7 Commits

Author	SHA1	Message	Date
jow	291f78f21a	[package] firewall: ... - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22888 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-09-04 15:49:13 +00:00
jow	94c817eadb	[package] firewall: ... - fix processing of rules with an ip family option - append interface rules at the end of internal zone chains, simplifies injecting user or addon rules - support simple file logging (option log + option log_limit per zone) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22847 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-08-31 01:54:08 +00:00
jow	30853c82f3	[package] firewall: fix another notrack related bug ... git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22218 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-07-15 23:24:01 +00:00
jow	e3060b618d	[package] firewall: ... - notrack support was broken in multiple ways, fix it - also consider a zone conntracked if any redirect references it (#7196) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22215 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-07-15 22:01:48 +00:00
jow	24931686cd	[package] firewall: ... - fix ip6tables rules when icmp_type option is set - add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21508 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-05-19 21:35:23 +00:00
jow	205e31dc60	[package] firewall: implement disable_ipv6 uci option ... git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21503 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-05-19 01:55:46 +00:00
jow	e8be3016c9	[package] firewall: ... - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2 git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21286 3c298f89-4303-0410-b956-a3cf2f4a3e73	2010-05-01 18:22:01 +00:00