summaryrefslogtreecommitdiff
path: root/scripts/firewall
AgeCommit message (Expand)Author
2009-04-13Add conntrack and post firewall hooks for IPv6.Bob Gilligan
2009-04-13Fix bug where an empty firewall rule deletes the default drop policy.Stig Thormodsrud
2009-04-13Move firewall "end" processing down to each table.Stig Thormodsrud
2009-04-09Add ability for firename to select default policy.Stig Thormodsrud
2009-04-08Fix faulty search loop.Stig Thormodsrud
2009-04-07Apply interface firewalls to separate VYATTA_(IN|OUT)_HOOK.Stig Thormodsrud
2009-03-27Revert "Allow user configurable default-policy on firewall."Stig Thormodsrud
2009-03-27Allow user configurable default-policy on firewall.Stig Thormodsrud
2009-03-12Doing strict ES won't work for routerStephen Hemminger
2009-03-12Don't use -PStephen Hemminger
2009-03-12Enable strict host matchingStephen Hemminger
2009-03-04Don't attempt to delete ruleset from "other" treesBob Gilligan
2009-02-24Allow IPv6 firewall rulesets to be configured on an interface independent of ...Bob Gilligan
2009-02-15Add support for ranges in firewall group address & port.Stig Thormodsrud
2009-02-13Add description and references to "show firewall group".Stig Thormodsrud
2009-02-13Add show-set to display all sets.Stig Thormodsrud
2009-02-13Add support for "show firewall group".Stig Thormodsrud
2009-02-09Add back parameter that was dropped when converting to use run_cmd().Stig Thormodsrud
2009-02-06Add carriage return to error message.Stig Thormodsrud
2009-02-06Add validation of group type.Stig Thormodsrud
2009-02-04Delete commented out code.Stig Thormodsrud
2009-02-03Turn on strict checking and fix warningsStephen Hemminger
2009-02-02Add 1st pass of firewall group support (ipset netfilter moduleStig Thormodsrud
2009-01-29Use iptables comment to identify CLI rule numbers in iptables outputMohit Mehta
2009-01-23Bugfix 4062: Don't reference parameters outside the config tree.Bob Gilligan
2009-01-21Initial support for IPv6.Bob Gilligan
2008-12-03fix for perl module reorganizationAn-Cheng Huang
2008-11-24Convert VyattaConfig to Vyatta::ConfigStephen Hemminger
2008-11-21Rename VyattaIpTablesRule to Vyatta::IpTables::RuleStephen Hemminger
2008-08-21fix for bug 3622: add pre-SNAT hookAn-Cheng Huang
2008-08-21fix for bug 3604: add fragment matching optionsAn-Cheng Huang
2008-08-07fix conntrack enabling mechanismAn-Cheng Huang
2008-08-07fix for bug 2224: add "recent" matchingAn-Cheng Huang
2008-06-04rename "mangle" to "modify"An-Cheng Huang
2008-05-19allow firewall rule to match inbound IPsec packets.An-Cheng Huang
2008-05-13add "inspect" action (maps to QUEUE) so "custom" traffic-filter for IPSAn-Cheng Huang
2008-05-09add mangle table support to firewall configuration. initial implementationAn-Cheng Huang
2008-04-21Merge branch 'glendale' into hollywoodrbalocca
2008-04-16fix for bug 3167: disallow multiport specification if both source andAn-Cheng Huang
2008-04-16fix for bug 3167: get the actual return status from iptables.An-Cheng Huang
2008-04-08add post-firewall hook for other featuresAn-Cheng Huang
2008-04-08fix for bug 3127: look for an exact match to replace/delete.An-Cheng Huang
2008-04-08fix for bug 3127: look for an exact match to replace/delete.An-Cheng Huang
2008-03-10update from VPL1 to GPLv2Stephen Hemminger
2008-03-10Change to GPLv2Stephen Hemminger
2008-02-29fix a problem in the interaction between "firewall" and "interfaces".An-Cheng Huang
2008-02-11move common module to vyatta-cfgAn-Cheng Huang
2008-02-08add address validationAn-Cheng Huang
2008-02-08merge address range into addressAn-Cheng Huang
2008-02-08merge ports in show outputAn-Cheng Huang