| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2009-07-31 | Fix 4683: Firewall Rule number maximum 1024 reached | Stig Thormodsrud | |
| (cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a) | |||
| 2009-06-15 | Firewall groups fail on bootup - change syntax check to commit check. | Stig Thormodsrud | |
| 2009-06-02 | Change syntax err msg from default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | Change firewall default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | * fix syntax error message | Mohit Mehta | |
| 2009-06-02 | * add default value of 1 for 'limit burst' in its node.def | Mohit Mehta | |
| * add comp_help for 'limit rate' * make sure 'limit rate' is not less than 1/time unit | |||
| 2009-05-13 | rectify regex check | Mohit Mehta | |
| 2009-05-11 | Add 'reject' as a configurable value for default-policy | Mohit Mehta | |
| under name and ipv6-name rulesets | |||
| 2009-05-05 | * don't allow user to create a chain that exists in the system. This may be | Mohit Mehta | |
| either vyatta/user defined chains or system chains such as INPUT, OUTPUT etc. * don't allow user to create chains with name starting from 'VZONE'. This is reserved for zone chains created by us. | |||
| 2009-05-01 | * setup table only for specific tree, not both filter and mangle | Mohit Mehta | |
| as we teardown table only for the tree that was in the CLI * remove 'next' statement for removed for loop * fix Bug 4244 - Committing firewall changes breaks WAN Load-balancing (WLB) we only delete chains that are configured under firewall and don't touch chains that might be owned by other features such as zone based firewall, WLB * remove unused code, code cleanup | |||
| 2009-04-24 | Move setup/teardown out from top-level firewall node. | Stig Thormodsrud | |
| Add refcnts to know when to teardown. | |||
| 2009-04-13 | Move firewall "end" processing down to each table. | Stig Thormodsrud | |
| Fix bug for global enable/disable of conntrack. | |||
| 2009-04-09 | Add ability for firename to select default policy. | Stig Thormodsrud | |
| 2009-03-27 | Revert "Allow user configurable default-policy on firewall." | Stig Thormodsrud | |
| Further test identified a problem. The patch is broken if a packet must do both an in & out filter. This reverts commit 754d0f4d855a59020afa20ad8867218708b5c978. | |||
| 2009-03-27 | Allow user configurable default-policy on firewall. | Stig Thormodsrud | |
| 2009-03-26 | * add 'redirect' to Valid ICMPv6 Types | Mohit Mehta | |
| * add comp_help for ICMPv4 type-name | |||
| 2009-02-27 | Prevent ';' from being used in a firewall name. | Stig Thormodsrud | |
| 2009-02-26 | Add allow/comp_help to firewall action. | Stig Thormodsrud | |
| 2009-02-25 | Use single quote around $VAR(@). | Stig Thormodsrud | |
| 2009-02-25 | Revert "Make sure to quote $VAR(@)." | Stig Thormodsrud | |
| This reverts commit c5595b67948166f65c8ea2c1ce1890b9aa27fd3d. | |||
| 2009-02-24 | Make sure to quote $VAR(@). | Stig Thormodsrud | |
| 2009-02-24 | Limit firewall name to 29 characters since that is the iptables/ip6tables | Stig Thormodsrud | |
| limit. | |||
| 2009-02-23 | Add "ipv6-modify" firewall configuration sub-tree. | Bob Gilligan | |
| 2009-02-12 | Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner | Stig Thormodsrud | |
| 2009-02-12 | Add allow values for firewall groups. | Stig Thormodsrud | |
| 2009-02-12 | no need to use loop to echo allowed values | Mohit Mehta | |
| 2009-02-12 | better off storing icmp type-names than depend on iptables help | Mohit Mehta | |
| 2009-02-10 | Change sudo usage to be more consistent. | Stig Thormodsrud | |
| 2009-02-06 | Add validation of group type. | Stig Thormodsrud | |
| 2009-02-02 | Add 1st pass of firewall group support (ipset netfilter module | Stig Thormodsrud | |
| integration). | |||
| 2009-01-30 | Fix Bug 2741 ENH: filter based on ICMP Type/code by name | Mohit Mehta | |
| 2009-01-26 | Fix Bug 2474 https://bugzilla.vyatta.com/show_bug.cgi?id=2474 | Mohit Mehta | |
| 2009-01-16 | - Fix Bug 2223 Add rate rate limiting / burst limiting functions to the ↵ | Mohit Mehta | |
| Vyatta firewall - Fix help strings for time-based firewall nodes | |||
| 2009-01-14 | Fix Bug 3653 Add the ability to configure time-based firewall rules | Mohit Mehta | |
| - make available the option to use time with startdate and stopdate | |||
| 2009-01-13 | Fix Bug 3653 Add the ability to configure time-based firewall rules | Mohit Mehta | |
| 2008-12-22 | Fix 2563: Add firewall-rule specific disable configuration parameter. | Stig Thormodsrud | |
| 2008-12-20 | Fix 3626: Not all protocol numbers are accepted in firewall rules. | Stig Thormodsrud | |
| 2008-12-09 | Cleanup firewall templates for readability. Update help strings to reflect ↵ | Bob Gilligan | |
| IPv4. | |||
| 2008-12-03 | add ipp2p config options | An-Cheng Huang | |
| 2008-08-21 | fix for bug 3604: add fragment matching options | An-Cheng Huang | |
| 2008-08-07 | fix for bug 2224: add "recent" matching | An-Cheng Huang | |
| 2008-05-19 | allow firewall rule to match inbound IPsec packets. | An-Cheng Huang | |
| 2008-05-13 | add "inspect" action (maps to QUEUE) so "custom" traffic-filter for IPS | An-Cheng Huang | |
| can be defined in "firewall". | |||
| 2008-04-09 | Fix Bug 3069 Help strings should be standardized | Mohit Mehta | |
| - help strings standardized for vyatta-cfg-firewall | |||
| 2008-02-08 | merge address range into address | An-Cheng Huang | |
| 2008-02-08 | fix for bug 2789: merge port configuration options. | An-Cheng Huang | |
| 2008-02-01 | fix for bug 2528: collapse source/destination "address" and "network". | An-Cheng Huang | |
| 2008-02-01 | fix for bug 2591: update help text | An-Cheng Huang | |
| 2008-01-31 | convert templates to new syntax | An-Cheng Huang | |
| 2007-12-10 | Initial setup of vyatta-cfg-firewall package. | Bob Gilligan | |
 |
index : vyatta-cfg-firewall.git | |
| Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git) |
| summaryrefslogtreecommitdiff |