| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2012-10-06 | PBR: config command validations, help strings etc. cleaned up and | susheela | |
| includes fixes for 8355, 8362, 8365. | |||
| 2012-09-13 | 8330: return rule number in error message | Gaurav Sinha | |
| 2012-09-07 | Fixing 3167, mandate multiport values after single port, remove misleading ↵ | Gaurav Sinha | |
| error message (cherry picked from commit 94381cfb92ead6d5f32ab37bace5a1cf46efbb9e) | |||
| 2012-09-05 | add support for main table | Robert Bays | |
| 2012-09-03 | changes to policy tables to add accept | Robert Bays | |
| updates to dscp node.def for better help text | |||
| 2012-09-03 | initial checkin for pbr functionality | Robert Bays | |
| 2012-02-29 | fixing 7047 | Gaurav | |
| 2010-11-29 | Show if logging is enabled on the default action. | Stig Thormodsrud | |
| 2010-10-14 | Add Iptables::Mgr route to get queue target. | Stig Thormodsrud | |
| 2010-09-10 | Fix Bug 5309 Allow modifyining TCP MSS option | Mohit Mehta | |
| * add the ability to modify TCP MSS value using modify|ipv6-modify rulesets | |||
| 2010-07-13 | Fix Bug 5744 unable to use firewall group with recent match condition | Mohit Mehta | |
| * use --match-set instead of --set for ipset match * re-arrange rules when ipset and recent match are used together. instead of appending recent match conditions to the rule; place them before ipset match conditions * add debugging output to look at generated rules | |||
| 2010-06-11 | Add support for firewall enable-default-log. | Stig Thormodsrud | |
| 2010-03-24 | Fix 5203: negation in firewall rule causes deprecation message | Stig Thormodsrud | |
| 2009-12-22 | Fix Bug 5173 Firewall becomes out of sync with iptables when logging is used | Mohit Mehta | |
| with action inspect in a rule - increment num of rules with inspect + log | |||
| 2009-08-07 | * Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDP | Mohit Mehta | |
| added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule | |||
| 2009-08-06 | prevent possible situation where the two iptables rules for match condition | Mohit Mehta | |
| 'recent' have different match conditions by moving code for recent to last (cherry picked from commit 0bd1f3013d93c0cf688cda075a3548fb94e6c6d2) | |||
| 2009-07-31 | Fix 4683: Firewall Rule number maximum 1024 reached | Stig Thormodsrud | |
| (cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a) | |||
| 2009-06-02 | Change firewall default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | * add default value of 1 for 'limit burst' in its node.def | Mohit Mehta | |
| * add comp_help for 'limit rate' * make sure 'limit rate' is not less than 1/time unit | |||
| 2009-05-14 | Fix 4390: Firewall config error: Cannot specify multiple ports when both | Stig Thormodsrud | |
| source and destination ports are specified. | |||
| 2009-04-09 | Add ability for firename to select default policy. | Stig Thormodsrud | |
| 2009-02-28 | Fix 3422: fw logging fails if logprefix is too long (> 29 characters) | Stig Thormodsrud | |
| 2009-02-18 | Multiple updates for IPv6: | Bob Gilligan | |
| - Added ICMPv6 config tree - Removed ICMP config tree (it's not used in IPv6) - Removed fragmentation tree (it's not used in IPv6) - Improved parsing for source and destination address parameters - Improved parsing for protocol parameter | |||
| 2009-02-05 | display appropriate anywhere address depending on IPv4 or IPv6 | Mohit Mehta | |
| protocol should be displayed as all when no protocol set | |||
| 2009-02-04 | Reduce duplicate code in setup/setupOrig. | Stig Thormodsrud | |
| 2009-02-03 | Enable strict checking | Stephen Hemminger | |
| Enable strict perl checking. | |||
| 2009-01-30 | Fix Bug 2741 ENH: filter based on ICMP Type/code by name | Mohit Mehta | |
| 2009-01-29 | Use iptables comment to identify CLI rule numbers in iptables output | Mohit Mehta | |
| 2009-01-26 | Fix Bug 2474 https://bugzilla.vyatta.com/show_bug.cgi?id=2474 | Mohit Mehta | |
| 2009-01-23 | Bugfix 4062: Don't reference parameters outside the config tree. | Bob Gilligan | |
| The AddressFilter module was reaching up the config tree to find a config parameter that was used to determine whether the address type was IPv4 or IPv6. This breaks when the functions are called from some locations in the config tree. I added explicity function calls to allow the caller to to set the IP version, obviating the need to reference a config parameter to determin the IP version. | |||
| 2009-01-21 | Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner | Bob Gilligan | |
| 2009-01-21 | Initial support for IPv6. | Bob Gilligan | |
| 2009-01-16 | - Fix Bug 2223 Add rate rate limiting / burst limiting functions to the ↵ | Mohit Mehta | |
| Vyatta firewall - Fix help strings for time-based firewall nodes | |||
| 2009-01-14 | Fix Bug 3653 Add the ability to configure time-based firewall rules | Mohit Mehta | |
| - make available the option to use time with startdate and stopdate | |||
| 2009-01-13 | Fix Bug 3653 Add the ability to configure time-based firewall rules | Mohit Mehta | |
| 2008-12-22 | Fix 2563: Add firewall-rule specific disable configuration parameter. | Stig Thormodsrud | |
| 2008-12-03 | add ipp2p config options | An-Cheng Huang | |
| 2008-11-24 | Convert VyattaConfig to Vyatta::Config | Stephen Hemminger | |
| 2008-11-21 | Rename VyattaIpTablesRule to Vyatta::IpTables::Rule | Stephen Hemminger | |
 |
index : vyatta-cfg-firewall.git | |
| Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git) |
| summaryrefslogtreecommitdiff |