projects / project / firewall4.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
fw4: only stage reflection rules if all required addrs are known
2022-02-10 Jo-Philipp Wichfw4: only stage reflection rules if all required addrs...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-10 Jo-Philipp Wichfw4: add device iifname/oifname matches to DSCP and...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-08 Jo-Philipp Wichtests: adjust 01_ruleset test case to latest changes
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-07 Jo-Philipp Wichfw4: gracefully handle unsupported hardware offloading
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-07 Jo-Philipp Wichinit: fix boot action in init script
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-07 Jo-Philipp Wichfw4: parse traffic rules before forwarding rules
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-05 Jo-Philipp Wichfw4: consolidate helper code
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-05 Jo-Philipp Wichfw4: fix applying zone family restrictions to forwardings
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-05 Jo-Philipp Wichtests: implement fs.opendir() mock interface
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-05 Jo-Philipp Wichtests: fix mocked fs.popen() trace log
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-04 Jo-Philipp Wichfw4: improve flowtable handling
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-03 Jo-Philipp Wichfw4: disable "flow_offloading_hw" option for now
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-02-03 Jo-Philipp Wichfw4: fix enabling NAT reflection rules for DNATs without...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichruleset: fix undeclared variable access uncovered by...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichtests: run testcases in strict mode
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichruleset: remove redundant syn check
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichfw4: add RFC-8622 'Least Effort' (LE) DSCP mark
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichtests: add test coverage for redirect rules
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-28 Jo-Philipp Wichfw4: fix address selection logic for DNAT reflection...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichfw4: fix redirect destination zone resolving
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichfw4: fix potential crashes when parsing invalid redirect...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichruleset: support non-contiguous address masks
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichtests: update interface dump mock data
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichfw4: fix family selection logic for redirect rules
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-27 Jo-Philipp Wichruleset: properly render redirect targets without port
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichfw4: consolidate device grouping logic
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichruleset: consolidate zone matches for raw_prerouting...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichfw4: fix wrong `parse_network()` return value on `parse_subn...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichfw4: fix parsing inverted numeric DSCP values
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichruleset: emit AF specific rules for DSCP matches
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-26 Jo-Philipp Wichfw4: fix family comparisons
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-25 Jo-Philipp Wichruleset: properly deal with wildcards in zone device...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-22 Jo-Philipp Wichruleset: fix chain selection for mark and dscp targets
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2022-01-22 Jo-Philipp Wichfw4.uc: handle zone masq6 option
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-10-24 Thomas Weißschuhfw4.uc: Do not quote port ranges
 commit | commitdiff | tree
2021-10-24 Thomas Weißschuhtests: adapt test to new ICMP print logic
 commit | commitdiff | tree
2021-10-17 Jo-Philipp Wichrule.uc: always format ICMP type/code list as set
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-09-01 Jo-Philipp Wichtreewide: convert deprecated syntax
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-09-01 Jo-Philipp Wichtests: adapt to latest ucode
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichtests: expand testing
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichfw4.uc: fix family test functions
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichfw4.uc: fix parsing boolean "0" values
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichrule.uc: fix redundant whitespace in rules without...
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichruleset.uc: reduce empty lines in output
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-31 Jo-Philipp Wichfw4.uc: gracefully handle missing defaults section
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-30 Jo-Philipp Wichtreewide: remove ucode module preloading
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-29 Jo-Philipp Wichfw4.uc: remove upvalue caching
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
2021-03-19 Jo-Philipp WichInitial commit
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 commit | commitdiff | tree
OpenWrt nftables firewall