vyatta-cfg-system.git/scripts/zone-mgmt, branch debian/0.17.72 Vyatta system-level configuration templates/scripts (mirror of https://github.com/vyos/vyatta-cfg-system.git) https://git.amelek.net/vyos/vyatta-cfg-system.git/atom?h=debian%2F0.17.72 2010-03-24T22:22:41+00:00 Fix Bug 5487 http redirect url address placed on the router gets blocked by 2010-03-24T22:22:41+00:00 Mohit Mehta mohit.mehta@vyatta.com 2010-03-24T22:22:41+00:00 urn:sha1:6f1a6a7e8dd8bd5315a0faa128db9eafced5cff2 local-zone's firewall when using Zone Based Firewall * changed local zones INPUT and OUTPUT chain rules to allow all local-zone traffic on the loopback interface rather than using address 127.0.0.1 which was too restrictive and blocked certain traffic initiated from and going to local-zone itself. This is compliant with the Zone Concept and similar to what's done for other transient zones as well where rules are interface based Fix Bug 4554 check for existing firewall ruleset fails when applying it to a zone during boot 2009-07-02T19:22:27+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-07-02T19:14:37+00:00 urn:sha1:d9c64f2c8e4daaec06ae63235563191d1e03c966 * use isActive to check if firewall ruleset has been succesfully committed * fix templates to fail inside an action field when a command fails Fix Bug 4593 zone-policy can't be deleted if zone interfaces are bridges 2009-07-01T01:26:40+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-07-01T01:19:15+00:00 urn:sha1:2af0b77728dfa4bd4adad8ab6cbffb2db557ce8b * use new api to get active plus committed nodes Fix Bug 4395 After local-zone is set, traffic from localhost is dropped 2009-05-15T17:52:49+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-05-15T17:52:49+00:00 urn:sha1:fdf8178c6cf7995ef00abac31d931404d1c01533 * do not block traffic sourced from and destined to localhost * do silent validity check when creating zone chains and adding from zone rules 2009-05-06T23:47:28+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-05-06T23:47:28+00:00 urn:sha1:58a5f4da6bf1772a2d20a6ae202fc6611eb4bbfc * add jump to local-zone-out chain in OUTPUT chain for both [ip and ip6] tables 2009-04-25T01:18:40+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-04-25T01:18:40+00:00 urn:sha1:ec65a5a95718314f1b0da036f0395c14b60d172a when traffic from local-zone filtered with firewall to a transit zone * fix case where `ls` spits out error when a firewall type is not set add default-policy node for zones. can be set to drop or reject 2009-04-17T00:38:03+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-04-17T00:38:03+00:00 urn:sha1:42ce34e8e19487360412ebb8e33e88fa5e8dfe04 remove extraneous arguments in function calls add local-zone in|out firewall and clean-up code 2009-04-11T01:33:34+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-04-11T01:33:34+00:00 urn:sha1:15faf9d53d7a6af053ba6eea30fa718ffc513f92 Add 1st pass of zone based firewall support (transit zones only for now) 2009-04-08T01:27:37+00:00 Mohit Mehta mohit.mehta@vyatta.com 2009-04-08T01:27:37+00:00 urn:sha1:d2e2b6bbec89e741b5e6c3e5c3129534170a2146