| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2012-10-06 | PBR: config command validations, help strings etc. cleaned up and | susheela | |
| includes fixes for 8355, 8362, 8365. | |||
| 2012-09-03 | initial checkin for pbr functionality | Robert Bays | |
| 2012-08-29 | fix 8200, don't allow shim6 in allowed list of ipv4 protocols for firewall | Gaurav Sinha | |
| 2012-06-02 | Make firewall syntax checks use the vyatta-util library | John Southworth | |
| 2011-12-02 | Warn users when stateful rules are set with state-policy configured | Mohit Mehta | |
| 2011-12-01 | Bug 6063 ENH: Provide option(s) to globally allow stateful return traffic | Mohit Mehta | |
| * add code to set global policy for established, related, invalid states | |||
| 2011-05-03 | modify firewall groups to work with new commitnapa-dev | An-Cheng Huang | |
| 2011-01-10 | Fix Bug 6292 iptables chain-name must be reduced to 28 characters max | Mohit Mehta | |
| * change syntax check to limit firewall ruleset names to 28 chars and bump firewall cfg-version to enable config migration (cherry picked from commit a0e5b2107d6073a103e0f0c04cc8656f8dc3816b) | |||
| 2010-08-17 | remove low-level config dir usage | An-Cheng Huang | |
| 2010-08-17 | update help text to use val_help | An-Cheng Huang | |
| 2010-08-17 | fix bug 6055 firewall rule help strings are confusing | Mohit Mehta | |
| * add val_help for firewall rule nodes (cherry picked from commit 0a1eb7471e1ec478b2eb22200ab5fc42eaba1e8e) | |||
| 2010-08-17 | fix range in help strings for count parameter under recent | Mohit Mehta | |
| (cherry picked from commit 3210dfe5d41f926840fd9ee6981a9fa89534cfd7) | |||
| 2010-07-27 | Convert firewall rules to val_help: | Stephen Hemminger | |
| Convert some (but not all) of existing rules using comp_help: to use val_help: (cherry picked from commit 77e13fa992a50cc5721bbad64235bff8f8ecd50d) | |||
| 2010-07-21 | undo verb usage at the start of help strings | Mohit Mehta | |
| 2010-07-15 | Fix bug 4629 configuration limit of recent count firewall rule is 20 | Mohit Mehta | |
| * raise recent count limit to 255. add syntax check to disallow invalid values | |||
| 2010-06-11 | Add support for firewall enable-default-log. | Stig Thormodsrud | |
| 2010-01-04 | Don't allow spaces or other shell-confusing characters in firewall name | Stephen Hemminger | |
| Don't allow space, verticalbar, semicolon, ampersand, dollar sign, less or greater than in rule name. This is because of lack of quoting in perl processing Bug 4156 | |||
| 2009-11-30 | added required keyword to help text. | Michael Larson | |
| 2009-10-21 | move priority after tag nodes. | slioch | |
| 2009-10-20 | add priority to node.def files. | slioch | |
| 2009-10-02 | Change syntax exec to syntax pattern. | Stig Thormodsrud | |
| 2009-08-07 | * Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDP | Mohit Mehta | |
| added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule | |||
| 2009-07-31 | Fix 4683: Firewall Rule number maximum 1024 reached | Stig Thormodsrud | |
| (cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a) | |||
| 2009-06-15 | Firewall groups fail on bootup - change syntax check to commit check. | Stig Thormodsrud | |
| 2009-06-02 | Change syntax err msg from default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | Change firewall default-policy to default-action. | Stig Thormodsrud | |
| 2009-06-02 | * fix syntax error message | Mohit Mehta | |
| 2009-06-02 | * add default value of 1 for 'limit burst' in its node.def | Mohit Mehta | |
| * add comp_help for 'limit rate' * make sure 'limit rate' is not less than 1/time unit | |||
| 2009-05-13 | rectify regex check | Mohit Mehta | |
| 2009-05-11 | Add 'reject' as a configurable value for default-policy | Mohit Mehta | |
| under name and ipv6-name rulesets | |||
| 2009-05-05 | * don't allow user to create a chain that exists in the system. This may be | Mohit Mehta | |
| either vyatta/user defined chains or system chains such as INPUT, OUTPUT etc. * don't allow user to create chains with name starting from 'VZONE'. This is reserved for zone chains created by us. | |||
| 2009-05-01 | * setup table only for specific tree, not both filter and mangle | Mohit Mehta | |
| as we teardown table only for the tree that was in the CLI * remove 'next' statement for removed for loop * fix Bug 4244 - Committing firewall changes breaks WAN Load-balancing (WLB) we only delete chains that are configured under firewall and don't touch chains that might be owned by other features such as zone based firewall, WLB * remove unused code, code cleanup | |||
| 2009-04-24 | Move setup/teardown out from top-level firewall node. | Stig Thormodsrud | |
| Add refcnts to know when to teardown. | |||
| 2009-04-13 | Move firewall "end" processing down to each table. | Stig Thormodsrud | |
| Fix bug for global enable/disable of conntrack. | |||
| 2009-04-09 | Add ability for firename to select default policy. | Stig Thormodsrud | |
| 2009-03-27 | Revert "Allow user configurable default-policy on firewall." | Stig Thormodsrud | |
| Further test identified a problem. The patch is broken if a packet must do both an in & out filter. This reverts commit 754d0f4d855a59020afa20ad8867218708b5c978. | |||
| 2009-03-27 | Allow user configurable default-policy on firewall. | Stig Thormodsrud | |
| 2009-03-26 | * add 'redirect' to Valid ICMPv6 Types | Mohit Mehta | |
| * add comp_help for ICMPv4 type-name | |||
| 2009-02-27 | Prevent ';' from being used in a firewall name. | Stig Thormodsrud | |
| 2009-02-26 | Add allow/comp_help to firewall action. | Stig Thormodsrud | |
| 2009-02-25 | Use single quote around $VAR(@). | Stig Thormodsrud | |
| 2009-02-25 | Revert "Make sure to quote $VAR(@)." | Stig Thormodsrud | |
| This reverts commit c5595b67948166f65c8ea2c1ce1890b9aa27fd3d. | |||
| 2009-02-24 | Make sure to quote $VAR(@). | Stig Thormodsrud | |
| 2009-02-24 | Limit firewall name to 29 characters since that is the iptables/ip6tables | Stig Thormodsrud | |
| limit. | |||
| 2009-02-23 | Add "ipv6-modify" firewall configuration sub-tree. | Bob Gilligan | |
| 2009-02-12 | Merge branch 'jenner' of http://git.vyatta.com/vyatta-cfg-firewall into jenner | Stig Thormodsrud | |
| 2009-02-12 | Add allow values for firewall groups. | Stig Thormodsrud | |
| 2009-02-12 | no need to use loop to echo allowed values | Mohit Mehta | |
| 2009-02-12 | better off storing icmp type-names than depend on iptables help | Mohit Mehta | |
| 2009-02-10 | Change sudo usage to be more consistent. | Stig Thormodsrud | |
 |
index : vyatta-cfg-firewall.git | |
| Configuration templates and scripts for the firewall subsystem. (mirror of https://github.com/vyos/vyatta-cfg-firewall.git) |
| summaryrefslogtreecommitdiff |