2022-02-21 Rui SalvaterraRevert "firewall3: support table load on access on... master
2022-02-21 Wenli Looifirewall3: remove unnecessary fw3_has_table
2022-01-09 Kevin Darbyshire... options.c: add DSCP code LE Least Effort
2022-01-08 Kevin Darbyshire... firewall3: remove redundant syn check
2022-01-08 Florian Eckertfirewall3: fix locking issue
2022-01-08 Ansuel Smithfirewall3: support table load on access on Linux 5.15+
2021-08-14 Kevin Darbyshire... ipsets: permit default timeout of 0
2021-03-23 Rui Salvaterrafirewall3: clean up the flow table detection logic
2021-03-23 Rui Salvaterrafirewall3: create a common helper to find strings in...
2021-03-23 Tony Ambardarrules: fix device and chain usage for DSCP/MARK targets
2021-03-23 Tony Ambardarzone: avoid duplicates in devices list
2021-02-28 Philip Prindevillefirewall3: remove last remaining sprintf()
2020-12-06 Jo-Philipp... iptables: fix serializing multiple weekdays
2020-12-06 Rui Salvaterrafirewall3: fix duplicate defaults section detection
2020-12-06 Daniel Hardingipsets: allow blank/commented lines with loadfile
2020-09-05 Alexey Dobrovolskyfw3: zones: limit zone names to 11 bytes
2020-08-20 Remi NGUYEN VANoptions: fix parsing of boolean attributes
2020-07-25 Yousong Zhouzones: apply tcp mss clamping also on ingress path
2020-06-03 Alin Nastacredirects: fix segmentation fault
2020-06-03 Jo-Philipp... treewide: replace unsafe string functions
2020-06-02 Jo-Philipp... improve reload logic
2020-03-16 Anton Engelhardtredurects: add support to define multiple zones for...
2020-03-13 WangYanlongfirewall3: defaults: fix uci flow_offloading option
2020-03-03 Yousong Zhourules: fix typo
2020-01-28 Rui Salvaterradefaults: robustify flow table detection.
2019-11-22 Jo-Philipp... utils: persist effective extra_src and extra_dest optio...
2019-11-22 Jo-Philipp... zones: fix emitting match rules for zones with only...
2019-09-23 Hans Dedeckerutils: fix resource leak
2019-09-18 Jo-Philipp... ubus: do not overwrite ipset name attribute
2019-09-15 Alin Nastacfirewall3: fix typo that affects ICMPv6 rules with...
2019-09-08 Hauke Mehrtensutils: Fix string format message
2019-09-03 Hauke Mehrtensfirewall3: Fix some format string problems
2019-08-22 Alexander Couzensiptables.c: lock the xtables.lock
2019-08-22 Alexander Couzensutils: implement fw3_lock_path() & fw3_unlock_path()
2019-08-19 Kristian Evensenfirewall3: ipset: Handle reload_set properly
2019-08-16 Kristian Evensenfirewall3: Improve ipset support
2019-06-12 Kevin Darbyshire... utils: coverity resource leak warning
2019-01-02 Hans Dedeckerzones: add zone identifying local traffic in raw OUTPUT...
2018-12-20 Hauke Mehrtensutils: Free args in __fw3_command_pipe()
2018-12-20 Hauke Mehrtensoptions: redirects: Fix possible buffer overflows
2018-12-06 Hans Dedeckerredirects: properly handle src_dport in SNAT rules
2018-08-13 Jo-Philipp... defaults: fix check_kmod() function
2018-08-07 Joe Holdendefaults: use a generic check_kmod() function
2018-08-03 Jo-Philipp... Add support for DSCP matches and target
2018-07-26 Jo-Philipp... ubus: avoid dumping interface state with NULL message
2018-07-16 Alin Nastacfirewall3: make reject types selectable by user
2018-07-02 Rosen Penevfirewall3: Fix GCC8 warnings by replacing sprintf with...
2018-05-19 Jo-Philipp... zones: add interface/subnet bound LOG rules
2018-05-16 Jo-Philipp... options: treat time strings as UTC times
2018-05-14 Pierre Lebleuhelpers: fix the set_helper in the rule structure
2018-05-14 Pierre Lebleuhelpers.conf: support also tcp in the CT sip helper
2018-05-14 Pierre Lebleuhelpers: make the proto field as a list rather than...
2018-04-05 Felix Fietkaudefaults: add support for setting --hw on the xt_FLOWOF...
2018-03-20 Hans Dedeckerhelpers.conf: add CT rtsp helper
2018-03-13 Jo-Philipp... Reword rule comments
2018-03-13 Jo-Philipp... defaults: add support for xt_FLOWOFFLOAD rule
2018-03-10 Jo-Philipp... ipsets: add support for specifying entries
2018-03-02 Jo-Philipp... iptables: fix possible NULL pointer access on construct...
2018-02-26 Stijn Tintelzones: allow per-table log control
2018-02-20 Jo-Philipp... helpers: implement explicit CT helper assignment support
2018-02-13 Jo-Philipp... zones: disable masq when resolving of all masq_src...
2018-02-13 Jo-Philipp... options: emit an empty address item when resolving...
2018-02-13 Jo-Philipp... ubus: let fw3_ubus_address() return the number of resol...
2017-11-07 Pierre Lebleufirewall3: ubus: parse the firewall data within the...
2017-05-27 Jo-Philipp... options: remove stray continue statement
2017-05-26 Jo-Philipp... options: improve handling of negations when parsing...
2017-05-26 Jo-Philipp... iptables: support -i, -o, -s and -d in option extra
2017-05-17 Hans Dedeckerubus: increase ubus network interface dump timeout
2017-05-12 Jo-Philipp... iptables: add exception handling
2017-05-09 Pierre Lebleufirewall3: add check_snat() function
2017-05-09 Pierre Lebleufirewall3: display the section type for UBUS rules
2017-05-09 Pierre Lebleufirewall3: add UBUS support for include scripts
2017-05-09 Pierre Lebleufirewall3: add UBUS support for ipset sections
2017-05-09 Pierre Lebleufirewall3: add UBUS support for forwarding sections
2017-05-09 Pierre Lebleufirewall3: add UBUS support for redirect sections
2017-05-09 Pierre Lebleufirewall3: add fw3_attr_parse_name_type() function
2017-05-09 Pierre Lebleufirewall3: replace warn_rule() by warn_section()
2017-05-09 Pierre Lebleufirewall3: check the return value of fw3_parse_options()
2017-05-09 Felix Fietkaubuild: use -Wno-format-truncation instead of -Wno-error...
2017-05-04 Felix Fietkauutils: replace sprintf use with snprintf to avoid overflows
2017-05-04 Felix Fietkaubuild: disable the format-truncation warning error...
2017-04-27 Jo-Philipp... zones: drop outgoing invalid traffic in masqueraded...
2017-04-27 Jo-Philipp... rules: fix UCI context in error reporting
2017-04-13 Hans Dedeckerubus: fix interface name and proto lookup
2017-02-22 Jo-Philipp... firewall3: fix handling of UTC times
2017-02-07 Jo-Philipp... iptables: support xtables API > 11
2017-01-13 Jo-Philipp... zones: do not check conntrack state in zone_*_dest_ACCE...
2016-11-29 Jo-Philipp... global: remove automatic notrack rules
2016-11-07 Jo-Philipp... forwards: properly propagate conntrack flag
2016-11-06 Jo-Philipp... iptables: move includes into iptables.c to avoid kernel...
2016-11-06 Ralph Sennhausermusl-compat: avoid kernel header conflicts
2016-11-06 Jo-Philipp... iptables: remove usage of xt_id
2016-11-06 Jo-Philipp... main: make failing ubus connection nonfatal
2016-11-06 Jo-Philipp... iptables: rework extension loader
2016-11-06 Jo-Philipp... iptables: declare _GNU_SOURCE to define RTLD_NEXT
2016-11-06 Ralph Sennhauseriptables: optional loading of static extensions
2016-11-05 Ralph Sennhauseriptables: fix loading standard target
2016-11-04 Ralph Sennhauseriptables: add support for version 1.6.0
2016-11-01 Jo-Philipp... zones: properly handle multiple masq_src / masq_dest...
2016-11-01 Jo-Philipp... iptables: use different approach for managing loadable...