summaryrefslogtreecommitdiff
path: root/src/conf_mode/firewall.py
AgeCommit message (Expand)Author
13 daysfirewall: T8761: re-introduce VRF interface names in generated firewall configDavid Vølker
2026-06-04geoip: T5746: Add GeoIP ASN supportsarthurdev
2026-05-19geoip: T8590: fix initialization failure and set clobbering on boot and commitxTITUSMAXIMUSX
2026-03-31firewall: T8446: Prevent chain with offload rule on local zonesarthurdev
2026-01-21geoip: T8049: Add MaxMind database supportsarthurdev
2026-01-21geoip: T7926: Refactor geoip handlingsarthurdev
2025-11-24Merge pull request #4672 from apschultz/zone_default_firewall_rulesetSimon
2025-11-05firewall: T7112: Default action drop failsOleksandr Kuchmystyi
2025-10-21firewall: T7739: Default ruleset for firewall zonesAdam Schultz
2025-09-05Firewall: T7475: Disable conntrack per firewall chainl0crian1
2025-09-04T7366: Firewall rules allow empty nodesl0crian1
2025-06-28T7591: remove copyright years from source filesChristian Breunig
2025-05-20Merge pull request #4468 from sarthurdev/T5707Daniil Baturin
2025-04-25resolver: T4930: Fix always True on glob checksarthurdev
2025-04-25Merge pull request #4457 from l0crian1/t7358-add-offload-to-global-stateViacheslav Hletenko
2025-04-16firewall: T7358: add offload option to global state policyl0crian1
2025-03-28geoip: T5636: Add geoip for policy route/route6sskaje
2025-03-21firewall: T5493: Implement remote-groupAlex W
2025-01-06T6841: firewall: Fixed issues in ZBF when using VRFsaapostoliuk
2025-01-06T6841: firewall: improve config parsing for ZBF when using VRFs and interface...Nicolas Fort
2024-12-30T6983: treat vyos-domain-resolver as a real service (#4261)Christian Breunig
2024-09-16T6687: add fqdn support to nat rules.Nicolas Fort
2024-08-12configverify: T6642: verify_interface_exists requires config_dict argJohn Estabrook
2024-08-04firewall: T4694: Adding GRE flags & fields matches to firewall rulesAndrew Topp
2024-08-02T4072: change same helpers in xml definitions; add notrack action for prerout...Nicolas Fort
2024-08-01T4072: firewall: improve error handling when firewall configuration is wrong....Nicolas Fort
2024-07-28firewall: T4694: Adding rt ipsec exists/missing match to firewall configs (#3...talmakion
2024-06-09firewall: T3900: T6394: remove unused importChristian Breunig
2024-06-04T3900: T6394: extend functionalities in firewall; move netfilter sysctl timeo...Nicolas Fort
2024-05-15T3900: add support for raw table in firewall.Nicolas Fort
2024-04-15T5535: firewall: migrate command <set system ip disable-directed-broadcast> t...Nicolas Fort
2024-04-01firewall: T2199: always use full nft command name (e.g. --file over -f)Christian Breunig
2024-03-18T6136: add error checks when using dynamic firewall groupsNicolas Fort
2024-03-05T6075: firewall and NAT: check if interface-group exists when using them in f...Nicolas Fort
2023-12-31T5474: establish common file name pattern for XML conf mode commandsChristian Breunig
2023-12-24T5837: cleanup use of calls to vyos.configdict.node_changed()Christian Breunig
2023-11-10T5729: firewall: switch to valueless in order to remove unnecessary <enable|d...Nicolas Fort
2023-10-25T5681: Firewall,Nat and Nat66: simplified and standarize interface matcher (v...Nicolas Fort
2023-10-13T5541: firewall zone: re add firewall zone-base firewallNicolas Fort
2023-09-28firewall: T5217: Synproxy bugfix and ct state conflict checkingsarthurdev
2023-09-21T5217: Add firewall synproxyViacheslav Hletenko
2023-09-19firewall: ethernet: T4502: Add interface offload node and verify interface su...sarthurdev
2023-09-19firewall: T4502: Update to flowtable CLIsarthurdev
2023-09-16conntrack: T5571: Refactor conntrack to be independent conf script from firew...sarthurdev
2023-09-09T4502: firewall: Add software flow offload using flowtableYuxiang Zhu
2023-08-26firewall: T5080: Disable conntrack unless required by rulessarthurdev
2023-08-26Merge pull request #2163 from sarthurdev/firewall_rpfilterChristian Breunig
2023-08-25T5502: firewall: add validator for interface matcher, and allow only interfac...Nicolas Fort
2023-08-25firewall: T3509: Add support for IPv6 return path filteringsarthurdev
2023-08-15T5478: remove config-trap configuration parser in firewallNicolas Fort