Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-09-11 | T6294: Service dns forwarding add the ability to configure ZonetoCache | khramshinr | |
2024-09-11 | Merge pull request #4023 from nvollmar/T6679 | Christian Breunig | |
T6679: add group option for nat66 | |||
2024-09-07 | T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints | Alain Lamar | |
2024-09-02 | T6679: add destination groups | Nicolas Vollmar | |
2024-09-02 | Merge pull request #4018 from nicolas-fort/T6647 | Daniil Baturin | |
T6647: firewall. Introduce patch for accepting invalid ARP and DHCP | |||
2024-08-28 | T6647: firewall. Introduce patch for accepting ARP and DHCP replies on ↵ | Nicolas Fort | |
stateful bridge firewall. This patch is needed because ARP and DHCP are marked as invalid connections. Also, add ehternet-type matcher in bridge firewall. | |||
2024-08-27 | T6681: Add option for SLAAC to support suppress Interval Advertisement in RAs | Hikari Kongou | |
2024-08-20 | Merge pull request #3975 from lucasec/t6183 | Christian Breunig | |
T6183: interfaces openvpn: suppport specifying IP protocol version | |||
2024-08-20 | Merge pull request #3977 from natali-rs1985/T5743-current | Christian Breunig | |
T5743: HTTPS API ability to import PKI certificates | |||
2024-08-16 | T6659: suricata: use unique cluster_id per interface (#3992) | Lucas Christian | |
2024-08-16 | Merge pull request #3987 from natali-rs1985/T6649-current | Daniil Baturin | |
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces | |||
2024-08-15 | T6649: Accel-ppp separate vlan-mon from listen interfaces | Nataliia Solomko | |
2024-08-14 | T6636: firewall: fix firewall template in order to write logs for ↵ | Nicolas Fort | |
default-action in order to match same structure as in rules. This way op-mode command for showing firewall log prints logs for default-actions too | |||
2024-08-13 | T6183: interfaces openvpn: suppport specifying IP protocol version | Lucas Christian | |
2024-08-13 | T5743: HTTPS API ability to import PKI certificates | Nataliia Solomko | |
2024-08-05 | sysctl: T3204: restore sysctl setttings overwritten by tuned | Christian Breunig | |
2024-08-05 | Merge pull request #3920 from fett0/T6555 | Christian Breunig | |
OPENVPN: T6555: add server-bridge options in mode server | |||
2024-08-04 | Merge pull request #3901 from nicolas-fort/T4072-extend-bridge-fwall | Christian Breunig | |
T4072: firewall extend bridge firewall | |||
2024-08-02 | T6619: Remove the remaining uses of per-protocol FRR configs (#3916) | Roman Khramshin | |
2024-08-02 | OPENVPN: T6555: fix name to bridge | fett0 | |
2024-08-02 | T4072: change same helpers in xml definitions; add notrack action for ↵ | Nicolas Fort | |
prerouting chain; re introduce <set vrf> in policy; change global options for passing traffic to IPvX firewall; update smoketest | |||
2024-08-01 | T4072: firewall: extend firewall bridge smoketest | Nicolas Fort | |
2024-08-01 | T6570: firewall: add global-option to configure sysctl parameter for ↵ | Nicolas Fort | |
enabling/disabling sending traffic from bridge layer to ipvX layer | |||
2024-08-01 | T4072: firewall: extend firewall bridge capabilities, in order to include ↵ | Nicolas Fort | |
new chains, priorities, and firewall groups | |||
2024-08-01 | Merge pull request #3221 from lucasec/t5873 | Christian Breunig | |
T5873: ipsec remote access VPN: support VTI interfaces. | |||
2024-08-01 | Merge pull request #3903 from lucasec/ipsec-remote-access-profile | Christian Breunig | |
T6617: T6618: vpn ipsec remote-access: fix profile generators | |||
2024-07-31 | OPENVPN: T6555: add server-bridge options in mode server | fett0 | |
2024-07-31 | T5657: Add VRF support for zabbix-agent | Viacheslav Hletenko | |
To start the service under VRF requires starting under User=root otherwise it had issues with cgroups | |||
2024-07-30 | T6617: T6618: vpn ipsec remote-access: fix profile generators | Lucas Christian | |
2024-07-29 | Merge pull request #3804 from HollyGurza/T6362 | Daniil Baturin | |
T6362: Create conntrack logger daemon | |||
2024-07-26 | T5873: vpn ipsec remote-access: improve child ESP session naming | Lucas Christian | |
2024-07-25 | OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers | srividya0208 | |
2024-07-24 | Merge pull request #3853 from natali-rs1985/T5552-current | Christian Breunig | |
system_option: T5552: Apply IPv4 and IPv6 options after reapplying sysctls by TuneD | |||
2024-07-23 | system_option: T5552: Apply IPv4 and IPv6 options after reapplying sysctls ↵ | Nataliia Solomko | |
by TuneD | |||
2024-07-22 | T5873: vpn ipsec remote-access: support VTI interfaces | Lucas Christian | |
2024-07-22 | Merge pull request #3832 from sever-sever/T6594 | Christian Breunig | |
T6594: Add missed pppd_compat module | |||
2024-07-22 | T6599: ipsec: support disabling rekey of CHILD_SA. | Lucas Christian | |
Also adds support for life_bytes, life_packets, and DPD for remote-access connections. Changes behavior of remote-access esp-group lifetime setting to have parity with site-to-site connections. | |||
2024-07-19 | SSTP-server: add missed pppd_compat module | Viacheslav Hletenko | |
2024-07-19 | PPTP-server: add missed pppd_compat module | Viacheslav Hletenko | |
2024-07-19 | L2TP-server: add missed pppd_compat module | Viacheslav Hletenko | |
2024-07-19 | IPoE-server: add missed pppd_compat module | Viacheslav Hletenko | |
2024-07-19 | T6362: Create conntrack logger daemon | khramshinr | |
2024-07-05 | wireless: T6496: use mac-address validator on BSSID and move it up one CLI level | Christian Breunig | |
2024-07-05 | wireless: T6496: support for EAP-MSCHAPv2 client over wifi | Christopher | |
fix: attempt to fix indentation on `wpa_supplicant.conf.j2` fix: attempt to fix indentation on `wpa_supplicant.conf.j2` fix: incorrect bssid mapping fix: use the correct jinja templating (I think) fix: “remote blank space fix: attempt to fix the formatting in j2 fix: attempt to fix the formatting in j2 feat: rename enterprise username and password + add checks in conf mode. fix: move around `bssid` config option on `wpa_supplicant.conf.j2` and fix the security config part fix: fix indentation on `wpa_supplicant.conf.j2` | |||
2024-07-04 | Merge pull request #3753 from jvoss/haproxy_logging | Christian Breunig | |
T6539: add logging options to load-balancer reverse-proxy | |||
2024-07-03 | T6539: add logging options to load-balancer reverse-proxy | Jonathan Voss | |
2024-07-03 | syslog: T5366: remove reference to deprecated sysvinit rsyslog script | John Estabrook | |
2024-07-02 | Merge pull request #3721 from HollyGurza/T5878 | Daniil Baturin | |
ssh: T5878: Allow changing the PubkeyAcceptedAlgorithms option | |||
2024-07-02 | T6523: Telegraf use nft scripts only if the firewall configured | Viacheslav Hletenko | |
If a firewall is not configured there is no reason to get and execute telegraf firewall custom scripts as there are no nft chain in the firewall nftables configuration | |||
2024-06-28 | T6452: Add QoS Op Commands (#3591) | l0crian1 | |
* T6452: Add QoS Op Commands Added the following commands: show qos shaping show qos shaping detail show qos shaping interface <int name> show qos shaping interface <int name> detail show qos shaping interface <int name> class <class name> show qos shaping interface <int name> class <class name> detail show qos cake interface <int name> |