Jo-Philipp Wich ca5bf9e291 firewall: - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation ...

SVN-Revision: 22888

2010-09-04 15:49:13 +00:00

..

bin

firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2

2010-05-01 18:22:01 +00:00

lib

firewall: - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation

2010-09-04 15:49:13 +00:00

firewall.config

firewall: don't apply default udp/68 rule to ip6tables

2010-05-19 21:37:12 +00:00

firewall.hotplug

firewall (#7355) - partially revert r21486, start firewall on init again - skip iface hotplug events if base fw is not up yet - get ifname and up state with uci_get_state() in iface setup since the values gathered by scan_interfaces() may be outdated when iface coldplugging happens (observed with pptp) - ignore up state when bringing down interfaces because ifdown reverts state vars before dispatching the iface event - bump package revision

2010-05-19 00:50:14 +00:00

firewall.init

firewall (#7355) - partially revert r21486, start firewall on init again - skip iface hotplug events if base fw is not up yet - get ifname and up state with uci_get_state() in iface setup since the values gathered by scan_interfaces() may be outdated when iface coldplugging happens (observed with pptp) - ignore up state when bringing down interfaces because ifdown reverts state vars before dispatching the iface event - bump package revision

2010-05-19 00:50:14 +00:00

firewall.user

firewall: enable /etc/firewall.user by default and install sample firewall.user file

2009-04-12 22:38:34 +00:00

reflection.hotplug

firewall: - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation

2010-09-04 15:49:13 +00:00