firewall network-group before calling ipset.	Stig Thormodsrud

2009-02-10	Add more firewall group validation before calling ipset.	Stig Thormodsrud

2009-02-06	Add validation of group type.	Stig Thormodsrud

2009-02-03	Fix perlcritic warnings	Stephen Hemminger
	Should not explicitly return undef
2009-02-02	Add 1st pass of firewall group support (ipset netfilter module	Stig Thormodsrud
	integration).