Commit Graph

11 Commits (07a3110e88a6fd75b029b5a531b43e6a030464bb)

Author SHA1 Message Date
Jo-Philipp Wich 07a3110e88 firewall: fix git source url
SVN-Revision: 36839
11 years ago
Jo-Philipp Wich b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
SVN-Revision: 36838
11 years ago
Jo-Philipp Wich 0dd6753c09 Drop legacy firewall package
SVN-Revision: 36837
11 years ago
Steven Barth 4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
11 years ago
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
11 years ago
Jo-Philipp Wich e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
11 years ago
Jo-Philipp Wich 839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
12 years ago
Steven Barth b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
SVN-Revision: 35012
12 years ago
Jo-Philipp Wich 16d0957a4e firewall: fix typo in reflection hotplug script
SVN-Revision: 34569
12 years ago
Jo-Philipp Wich 6504b268b3 firewall: extend nat reflection support
- use comment match to keep track of per-network rules
	- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
	- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
12 years ago
Felix Fietkau 405e21d167 packages: sort network related packages into package/network/
SVN-Revision: 33688
12 years ago