Commit Graph

18 Commits (458c37fb14498f43604e75fc9d2d3c8e7c72626d)

Author SHA1 Message Date
John Crispin 2ae05c57f8 package/*: remove useless explicit set of function returncode
somebody started to set a function returncode in the validation
stuff and everybody copies it, e.g.

myfunction()
{
	fire_command

	return $?
}

a function automatically returns with the last returncode,
so we can safely remove the command 'return $?'. reference:

http://tldp.org/LDP/abs/html/exit-status.html
"The last command executed in the function or script determines the exit status."

Signed-off-by: Bastian Bittorf <bittorf@bluebottle.com>

SVN-Revision: 42278
10 years ago
John Crispin b9ea44f947 firewall: the firewall did not start properly on boot
https://dev.openwrt.org/ticket/17593

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 42233
10 years ago
Jo-Philipp Wich b22ad85bc6 firewall: fix validation constraints
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39649
11 years ago
John Crispin 15ebcfc04e firewall3: update init.d script to make use of procd
add validation data

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39617
11 years ago
Steven Barth fac5e62abd firewall: don't reload if there were no address or data changes
This fixes packet loss due to reloading firewall every minute with IPv6
implementation of certain ISPs.

SVN-Revision: 39332
11 years ago
John Crispin a844275f37 firewall: improve logging in hotplug script
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 39300
11 years ago
Steven Barth bb699867e0 firewall: Improve ubus support
* Use network.interface dump call instead of individual status calls
  to reduce overall netifd lookups and invokes to 1 per fw3 process.

* Allow protocol handlers to assign a firewall zone for an interface
  in the data section to allow for dynamic firewall zone assignment.

SVN-Revision: 38504
11 years ago
Jo-Philipp Wich 4aa82d07a6 firewall: allow routed lan<->lan traffic by default
SVN-Revision: 37171
11 years ago
Jo-Philipp Wich b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
SVN-Revision: 36838
11 years ago
Jo-Philipp Wich 0dd6753c09 Drop legacy firewall package
SVN-Revision: 36837
11 years ago
Steven Barth 4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
11 years ago
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
12 years ago
Jo-Philipp Wich e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
12 years ago
Jo-Philipp Wich 839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
12 years ago
Steven Barth b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
SVN-Revision: 35012
12 years ago
Jo-Philipp Wich 16d0957a4e firewall: fix typo in reflection hotplug script
SVN-Revision: 34569
12 years ago
Jo-Philipp Wich 6504b268b3 firewall: extend nat reflection support
- use comment match to keep track of per-network rules
	- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
	- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
12 years ago
Felix Fietkau 405e21d167 packages: sort network related packages into package/network/
SVN-Revision: 33688
12 years ago