summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2012-11-17Add signal handler to handle CTRL+C to avoid commit blockade on lock fileGaurav Sinha
2012-11-16added reset all groups functionsGaurav Sinha
2012-11-16reset functions for named ipset rule implementation with commit lockroot
2012-11-16initial script for reset firewall group commandroot
2012-09-07Fixing 3167, mandate multiport values after single port, remove misleading er...Gaurav Sinha
2012-06-22fixing 8173: moving CT_HELPER chain just before CTTIMEOUTGaurav Sinha
2012-06-11Adding functions to conditionally add CT_HELPER chain and remove when not in ...Gaurav Sinha
2012-02-29fixing 7047Gaurav
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
2011-05-03modify firewall groups to work with new commitnapa-devAn-Cheng Huang
2011-03-04changes for ipset 6.0An-Cheng Huang
2010-11-29Fix 6442: Request to remove "Error: ipt_disable_conntrack failed to findStig Thormodsrud
2010-11-29Merge branch 'mendocino' of http://git.vyatta.com/vyatta-cfg-firewall into me...Stig Thormodsrud
2010-11-29Show if logging is enabled on the default action.Stig Thormodsrud
2010-11-11Fix Bug 6421 cannot set content-inspection in the sameMohit Mehta
2010-10-30Fix 5247: Firewall groups CLI becomes out of sync with ipset when sets and de...Stig Thormodsrud
2010-10-15Change snort queue target use default queue.Stig Thormodsrud
2010-10-15Fix 6296: "iptables: No chain..." message when committing the firewall group ...Stig Thormodsrud
2010-10-14Add Iptables::Mgr route to get queue target.Stig Thormodsrud
2010-10-01move chain_referenced function to Mgr.pm moduleMohit Mehta
2010-09-21* move count_iptables_rule to Iptables::Mgr and update it's usageMohit Mehta
2010-09-10Fix Bug 5309 Allow modifyining TCP MSS optionMohit Mehta
2010-08-31Fix 6125: iptables errors on boot up of mendocinoStig Thormodsrud
2010-08-11get rid of lintian warningsAn-Cheng Huang
2010-07-13Fix Bug 5744 unable to use firewall group with recent match conditionMohit Mehta
2010-06-11Add support for firewall enable-default-log.Stig Thormodsrud
2010-06-11Fix ipt_disable_conntrack() to delete correct chain.Stig Thormodsrud
2010-06-10Infrastruction needed for bug 5583.Stig Thormodsrud
2010-05-06Make sure perl packages load successfullyStephen Hemminger
2010-03-24Fix 5203: negation in firewall rule causes deprecation messageStig Thormodsrud
2010-03-17Fix 5453: can't delete "address" under "firewall group <> address-group <> "Stig Thormodsrud
2010-02-15Fix 5227: firewall group config can get out of sync with ipsetStig Thormodsrud
2010-02-12Fix 5326: firewall group address range wraps at 255.Stig Thormodsrud
2010-01-22Fix 5248: Firewall config and show commands hang when showing and committing ...Stig Thormodsrud
2009-12-22Fix Bug 5173 Firewall becomes out of sync with iptables when logging is usedMohit Mehta
2009-08-07* Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDPMohit Mehta
2009-08-06prevent possible situation where the two iptables rules for match conditionMohit Mehta
2009-08-05add tcp_udp as a valid key to hash. feature developer is responsibleMohit Mehta
2009-07-31Fix 4683: Firewall Rule number maximum 1024 reachedStig Thormodsrud
2009-06-15Fix negate of firewall group.Stig Thormodsrud
2009-06-02Change firewall default-policy to default-action.Stig Thormodsrud
2009-06-02* add default value of 1 for 'limit burst' in its node.defMohit Mehta
2009-05-14Fix 4390: Firewall config error: Cannot specify multiple ports when bothStig Thormodsrud
2009-04-09Add ability for firename to select default policy.Stig Thormodsrud
2009-02-28Fix 3422: fw logging fails if logprefix is too long (> 29 characters)Stig Thormodsrud
2009-02-27Limit address range to a /24, but make easy to change if it's deam too restri...Stig Thormodsrud
2009-02-18Multiple updates for IPv6:Bob Gilligan
2009-02-16- Add check for address range starting with higher address.Stig Thormodsrud
2009-02-15Reduce duplicate code.Stig Thormodsrud
2009-02-15Change delete_member_range to use the same subnet prefix.Stig Thormodsrud