Jo-Philipp Wich 995face56d firewall: make ESTABLISHED,RELATED rules match before INVALID, use conntrack instead of state match (#10038) ...

SVN-Revision: 28148

2011-09-01 20:37:22 +00:00

..

config.sh

firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address

2010-05-31 01:34:47 +00:00

core_forwarding.sh

firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source

2010-09-11 20:04:34 +00:00

core_init.sh

firewall: make ESTABLISHED,RELATED rules match before INVALID, use conntrack instead of state match (#10038)

2011-09-01 20:37:22 +00:00

core_interface.sh

firewall: fix serious bug in state var handling (#9746)

2011-07-20 15:29:10 +00:00

core_redirect.sh

firewall: make sure that -m mac is used with --mac-source, follow up to r27508

2011-07-07 10:28:31 +00:00

core_rule.sh

firewall: prevent redundant rules if multiple ports and multiple icmp types are given in a rule block for both icmp and other protocols

2011-07-26 22:21:39 +00:00

core.sh

firewall: make invalid redirects and duplicate zones non-fatal, print a notice and discard them

2010-09-16 11:47:35 +00:00

fw.sh

firewall: - solve scoping issues when multiple values are used, thanks Daniel Dickinson - ignore src_port/dest_port for proto icmp rules, ignore icmp_type for non-icmp rules - properly handle icmp when proto is given in numerical form (1, 58) - support negated icmp types

2011-07-06 22:10:46 +00:00

uci_firewall.sh

firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2

2010-05-01 18:22:01 +00:00