firewall4 - OpenWrt nftables firewall

Age	Commit message (Expand)	Author
2022-04-29	fw4: fix emitting device jump rules for family restricted zones	Jo-Philipp Wich
2022-04-28	fw4: fix family auto-selection for config nat rules	Jo-Philipp Wich
2022-04-26	ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well	Jo-Philipp Wich
2022-04-21	tests: add test coverage for zone family selection logic	Jo-Philipp Wich
2022-04-21	ruleset: set auto-merge directive for interval sets	Jo-Philipp Wich
2022-04-21	fw4: fix skipping invalid ipset entries	Jo-Philipp Wich
2022-04-13	fw4: fix applying zone flags for source bound rules	Jo-Philipp Wich
2022-04-02	fw4: fix emitting family specific redirect rules without any addrs	Jo-Philipp Wich
2022-04-02	fw4: bracketize IPv6 addresses in dnat addr:port notation	Jo-Philipp Wich
2022-03-30	fw4: ensure to capitalize weekday names	Jo-Philipp Wich
2022-03-22	treewide: forward compatibility changes	Jo-Philipp Wich
2022-02-12	fw4: resolve zone layer 2 devices for hw flow offloading	Jo-Philipp Wich
2022-02-12	fw4: rework and fix family inheritance logic	Jo-Philipp Wich
2022-02-12	tests: mocklib: fix infinite recursion in wrapped print()	Jo-Philipp Wich
2022-02-12	tests: change mocked wan interface type to PPPoE	Jo-Philipp Wich
2022-02-11	tests: mocklib: forward compatibility change	Jo-Philipp Wich
2022-02-10	fw4: only stage reflection rules if all required addrs are known	Jo-Philipp Wich
2022-02-10	fw4: add device iifname/oifname matches to DSCP and MARK rules	Jo-Philipp Wich
2022-02-08	tests: adjust 01_ruleset test case to latest changes	Jo-Philipp Wich
2022-02-07	fw4: gracefully handle unsupported hardware offloading	Jo-Philipp Wich
2022-02-07	init: fix boot action in init script	Jo-Philipp Wich
2022-02-07	fw4: parse traffic rules before forwarding rules	Jo-Philipp Wich
2022-02-05	fw4: consolidate helper code	Jo-Philipp Wich
2022-02-05	fw4: fix applying zone family restrictions to forwardings	Jo-Philipp Wich
2022-02-05	tests: implement fs.opendir() mock interface	Jo-Philipp Wich
2022-02-05	tests: fix mocked fs.popen() trace log	Jo-Philipp Wich
2022-02-04	fw4: improve flowtable handling	Jo-Philipp Wich
2022-02-03	fw4: disable "flow_offloading_hw" option for now	Jo-Philipp Wich
2022-02-03	fw4: fix enabling NAT reflection rules for DNATs without explicit family	Jo-Philipp Wich
2022-01-28	ruleset: fix undeclared variable access uncovered by strict mode	Jo-Philipp Wich
2022-01-28	tests: run testcases in strict mode	Jo-Philipp Wich
2022-01-28	ruleset: remove redundant syn check	Jo-Philipp Wich
2022-01-28	fw4: add RFC-8622 'Least Effort' (LE) DSCP mark	Jo-Philipp Wich
2022-01-28	tests: add test coverage for redirect rules	Jo-Philipp Wich
2022-01-28	fw4: fix address selection logic for DNAT reflection rules	Jo-Philipp Wich
2022-01-27	fw4: fix redirect destination zone resolving	Jo-Philipp Wich
2022-01-27	fw4: fix potential crashes when parsing invalid redirect sections	Jo-Philipp Wich
2022-01-27	ruleset: support non-contiguous address masks	Jo-Philipp Wich
2022-01-27	tests: update interface dump mock data	Jo-Philipp Wich
2022-01-27	fw4: fix family selection logic for redirect rules	Jo-Philipp Wich
2022-01-27	ruleset: properly render redirect targets without port	Jo-Philipp Wich
2022-01-26	fw4: consolidate device grouping logic	Jo-Philipp Wich
2022-01-26	ruleset: consolidate zone matches for raw_prerouting and raw_output chains	Jo-Philipp Wich
2022-01-26	fw4: fix wrong `parse_network()` return value on `parse_subnet()` failure	Jo-Philipp Wich
2022-01-26	fw4: fix parsing inverted numeric DSCP values	Jo-Philipp Wich
2022-01-26	ruleset: emit AF specific rules for DSCP matches	Jo-Philipp Wich
2022-01-26	fw4: fix family comparisons	Jo-Philipp Wich
2022-01-25	ruleset: properly deal with wildcards in zone device selectors	Jo-Philipp Wich
2022-01-22	ruleset: fix chain selection for mark and dscp targets	Jo-Philipp Wich
2022-01-22	fw4.uc: handle zone masq6 option	Jo-Philipp Wich