John Crispin
|
21bbdc24c3
|
adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
|
17 years ago |
|
Felix Fietkau
|
c89de79512
|
move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
SVN-Revision: 10383
|
17 years ago |
|
Felix Fietkau
|
0cf1a58282
|
Here comes the new UCI. Enjoy :)
SVN-Revision: 10367
|
17 years ago |
|
Tim Yardley
|
85b17a4e9e
|
update stripped subset of l7 patterns to 11-03-2007 patterns
SVN-Revision: 9582
|
17 years ago |
|
Florian Fainelli
|
9d7192e5fa
|
Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
SVN-Revision: 9503
|
17 years ago |
|
Florian Fainelli
|
ada8e5dd95
|
Only masquerade LAN, other settings need manual tweaking
SVN-Revision: 9461
|
17 years ago |
|
Florian Fainelli
|
304d5c8845
|
Only masquerade non routable addresses (#2535)
SVN-Revision: 9460
|
17 years ago |
|
Felix Fietkau
|
2cc2d7707b
|
make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
SVN-Revision: 7806
|
18 years ago |
|
Florian Fainelli
|
01b4fd853a
|
Initialise firewall before network (#1988)
SVN-Revision: 7757
|
18 years ago |
|
Felix Fietkau
|
c05a061e4e
|
fix a problem with the firewall script (multicast traffic could produce packet loss)
SVN-Revision: 6726
|
18 years ago |
|
Felix Fietkau
|
8e88bb54ba
|
port [6229] to kamikaze
SVN-Revision: 6275
|
18 years ago |
|
Felix Fietkau
|
4323774d59
|
prepare for moving part of the firewall to hotplug. created new chains {input,forwarding,prerouting}_wan for wan port forwardings and updated the examples. syntax of /etc/config/firewall unchanged and old firewall.user files are still compatible
SVN-Revision: 5878
|
18 years ago |
|
Felix Fietkau
|
223fdb0443
|
replace br0 with $LAN
SVN-Revision: 5492
|
18 years ago |
|
Florian Fainelli
|
a72fd20a82
|
export WAN variable so that firewall works (#907)
SVN-Revision: 5412
|
18 years ago |
|
Felix Fietkau
|
afd6539a65
|
add firewall protection for wan_device in addition to wan_ifname (fixes #852)
SVN-Revision: 5136
|
18 years ago |
|
Felix Fietkau
|
8612d33691
|
init script cleanup, use /etc/rc.d/ for enabled scripts, /etc/init.d/<pkgname> (enable|disable) manages symlinks
SVN-Revision: 5128
|
18 years ago |
