Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-27 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
required | |||
2024-01-22 | vrf: T5973: move initial conntrack firewall table to startup | Christian Breunig | |
There is no need to add and remove this table during runtime - it can lurk in the standard firewall init code. | |||
2023-09-16 | conntrack: T5571: Refactor conntrack to be independent conf script from ↵ | sarthurdev | |
firewall, nat, nat66 | |||
2023-09-06 | Merge pull request #2199 from sarthurdev/T4309 | Christian Breunig | |
conntrack: T4309: T4903: Refactor `system conntrack ignore`, add IPv6 support and firewall groups | |||
2023-09-05 | interface: T5550: Interface source-validation priority over global value | sarthurdev | |
- Migrate IPv4 source-validation to nftables - Interface source-validation value takes priority, fallback to global value | |||
2023-09-04 | conntrack: T4309: T4903: Refactor `system conntrack ignore` rule generation, ↵ | sarthurdev | |
add IPv6 support and firewall groups | |||
2023-08-26 | firewall: T5080: Disable conntrack unless required by rules | sarthurdev | |
2023-08-25 | interface: T3509: Add per-interface IPv6 source validation | sarthurdev | |
2023-08-17 | T5488: Set correct priority -300 for conntrack entries | Viacheslav Hletenko | |
For conntrack ignore priority must be less then -200 | |||
2022-09-21 | nat: T4605: Refactor static NAT to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Add static NAT smoketest | |||
2022-09-21 | nat66: T4605: Refactor NAT66 to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Refactor tests to use `verify_nftables` format | |||
2022-09-21 | nat: T4605: Refactor NAT to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Refactor tests to use `verify_nftables` format | |||
2022-09-13 | firewall: T2199: Move initial firewall tables to data | sarthurdev | |