summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2022-12-09network-groups: T4869: Fixed operations with /32 and /128 netmaskszsdc
2022-09-19ipset: T2189: optimized firewall groups performancezsdc
2022-01-11firewall: T4100: default action numbergoodNETnick
2019-06-19[ipset] T1456: Add check for duplicate items in port-group before commitzsdc
2018-12-17T1111: use unique recent packet list names in rules.Daniil Baturin
2018-11-18T573: add support for matching IPv6 hop limit.Daniil Baturin
2018-04-11Task T35 - fixing prune_deleted_sets for inet6 familyMarian Tudosoiu
2018-03-26Task T35 - fixing scoping rulesmtudosoiu
2018-03-23Task T35 change to solve port-group issueMarian Tudosoiu
2018-03-14Task T35 place ipv6 groups under group config treemtudosoiu
2018-03-12Task T35 - add support for IPv6 firewall adddress and network groupsMarian Tudosoiu
2015-12-12vyatta-cfg-firewall: update network-group check to allow "this" networkAlex Harpin
2015-12-12vyatta-cfg-firewall: formatting changes for style consistencyAlex Harpin
2014-08-02Bug #128: do not call ipset for every port/address in range.Daniil Baturin
2013-01-22Fixing 8622Gaurav Sinha
2012-11-20Fix rc usage as per ispet_delete and other commandsGaurav Sinha
2012-11-19Add signal handler to handle CTRL+C to avoid commit blockade on lock fileGaurav Sinha
2012-11-19added reset all groups functionsGaurav Sinha
2012-11-19reset functions for named ipset rule implementation with commit lockGaurav Sinha
2012-11-19initial script for reset firewall group commandGaurav Sinha
2012-10-06PBR: config command validations, help strings etc. cleaned up andsusheela
2012-09-138330: return rule number in error messageGaurav Sinha
2012-09-07Fixing 3167, mandate multiport values after single port, remove misleading er...Gaurav Sinha
2012-09-05add support for main tableRobert Bays
2012-09-03changes to policy tables to add acceptRobert Bays
2012-09-03initial checkin for pbr functionalityRobert Bays
2012-06-22fixing 8173: moving CT_HELPER chain just before CTTIMEOUTGaurav Sinha
2012-06-07Adding functions to conditionally add CT_HELPER chain and remove when not in ...Gaurav Sinha
2012-04-30service names with hyphen need to be escaped using square brackets.Gaurav Sinha
2012-02-29fixing 7047Gaurav
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
2011-05-03modify firewall groups to work with new commitnapa-devAn-Cheng Huang
2011-03-04changes for ipset 6.0An-Cheng Huang
2010-11-29Fix 6442: Request to remove "Error: ipt_disable_conntrack failed to findStig Thormodsrud
2010-11-29Merge branch 'mendocino' of http://git.vyatta.com/vyatta-cfg-firewall into me...Stig Thormodsrud
2010-11-29Show if logging is enabled on the default action.Stig Thormodsrud
2010-11-11Fix Bug 6421 cannot set content-inspection in the sameMohit Mehta
2010-10-30Fix 5247: Firewall groups CLI becomes out of sync with ipset when sets and de...Stig Thormodsrud
2010-10-15Change snort queue target use default queue.Stig Thormodsrud
2010-10-15Fix 6296: "iptables: No chain..." message when committing the firewall group ...Stig Thormodsrud
2010-10-14Add Iptables::Mgr route to get queue target.Stig Thormodsrud
2010-10-01move chain_referenced function to Mgr.pm moduleMohit Mehta
2010-09-21* move count_iptables_rule to Iptables::Mgr and update it's usageMohit Mehta
2010-09-10Fix Bug 5309 Allow modifyining TCP MSS optionMohit Mehta
2010-08-31Fix 6125: iptables errors on boot up of mendocinoStig Thormodsrud
2010-08-11get rid of lintian warningsAn-Cheng Huang
2010-07-13Fix Bug 5744 unable to use firewall group with recent match conditionMohit Mehta
2010-06-11Add support for firewall enable-default-log.Stig Thormodsrud
2010-06-11Fix ipt_disable_conntrack() to delete correct chain.Stig Thormodsrud
2010-06-10Infrastruction needed for bug 5583.Stig Thormodsrud