project/firewall3.git
2014-04-14 Steven Barthsnat: add support for connlimiting port-range SNAT
2014-04-14 Steven BarthFix building with newer toolchains
2014-04-14 Steven Barthsnat: ICMP can be port-natted as well
2014-04-14 Steven Barthnat: allow ACCEPT-target to explicitely disable NAT
2014-04-11 Jo-Philipp... Reapply SNAT/MASQUERADE rules on firewall reloads
2014-04-06 Jo-Philipp... Initial support for "config nat" rules - this allows...
2014-03-20 Felix Fietkauutils: define _GNU_SOURCE to get clearenv()
2014-02-21 Jo-Philipp... Several ipset bugfixes
2013-12-17 Jo-Philipp... Change set_default() to take value as integer, required...
2013-12-17 Jo-Philipp... Treat option tcp_ecn as integer, not bool
2013-12-17 Jo-Philipp... Properly check strtol() results when paring values...
2013-11-18 Jo-Philipp... Clean up dead code
2013-11-18 Jo-Philipp... Skip redirects with invalid options
2013-11-18 Jo-Philipp... Skip rules with invalid options
2013-11-18 Jo-Philipp... Change fw3_parse_options() to indicate whether all...
2013-11-07 Jo-Philipp... Use a global -m conntrack --ctstate DNAT rule to accept...
2013-10-23 Steven BarthImprove ubus support
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up zone interfa...
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up reflection
2013-10-10 Jo-Philipp... Allow any protocol for reflection rules
2013-08-14 Jo-Philipp... Reorganize chain layout for raw/NOTRACK rules to fix...
2013-08-14 Jo-Philipp... Use "-j CT --notrack" instead of deprecated "-j NOTRACK"
2013-08-14 Jo-Philipp... Revert "Make sure that NOTRACK is linked into firewall3...
2013-08-14 Jo-Philipp... Make sure that NOTRACK is linked into firewall3 if...
2013-07-16 Jo-Philipp... Treat redirects as port redirections if the specified...
2013-06-29 Jo-Philipp... Properly dereference struct ether_addr
2013-06-29 Jo-Philipp... Do not rely on ether_ntoa() when formatting mac addresses.
2013-06-18 Jo-Philipp... Don't mistreat unknown protocol names as "any protocol"
2013-06-18 Jo-Philipp... Fix processing of CIDRs with mask 0
2013-06-13 Jo-Philipp... Fix processing of negated options
2013-06-13 Jo-Philipp... Properly handle reject target in rules with specific...
2013-06-06 Jo-Philipp... Keep all basic chains on reload and only flush them...
2013-06-06 Jo-Philipp... Fix endian issue in compare_addr(), solves auto detecti...
2013-06-06 Jo-Philipp... For ingress rules, only jump into zone_name_src_ACTION...
2013-06-06 Jo-Philipp... Implement limit and limit_burst options for rules.
2013-06-05 Jo-Philipp... Use zone_name_src_ACTION chain for input rules with...
2013-06-05 Jo-Philipp... Extend ipset option syntax to support specifying direct...
2013-06-04 Jo-Philipp... Fix wrong signature of fw3_xt_print_matches()
2013-06-04 Jo-Philipp... Add abstract fw3_xt_print_matches() and fw3_xt_print_ta...
2013-06-04 Jo-Philipp... Fix wrong chain emitted for zone forward policy, the...
2013-06-03 Jo-Philipp... Decouple handle destroying from committing, add fw3_ipt...
2013-06-03 Jo-Philipp... Do not let libxtables implicitely load extensions,...
2013-05-27 Jo-Philipp... Make IPv6 support optional
2013-05-27 Jo-Philipp... Add abstract fw3_xt_reset() implementation
2013-05-27 Jo-Philipp... Dynamically create rules for available libext*.a librar...
2013-05-27 Jo-Philipp... Fix compatibility with older libiptc/libip6tc
2013-05-26 Jo-Philipp... Only emit different ip family warnings if the ip wasn...
2013-05-26 Jo-Philipp... Mark fw3_address objects that got resolved by fw3_parse...
2013-05-26 Jo-Philipp... Change wording of inferred destination warning for...
2013-05-26 Jo-Philipp... Replace fw3_free_zone() with the generic implementation
2013-05-26 Jo-Philipp... Avoid segfault when freeing rules whose target could...
2013-05-26 Jo-Philipp... Infer destination zone of DNAT redirects from dest_ip...
2013-05-26 Jo-Philipp... Add fw3_resolve_zone_addresses() helper to obtain a...
2013-05-26 Jo-Philipp... Remove fw3_ubus_address_free() and use fw3_free_list...
2013-05-26 Jo-Philipp... Add fw3_free_list() helper
2013-05-25 Jo-Philipp... Fix output rules with "option dest *"
2013-05-25 Jo-Philipp... Allow devices for src_ip, src_dip and dest_ip options
2013-05-24 Jo-Philipp... Pass -Wl,--whole-archive and -Wl,--no-whole-archive...
2013-05-23 Jo-Philipp... Don't leak memory when encountering unknown match or...
2013-05-23 Jo-Philipp... Use weak function pointers to call extension init funct...
2013-05-22 Jo-Philipp... Limit zone names to 14 bytes
2013-05-22 Jo-Philipp... Add required ipset declarations for kernels < 3.7
2013-05-22 Jo-Philipp... Further fixes for zone reloads
2013-05-22 Jo-Philipp... Only perform selective reload if firewall was already...
2013-05-21 Jo-Philipp... Fix another crash bug if ipsets are supported but none...
2013-05-21 Jo-Philipp... Fix rules for custom filter chains
2013-05-21 Jo-Philipp... Do not print to pipe or close command if nothing was...
2013-05-17 Jo-Philipp... Add missing libip6t_REJECT initialization
2013-05-17 Jo-Philipp... Only initialize extensions we actually use
2013-05-17 Jo-Philipp... Wait for ipsets to appear before continuing
2013-05-17 Jo-Philipp... Restore iptables-save include functionality
2013-05-17 Jo-Philipp... Also add comments for unnamed rules
2013-05-17 Jo-Philipp... Only process selected family for print
2013-05-17 Jo-Philipp... Include iptables command and table name in iptables...
2013-05-17 Jo-Philipp... Add debug prints for policy setting, don't commit rules...
2013-05-17 Jo-Philipp... Rename struct fw3_rule_spec to struct fw3_chain_spec...
2013-05-17 Jo-Philipp... Remove now unused fw3_pr_rulespec()
2013-05-17 Jo-Philipp... Remove now unused fw3_format_*() functions
2013-05-17 Jo-Philipp... Drop iptables-restore and create rules through libiptc...
2013-05-13 Jo-Philipp... Use libiptc to clear current ruleset
2013-05-08 Jo-Philipp... Force fsync() after writing statefile
2013-05-08 Jo-Philipp... Make reload atomic
2013-05-06 Jo-Philipp... Family "any" is not applicable to ipsets, default to...
2013-05-02 Jo-Philipp... Simplify ipset external checks and optionally initializ...
2013-05-02 Jo-Philipp... Check whether ipset exists before referencing it in...
2013-05-02 Jo-Philipp... Record device-network relation in state file, fix zone...
2013-04-30 Jo-Philipp... Record default policies in state file
2013-04-30 Jo-Philipp... Store ipset storage method and matches in state file...
2013-04-30 Jo-Philipp... Send quit comment in fw3_destroy_ipsets() and initializ...
2013-04-30 Jo-Philipp... Don't track family of ipsets
2013-04-30 Jo-Philipp... Fix parsing of ipset datatypes
2013-04-30 Jo-Philipp... Track ipsets in state file
2013-04-30 Jo-Philipp... Write statefile flags in hexadecimal format
2013-04-30 Jo-Philipp... Allow hex notation in int type options
2013-04-30 Jo-Philipp... Add common fw3_address_to_string() helper function
2013-04-30 Jo-Philipp... Remove referenced to unused FW3_FLAG_DELETED flag
2013-04-30 Jo-Philipp... Remove unused "running" argument form fw3_lookup_ipset()
2013-04-30 Jo-Philipp... Remove unused "running" argument form fw3_lookup_zone()
2013-04-30 Jo-Philipp... Split runtime and config states, store runtime state...
2013-04-09 Jo-Philipp... Add support for fwmark matches and targets
next