summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-08-02Bug #128: do not call ipset for every port/address in range.Daniil Baturin
ipset now supports adding ranges natively. Deletion still requires deleting every member in this version though.
2013-01-22Fixing 8622Gaurav Sinha
(cherry picked from commit 6870e3d05f62ceecf4824f551861106409761b35)
2012-11-20Fix rc usage as per ispet_delete and other commandsGaurav Sinha
(cherry picked from commit caae72ccbf2c7f77c637cc51096546404ea8c837)
2012-11-19Add signal handler to handle CTRL+C to avoid commit blockade on lock fileGaurav Sinha
(cherry picked from commit 69de682b364d7bce7aefecb00a4e06eceaeb834d) (cherry picked from commit ed9540b4a92d2abb6719d36418f3827ac313a59d)
2012-11-19added reset all groups functionsGaurav Sinha
(cherry picked from commit b090e8cf73480ba6bbf967bf1fbd8f59e1a8843d) Conflicts: scripts/firewall/vyatta-ipset.pl (cherry picked from commit 2c2cd1aef9eada852084ecebb3c76e468cc56a2a)
2012-11-19reset functions for named ipset rule implementation with commit lockGaurav Sinha
(cherry picked from commit 6b7808bf6c8dd9d1d9e993969358db2be135beff) Conflicts: scripts/firewall/vyatta-ipset.pl (cherry picked from commit 977f7ad60c252ed3c23176d5e764cd9231784fc7)
2012-11-19initial script for reset firewall group commandGaurav Sinha
(cherry picked from commit c10ab7f443c581ffd31779f6e32b0d28f5c8366f) (cherry picked from commit 2029744d3b7cc83b7568e3fa474c8d079efece38) Conflicts: scripts/firewall/vyatta-ipset.pl
2012-10-06PBR: config command validations, help strings etc. cleaned up andsusheela
includes fixes for 8355, 8362, 8365.
2012-09-138330: return rule number in error messageGaurav Sinha
2012-09-07Fixing 3167, mandate multiport values after single port, remove misleading ↵Gaurav Sinha
error message (cherry picked from commit 94381cfb92ead6d5f32ab37bace5a1cf46efbb9e)
2012-09-05add support for main tableRobert Bays
2012-09-03changes to policy tables to add acceptRobert Bays
updates to dscp node.def for better help text
2012-09-03initial checkin for pbr functionalityRobert Bays
2012-06-22fixing 8173: moving CT_HELPER chain just before CTTIMEOUTGaurav Sinha
(cherry picked from commit faacba00db46c29fc652217653f9fe0564c1ebac)
2012-06-07Adding functions to conditionally add CT_HELPER chain and remove when not in ↵Gaurav Sinha
use, neither by FW nor by NAT.
2012-04-30service names with hyphen need to be escaped using square brackets.Gaurav Sinha
2012-02-29fixing 7047Gaurav
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
* add code to set global policy for established, related, invalid states
2011-05-03modify firewall groups to work with new commitnapa-devAn-Cheng Huang
2011-03-04changes for ipset 6.0An-Cheng Huang
2010-11-29Fix 6442: Request to remove "Error: ipt_disable_conntrack failed to findStig Thormodsrud
Don't print scary messages when trying to delete something thats not there.
2010-11-29Merge branch 'mendocino' of http://git.vyatta.com/vyatta-cfg-firewall into ↵Stig Thormodsrud
mendocino
2010-11-29Show if logging is enabled on the default action.Stig Thormodsrud
2010-11-11Fix Bug 6421 cannot set content-inspection in the sameMohit Mehta
direction for two or more interfaces * invoke all iptables commands using sudo in the Mgr module. also fixes this bug where chain_referenced was returning wrong value due to permissions issue
2010-10-30Fix 5247: Firewall groups CLI becomes out of sync with ipset when sets and ↵Stig Thormodsrud
deletes are contained within a single commit
2010-10-15Change snort queue target use default queue.Stig Thormodsrud
2010-10-15Fix 6296: "iptables: No chain..." message when committing the firewall group ↵Stig Thormodsrud
configuration. - redirect stderr
2010-10-14Add Iptables::Mgr route to get queue target.Stig Thormodsrud
2010-10-01move chain_referenced function to Mgr.pm moduleMohit Mehta
2010-09-21* move count_iptables_rule to Iptables::Mgr and update it's usageMohit Mehta
2010-09-10Fix Bug 5309 Allow modifyining TCP MSS optionMohit Mehta
* add the ability to modify TCP MSS value using modify|ipv6-modify rulesets
2010-08-31Fix 6125: iptables errors on boot up of mendocinoStig Thormodsrud
Shorten chain from VYATTA_PRE_CT_PREROUTING_HOOK to VYATTA_CT_PREROUTING_HOOK
2010-08-11get rid of lintian warningsAn-Cheng Huang
2010-07-13Fix Bug 5744 unable to use firewall group with recent match conditionMohit Mehta
* use --match-set instead of --set for ipset match * re-arrange rules when ipset and recent match are used together. instead of appending recent match conditions to the rule; place them before ipset match conditions * add debugging output to look at generated rules
2010-06-11Add support for firewall enable-default-log.Stig Thormodsrud
2010-06-11Fix ipt_disable_conntrack() to delete correct chain.Stig Thormodsrud
2010-06-10Infrastruction needed for bug 5583.Stig Thormodsrud
2010-05-06Make sure perl packages load successfullyStephen Hemminger
Standard practice is to end package module with 1;
2010-03-24Fix 5203: negation in firewall rule causes deprecation messageStig Thormodsrud
2010-03-17Fix 5453: can't delete "address" under "firewall group <> address-group <> "Stig Thormodsrud
2010-02-15Fix 5227: firewall group config can get out of sync with ipsetStig Thormodsrud
2010-02-12Fix 5326: firewall group address range wraps at 255.Stig Thormodsrud
2010-01-22Fix 5248: Firewall config and show commands hang when showing and committing ↵Stig Thormodsrud
address groups.
2009-12-22Fix Bug 5173 Firewall becomes out of sync with iptables when logging is usedMohit Mehta
with action inspect in a rule - increment num of rules with inspect + log
2009-08-07* Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDPMohit Mehta
added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule
2009-08-06prevent possible situation where the two iptables rules for match conditionMohit Mehta
'recent' have different match conditions by moving code for recent to last (cherry picked from commit 0bd1f3013d93c0cf688cda075a3548fb94e6c6d2)
2009-08-05add tcp_udp as a valid key to hash. feature developer is responsibleMohit Mehta
for allowing user to use tcp_udp as a valid protocol. currently, this option is planned to be used for NAT and firewall only
2009-07-31Fix 4683: Firewall Rule number maximum 1024 reachedStig Thormodsrud
(cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a)
2009-06-15Fix negate of firewall group.Stig Thormodsrud
2009-06-02Change firewall default-policy to default-action.Stig Thormodsrud
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-25 23:22:38 +0000