| .. |
|
config.sh
|
a756114e59
firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address
|
15 lat temu |
|
core.sh
|
f90328f26e
firewall: make invalid redirects and duplicate zones non-fatal, print a notice and discard them
|
15 lat temu |
|
core_forwarding.sh
|
f3dd8278bb
firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source
|
15 lat temu |
|
core_init.sh
|
6a335579b8
fireall: - support negations for src_ip, dest_ip, src_dip options in rules and redirects - add NOTRACK target to rule sections, allows to define fine grained notrack rules
|
15 lat temu |
|
core_interface.sh
|
b07620df31
firewall: protect iptables invocations with locks in interface ops, it might run concurrently due to hotplug invocations on network restart
|
15 lat temu |
|
core_redirect.sh
|
6a335579b8
fireall: - support negations for src_ip, dest_ip, src_dip options in rules and redirects - add NOTRACK target to rule sections, allows to define fine grained notrack rules
|
15 lat temu |
|
core_rule.sh
|
1a0d7a3612
firewall: fix chain selection logic, option dest must be ignored for notrack targets
|
15 lat temu |
|
fw.sh
|
6a335579b8
fireall: - support negations for src_ip, dest_ip, src_dip options in rules and redirects - add NOTRACK target to rule sections, allows to define fine grained notrack rules
|
15 lat temu |
|
uci_firewall.sh
|
c284cb51c0
firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2
|
16 lat temu |
Jo-Philipp Wich
1a0d7a3612
firewall: fix chain selection logic, option dest must be ignored for notrack targets