vyos-1x.git/data/templates/firewall, branch current-merge-commit-handling VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=current-merge-commit-handling 2024-08-02T12:50:26+00:00 T4072: change same helpers in xml definitions; add notrack action for prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest 2024-08-02T12:50:26+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-31T12:42:25+00:00 urn:sha1:c33cd6157ebc5c08dc1e3ff1aa36f2d2fbb9ca83 T4072: firewall: extend firewall bridge smoketest 2024-08-01T16:25:39+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-29T17:55:56+00:00 urn:sha1:fa764927c14350104671edbb2bb3570ab267e416 T6570: firewall: add global-option to configure sysctl parameter for enabling/disabling sending traffic from bridge layer to ipvX layer 2024-08-01T16:25:39+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-24T17:40:28+00:00 urn:sha1:a8a9cfe750da719605ab90ce8c83c42276ab07f3 T4072: firewall: extend firewall bridge capabilities, in order to include new chains, priorities, and firewall groups 2024-08-01T16:25:31+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-07-24T14:08:19+00:00 urn:sha1:20551379e8e2b4b6e342b39ea67738876e559bbf T3900: extend latest fix for firewall raw implementation to ipv6. 2024-06-25T11:55:53+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-06-25T11:55:53+00:00 urn:sha1:ecf3141d5b5fe08c6ae00b5cd299daf6a6e30f82 T3900: firewall: fix for initial implementation - remove jump to state policy on OUTUT_raw 2024-06-20T15:11:14+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-06-20T14:57:50+00:00 urn:sha1:7829229e8a91c554db188cf523669bb11ec77c2a Merge pull request #3578 from nicolas-fort/raw-hook 2024-06-06T15:19:01+00:00 Daniil Baturin daniil@vyos.io 2024-06-06T15:19:01+00:00 urn:sha1:85da43aa26470e0657ba68437a297ed11045d132 T3900: Add support for raw tables in firewall T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeout parameters defined in conntrack to firewall global-opton section. 2024-06-04T13:22:24+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-05-24T16:44:41+00:00 urn:sha1:770edf016838523c248e3c8a36c5f327a0b98415 T3900: add support for raw table in firewall. 2024-05-15T17:09:16+00:00 Nicolas Fort nicolasfort1988@gmail.com 2024-05-15T17:09:16+00:00 urn:sha1:6871c5541c1962e63d7a9b75d2bb43df2a8d372b T3420: Remove service upnp 2024-05-14T16:47:29+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-05-14T16:47:29+00:00 urn:sha1:7c438caa2c21101cbefc2eec21935ab55af19c46 Remove `service upnp` as it never worked as expected, nft rules do not integrated and custom patches do not seem like a suitable solution for now. Security: UPnP has been historically associated with security risks due to its automatic and potentially unauthenticated nature. UPnP devices might be vulnerable to unauthorized access or exploitation.