summaryrefslogtreecommitdiff
path: root/scripts
AgeCommit message (Collapse)Author
2019-01-29T166: Changed NPTv6 to use NETMAPMerijn Evertse
2015-11-28vyatta-nat: only create nat object for testing changed or added rulesAlex Harpin
Only create a new source or destination NAT object when testing changed or added NAT rules to reduce testing overhead. Bug #493 http://bugzilla.vyos.net/show_bug.cgi?id=493
2015-11-28vyatta-nat: formatting changes for style consistencyAlex Harpin
Update scripts/vyatta-update-dst-nat.pl and scripts/vyatta-update-src-nat.pl to maintain style and consistency.
2015-07-19vyatta-nat: check nat rules for errors before processing them for realAlex Harpin
Errors in both source and destination NAT rules can cause either rules to be overwritten (completely or partially), dropped entirely, or just ending up with an inconsistent state in comparison to the current configuration. This can lead to unpredictable NAT results, which can't even be corrected by deleting all the nat rules, only a reboot will correct the issue. Checking these rules for consistency in a separate loop before they are applied allows the errors to flagged up and the commit failed before the nat table is touched. Bug #493 http://bugzilla.vyos.net/show_bug.cgi?id=493
2015-07-19Revert "vyatta-nat: check nat rules for errors before processing them for real"Alex Harpin
This reverts commit 5f05bdd480f0de2be2d87934b9b53dab09ead9ea.
2015-07-12vyatta-nat: check nat rules for errors before processing them for realAlex Harpin
Errors in both source and destination NAT rules can cause either rules being overwritten or partially, dropped entirely or just end up with an inconsistent state in comparison to the current configuration. This can lead to unpredictable NAT results, which can't even be corrected by deleting all the nat rules, only a reboot will solve them. Checking these rules for consistency in a separate loop before they are applied allows the errors to flagged up and the commit failed before the nat table is touched. Bug #493 http://bugzilla.vyos.net/show_bug.cgi?id=493
2015-02-15Add initial support for NPTv6 (#387)kouak
2014-03-19Fix condition of all_deletedYuya Kusakabe
2013-11-10Bug #8331: provide rule number in commit error message.Daniil Baturin
2012-01-04Don't display masquerade rule code help for destination rules.oxnard-nat-enhancementsDaniil Baturin
2012-01-04Don't display translation address for masquerade rulesDaniil Baturin
for any interface.
2011-12-15Update vyatta-nat-translation.pl to match CLI changes.Daniil Baturin
2011-12-15Update show NAT statistics script to match CLI changes,Daniil Baturin
rename to make more clear what does it do.
2011-12-14Bug #6617: fix counters flush for rules with logging.Daniil Baturin
2011-12-14Update clear counters script to match CLI changes.Daniil Baturin
2011-12-14Fix formatting in "show nat * rules".Daniil Baturin
2011-12-13Fix rule prefix display for rules that are masquerade and excludeDaniil Baturin
at the same time.
2011-12-10Bug #6365: Display rule description in "show nat * rules" output.Daniil Baturin
2011-12-09Fix extra line break when rule condition is empty.Daniil Baturin
2011-12-09Update vyatta-show-nat-rules.pl to match CLI syntax changes.Daniil Baturin
2011-10-31Fix file description for destination NAT update script.Daniil Baturin
2011-10-11Bug 5682: Add vyatta-update-src-nat.pl script for source NAT rules update.Daniil Baturin
2011-10-11Bug 5682: Add vyatta-update-dst-nat.pl script for destination NATDaniil Baturin
rules update
2011-10-11Bug 5682: Remove old vyatta-update-nat.pl script now splitted intoDaniil Baturin
source and destination parts
2011-09-13Fix description in vyatta-update-nat.plDaniil Baturin
2011-07-22Bug 5681: Change vyatta-update-nat.pl to correspond new configuration path ↵Daniil Baturin
out of service branch.
2010-06-10Change nat to use IpTables::Mgr to enable/disable conntrack.Stig Thormodsrud
2010-06-10start fresh for each conntrack callMohit Mehta
2010-06-10* make 'show nat translations' cmnds work with conntrack-tools 0.9.14Mohit Mehta
* might have to build conntrack-tools locally to patch it for filtering src and dst nat entries together
2010-04-09Change DNAT to use index 2 to skip over VYATTA_PRE_DNAT_HOOK.Stig Thormodsrud
2010-03-05Fix nat conntrack teardown.Stig Thormodsrud
2010-02-03fix bug 4115 'clear nat translations' does not clear nat translationsMohit Mehta
* removed command 'clear nat translations'. connection tracking entries can be flushed using 'clear connection-tracking' command * use perl api to get currently active NAT rules
2010-02-02partial fix for bug 4115 'clear nat translations' does not clear nat ↵Mohit Mehta
translations * added op-mode commands to clear counters for NAT rules clear nat counters # clear counters for all NAT rules clear nat counters rule <rule-num> # clear counters for a specific NAT rule
2009-08-05* Fix Bug 1445 - Allow setting protocols tcp and udp in one ruleMohit Mehta
NAT rules can be defined with 'tcp_udp' as a valid value for protocol * Fix Bug 4780 - DNAT rule to translate port fails
2009-07-24add support for disabling a NAT ruleMohit Mehta
2009-04-20Add log option to NAT rules.Stig Thormodsrud
2009-01-23- Fix statistics in "show nat statistics" when target is NETMAPMohit Mehta
- Script to generate a new output for the "show nat rules" command - Fix Bug 3401 some indication is needed for the excluded rules in the "show nat rules" result
2008-11-25change VyattaNatRule to Vyatta::NatRuleStephen Hemminger
2008-11-24extra space causes errorStephen Hemminger
2008-11-21Convert to Vyatta::Stephen Hemminger
2008-11-21Rename VyattaNatRule to Vyatta::NatRuleStephen Hemminger
Rearrange perl modules
2008-11-03fix for bug 3717: enforce interface restrictionsAn-Cheng Huang
2008-10-31Fix "show nat translation monitor" to work with both snat & dnat.Stig Thormodsrud
2008-10-30fix for bug 3858: skip the PRE_SNAT_HOOK rule in stats output.An-Cheng Huang
2008-09-25fix for bug 3717: generate error messages when inbound-interface is setAn-Cheng Huang
in masquerade rule
2008-08-28Don't flush the nat table since other features now add nat rules.Stig Thormodsrud
2008-08-25fix index for NAT PREROUTING chainAn-Cheng Huang
2008-08-21fix for bug 3622: add pre-SNAT hookAn-Cheng Huang
2008-08-06Fix typo.Stig Thormodsrud
2008-08-06Use unbuffered writes in pipe mode.Stig Thormodsrud