github.com/vyos/vyatta-cfg-firewall commits | Ecosyste.ms: OpenCollective

Make sure perl packages load successfully

Standard practice is to end package module with 1;

5e7adb087066fb58ce9724b48a90bcc3543c1c34 authored almost 15 years ago

Merge branch 'larkspur' of suva.vyatta.com:/git/vyatta-cfg-firewall into larkspur

90bb12ec230d32e425aa9a8529ca1b38001125c5 authored almost 15 years ago

add input interface templates

9b855e49d742ea98dc87a5e5bda623023d6e106a authored almost 15 years ago

0.13.7-80

27e9697a3189e85cbc0635d4af42f3320c1b161e authored almost 15 years ago

Add VYATTA_PRE_DNAT_HOOK in nat PREROUTING table.

819727e311451d955156fa9441abb8ab4cd5f280 authored almost 15 years ago

0.13.7-79

5db7fdc0c878df70ef84db66511e660deae46a5f authored almost 15 years ago

Fix 5203: negation in firewall rule causes deprecation message

827abe453fccf1c5ee0f5f6ac9bb2cb806ea4d5c authored almost 15 years ago

0.13.7-78

a8726c8630503d2183159c1947dae59f93dda43c authored almost 15 years ago

Fix firewall group parent delete while still referenced.

ce3389b3cafa928fd2468705c049ef958f5f4266 authored almost 15 years ago

0.13.7-77

a3997491b17f5451f44ea77359e4a2f7c2fc3555 authored almost 15 years ago

Fix 5453: can't delete "address" under "firewall group <> address-group <> "

61d52815b96d02f73adae13a1ce6aa76964ec1b1 authored almost 15 years ago

0.13.7-76

bcc5bbbc3f216d1b83ac91c320300ad287e3e54d authored almost 15 years ago

Fix 5453: can't delete "address" under "firewall group <> address-group <>"

2d5e2638b85cf0ad1227cbc0bb5aafce289b9921 authored almost 15 years ago

0.13.7-75

3dc8ab4fadbd90957e6b41e39cf848ef6b0c7066 authored almost 15 years ago

Fix firewall conntrack teardown.

31a37e48a3095c64aca1a3fd3a0f46ca115dc767 authored almost 15 years ago

0.13.7-74

175dee3f55a177df91a896071510bcf39d23f3d0 authored almost 15 years ago

0.13.7-73

1ecbf164c4e48f4f56889649e85612083b1cabbe authored almost 15 years ago

Fix 5227: firewall group config can get out of sync with ipset

1798758677bb5580efd7ba3799e9ff9ba97a7b88 authored almost 15 years ago

0.13.7-72

4db871d983aed462c9c3967beeb6f797838019e8 authored almost 15 years ago

Fix 5326: firewall group address range wraps at 255.

af6d8e47ecb5917f1f81b61cf536e2efac790f10 authored almost 15 years ago

Remove old Xorp template

e659fd609925f016b8682985313eb5322fb86115 authored about 15 years ago

0.13.7-71

b97952516e5afc651ae5423d23fe09a09e1aeb4a authored about 15 years ago

Fix 5248: Firewall config and show commands hang when showing and committing address groups.

4835345064bcb76023508c23480ba2008cd7ab91 authored about 15 years ago

0.13.7-70

7895f33d97cc62b8040443ae2b006d9c446c62a8 authored about 15 years ago

Add same restrictions to ipv6-firewall name

See Bug 4156 fix.

7b0fb4e88117bab94d8240c41f37f12a5fbf6a60 authored about 15 years ago

0.13.7-69

155f4b58550e17492792d8c30f09ba89ad704743 authored about 15 years ago

Don't allow spaces or other shell-confusing characters in firewall name

Don't allow space, verticalbar, semicolon, ampersand, dollar sign,
less or greater than in rule ...

12476925b3e5e72f281aab1d042f03b37cec9e0d authored about 15 years ago

Merge branch 'kenwood' of suva.vyatta.com:/git/vyatta-cfg-firewall into kenwood

aa6b1b44036e5b3058c6a2bb8469ea6f7b2f0738 authored about 15 years ago

0.13.7-68

7ffc9cd756a4c6a8b9b7ea1d9ba453e23998f5b6 authored about 15 years ago

Fix Bug 5173 Firewall becomes out of sync with iptables when logging is used

with action inspect in a rule - increment num of rules with inspect + log

2a60e8e4d1f179ec41d02013b174aa63f2bba59b authored about 15 years ago

Add VIF for wireless templates

830eee9598fef9e2b6986882628467b46767601b authored about 15 years ago

0.13.7-67

e8e6703303cdcbd98fedc184d5808f63ed3eb8f9 authored about 15 years ago

added required keyword to help text.

19994c9fe4e871973c96d446ea1b89b32c2d5bbb authored about 15 years ago

0.13.7-66

c34f9d3e9fca3ad8f744a0ff29331789f145d86f authored about 15 years ago

dependencyupdate

d46e5d7d57659cd9411ec41a56d61f39781b0c82 authored about 15 years ago

0.13.7-65

c030cdd532a7e12021fc4cb27e210b273a5fe48a authored over 15 years ago

move priority after tag nodes.

e6861100674463716c02d97540ba6c15381cf084 authored over 15 years ago

0.13.7-64

8f4ca17624fd2a5fb6ca49083f3183af25ed1a9c authored over 15 years ago

add priority to node.def files.

51c80992057f64e5c9b4ab5653b454466c727a11 authored over 15 years ago

0.13.7-63

78c6e46cb277698f2355caaa5146d9972673f150 authored over 15 years ago

Change syntax exec to syntax pattern.

eead90d563cc74caf577975ce6e84b27f5d83f08 authored over 15 years ago

0.13.7-62

bf06ade19bd6a6945c0a8f2ae12c1114c7cd1b18 authored over 15 years ago

Bugfix 4951: Don't fail if IPv6 kernel module is not loaded.

Handle the case where the IPv6 kernel module is not loaded more gracefully.

4a71e47b4e79daff824546b539612b8747569856 authored over 15 years ago

0.13.7-61

acecb392ff2bf3b6e6bf46f699c4b63bbe013b91 authored over 15 years ago

fix for bug 4794 SIP Helper/ALG module does not translate RTP traffic...

added new configuration parameters:
firewall conntrack-options sip enable-indirect-media
firewall...

dd1c1213093a621cc36ce2c03f32d6bfda7dbcbb authored over 15 years ago

0.13.7-60

498574a05e0ab6018e892c096f09f863c2158d82 authored over 15 years ago

Add templates for wireless devices

6b40883c44dfe429a40f318e1865758e0a155b5c authored over 15 years ago

0.13.7-59

53d88c2a08984f33107cce2057c5053c6ecb3cfe authored over 15 years ago

* Fix Bug 3625 Firewall protocol option should have a selection for TCP and UDP

added tcp_udp as a valid protocol value to match both tcp and udp in 1 rule

caabc26123111e111af8e6eaffbef3b80b382d6a authored over 15 years ago

0.13.7-58

f34e53cb200f48f4fcc2a2d929851c34704ac3cd authored over 15 years ago

prevent possible situation where the two iptables rules for match condition

'recent' have different match conditions by moving code for recent to last
(cherry picked from co...

f1d117a4216f6868c121998b962fe7f89b79b8e5 authored over 15 years ago

0.13.7-57

08fefcc5a15ce599d25a35e740a963e13a2dcb6a authored over 15 years ago

add tcp_udp as a valid key to hash. feature developer is responsible

for allowing user to use tcp_udp as a valid protocol. currently, this
option is planned to be use...

7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb authored over 15 years ago

Fix 4683: Firewall Rule number maximum 1024 reached

(cherry picked from commit 90fb731c3a846e9a951c6fd1c5f73082e2bcf93a)

8519768fc563db29e29d9e81ca3198b7e003bc61 authored over 15 years ago

Another attempt to fix 4760.

(cherry picked from commit 4dadce6ebca29e6f6d7120a44541fd99034417f2)

f51a7d45564720a6e7af25dea13581b5de63b29d authored over 15 years ago

0.13.7-56

75f12b85f8ba35e54bcd457d11e90c8b2ba89fa9 authored over 15 years ago

remove pseudo-ethernet vif

(cherry picked from commit 8e62427eda81ce7c0f88c4f815a4ca7e3e891e11)

c44b8af4c71fc4a4cce2a2e73d129ffc0e312843 authored over 15 years ago

0.13.7-55

5d43acb3f5a154067f489da86ac5cfa013d4ce2d authored over 15 years ago

Fix negate of firewall group.

ab23370a369bb999eba110b50423eb36136a1bcd authored over 15 years ago

Firewall groups fail on bootup - change syntax check to commit check.

2715618badc802857ca005f329f45d5583588bd7 authored over 15 years ago

0.13.7-54

b0f46cbff183862acd1922149cad3b930c5e5c42 authored over 15 years ago

Fix 4581: Firewall name issue causes failed commit

7675f0cb3e5af8079b75965279ccb3c8b7134ec7 authored over 15 years ago

0.13.7-53

bb04b19bb10934ecc4c5ef0f6e06065e88f544f2 authored over 15 years ago

Change syntax err msg from default-policy to default-action.

23af5a093249413fb09df0f98fe512d10d2215fe authored over 15 years ago

0.13.7-52

d88a1bcb27b9a2e852b2a560addf0cf91e326715 authored over 15 years ago

Change firewall default-policy to default-action.

ded7c15145465665858a891376f8ae77bbd8332a authored over 15 years ago

0.13.7-51

e0754f608b789efd932588b63771e1300cc49ec2 authored over 15 years ago

* fix syntax error message

b00385e242ad1648cfbf7705791acf1be891a65f authored over 15 years ago

0.13.7-50

865e426b5f261fe815ebee4e57d89ab44e0fcac7 authored over 15 years ago

Make firewall group comp_help more consistent with the rest of the cli.

034fae1bca5fa79f5c3f7b7db40c85ab674c2d7f authored over 15 years ago

0.13.7-49

af87d266ab9c0527db9c2f868eada0b0f9254c6b authored over 15 years ago

* add default value of 1 for 'limit burst' in its node.def

* add comp_help for 'limit rate'
* make sure 'limit rate' is not less than 1/time unit

d6644cfe4ab12b700f025641b3628fab435fd4d2 authored over 15 years ago

0.13.7-48

d5e2180f224c05f3797dfe347c87c0d4054d74ff authored over 15 years ago

0.13.7-47

2b19c91ca91aeb4c2ad76fe5add0c8d3a24e98f2 authored over 15 years ago

Bugfix 4462: Fix typo in interface name references.

9fbca6f2e842ff9c3a15ce1b3cb457271f00d371 authored over 15 years ago

0.13.7-46

532135d92a8861143619b5fde3129ff41d68fd3b authored over 15 years ago

explicitly set conntrack table size to 16384 on system boot

4e3586d818580ecc8b9721f3bb47f3efa6d67a5e authored over 15 years ago

remove unused ifrename

da1827954741209c77c684c13bcc19360c56c1fe authored over 15 years ago

0.13.7-45

e64a7feb740c963ffea4582e22e545625b0dd09d authored over 15 years ago

Fix 4390: Firewall config error: Cannot specify multiple ports when both

source and destination ports are specified.

c0e6a3a30746bf7118da1fb2500476aec3c55c7d authored over 15 years ago

0.13.7-44

44ce7347032a1f7dc9d0945bef7313f456806250 authored over 15 years ago

rectify regex check

c11031f7de6382194ba2bbe560c8869a700489d7 authored over 15 years ago

0.13.7-43

190d4e8306669942d9ad48a0dc9229813e72c9a1 authored over 15 years ago

Fix Bug 4394 reject is an invalid action for rules in modify rulesets

* remove reject as an allowed value for action field
in modify & ipv6-modify firewall rulesets

4df368dfbbb2478b8e1bafd74180d71b26fea621 authored over 15 years ago

0.13.7-42

297928ac92455d43f54367ff4f99265562248cb5 authored over 15 years ago

Add 'reject' as a configurable value for default-policy

under name and ipv6-name rulesets

7820d87bcf833391f4b2dbbc90bee57dfa91f545 authored over 15 years ago

0.13.7-41

db4bcb134272a17b7583d1877286c0e412091c6b authored almost 16 years ago

Fix Bug 4388 firewall name shouldn't have been set after commit failed

* undo chain setup and refcnt work if chain rule failed during chain creation

c690c60ff29d8ee2f3f62bc38d99c05f3300002f authored almost 16 years ago

Bugfix 4340: Enable net.netfilter.nf_conntrack_tcp_be_liberal by default.

The parameter in question loosens the "acceptability" check on TCP
sequence and ACK numbers in t...

2cc639cacae969af4f36a7b587f86ac479ebe729 authored almost 16 years ago

0.13.7-40

e02bba9135b133ced2922258177e8f9cd0ae9f70 authored almost 16 years ago

* don't allow user to create a chain that exists in the system. This may be

either vyatta/user defined chains or system chains such as INPUT, OUTPUT etc.
* don't allow use...

af9b647c46b09a8ad84b68264fd2bfb65c9dd98e authored almost 16 years ago

0.13.7-39

e4ec1e1bb7f3e1a69dc8d426cc8ed95dd7c84485 authored almost 16 years ago

* setup table only for specific tree, not both filter and mangle

as we teardown table only for the tree that was in the CLI
* remove 'next' statement for remove...

7b34e9152366c6e60720bc065b4e3d1cd57b7fa6 authored almost 16 years ago

0.13.7-38

a9f234d633c5f1ee6121b7edf460e2223755a5e0 authored almost 16 years ago

Handle files moved from other packages to this package.

Add "Replace:" clause for each package from which files were moved.

d33af167d65047adcd418bef5f7483168ecb8494 authored almost 16 years ago

0.13.7-37

f2feb1cc3b447adf29d64f5c192bee57603887e0 authored almost 16 years ago

Rename virtual-ethernet to pseudo-ethernet

62e70ef0983b145b79b9cb1b730cd6b5c12189af authored almost 16 years ago

0.13.7-36

da654607624889181b0485aab1829df5db7907a7 authored almost 16 years ago

outlaw applying firewall to an interface that is defined under a zone

f27b7aa32850ddb690297621b24bb31a10655416 authored almost 16 years ago

0.13.7-35

06a5b7230f0acae67a992e254b434c85217bb350 authored almost 16 years ago