summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2017-04-27rules: fix UCI context in error reportingJo-Philipp Wich
2017-04-13ubus: fix interface name and proto lookupHans Dedecker
2017-02-22firewall3: fix handling of UTC timesJo-Philipp Wich
2017-02-07iptables: support xtables API > 11Jo-Philipp Wich
2017-01-13zones: do not check conntrack state in zone_*_dest_ACCEPT chainsJo-Philipp Wich
2016-11-29global: remove automatic notrack rulesJo-Philipp Wich
2016-11-07forwards: properly propagate conntrack flagJo-Philipp Wich
2016-11-06iptables: move includes into iptables.c to avoid kernel header clashesJo-Philipp Wich
2016-11-06musl-compat: avoid kernel header conflictsRalph Sennhauser
2016-11-06iptables: remove usage of xt_idJo-Philipp Wich
2016-11-06main: make failing ubus connection nonfatalJo-Philipp Wich
2016-11-06iptables: rework extension loaderJo-Philipp Wich
2016-11-06iptables: declare _GNU_SOURCE to define RTLD_NEXTJo-Philipp Wich
2016-11-06iptables: optional loading of static extensionsRalph Sennhauser
2016-11-05iptables: fix loading standard targetRalph Sennhauser
2016-11-04iptables: add support for version 1.6.0Ralph Sennhauser
2016-11-01zones: properly handle multiple masq_src / masq_dest negations (FS#248)Jo-Philipp Wich
2016-11-01iptables: use different approach for managing loadable extensionsJo-Philipp Wich
2016-09-18utils.h: Avoid name clashes for setbit/delbit/hasbitFlorian Fainelli
2016-08-08zones: allow untracked traffic as wellJo-Philipp Wich
2016-08-08defaults: disable drop_invalid by defaultJo-Philipp Wich
2016-08-08zones: restrict default ACCEPT rules to NEW ctstateJo-Philipp Wich
2016-07-24cmake: Find uci.hFlorian Fainelli
2016-06-07treewide: replace jow@openwrt.org with jo@mein.ioJo-Philipp Wich
2016-05-02load running state after lock is acquiredAlin Năstac
2016-04-28set mark for locally generated traffic in OUTPUT chainDaniel Golle
2016-04-27defaults.c: remove toplevel_rule structAlexandru Ardelean
2016-01-29defaults: emit ctstate INVALID drop rules by defaultJo-Philipp Wich
2016-01-29iptables: fix inversion flagsLen White
2016-01-24Remove commented codeJo-Philipp Wich
2016-01-24Use xt_id match to track own rulesJo-Philipp Wich
2015-05-26redirects: only emit REDIRECT rules if dest_ip is unsetJo-Philipp Wich
2015-05-26Rework match initializationJo-Philipp Wich
2015-05-26Link libext dynamicallyJo-Philipp Wich
2015-05-22iptables: initialize multiport matchJo-Philipp Wich
2015-05-21ubus: allow proto handlers to override device in announced rulesJo-Philipp Wich
2015-04-18ubus: print rule name when reporting errorsJo-Philipp Wich
2015-04-18ubus: store rule origin as commentJo-Philipp Wich
2015-02-26firewall3: fix null pointer access when no target is presentHans Dedecker
2015-01-13redirects: fix possible null pointer accessJo-Philipp Wich
2015-01-08firewall3: fix left shift on 64 bit systems in fw3_bitlen2netmaskUlrich Weber
2015-01-08redirects: respect src_dip option for reflection rulesJo-Philipp Wich
2014-09-19options: allow '*' as value for protocols and familiesJo-Philipp Wich
2014-09-18utils: rework fw3_bitlen2netmask() IPv6 mask calculationJo-Philipp Wich
2014-09-17redirect: emit -j REDIRECT rules for local port forwardsJo-Philipp Wich
2014-09-17utils: fix invalid memory access in fw3_bitlen2netmask()Jo-Philipp Wich
2014-08-11utils: ifa_addr may be NULL, skip such entriesJo-Philipp Wich
2014-08-11Selectively flush conntrackJo-Philipp Wich
2014-07-21zones: make forward policy destination boundJo-Philipp Wich
2014-07-19options: fix logic flaw when parsing ipaddr/mask notationJo-Philipp Wich