jow
1ad551b0a7
[backfire] firewall: allow redirecting only destination port ( #7197 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/branches/backfire@22228 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-07-16 06:05:23 +00:00
jow
5e99434568
[backfire] firewall: consider zones referenced by redirects as conntracked ( #7196 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/branches/backfire@22216 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-07-15 22:08:02 +00:00
jow
8084bc3069
[package] firewall: fix a race condition preventing interfaces from being added to the firewall on boot
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@19232 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-01-19 23:02:11 +00:00
nbd
3f21f09b7c
adjust dependencies of firewall and qos-scripts, so that these packages are visible even when iptables is not selected
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18714 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-12-09 13:36:39 +00:00
jow
9cdb777d0c
[package] firewall: initialize dest_port with src_dport if omitted in redirect sections to narrow
...
down corresponding forward rules to the actual target ports - thanks Niels Boehm! (#6249 )
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18617 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-12-01 22:31:10 +00:00
nico
dc1a20a020
[package] firewall: fix MSS issue affection RELATED new connections ( closes : #5173 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17762 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-09-27 13:57:09 +00:00
jow
f71b9d11f6
[package] firewall: properly dispatch delif events if the network has a different name then the corresponding zone
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17580 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-09-14 14:47:43 +00:00
agb
fcf2c28149
[package] bump some revisions and update copyrights
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17554 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-09-10 10:07:04 +00:00
jow
930ebf26f0
[package] firewall: allow incoming udp/68 packets in the default configuration ( #4108 , #4781 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17238 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-08-13 03:31:53 +00:00
jow
f0250152da
[package] firewall: add icmp_type option to specify the icmp type in rule sections, bump pkg revision ( #5554 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17115 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-08-03 22:24:48 +00:00
florian
d76c921c8c
[package] set PKGARCH to all for packages in trunk containing only arch-neutral files ( #5572 )
...
Signed-off-by: Malte S. Stretz <mss@apache.org>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@16966 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-07-24 12:08:01 +00:00
jow
46e50210bd
[package] firewall: actually copy firewall.user to image
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15286 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-04-19 21:14:47 +00:00
jow
3a5c4c82ff
[package] firewall: process custom rules after forwardings and redirects, this actually allows blocking traffic to certain hosts and other rules
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15278 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-04-19 20:39:02 +00:00
jow
4ed7156513
[package] firewall: enable /etc/firewall.user by default and install sample firewall.user file
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15221 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-04-12 22:38:34 +00:00
nico
3a25b868c7
make the whole iptables/netfiter modular ( closes : #3871 , #3527 )
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12649 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-09-22 15:19:59 +00:00
blogic
fc95e15a63
fixes firewall makefile description
...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12285 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-11 22:28:52 +00:00
blogic
aa954c1c5d
uci firewall
...
- make uci firewall default and remove old code
- fix up dependencies
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12284 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-11 22:27:36 +00:00
blogic
8e2cf077d0
adds a new uci firewall
...
- iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default
- there are some examples in the file /etc/config/firewall
- iptables-save/restore are still missing
- hotplug takes care of adding/removing netdevs during runtime
- misisng features ? wishes ? let me know ...
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12089 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-04 11:51:58 +00:00
