summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2020-12-06firewall3: fix duplicate defaults section detectionRui Salvaterra
2020-12-06ipsets: allow blank/commented lines with loadfileDaniel Harding
2020-09-05fw3: zones: limit zone names to 11 bytesAlexey Dobrovolsky
2020-08-20options: fix parsing of boolean attributesRemi NGUYEN VAN
2020-07-25zones: apply tcp mss clamping also on ingress pathYousong Zhou
2020-06-03redirects: fix segmentation faultAlin Nastac
2020-06-03treewide: replace unsafe string functionsJo-Philipp Wich
2020-06-02improve reload logicJo-Philipp Wich
2020-03-16redurects: add support to define multiple zones for dnat reflection rulesAnton Engelhardt
2020-03-13firewall3: defaults: fix uci flow_offloading optionWangYanlong
2020-03-03rules: fix typoYousong Zhou
2020-01-28defaults: robustify flow table detection.Rui Salvaterra
2019-11-22utils: persist effective extra_src and extra_dest options in state fileJo-Philipp Wich
2019-11-22zones: fix emitting match rules for zones with only "extra" optionsJo-Philipp Wich
2019-09-23utils: fix resource leakHans Dedecker
2019-09-18ubus: do not overwrite ipset name attributeJo-Philipp Wich
2019-09-15firewall3: fix typo that affects ICMPv6 rules with numeric icmp_typeAlin Nastac
2019-09-08utils: Fix string format messageHauke Mehrtens
2019-09-03firewall3: Fix some format string problemsHauke Mehrtens
2019-08-22iptables.c: lock the xtables.lockAlexander Couzens
2019-08-22utils: implement fw3_lock_path() & fw3_unlock_path()Alexander Couzens
2019-08-19firewall3: ipset: Handle reload_set properlyKristian Evensen
2019-08-16firewall3: Improve ipset supportKristian Evensen
2019-06-12utils: coverity resource leak warningKevin Darbyshire-Bryant
2019-01-02zones: add zone identifying local traffic in raw OUTPUT chainHans Dedecker
2018-12-20utils: Free args in __fw3_command_pipe()Hauke Mehrtens
2018-12-20options: redirects: Fix possible buffer overflowsHauke Mehrtens
2018-12-06redirects: properly handle src_dport in SNAT rulesHans Dedecker
2018-08-13defaults: fix check_kmod() functionJo-Philipp Wich
2018-08-07defaults: use a generic check_kmod() functionJoe Holden
2018-08-03Add support for DSCP matches and targetJo-Philipp Wich
2018-07-26ubus: avoid dumping interface state with NULL messageJo-Philipp Wich
2018-07-16firewall3: make reject types selectable by userAlin Nastac
2018-07-02firewall3: Fix GCC8 warnings by replacing sprintf with snprintfRosen Penev
2018-05-19zones: add interface/subnet bound LOG rulesJo-Philipp Wich
2018-05-16options: treat time strings as UTC timesJo-Philipp Wich
2018-05-14helpers: fix the set_helper in the rule structurePierre Lebleu
2018-05-14helpers.conf: support also tcp in the CT sip helperPierre Lebleu
2018-05-14helpers: make the proto field as a list rather than one optionPierre Lebleu
2018-04-05defaults: add support for setting --hw on the xt_FLOWOFFLOAD ruleFelix Fietkau
2018-03-20helpers.conf: add CT rtsp helperHans Dedecker
2018-03-13Reword rule commentsJo-Philipp Wich
2018-03-13defaults: add support for xt_FLOWOFFLOAD ruleJo-Philipp Wich
2018-03-10ipsets: add support for specifying entriesJo-Philipp Wich
2018-03-02iptables: fix possible NULL pointer access on constructing rule masksJo-Philipp Wich
2018-02-26zones: allow per-table log controlStijn Tintel
2018-02-20helpers: implement explicit CT helper assignment supportJo-Philipp Wich
2018-02-13zones: disable masq when resolving of all masq_src or masq_dest items failedJo-Philipp Wich
2018-02-13options: emit an empty address item when resolving networks failsJo-Philipp Wich
2018-02-13ubus: let fw3_ubus_address() return the number of resolved addressesJo-Philipp Wich