ruleset: apply egress MSS fixup later to apply final MTU before wire
[project/firewall4.git] / root /
2023-11-03 Andris PEruleset: apply egress MSS fixup later to apply final... master
2023-11-03 Andris PEruleset: do not emit redundant drop invalid rules
2023-11-03 Andris PEruleset: reduce ksoftirqd load by refering to looopback...
2023-11-03 Andris PEruleset: dispatch ct states using verdict map
2023-11-03 Jo-Philipp WichRevert "ruleset: dispatch ct states using verdict map"
2023-11-03 User User-Userruleset: dispatch ct states using verdict map
2023-11-03 Luiz Angelo Daros... fw4: add log_limit to rules and redirects
2023-11-03 Luiz Angelo Daros... fw4: add support for zone log_limit
2023-11-03 Luiz Angelo Daros... fw4: pass zone to templates whenever possible
2023-10-12 Jo-Philipp Wichfw4: perform strict validation of zone and set names
2023-09-01 Felix Fietkaufw4: remove special cases around hw flow offloading
2023-08-11 Jo-Philipp Wichfw4: fix another instance of invalid rule jump targets
2023-08-04 Jo-Philipp Wichfw4: avoid emitting invalid rule jump targets
2023-03-23 Felix Fietkaufw4: enable flowtable counters
2023-03-23 Felix Fietkaufw4: remove accidentally committed .orig and .rej file
2023-02-03 Jo-Philipp Wichfw4: fix syntax errors in ICMP type declarations
2023-02-03 Paul Dfw4: add further symbolic ICMP type declarations
2023-02-03 Jo-Philipp Wichfw4: fix handling the ipset "comment" option
2022-11-29 Jo-Philipp Wichfw4: prevent null access when no ipsets are defined
2022-11-02 Baptiste Jonglezconfig: drop input traffic by default
2022-10-26 Jo-Philipp Wichruleset: drop ctstate invalid traffic for masq-enabled...
2022-10-18 Jo-Philipp Wichfw4: gracefully handle `null` return values from `fd...
2022-10-14 Jo-Philipp Wichruleset.uc: log forwarded traffic not matched by zone...
2022-10-14 Jo-Philipp Wichmain.uc: reintroduce set reload restriction
2022-10-14 Jo-Philipp Wichruleset: fix emitting set_mark/set_xmark rules with...
2022-10-05 Jo-Philipp Wichruleset: properly handle zone names starting with a...
2022-10-05 Jo-Philipp Wichfw4: fix formatting of default log prefix
2022-10-05 Jo-Philipp Wichmain.uc: remove uneeded/wrong set reload restrictions
2022-09-08 Jo-Philipp Wichfw4: recognize `option log` and `option counter` in...
2022-09-08 Jo-Philipp Wichfw4: fall back to device if l3_device is not available...
2022-09-01 Jo-Philipp Wichcli: introduce test mode and refuse firewall restart...
2022-09-01 Jo-Philipp Wichfw4: fix cosmetic issue with per-ruleset and per-table...
2022-09-01 Jo-Philipp Wichdoc: fix swapped include positions in nftables.d README
2022-08-12 Jo-Philipp Wichfw4: support automatic includes
2022-08-08 Jo-Philipp Wichfw4: honour enabled option of include sections
2022-08-01 Stijn Tintelfw4: don't inherit zone family from ct helpers
2022-06-17 Jo-Philipp Wichfw4: add support for `option log` in rule and redirect...
2022-06-17 Jo-Philipp Wichfw4: support sets with timeout capability but without...
2022-06-15 Jo-Philipp Wichfw4: add support for configurable includes
2022-06-14 Jo-Philipp Wichfw4: fix crash in parse_cthelper() if no helpers are...
2022-06-14 Jo-Philipp Wichfw4: simplify `is_loopback_dev()`
2022-06-14 Jo-Philipp Wichfw4: fix skipping invalid IPv6 ipset entries
2022-06-14 Jo-Philipp Wichruleset: reorder declarations & output tweaks
2022-06-14 Jo-Philipp Wichruleset: reuse zone-jump.uc template for notrack and...
2022-06-14 Stijn Tintelruleset: fix conntrack helpers
2022-06-13 Stijn Tintelfw4.uc: don't skip zone for unavailable helper
2022-06-13 Stijn Tintelfw4.uc: fix zone helper assignment
2022-05-31 Jo-Philipp Wichfw4: prefer /dev/stdin if available
2022-05-31 Jo-Philipp Wichfw4: make `fw4 restart` behavior more robust
2022-05-30 Jo-Philipp Wichruleset: emit time ranges when both start and stop...
2022-05-30 Jo-Philipp Wichfw4: fix datetime parsing
2022-05-30 Jo-Philipp Wichruleset: correct mangle_output chain type
2022-05-30 Jo-Philipp Wichfw4: fix logic flaw in testing hw flow offloading support
2022-05-30 Jo-Philipp Wichfw4: ensure that negative bitcounts are properly translated
2022-05-30 Jo-Philipp Wichfw4: fix typo in emitted set types
2022-05-20 Jo-Philipp Wichfw4: support negative CIDR bit notation
2022-05-20 Jo-Philipp Wichhotplug: reliably handle interfaces with ubus zone...
2022-05-20 Jo-Philipp Wichfw4: store zone associations from ubus in statefile...
2022-05-09 Jo-Philipp Wichfw4: filter non hw-offload capable devices when resolvi...
2022-05-09 Jo-Philipp Wichfw4: always resolve lower flowtable devices
2022-05-04 Tiago Gasparconfig: remove restictions on DHCPv6 allow rule
2022-04-29 Jo-Philipp Wichfw4: refactor family selection for forwarding rules
2022-04-29 Jo-Philipp Wichtreewide: use modern syntax
2022-04-29 Jo-Philipp Wichfw4: fix emitting device jump rules for family restrict...
2022-04-28 Jo-Philipp Wichfw4: fix family auto-selection for config nat rules
2022-04-26 Jo-Philipp Wichruleset: ensure that family-agnostic ICMP rules cover...
2022-04-21 Jo-Philipp Wichruleset: set auto-merge directive for interval sets
2022-04-21 Jo-Philipp Wichfw4: fix skipping invalid ipset entries
2022-04-13 Jo-Philipp Wichfw4: fix applying zone flags for source bound rules
2022-04-02 Jo-Philipp Wichfw4: fix emitting family specific redirect rules withou...
2022-04-02 Jo-Philipp Wichfw4: bracketize IPv6 addresses in dnat addr:port notation
2022-03-30 Jo-Philipp Wichfw4: ensure to capitalize weekday names
2022-03-22 Jo-Philipp Wichtreewide: forward compatibility changes
2022-02-12 Jo-Philipp Wichfw4: resolve zone layer 2 devices for hw flow offloading
2022-02-12 Jo-Philipp Wichfw4: rework and fix family inheritance logic
2022-02-10 Jo-Philipp Wichfw4: only stage reflection rules if all required addrs...
2022-02-10 Jo-Philipp Wichfw4: add device iifname/oifname matches to DSCP and...
2022-02-07 Jo-Philipp Wichfw4: gracefully handle unsupported hardware offloading
2022-02-07 Jo-Philipp Wichinit: fix boot action in init script
2022-02-07 Jo-Philipp Wichfw4: parse traffic rules before forwarding rules
2022-02-05 Jo-Philipp Wichfw4: consolidate helper code
2022-02-05 Jo-Philipp Wichfw4: fix applying zone family restrictions to forwardings
2022-02-04 Jo-Philipp Wichfw4: improve flowtable handling
2022-02-03 Jo-Philipp Wichfw4: disable "flow_offloading_hw" option for now
2022-02-03 Jo-Philipp Wichfw4: fix enabling NAT reflection rules for DNATs withou...
2022-01-28 Jo-Philipp Wichruleset: fix undeclared variable access uncovered by...
2022-01-28 Jo-Philipp Wichruleset: remove redundant syn check
2022-01-28 Jo-Philipp Wichfw4: add RFC-8622 'Least Effort' (LE) DSCP mark
2022-01-28 Jo-Philipp Wichfw4: fix address selection logic for DNAT reflection...
2022-01-27 Jo-Philipp Wichfw4: fix redirect destination zone resolving
2022-01-27 Jo-Philipp Wichfw4: fix potential crashes when parsing invalid redirec...
2022-01-27 Jo-Philipp Wichruleset: support non-contiguous address masks
2022-01-27 Jo-Philipp Wichfw4: fix family selection logic for redirect rules
2022-01-27 Jo-Philipp Wichruleset: properly render redirect targets without port
2022-01-26 Jo-Philipp Wichfw4: consolidate device grouping logic
2022-01-26 Jo-Philipp Wichruleset: consolidate zone matches for raw_prerouting...
2022-01-26 Jo-Philipp Wichfw4: fix wrong `parse_network()` return value on `parse...
2022-01-26 Jo-Philipp Wichfw4: fix parsing inverted numeric DSCP values
2022-01-26 Jo-Philipp Wichruleset: emit AF specific rules for DSCP matches
2022-01-26 Jo-Philipp Wichfw4: fix family comparisons
next