Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-01-10 | conntrack: T3579: dry-run newly generated config before install | Christian Poessinger | |
Before installing a new conntrack policy into the OS Kernel, the new policy should be verified by nftables if it can be loaded at all or if it will fail to load. There is no need to load a "bad" configuration if we can pre-test it. | |||
2022-01-10 | conntrack: T3579: prepare for "conntrack timeout custom rule" CLI commands | Christian Poessinger | |
2022-01-10 | conntrack: T3579: migrate "conntrack ignore" tree to vyos-1x and nftables | Christian Poessinger | |
2021-12-06 | firewall: T2199: Migrate firewall to XML/Python | sarthurdev | |
2021-08-16 | conntrack: T3579: bugfix when deleting non existent iptable rules | Christian Poessinger | |
We only delete iptables rules if they really exist - if we try to delete a non- existing rule a PermissionError exception is thrown. We could either ignore the error code (that is what the old Vyatta code did), or we check what we are doing beforehand. | |||
2021-08-16 | conntrack: T3579: remove debug print() | Christian Poessinger | |
2021-08-15 | conntrack: T3275: migrate 'disable' syntax to 'enable' syntax for the new ↵ | Lulu Cathrinus Grimalkin | |
default behavior | |||
2021-05-31 | conntrack: T3579: add module disable options | Christian Poessinger | |
Some application layer gateway (ALG) modules can be disabled during runtime if requireq. | |||
2021-05-27 | conntrack: T3579: initial implementation with XML and Python | Christian Poessinger | |