github.com/vyos/vyatta-cfg-firewall commits | Ecosyste.ms: OpenCollective

Bugfix 8271: Remove Vestigial VRRP hooks. The implementation changed and these are no longer needed.

bc907cff82835e3deac8743c58ddde3e8624d6b1 authored over 12 years ago

0.13.79

91a6136a4863fd0abb97100e14da1de300896ed1 authored over 12 years ago

0.13.78

b1fac1a319295a32ace9362352ad6d776ea80a75 authored over 12 years ago

Bugfix 8217: VTI: add firewall cfg commands under interfaces vti

Add support for interface vti for cfg commands for firewall.

70407f73496ff0533826714a460b311ad666f850 authored over 12 years ago

add conntrack raw table ignore chain

7bd89f780b75b6e953be3924d392efdf172cae26 authored over 12 years ago

0.13.77

221e4070c648d4a1786a61a290e95a0388a9fe85 authored over 12 years ago

fixing 8173: moving CT_HELPER chain just before CTTIMEOUT

(cherry picked from commit faacba00db46c29fc652217653f9fe0564c1ebac)

b1e3bbe3faf4ec2c5df079ec36964e46e8254041 authored over 12 years ago

0.13.76

5ffdcdf9fd77a415381c481e4641a620edd26449 authored over 12 years ago

fix 8112

e63154e1c5b7052b99fa76a0111b5c65aebea940 authored over 12 years ago

0.13.75

d19cf2c81a2568e33da9a5d22131e3cc0fd390cb authored over 12 years ago

Bugfix 8042: increase number of firewall groups to a reasonable number

cfa0e1f627f7169da4e097cd38c1b51809b70543 authored over 12 years ago

0.13.74

7f9b5bc61c02df904aae6c0e35bb56676bc2c995 authored over 12 years ago

Adding functions to conditionally add CT_HELPER chain and remove when not in use, neither by FW nor by NAT.

fd0c5f52391796c3602e35f6e010d5a0a3ca2eb0 authored over 12 years ago

0.13.73

71e7d035dae8146b05a190c66dffd6a8025ec12b authored over 12 years ago

create nfct helper policies and prepare VYATTA_CT_HELPER chain

4da13393a7c42547d256a19f7663dd9f1f3e2771 authored over 12 years ago

Merge branch 'user_space_helpers' into pacifica

875b72509d5396a67d803d24f25aad7ab811d256 authored over 12 years ago

0.13.72

2bee06facb9aaccd68793f5d32ba383489c7b543 authored over 12 years ago

Remove sudo from port-group syntax check call

742b0f2802446ff6b9a265db573c91aa81bfbd6b authored over 12 years ago

0.13.71

5ac557e6480f3351a477a9552ffd1919cf1fa31b authored over 12 years ago

Make firewall syntax checks use the vyatta-util library

8a08387990b286a67125317e500bc81a3838b454 authored over 12 years ago

0.13.70

892a2b9d6fb1274fbc2dd9489d154c516ffa074f authored over 12 years ago

No need to have vrrp specific interface templates anymore

f6633d6f33cf7c7a05297af4117146a2bc2dbf37 authored over 12 years ago

don't add CTHELPER chain by default on boot. add when needed.

fcd91bbdc7cfcc87830d8fec6c3e4adfb78cdcfc authored over 12 years ago

0.13.69

5140479a897a89fa27139aa430dba94958f7e4c4 authored almost 13 years ago

service names with hyphen need to be escaped using square brackets.

6fe2161e469ef7a4aeffcdb9567611481204d144 authored almost 13 years ago

create CT_HELPER chain in PREROUTING and OUTPUT

babf4c5164565f4477c293d3d7a419e043ba75e3 authored almost 13 years ago

0.13.68

ca1b8b565f86245cf413fb14a3e4a4e5a1a3a1de authored almost 13 years ago

fixing 7998

2d2fe52ad1510a235314cfd1e16b6e8c36ebe22a authored almost 13 years ago

0.13.67

b066f2e2e8c9e268b147da8749592e2a4b3fe5e1 authored almost 13 years ago

include CT_TIMEOUT chain for conntrack timeouts.

6592f891fc49e12561c7b1ee0aea604d9ed5ca2c authored almost 13 years ago

0.13.66

e18dc013127774e88aeb0aea88ca724af340d46e authored almost 13 years ago

new branch

0a6f65d036418a6743dbe7beb4aaa6f03d15dd8c authored almost 13 years ago

0.13.65

13c1c4db248c7167e211b9bf05c64aaa84e76c5f authored almost 13 years ago

7047:use DEFLT instead of default

fde458373623ef566c669dd9697f503cee24a66f authored almost 13 years ago

0.13.64

da6d7dc22ec2c166f6327db16b28b741f276c381 authored almost 13 years ago

Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard

2bfaf9c1cb6de730d4b82a114296027241e87d5a authored almost 13 years ago

fixing 7047

0e828626b8c8fcbfcbffe105ef61aca3b9818e0d authored almost 13 years ago

0.13.63

99132285b5dbb606bfc0f88dd5854d394b51dcc9 authored almost 13 years ago

Bug Fix for 7751, 7753, 7757

Add commit checks for 'state-policy' sub-tree

5b0c60a45ac748d4bd670c8c8ce01f719c9a8259 authored almost 13 years ago

0.13.62

2ddf45aff7672525f66bbf2e642b85cbca25b0a3 authored about 13 years ago

Fix help string of state-policy for related connections

b67f3d6f43c5ad31145e0e5a80c41b6a76cf45ae authored about 13 years ago

0.13.61

4528f172cb1f57324fb7e33d357b3bc0d5a53921 authored about 13 years ago

Create VRRP output filter to filter IGMP from vmac interfaces

8d37804bf74dbe2a57d114bc302130e01900ff10 authored about 13 years ago

0.13.60

1b9deeac0059afe73fb1379cc69e96d8359f9cc9 authored about 13 years ago

Setup filter for VRRP vmac interfaces

6dcfe8743593a9035bb477530f5cbaba354403bd authored about 13 years ago

0.13.59

5064deb9df0a30f88b899fc18eb1cd62fc8cddf0 authored about 13 years ago

Merge branch 'oxnard' of git.vyatta.com:/git/vyatta-cfg-firewall into oxnard

58a6b424adcbad70ba47ea7e558c0222c23b78cc authored about 13 years ago

Add vrrp interface parameters for bonding vifs

9be918ffd8e2e81493a3563a874493be29b8d6fa authored about 13 years ago

0.13.58

72975fe3a70649e1b7ce6bb1ba34b3931bfb4311 authored about 13 years ago

Warn users when stateful rules are set with state-policy configured

824e709f822d7c2ebda3c6ba4dade1b1b7504d24 authored about 13 years ago

0.13.57

eeebd45884c99262a21275b63e5f9f78ec905f95 authored about 13 years ago

generate firewall templates for vrrp interfaces

5c5891fc352d9093bce27ea45fe9851e5ce7c2a0 authored about 13 years ago

Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard

194419bd28240c3d5c9911588235a562276e8f6a authored about 13 years ago

0.13.56

b6cac63adcb7566a22fb92084205cb3de4697f5d authored about 13 years ago

Bug 6063 ENH: Provide option(s) to globally allow stateful return traffic

* add code to set global policy for established, related, invalid states

25364db4c400b2a05bbfca65e98f8b27271f962f authored about 13 years ago

Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard

1eef8ffc3f281568ca8dc0577be4ef0c3165edf4 authored about 13 years ago

0.13.55

d5d88ed8f5323361f938a8f0b7454a8c73dd6c12 authored about 13 years ago

Move check-params-on-reboot script for conntrack hash size to

vyatta-conntrack, update automake rules and debian controls
accordingly.

f7e135d366ba2c67748154e63cfe0ca6bbfe7113 authored about 13 years ago

Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard

f038b2c48700efcd8305bc48f99d40e857133cee authored about 13 years ago

0.13.54

684c6f839eea5422f493caf999e92a56a8b5c5e5 authored over 13 years ago

Remove conntrack-related code from firewall top level template

(it was moved to vyatta-conntrack).

f83f2f4b2d485fc59c6d8d1e217f8e926c065ff6 authored over 13 years ago

Merge branch 'oxnard' of http://git.vyatta.com/vyatta-cfg-firewall into oxnard

a679f9592b63ef60898c3e53fdf5b7f8befde744 authored over 13 years ago

0.13.53

f3d5296c2287fdffa3c39c8b99d786685f7dffd2 authored over 13 years ago

Force release

9da7188ee59be61c765151a45a97f8ec3bfdb283 authored over 13 years ago

0.13.52

65999d742365c1fd7510a96ce1e95d7b31b04bef authored over 13 years ago

Fix automake rules to reflect version change and removal of conntrack modprobe config.

15517bc93f312ad9de24327bd396e9543f6bc831 authored over 13 years ago

Change firewall version from 4 to 5.

b7b63252cbe61f8ac3f1ed427ed7152f7c3a6689 authored over 13 years ago

Delete conntrack modprobe config file from automake rules.

e510daae61ce5dadb62a0e8cc07349c845107772 authored over 13 years ago

Remove conntrack modprobe config file (will be in vyatta-conntrack now).

7e24715aa3bec440f286c7000c61623ce0dd5be3 authored over 13 years ago

Remove remaining conntrack-related templates.

712ce971f13a0221b1d102739e9c2dfcf1c7a5e4 authored over 13 years ago

Remove conntrack-related templates from firewall

ac4a1845a4cb9f6bb981fd83e18ea8b04809843e authored over 13 years ago

Remove conntrack modprobe config file (will be in vyatta-conntrack now).

f6cdf692bad27405799b7b1a087c84b4e83b6a5c authored over 13 years ago

Remove remaining conntrack-related templates.

3d5c432f96272c9e9b9fe90f0dcd66708ec12853 authored over 13 years ago

Remove conntrack-related templates from firewall

8c38bbfa19ea391e4cdd08794e86d6024f67661a authored over 13 years ago

0.13.51

737786e6b09e0d90a29791f8f4dcd6fdf13718a7 authored over 13 years ago

Add dependency on version of vyatta-cfg-system

Need version with pseudo-ethernet vif support

1097c1d6e33341590d884dfdc5e172f9ad041e45 authored over 13 years ago

fix duplicate definiton in Makefile

Causes warning in Debian testing

2b84bd692a6489eeba1fcfe5ecb1fb19c0dd8627 authored over 13 years ago

Add support for vif on pseudo-ethernet

0da55b5a617f711cbae8d642a26cb5bcc7658e7f authored over 13 years ago

0.13.50

fed31f902ce39fca46c023b8000baa6060b1ed75 authored over 13 years ago

Fix Bug 7477 firewall group negation doesn't work in vc6.3

* use Ipset.pm method rather than CLI path to validate group name
when using group as a match c...

77e338a9b5e668fb1104e2fb939a90b4d73f7ab0 authored over 13 years ago

0.13.49

b1ac4c0f80e6304fefed1c3826bb3ad5b757cd59 authored over 13 years ago

Fix README

f7c2e4d1dbc9caa12aff8ab384695844c3c8df7b authored over 13 years ago

0.13.48

82adee3f15f637c0ff687358b21c860930aa556b authored over 13 years ago

Fix Bug 7340 Unable to apply modify firewall to interface when zone policy exists

* change commit check to only check if the interface being applied firewall ruleset
is in a zon...

0d3699267b313a59f3e5500c1cab7f00f43b7712 authored over 13 years ago

0.13.47

e7b56735da61b405c988cfb3909f68d5b5dc0d87 authored over 13 years ago

new branch

c943ecf012a486d7af6f47918fec7dcff23e50c9 authored over 13 years ago

0.13.46

61ac5d24ef6763360c0ec75f92f031b54b8c38f2 authored over 13 years ago

add "two-stage commit" equivalent to previous fix for bug 5227.

7a753ec2407d775635adc0df54dac21f59950ecb authored over 13 years ago

0.13.45

612036432f576162e83d14172700e4823154f5ad authored almost 14 years ago

modify firewall groups to work with new commit

22d37f427054b52bd724c17d9656bca6dee7d3c5 authored almost 14 years ago

0.13.44

6ce1a694e899ee9b99fd3ab55a6a156b6d76b91b authored almost 14 years ago

* Fix Bug 6915 conntrack-hash-size reverts to default after upgrade

add script conntrack-hash-size in check-params-on-reboot.d to fix problem
of 'firewall conntr...

d2a481a204e619b8a47ceed11a87173cc4de892c authored almost 14 years ago

0.13.43

874aa1c84d04908f6d8c5d58dde9e9071938ce7e authored almost 14 years ago

more ipset 6.0 change

d271c70b1b42dbeff56c895c4d7902a99150e675 authored almost 14 years ago

0.13.42

a0c1d6cd8dfee5e3ffdb902bf16f221ab26a4783 authored almost 14 years ago

changes for ipset 6.0

4148f9d04c01f8f75b1aadaf1b5f297ded264376 authored almost 14 years ago

0.13.41

585d106c0ae7a65699f96b5a3c0c9056a60b358d authored about 14 years ago

Partial fix for bug 6759 serial packages are incorrectly included in virt ISO

* make vyatta-cfg-firewall-serial depend on vyatta-serial

791d184b9457b2a73a861e84980461c7b31692c8 authored about 14 years ago

0.13.40

1152a03de05e68ba911c840aeb9e8925d7bbc2ef authored about 14 years ago

Fix Bug 6292 iptables chain-name must be reduced to 28 characters max

* change syntax check to limit firewall ruleset names to 28 chars and
bump firewall cfg-version...

435bf038f32a968424030da43b4a85ec50e02767 authored about 14 years ago