summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2016-01-29iptables: fix inversion flagsLen White
2016-01-24Remove commented codeJo-Philipp Wich
2016-01-24Use xt_id match to track own rulesJo-Philipp Wich
2015-05-26redirects: only emit REDIRECT rules if dest_ip is unsetJo-Philipp Wich
2015-05-26Rework match initializationJo-Philipp Wich
2015-05-26Link libext dynamicallyJo-Philipp Wich
2015-05-22iptables: initialize multiport matchJo-Philipp Wich
2015-05-21ubus: allow proto handlers to override device in announced rulesJo-Philipp Wich
2015-04-18ubus: print rule name when reporting errorsJo-Philipp Wich
2015-04-18ubus: store rule origin as commentJo-Philipp Wich
2015-02-26firewall3: fix null pointer access when no target is presentHans Dedecker
2015-01-13redirects: fix possible null pointer accessJo-Philipp Wich
2015-01-08firewall3: fix left shift on 64 bit systems in fw3_bitlen2netmaskUlrich Weber
2015-01-08redirects: respect src_dip option for reflection rulesJo-Philipp Wich
2014-09-19options: allow '*' as value for protocols and familiesJo-Philipp Wich
2014-09-18utils: rework fw3_bitlen2netmask() IPv6 mask calculationJo-Philipp Wich
2014-09-17redirect: emit -j REDIRECT rules for local port forwardsJo-Philipp Wich
2014-09-17utils: fix invalid memory access in fw3_bitlen2netmask()Jo-Philipp Wich
2014-08-11utils: ifa_addr may be NULL, skip such entriesJo-Philipp Wich
2014-08-11Selectively flush conntrackJo-Philipp Wich
2014-07-21zones: make forward policy destination boundJo-Philipp Wich
2014-07-19options: fix logic flaw when parsing ipaddr/mask notationJo-Philipp Wich
2014-07-19Use netmasks instead of prefix lengths internallyJo-Philipp Wich
2014-07-10ubus: handle attribute access after NULL check in parse_subnets()Jo-Philipp Wich
2014-07-10ubus: fix fw3_ubus_address()Jo-Philipp Wich
2014-07-10ubus: fix fw3_ubus_device() to only return a pointer if a device was foundJo-Philipp Wich
2014-07-03options: fix fw3_parse_network() when destination pointer is not a listJo-Philipp Wich
2014-07-02ubus: add support for fetching firewall rules from procdFelix Fietkau
2014-06-30ubus: use blobmsg_parse to validate device attributes and decouple the found device name from the order in which elements appearFelix Fietkau
2014-06-30make fw3_ubus_address take a list_head * argument instead of allocating & returning oneFelix Fietkau
2014-06-30use calloc instead of malloc+memsetFelix Fietkau
2014-06-30ubus: use blobmsg_parse to validate data from network.interface:dumpFelix Fietkau
2014-06-26Add fw3 zone call to list devices in a zoneSteven Barth
2014-04-14Add support for netifd-generated rulesSteven Barth
2014-04-14Add support for device and direction parametersSteven Barth
2014-04-14snat: add support for connlimiting port-range SNATSteven Barth
2014-04-14Fix building with newer toolchainsSteven Barth
2014-04-14snat: ICMP can be port-natted as wellSteven Barth
2014-04-14nat: allow ACCEPT-target to explicitely disable NATSteven Barth
2014-04-11Reapply SNAT/MASQUERADE rules on firewall reloadsJo-Philipp Wich
2014-04-06Initial support for "config nat" rules - this allows configuring zone-independant SNAT and MASQUERADE rulesJo-Philipp Wich
2014-03-20utils: define _GNU_SOURCE to get clearenv()Felix Fietkau
2014-02-21Several ipset bugfixesJo-Philipp Wich
2013-12-17Change set_default() to take value as integer, required for tcp_ecn > 1Jo-Philipp Wich
2013-12-17Treat option tcp_ecn as integer, not boolJo-Philipp Wich
2013-12-17Properly check strtol() results when paring values as integersJo-Philipp Wich
2013-11-18Clean up dead codeJo-Philipp Wich
2013-11-18Skip redirects with invalid optionsJo-Philipp Wich
2013-11-18Skip rules with invalid optionsJo-Philipp Wich
2013-11-18Change fw3_parse_options() to indicate whether all options where parsed successfullyJo-Philipp Wich