qi-hardware/openwrt-xburst
1
0
Fork 0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-08-22 15:34:37 +03:00
Code
18,938 Commits 13 Branches 0 Tags 117 MiB
d3f8066317
Commit Graph

11 Commits

Author SHA1 Message Date
jow
b757185a71 [package] firewall: insert SNAT and DNAT rules according to the order of the configuration file (#8052) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23318 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-10-08 12:11:55 +00:00
jow
1efeaa35d1 [package] fireall: 
- support negations for src_ip, dest_ip, src_dip options in rules and redirects
	- add NOTRACK target to rule sections, allows to define fine grained notrack rules


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23141 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-28 10:42:56 +00:00
jow
6ce96a49f3 [package] firewall: make invalid redirects and duplicate zones non-fatal, print a notice and discard them 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23080 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-16 11:47:35 +00:00
jow
c653713313 [package] firewall: 
- simplify masquerade rule setup
	- remove various subshell invocations
	- speedup fw() by not relying on xargs and pipes
	- rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23024 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-11 20:04:34 +00:00
jow
614052f0c6 [package] firewall: 
- fix possible endless loop when the family option is used for forwardings
	- only generate forwarding rules in SNAT redirect sections if src_dip is specified


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22938 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-05 20:17:23 +00:00
jow
750dead792 [package] firewall: introduce SNAT support for redirect sections 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22937 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-05 19:03:17 +00:00
jow
5fbf6ca9e6 [package] firewall: allow redirecting only destination port (#7197) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22227 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-16 06:03:15 +00:00
jow
e3060b618d [package] firewall: 
- notrack support was broken in multiple ways, fix it
	- also consider a zone conntracked if any redirect references it (#7196)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22215 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-15 22:01:48 +00:00
jow
90b818e4a5 [package] firewall: fix support for netranges in redirect and rule sections 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21640 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-30 23:49:47 +00:00
jow
24931686cd [package] firewall: 
- fix ip6tables rules when icmp_type option is set
	- add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21508 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 21:35:23 +00:00
jow
e8be3016c9 [package] firewall: 
- replace uci firewall with a modular dual stack implementation	developed by Malte S. Stretz
	- bump version to 2


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21286 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-01 18:22:01 +00:00