summaryrefslogtreecommitdiff
path: root/templates/firewall
AgeCommit message (Collapse)Author
2010-09-13Fix bug 6149 Warning on boot because of modprobe config file namesMohit Mehta
* rename existing files instead of removing em. rename sip option file as well
2010-09-13Fix Bug 6149 Warning on boot because of modprobe config file namesMohit Mehta
* add .conf suffix to files in /etc/modprobe.d * remove old files without the suffix [from a previous release] during upgrade
2010-09-10Fix Bug 5309 Allow modifyining TCP MSS optionMohit Mehta
* add the ability to modify TCP MSS value using modify|ipv6-modify rulesets
2010-08-17remove low-level config dir usageAn-Cheng Huang
2010-08-17update help text to use val_helpAn-Cheng Huang
2010-08-17Fix 5917: FW: Max characters exceeded for ipset rule when using "set firewallStig Thormodsrud
group address-group" command - handle special case where temp group begins with a '-'. (cherry picked from commit fa22559d3baa7ae5443f14e0ff774c4d6a49cc36)
2010-08-17fix bug 6055 firewall rule help strings are confusingMohit Mehta
* add val_help for firewall rule nodes (cherry picked from commit 0a1eb7471e1ec478b2eb22200ab5fc42eaba1e8e)
2010-08-17fix range in help strings for count parameter under recentMohit Mehta
(cherry picked from commit 3210dfe5d41f926840fd9ee6981a9fa89534cfd7)
2010-08-11remove CLI backend env variables usageAn-Cheng Huang
* use the new cli-shell-api instead.
2010-07-27Fix 5917: FW: Max characters exceeded for ipset rule when using "set ↵Stig Thormodsrud
firewall group address-group" command (cherry picked from commit 37638769fdaf40c5882eef3614e02f0aadbb1bba)
2010-07-27Convert firewall rules to val_help:Stephen Hemminger
Convert some (but not all) of existing rules using comp_help: to use val_help: (cherry picked from commit 77e13fa992a50cc5721bbad64235bff8f8ecd50d)
2010-07-21undo verb usage at the start of help stringsMohit Mehta
2010-07-15Fix bug 4629 configuration limit of recent count firewall rule is 20Mohit Mehta
* raise recent count limit to 255. add syntax check to disallow invalid values
2010-06-11Add support for firewall enable-default-log.Stig Thormodsrud
2010-05-31Bugfix 5632: Add ability to configure SIP UDP port numbers.Bob Gilligan
2010-05-20need to restart conntrackd when conntrack table size changesMohit Mehta
2010-05-17Fix Bug 5588 Add ability to modify conntrack expectation table sizeMohit Mehta
* added 'firewall conntrack-expect-table-size' to modify expect table's size * added 'firewall conntrack-hash-size' to set hash size for conntrack table
2010-03-18Fix firewall group parent delete while still referenced.Stig Thormodsrud
2010-02-15Fix 5227: firewall group config can get out of sync with ipsetStig Thormodsrud
2010-01-04Add same restrictions to ipv6-firewall nameStephen Hemminger
See Bug 4156 fix.
2010-01-04Don't allow spaces or other shell-confusing characters in firewall nameStephen Hemminger
Don't allow space, verticalbar, semicolon, ampersand, dollar sign, less or greater than in rule name. This is because of lack of quoting in perl processing Bug 4156
2009-11-30added required keyword to help text.Michael Larson
2009-10-21move priority after tag nodes.slioch
2009-10-20add priority to node.def files.slioch
2009-10-02Change syntax exec to syntax pattern.Stig Thormodsrud
2009-09-22Bugfix 4951: Don't fail if IPv6 kernel module is not loaded.Bob Gilligan
Handle the case where the IPv6 kernel module is not loaded more gracefully.
2009-08-31fix for bug 4794 SIP Helper/ALG module does not translate RTP traffic...rbays
added new configuration parameters: firewall conntrack-options sip enable-indirect-media firewall conntrack-options sip enable-indirect-signalling (cherry picked from commit 8d73836b37bae1cb8e8211bc483bf55c51241542)
2009-08-07* Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDPMohit Mehta
added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule
2009-07-31Fix 4683: Firewall Rule number maximum 1024 reachedStig Thormodsrud
(cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a)
2009-06-15Fix negate of firewall group.Stig Thormodsrud
2009-06-15Firewall groups fail on bootup - change syntax check to commit check.Stig Thormodsrud
2009-06-02Change syntax err msg from default-policy to default-action.Stig Thormodsrud
2009-06-02Change firewall default-policy to default-action.Stig Thormodsrud
2009-06-02* fix syntax error messageMohit Mehta
2009-06-02Make firewall group comp_help more consistent with the rest of the cli.Stig Thormodsrud
2009-06-02* add default value of 1 for 'limit burst' in its node.defMohit Mehta
* add comp_help for 'limit rate' * make sure 'limit rate' is not less than 1/time unit
2009-05-13rectify regex checkMohit Mehta
2009-05-12Fix Bug 4394 reject is an invalid action for rules in modify rulesetsMohit Mehta
* remove reject as an allowed value for action field in modify & ipv6-modify firewall rulesets
2009-05-11Add 'reject' as a configurable value for default-policyMohit Mehta
under name and ipv6-name rulesets
2009-05-05* don't allow user to create a chain that exists in the system. This may beMohit Mehta
either vyatta/user defined chains or system chains such as INPUT, OUTPUT etc. * don't allow user to create chains with name starting from 'VZONE'. This is reserved for zone chains created by us.
2009-05-01* setup table only for specific tree, not both filter and mangleMohit Mehta
as we teardown table only for the tree that was in the CLI * remove 'next' statement for removed for loop * fix Bug 4244 - Committing firewall changes breaks WAN Load-balancing (WLB) we only delete chains that are configured under firewall and don't touch chains that might be owned by other features such as zone based firewall, WLB * remove unused code, code cleanup
2009-04-24Move setup/teardown out from top-level firewall node.Stig Thormodsrud
Add refcnts to know when to teardown.
2009-04-22Fix Bug 4261 - Features missing in various firewall sub-treesMohit Mehta
add 'disable', 'fragment', 'ipsec', and 'recent' under 'firewall modify' tree
2009-04-13Move firewall "end" processing down to each table.Stig Thormodsrud
Fix bug for global enable/disable of conntrack.
2009-04-09Add ability for firename to select default policy.Stig Thormodsrud
2009-04-07Apply interface firewalls to separate VYATTA_(IN|OUT)_HOOK.Stig Thormodsrud
This enforces in firewall to be processed before out firewall.
2009-04-03Bugfix 4261: Add support to configure "limit" for IPv6 modify rulesets.Bob Gilligan
2009-04-03Bugfix 4261: Add support to configure "limit" in IPv6.Bob Gilligan
2009-03-27Revert "Allow user configurable default-policy on firewall."Stig Thormodsrud
Further test identified a problem. The patch is broken if a packet must do both an in & out filter. This reverts commit 754d0f4d855a59020afa20ad8867218708b5c978.
2009-03-27Allow user configurable default-policy on firewall.Stig Thormodsrud
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-21 00:25:50 +0000