summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-03-16use add instead of create, use inet, pre-pend protocol to iptables ruleGaurav Sinha
2012-03-16use right path of the nfct executableGaurav
(cherry picked from commit 2a54181a2a4117ecfa681cde22c527e043303607)
2012-03-16changing nfct-timeout to nfct timeoutGaurav
(cherry picked from commit 0cd705236af16e8517b11478366f9fde4ea5c94b)
2012-03-16Using connection instead of flow to refer to 5 tuple in help stringsGaurav
(cherry picked from commit 43bf1c43f253f67ff195b0bd831d6903d2ddcefe)
2012-03-16check presence of protocol config subtreeGaurav
(cherry picked from commit 54ca4cdaa0c665763f6d14d94c3ef16fbdf014ed)
2012-03-16Updated help strings to avoid confusion with global timeoutsGaurav
(cherry picked from commit a9d6f31725efc5fa28af0b9df00b277054a5f45f)
2012-03-16do_protocol_check function, mandates one protocol subtree per rule maxGaurav
(cherry picked from commit c69383c5187f1e702a7146d3762834b70874a344)
2012-03-16handle modification, disabled error handling for now as iptables does not ↵Gaurav
support timeout target yet (cherry picked from commit f2a6927d2a500142e71aa098491f9b72c802d418)
2012-03-16re-factoredGaurav
(cherry picked from commit a4a349b09923e797e2dbb24c50a151ddec91473d)
2012-03-16add run_cmd function with error checkingGaurav
(cherry picked from commit 10cd7d81497d87aed44287244f112990768cdfe2)
2012-03-16adding apply/remove policy function, still dummyGaurav
(cherry picked from commit bc000f9a538e67545dd7b1edb49385e158067639)
2012-03-16Adding deletion, error handling etc.Gaurav
(cherry picked from commit 6a59a800acf9a9f6a21677e6187a33647ceb3539)
2012-03-16Error checks for ports with other/icmp, as not allowedGaurav
(cherry picked from commit 8059ed8d3cfa033dc6b48e79dd66cdcd1ecc5ae9)
2012-03-16Removed default timeouts for override udp/icmp/other, fixed minor bugsGaurav
(cherry picked from commit 57353c5720699e641d2ab85a0ed8a9eae09520e7)
2012-03-16Fixing nfct-command string:only modified timer is included in the commandGaurav
(cherry picked from commit 9e17315753bb98c677ec5b11c9e52f6a9f5d80a8)
2012-03-16Fixing templates to avoid defaults since these rules override the global ↵Gaurav
defaults (cherry picked from commit d94051fce5433de66860d762fc0a7aa7186564d9)
2012-03-16Add function to create nfct-timeout policyGaurav
(cherry picked from commit d15993bc83942d5841886c0f290430530b009174)
2012-03-16changing structure of hashes kept for timeoutsGaurav
(cherry picked from commit 3fd99241f39f7482e35c0d4e4a91342fd8d9d4ad)
2012-03-16adding various timers in custom rule templateGaurav
(cherry picked from commit ebae932dd450c23d90d1f9d497e2715af535577f)
2012-03-16modified to use AddressFilter from IpTablesGaurav
(cherry picked from commit 1392750b600cec991e24e7ab0cc211c621e4430a)
2012-03-16removing AddressFilterCT.pmGaurav
(cherry picked from commit 796fc0e8654683733a473f46d3029032bc648f05)
2012-03-16Removing newly added file AddressFilterCT.pm.Gaurav
(cherry picked from commit 0ccdf73e1f7211aed9df214a65f8e953dbfdef42)
2012-03-16Adding rule and address setup/parsing librariesGaurav
(cherry picked from commit 2f59f3ef67d70981ff0501868d5ea206eb9359ae)
2012-03-16timeout script, similar to firewall one, with a few differences.Gaurav
(cherry picked from commit 23a5a4ee111ab1519be62841bf03d555a674b371)
2012-03-16timeouts script, and new nodesGaurav Sinha
(cherry picked from commit e49e60bca2262760575b2a4b488e6acfe1dc0cb6)
2012-03-16adding an initial version of conntrack-timeouts scriptGaurav Sinha
(cherry picked from commit 8235f2a9a3b3e1a5a289c4365d809bb09f941ee4)
2012-03-16Removed unwanted address-group/network group etc. from CLIGaurav Sinha
(cherry picked from commit 50f07ece2595c05179e8ccffa5dd2b28fc8cfc99)
2012-03-16Initial commit for per-flow timeout CLIGaurav Sinha
(cherry picked from commit f7fc0b920516ecf03a7dcf3e73f39513d8fcfc1c)
2012-03-160.30debian/0.30Gaurav Sinha
2012-03-16fixing 7866Gaurav Sinha
(cherry picked from commit e9e6c678e9f133ba8645b26f107650a9a103768c)
2012-03-030.29debian/0.29Deepti Kulkarni
2012-03-03new branchDeepti Kulkarni
2012-02-160.28debian/0.28Stephen Hemminger
2012-02-14Make sure all node.def files have newline at end of fileStephen Hemminger
Avoid future problems with (like diff) by making sure that there is a newline on last line of file.
2012-01-31reset epochStephen Hemminger
2012-01-040.27debian/0.27Daniil Baturin
2012-01-04Force releaseDaniil Baturin
2011-12-290.26debian/0.26Daniil Baturin
2011-12-29Something looking like a real fix for SIP port update problem.Daniil Baturin
2011-12-21Fix compiler warningsStephen Hemminger
Fix warnings reported by gcc 4.6 and fix bug where wait() return value was not being checked correctly on interrupt or other error.
2011-12-210.25debian/0.25Deepti Kulkarni
2011-12-21Corrected incorrect malloc.Deepti Kulkarni
2011-12-190.24debian/0.24Deepti Kulkarni
2011-12-19Improved validation of command syntax.Deepti Kulkarni
Resolved a typo.
2011-12-160.23debian/0.23Gaurav Sinha
2011-12-16Updating references to ConntrackUtil perl moduleGaurav Sinha
2011-12-160.22debian/0.22Deepti Kulkarni
2011-12-16Resolved merge errors from Makefile.Deepti Kulkarni
Moved ConntrackUtil.pm to Conntrack dir. Bug fix for 7676 for conntrack logging.
2011-12-150.21debian/0.21Gaurav Sinha
2011-12-15Fixing broken build as a result of mergeGaurav Sinha