Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-28 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
required (cherry picked from commit 6f7d1e15665655e37e8ca830e28d9650445c1217) | |||
2024-01-30 | vrf: T5973: move initial conntrack firewall table to startup | Christian Breunig | |
There is no need to add and remove this table during runtime - it can lurk in the standard firewall init code. (cherry picked from commit 89f0d347bfe5e468355817a617dc71823a58c284) | |||
2024-01-22 | firewall: T5729: T5681: T5217: backport subsystem from current branch | Christian Breunig | |
This is a combined backport for all accumulated changes done to the firewall subsystem on the current branch. | |||
2023-09-06 | interface: T5550: Interface source-validation priority over global value | sarthurdev | |
- Migrate IPv4 source-validation to nftables - Interface source-validation value takes priority, fallback to global value | |||
2023-08-26 | firewall: T5080: Disable conntrack unless required by rules | sarthurdev | |
2023-08-25 | interface: T3509: Add per-interface IPv6 source validation | sarthurdev | |
2023-08-17 | T5488: Set correct priority -300 for conntrack entries | Viacheslav Hletenko | |
For conntrack ignore priority must be less then -200 | |||
2022-09-21 | nat: T4605: Refactor static NAT to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Add static NAT smoketest | |||
2022-09-21 | nat66: T4605: Refactor NAT66 to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Refactor tests to use `verify_nftables` format | |||
2022-09-21 | nat: T4605: Refactor NAT to use python module for parsing rules | sarthurdev | |
* Rename table to vyos_nat * Refactor tests to use `verify_nftables` format | |||
2022-09-13 | firewall: T2199: Move initial firewall tables to data | sarthurdev | |