summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-06-050.36debian/0.36Gaurav Sinha
2012-06-05Fix nfct path as per new packaging due to cthelperGaurav Sinha
2012-04-160.35debian/0.35Gaurav Sinha
2012-04-16fixing 7998Gaurav Sinha
2012-04-090.34debian/0.34Gaurav
2012-04-09fixing bug 7861, resolve protocol name from /etc/protocols.Gaurav
2012-03-230.33debian/0.33Gaurav
2012-03-23Merge branch 'oxnard' into pacificaGaurav
Conflicts: debian/changelog
2012-03-230.28+oxnard4vyatta/VC6.4-2012.05.31/i386vyatta/VC6.4-2012.05.31/amd64vyatta/VC6.4-2012.04.30/i386vyatta/VC6.4-2012.04.30/amd64vyatta/VC6.4-2012.03.27/i386vyatta/VC6.4-2012.03.27/amd64debian/0.28+oxnard4Gaurav
2012-03-23introducing CT_TIMEOUT chain with related fixes.Gaurav
2012-03-200.32debian/0.32Gaurav
2012-03-20ct timeouts changesGaurav
2012-03-200.28+oxnard3debian/0.28+oxnard3Gaurav
2012-03-20Merge branch 'cttimeout_pacifica' into oxnardGaurav
Brings in the changes needed for connection tracking timeouts per connection. Conflicts: .frlog debian/changelog
2012-03-170.31debian/0.31Gaurav Sinha
2012-03-17delete nfct fixed, use only policy name, modified deletion functionGaurav Sinha
2012-03-16fixed generic timeout, udp stream->replied and other->unreplied, fixed bug ↵Gaurav Sinha
with protocol string comparision
2012-03-16use add instead of create, use inet, pre-pend protocol to iptables ruleGaurav Sinha
2012-03-16use right path of the nfct executableGaurav
(cherry picked from commit 2a54181a2a4117ecfa681cde22c527e043303607)
2012-03-16changing nfct-timeout to nfct timeoutGaurav
(cherry picked from commit 0cd705236af16e8517b11478366f9fde4ea5c94b)
2012-03-16Using connection instead of flow to refer to 5 tuple in help stringsGaurav
(cherry picked from commit 43bf1c43f253f67ff195b0bd831d6903d2ddcefe)
2012-03-16check presence of protocol config subtreeGaurav
(cherry picked from commit 54ca4cdaa0c665763f6d14d94c3ef16fbdf014ed)
2012-03-16Updated help strings to avoid confusion with global timeoutsGaurav
(cherry picked from commit a9d6f31725efc5fa28af0b9df00b277054a5f45f)
2012-03-16do_protocol_check function, mandates one protocol subtree per rule maxGaurav
(cherry picked from commit c69383c5187f1e702a7146d3762834b70874a344)
2012-03-16handle modification, disabled error handling for now as iptables does not ↵Gaurav
support timeout target yet (cherry picked from commit f2a6927d2a500142e71aa098491f9b72c802d418)
2012-03-16re-factoredGaurav
(cherry picked from commit a4a349b09923e797e2dbb24c50a151ddec91473d)
2012-03-16add run_cmd function with error checkingGaurav
(cherry picked from commit 10cd7d81497d87aed44287244f112990768cdfe2)
2012-03-16adding apply/remove policy function, still dummyGaurav
(cherry picked from commit bc000f9a538e67545dd7b1edb49385e158067639)
2012-03-16Adding deletion, error handling etc.Gaurav
(cherry picked from commit 6a59a800acf9a9f6a21677e6187a33647ceb3539)
2012-03-16Error checks for ports with other/icmp, as not allowedGaurav
(cherry picked from commit 8059ed8d3cfa033dc6b48e79dd66cdcd1ecc5ae9)
2012-03-16Removed default timeouts for override udp/icmp/other, fixed minor bugsGaurav
(cherry picked from commit 57353c5720699e641d2ab85a0ed8a9eae09520e7)
2012-03-16Fixing nfct-command string:only modified timer is included in the commandGaurav
(cherry picked from commit 9e17315753bb98c677ec5b11c9e52f6a9f5d80a8)
2012-03-16Fixing templates to avoid defaults since these rules override the global ↵Gaurav
defaults (cherry picked from commit d94051fce5433de66860d762fc0a7aa7186564d9)
2012-03-16Add function to create nfct-timeout policyGaurav
(cherry picked from commit d15993bc83942d5841886c0f290430530b009174)
2012-03-16changing structure of hashes kept for timeoutsGaurav
(cherry picked from commit 3fd99241f39f7482e35c0d4e4a91342fd8d9d4ad)
2012-03-16adding various timers in custom rule templateGaurav
(cherry picked from commit ebae932dd450c23d90d1f9d497e2715af535577f)
2012-03-16modified to use AddressFilter from IpTablesGaurav
(cherry picked from commit 1392750b600cec991e24e7ab0cc211c621e4430a)
2012-03-16removing AddressFilterCT.pmGaurav
(cherry picked from commit 796fc0e8654683733a473f46d3029032bc648f05)
2012-03-16Removing newly added file AddressFilterCT.pm.Gaurav
(cherry picked from commit 0ccdf73e1f7211aed9df214a65f8e953dbfdef42)
2012-03-16Adding rule and address setup/parsing librariesGaurav
(cherry picked from commit 2f59f3ef67d70981ff0501868d5ea206eb9359ae)
2012-03-16timeout script, similar to firewall one, with a few differences.Gaurav
(cherry picked from commit 23a5a4ee111ab1519be62841bf03d555a674b371)
2012-03-16timeouts script, and new nodesGaurav Sinha
(cherry picked from commit e49e60bca2262760575b2a4b488e6acfe1dc0cb6)
2012-03-16adding an initial version of conntrack-timeouts scriptGaurav Sinha
(cherry picked from commit 8235f2a9a3b3e1a5a289c4365d809bb09f941ee4)
2012-03-16Removed unwanted address-group/network group etc. from CLIGaurav Sinha
(cherry picked from commit 50f07ece2595c05179e8ccffa5dd2b28fc8cfc99)
2012-03-16Initial commit for per-flow timeout CLIGaurav Sinha
(cherry picked from commit f7fc0b920516ecf03a7dcf3e73f39513d8fcfc1c)
2012-03-160.30debian/0.30Gaurav Sinha
2012-03-16fixing 7866Gaurav Sinha
(cherry picked from commit e9e6c678e9f133ba8645b26f107650a9a103768c)
2012-03-160.28+oxnard2debian/0.28+oxnard2Gaurav Sinha
2012-03-16fixing 7866Gaurav Sinha
2012-03-030.29debian/0.29Deepti Kulkarni