summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2023-11-03fw4: add log_limit to rules and redirectsLuiz Angelo Daros de Luca
2023-11-03fw4: add support for zone log_limitLuiz Angelo Daros de Luca
2023-11-03fw4: pass zone to templates whenever possibleLuiz Angelo Daros de Luca
2023-10-12fw4: perform strict validation of zone and set namesJo-Philipp Wich
2023-09-01fw4: remove special cases around hw flow offloadingFelix Fietkau
2023-08-11fw4: fix another instance of invalid rule jump targetsJo-Philipp Wich
2023-08-04fw4: avoid emitting invalid rule jump targetsJo-Philipp Wich
2023-05-30tests: fix expected test outputJo-Philipp Wich
2023-03-23fw4: enable flowtable countersFelix Fietkau
2023-03-23fw4: remove accidentally committed .orig and .rej fileFelix Fietkau
2023-02-03fw4: fix syntax errors in ICMP type declarationsJo-Philipp Wich
2023-02-03tests: add testcase for automatic includesJo-Philipp Wich
2023-02-03fw4: add further symbolic ICMP type declarationsPaul D
2023-02-03fw4: fix handling the ipset "comment" optionJo-Philipp Wich
2022-11-29fw4: prevent null access when no ipsets are definedJo-Philipp Wich
2022-11-02config: drop input traffic by defaultBaptiste Jonglez
2022-10-26ruleset: drop ctstate invalid traffic for masq-enabled zonesJo-Philipp Wich
2022-10-18fw4: gracefully handle `null` return values from `fd.read("line")`Jo-Philipp Wich
2022-10-14ruleset.uc: log forwarded traffic not matched by zone policiesJo-Philipp Wich
2022-10-14main.uc: reintroduce set reload restrictionJo-Philipp Wich
2022-10-14ruleset: fix emitting set_mark/set_xmark rules with masksJo-Philipp Wich
2022-10-05ruleset: properly handle zone names starting with a digitJo-Philipp Wich
2022-10-05fw4: fix formatting of default log prefixJo-Philipp Wich
2022-10-05main.uc: remove uneeded/wrong set reload restrictionsJo-Philipp Wich
2022-10-03tests: fix testcasesJo-Philipp Wich
2022-09-08fw4: recognize `option log` and `option counter` in `config nat` sectionsJo-Philipp Wich
2022-09-08fw4: fall back to device if l3_device is not available in ifstatusJo-Philipp Wich
2022-09-01cli: introduce test mode and refuse firewall restart on errorsJo-Philipp Wich
2022-09-01fw4: fix cosmetic issue with per-ruleset and per-table include pathsJo-Philipp Wich
2022-09-01doc: fix swapped include positions in nftables.d READMEJo-Philipp Wich
2022-08-12fw4: support automatic includesJo-Philipp Wich
2022-08-08fw4: honour enabled option of include sectionsJo-Philipp Wich
2022-08-08tests: add missing fs.stat) mock data for `nf_conntrack_dummy`Jo-Philipp Wich
2022-08-01fw4: don't inherit zone family from ct helpersStijn Tintel
2022-06-17fw4: add support for `option log` in rule and redirect sectionsJo-Philipp Wich
2022-06-17fw4: support sets with timeout capability but without default expiryJo-Philipp Wich
2022-06-15tests: add test coverage for firewall includesJo-Philipp Wich
2022-06-15fw4: add support for configurable includesJo-Philipp Wich
2022-06-14fw4: fix crash in parse_cthelper() if no helpers are presentJo-Philipp Wich
2022-06-14fw4: simplify `is_loopback_dev()`Jo-Philipp Wich
2022-06-14fw4: fix skipping invalid IPv6 ipset entriesJo-Philipp Wich
2022-06-14ruleset: reorder declarations & output tweaksJo-Philipp Wich
2022-06-14ruleset: reuse zone-jump.uc template for notrack and helper chain jumpsJo-Philipp Wich
2022-06-14ruleset: fix conntrack helpersStijn Tintel
2022-06-13tests: add test for zone helpersStijn Tintel
2022-06-13fw4.uc: don't skip zone for unavailable helperStijn Tintel
2022-06-13fw4.uc: fix zone helper assignmentStijn Tintel
2022-05-31fw4: prefer /dev/stdin if availableJo-Philipp Wich
2022-05-31fw4: make `fw4 restart` behavior more robustJo-Philipp Wich
2022-05-30ruleset: emit time ranges when both start and stop times are specifiedJo-Philipp Wich