9 Commits (d3b8685cd79e04f6c215e13220b9ba8784ea7e0a)

Author SHA1 Message Date
Jo-Philipp Wich 6a335579b8 fireall: - support negations for src_ip, dest_ip, src_dip options in rules and redirects - add NOTRACK target to rule sections, allows to define fine grained notrack rules 14 years ago
Jo-Philipp Wich f3dd8278bb firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source 14 years ago
Jo-Philipp Wich 5ab58aa39c firewall: - fix possible endless loop when the family option is used for forwardings - only generate forwarding rules in SNAT redirect sections if src_dip is specified 14 years ago
Jo-Philipp Wich ee4dd61b10 firewall: - fix processing of rules with an ip family option - append interface rules at the end of internal zone chains, simplifies injecting user or addon rules - support simple file logging (option log + option log_limit per zone) 14 years ago
Jo-Philipp Wich a756114e59 firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address 15 years ago
Jo-Philipp Wich 40ad9defcc firewall: - fix ip6tables rules when icmp_type option is set - add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables 15 years ago
Jo-Philipp Wich 3ffd27f905 firewall: implement disable_ipv6 uci option 15 years ago
Jo-Philipp Wich e796062a4b firewall: properly unset position for delete command, fixes rule removal in ifdown 15 years ago
Jo-Philipp Wich c284cb51c0 firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2 15 years ago