summaryrefslogtreecommitdiff
path: root/templates/zone-policy
AgeCommit message (Collapse)Author
2010-03-24Fix Bug 5487 http redirect url address placed on the router gets blocked byMohit Mehta
local-zone's firewall when using Zone Based Firewall * changed local zones INPUT and OUTPUT chain rules to allow all local-zone traffic on the loopback interface rather than using address 127.0.0.1 which was too restrictive and blocked certain traffic initiated from and going to local-zone itself. This is compliant with the Zone Concept and similar to what's done for other transient zones as well where rules are interface based
2009-10-15partial fix for bug 4903.slioch
2009-10-02use pattern instead of execMohit Mehta
2009-07-02Fix Bug 4554 check for existing firewall ruleset fails when applying it to a ↵Mohit Mehta
zone during boot * use isActive to check if firewall ruleset has been succesfully committed * fix templates to fail inside an action field when a command fails
2009-06-17temporarily undo check for firewall ruleset until bug 4554 is resolvedMohit Mehta
2009-06-03change default-policy to default-action for zonesMohit Mehta
2009-05-15Don't advertise loopback interface as an allowed value for zone interfacesMohit Mehta
We do not have firewall under 'interface loopback' either
2009-05-06* do silent validity check when creating zone chains and adding from zone rulesMohit Mehta
2009-05-05* restrict zone name to 20 charactersMohit Mehta
2009-04-24* add jump to local-zone-out chain in OUTPUT chain for both [ip and ip6] tablesMohit Mehta
when traffic from local-zone filtered with firewall to a transit zone * fix case where `ls` spits out error when a firewall type is not set
2009-04-16add default-policy node for zones. can be set to drop or rejectMohit Mehta
remove extraneous arguments in function calls
2009-04-10add local-zone in|out firewall and clean-up codeMohit Mehta
2009-04-07Add 1st pass of zone based firewall support (transit zones only for now)Mohit Mehta