Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-10-12 | 0.15debian/0.15master | John Southworth | |
2012-10-12 | new branch | John Southworth | |
2012-06-20 | 0.14debian/0.14 | John Southworth | |
2012-06-13 | Remove IPS from zone | John Southworth | |
2012-03-03 | 0.13debian/0.13 | Deepti Kulkarni | |
2012-03-03 | new branch | Deepti Kulkarni | |
2012-01-06 | 0.12debian/0.12 | John Southworth | |
2012-01-06 | Bugfix: 7712 add zone-policy operational mode command | John Southworth | |
2012-01-06 | Add function to return zone policy information so that it may be easily ↵ | John Southworth | |
queried from the webgui and operational commands | |||
2011-07-07 | 0.11debian/0.11 | Deepti Kulkarni | |
2011-07-07 | new branch | Deepti Kulkarni | |
2011-06-16 | 0.10debian/0.10 | Mohit Mehta | |
2011-06-16 | Bug 7154 Priority inversion error when deleting zone policy | Mohit Mehta | |
* Inverted Zone priorities to comply with new commit implementation. Previously, Zone priorities were: 245 zone-policy/zone/node.tag/from # after firewall, content-inspection 250 zone-policy # after zone-policy/zone/node.tag/from/ Now, Zone priorities look like this: 250 zone-policy # after firewall, content-inspection 251 zone-policy/zone/node.tag/from # after zone-policy This required an in-depth look at all zone-policy templates and all of Zone FW and IPS code to make sure that all of the different combinations of actions under zone-policy still work right. The combination of actions that needed most attention are the ones where actions in one priority are executed in the same commit as actions in other priority. Example "deleting the only interface in a zone and also, modifying firewall ruleset from that zone to another zone and deleting content-inspection from that zone to another zone" vyatta@vDUT-5# compare [edit zone-policy zone dmz] -interface eth0 [edit zone-policy zone lan from dmz] -content-inspection { - enable -} [edit zone-policy zone lan from dmz firewall] >name allow_all_another [edit] | |||
2011-01-10 | 0.9debian/0.9 | Mohit Mehta | |
2011-01-10 | Fix Bug 6292 iptables chain-name must be reduced to 28 characters max | Mohit Mehta | |
* change syntax check to limit zone names to 18 chars [10 chars are reserved for underneath zone chain names] and bump zone cfg-version to enable config migration (cherry picked from commit 8c1a5d7f9664fad5488e463d16f7587d7ebb385a) | |||
2010-12-28 | 0.8debian/0.8 | An-Cheng Huang | |
2010-12-28 | new branch | An-Cheng Huang | |
2010-10-19 | 0.7debian/0.7 | Mohit Mehta | |
2010-10-19 | add common functions to add/remove jump to localin and localout feature chains | Mohit Mehta | |
2010-10-15 | 0.6debian/0.6 | Mohit Mehta | |
2010-10-15 | common functions to add/delete interface to/from v4 and v6 feature zone chains | Mohit Mehta | |
2010-10-13 | 0.5debian/0.5 | Mohit Mehta | |
2010-10-13 | move common hashes and create/delete zone chain functions to zone library | Mohit Mehta | |
2010-10-12 | 0.4debian/0.4 | Mohit Mehta | |
2010-10-12 | add content-inspection feature for zones | Mohit Mehta | |
* code to configure content-inspection on a zone-pair basis * COMING UP : as much as possible, move code applicable to firewall and IPS and other future features to ZONE library | |||
2010-10-08 | 0.3debian/0.3 | Mohit Mehta | |
2010-10-08 | no directory for op-mode templates so remove install hook for it | Mohit Mehta | |
2010-10-07 | 0.2debian/0.2 | Mohit Mehta | |
2010-10-07 | fix changelog syntax | Mohit Mehta | |
2010-10-07 | remove changelog from .gitignore | Mohit Mehta | |
2010-10-07 | Initial releasedebian/0.1 | Mohit Mehta | |