summaryrefslogtreecommitdiff
path: root/scripts/firewall/firewall.init.in
AgeCommit message (Expand)Author
2012-08-09Bugfix 8271: Remove Vestigial VRRP hooks. The implementation changed and thes...John Southworth
2012-06-18fix 8112Gaurav Sinha
2012-06-06create nfct helper policies and prepare VYATTA_CT_HELPER chainGaurav Sinha
2012-05-14don't add CTHELPER chain by default on boot. add when needed.Gaurav Sinha
2012-04-16create CT_HELPER chain in PREROUTING and OUTPUTGaurav Sinha
2012-04-16fixing 7998Gaurav Sinha
2012-03-23include CT_TIMEOUT chain for conntrack timeouts.Gaurav
2011-12-27Create VRRP output filter to filter IGMP from vmac interfacesJohn Southworth
2011-12-12Setup filter for VRRP vmac interfacesJohn Southworth
2011-12-01Bug 6063 ENH: Provide option(s) to globally allow stateful return trafficMohit Mehta
2010-09-21* separate out post fw hooks for IN, FWD, OUT. Use count_iptables_rule from libMohit Mehta
2010-08-31Fix 6125: iptables errors on boot up of mendocinoStig Thormodsrud
2010-06-10Infrastruction needed for bug 5583.Stig Thormodsrud
2010-05-17Fix Bug 5588 Add ability to modify conntrack expectation table sizeMohit Mehta
2010-04-09Add VYATTA_PRE_DNAT_HOOK in nat PREROUTING table.Stig Thormodsrud
2009-09-22Bugfix 4951: Don't fail if IPv6 kernel module is not loaded.Bob Gilligan
2009-05-27explicitly set conntrack table size to 16384 on system bootMohit Mehta
2009-05-08Bugfix 4340: Enable net.netfilter.nf_conntrack_tcp_be_liberal by default.Bob Gilligan
2009-04-13Add conntrack and post firewall hooks for IPv6.Bob Gilligan
2009-03-12Doing strict ES won't work for routerStephen Hemminger
2009-03-12Don't use -PStephen Hemminger
2009-03-12Enable strict host matchingStephen Hemminger
2008-08-21fix for bug 3622: add pre-SNAT hookAn-Cheng Huang
2008-04-08add post-firewall hook for other featuresAn-Cheng Huang
2008-03-10update from VPL1 to GPLv2Stephen Hemminger
2007-12-10Update vyatta-cfg-firewall package.Bob Gilligan