summaryrefslogtreecommitdiff
path: root/scripts/firewall
AgeCommit message (Collapse)Author
2009-01-29Use iptables comment to identify CLI rule numbers in iptables outputMohit Mehta
2009-01-23Bugfix 4062: Don't reference parameters outside the config tree.Bob Gilligan
The AddressFilter module was reaching up the config tree to find a config parameter that was used to determine whether the address type was IPv4 or IPv6. This breaks when the functions are called from some locations in the config tree. I added explicity function calls to allow the caller to to set the IP version, obviating the need to reference a config parameter to determin the IP version.
2009-01-21Initial support for IPv6.Bob Gilligan
2008-12-03fix for perl module reorganizationAn-Cheng Huang
2008-11-24Convert VyattaConfig to Vyatta::ConfigStephen Hemminger
2008-11-21Rename VyattaIpTablesRule to Vyatta::IpTables::RuleStephen Hemminger
2008-08-21fix for bug 3622: add pre-SNAT hookAn-Cheng Huang
2008-08-21fix for bug 3604: add fragment matching optionsAn-Cheng Huang
2008-08-07fix conntrack enabling mechanismAn-Cheng Huang
2008-08-07fix for bug 2224: add "recent" matchingAn-Cheng Huang
2008-06-04rename "mangle" to "modify"An-Cheng Huang
2008-05-19allow firewall rule to match inbound IPsec packets.An-Cheng Huang
2008-05-13add "inspect" action (maps to QUEUE) so "custom" traffic-filter for IPSAn-Cheng Huang
can be defined in "firewall".
2008-05-09add mangle table support to firewall configuration. initial implementationAn-Cheng Huang
allows MARK and DSCP jump targets.
2008-04-21Merge branch 'glendale' into hollywoodrbalocca
2008-04-16fix for bug 3167: disallow multiport specification if both source andAn-Cheng Huang
destination ports are defined.
2008-04-16fix for bug 3167: get the actual return status from iptables.An-Cheng Huang
2008-04-08add post-firewall hook for other featuresAn-Cheng Huang
2008-04-08fix for bug 3127: look for an exact match to replace/delete.An-Cheng Huang
2008-04-08fix for bug 3127: look for an exact match to replace/delete.An-Cheng Huang
2008-03-10update from VPL1 to GPLv2Stephen Hemminger
2008-03-10Change to GPLv2Stephen Hemminger
VPL 1.0 is replaced with GPL in Glendale.
2008-02-29fix a problem in the interaction between "firewall" and "interfaces".An-Cheng Huang
2008-02-11move common module to vyatta-cfgAn-Cheng Huang
2008-02-08add address validationAn-Cheng Huang
2008-02-08merge address range into addressAn-Cheng Huang
2008-02-08merge ports in show outputAn-Cheng Huang
2008-02-08fix for bug 2789: merge port configuration options.An-Cheng Huang
2008-02-01fix for bug 2528: collapse source/destination "address" and "network".An-Cheng Huang
2007-12-31Bugfix: 2553Bob Gilligan
Send output from "iptables" commands to syslog, not stdout or stderr, so that it doesn't confuse users, but remains available for debugging and troubleshooting.
2007-12-28Bugfix: 2553Bob Gilligan
Eliminate debug output from firewall configuration script so that user is not confused by it.
2007-12-14Move vyatta-show-firewall.pl over to vyatta-op-firewall package.Bob Gilligan
2007-12-10Update vyatta-cfg-firewall package.Bob Gilligan
2007-12-10Initial setup of vyatta-cfg-firewall package.Bob Gilligan