summaryrefslogtreecommitdiff
path: root/package/network/config
AgeCommit message (Collapse)Author
2013-06-06firewall: udpate to git head (#13652, #13654, #13658)jow
- optimizes chain usage for ingress rules - adds limit match support for redirect rules - fixes automatic redirect dest detection on little endian systems - leaves base chains in place on reload to allow user rules to target e.g. "reject" git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36871 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-06firewall: copy libext*.a from staging dir and drop kernel.mk includes, ↵jow
solves problem with colliding CONFIG_IPV6 symbols git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36868 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-05firewall: update to git head (#13652)jow
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst' - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36854 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04firewall3: fix accidentally changed install directivejow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36840 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04firewall: fix git source urljow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36839 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04firewall3: rename to firewall, move into base system menu, update to git ↵jow
head with compatibility fixes for AA git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36838 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04Drop legacy firewall packagejow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36837 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04firewall3: update to git head (#13641)jow
* Fixes wrong chain used for zone forward policy git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36830 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-03firewall3: update to git headjow
- Fixes problems with reusing matches or targets from loadable extensions git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36826 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-31firewall3: use list notation for default zone network config to avoid "uci ↵jow
add_list" coercing the value wrongly git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36806 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30netifd: updated IPv6 prefix delegationcyrus
* Added support for prefix classes * Various bugfixes git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36771 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-28netifd: fix IPv6-addresses disappearing due to lifetime-overflowscyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36748 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-27firewall3: update to git headjow
- allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36736 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-26firewall3: update to git headjow
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24" - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust - properly support output rules with dest '*' to hook directly into delegate_output - fixes crash when processing rules with unresolved targets git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36721 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-24firewall3: update to git headjow
- fixes linking issues with some toolchains git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36703 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23firewall3: update to git headjow
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables - Do not leak memory when processing rules with unknown targets or matches git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36698 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23firewall3: Remove abandonend includecyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36692 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22firewall3: update to git headjow
- fix build on Linux < 3.7 - limit zone names to 14 bytes git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36691 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22firewall3: update to git headjow
- fixes reload when firewall is not running already - fixes crash when ipsets are supported but undeclared - fixes handling of per zone user chains on reload git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36689 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21firewall3: update to git headjow
- fixes segfault in flush command if ipset support is not available - fixes internal rule generation if custom chains are enabled git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36686 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21firewall3: move libext*.a copying to compile phasejow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36684 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21firewall3: update to git headjow
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36681 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-17netifd: Unify interface-based routing for IPv4 and IPv6cyrus
* Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 Based on a patch by Kristian Evensen. Thank You. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36653 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13netifd: Various IPv6 improvementscyrus
* Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36627 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13netifd: added support for setting up 6rd from DHCPcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36626 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13firewall3: Remove obsoleted ULA-bordercyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36624 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13firewall3: add wan6 interface to wan-zone by defaultcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36623 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13firewall: Remove obsoleted ULA-border rulecyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36622 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-02firewall3: update to git headjow
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386) - add support for fwmark matches and mark setting targets git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36521 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-27netifd: update to git head - disables multicast snooping by default on bridgesjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36463 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-25netifd: update to the latest version, fixes interface reload issues when ↵nbd
removing the ifname option git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-24firewall3: Make IPv6 ULA-Border generation dynamiccyrus
This fixes working behind another router which gives out ULAs. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36416 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-22netifd: Improve IPv6-ULA assignment handlingcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36383 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-15netifd: update to latest version, fixes some device handling crashesnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36336 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09qos-scripts: add queue length and quantum limit, suggested by dtahtnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36294 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09[swconfig] add portmap support to userlandblogic
Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36284 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09[swconfig] add "swconfig list" supportblogic
Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36282 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09netifd: fix route / route6 regression (#13303)jow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36281 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09Remove deprecated ip6slaac optioncyrus
* use proto=dhcpv6 with reqprefix=no instead git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36280 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-05netifd: Bump to latest versioncyrus
* Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36196 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-03netifd: Rewrite IPv6 prefix assignmentcyrus
* Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36193 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-22firewall3: update to git headjow
* fixes parsing of src/dest '*' * fixes parsing of proto 'all' git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36111 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-21firewall3: update to git headjow
* fixes port remapping rules (#13217) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36100 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-20netifd: Fix adding IPv6 DNS-servers to resolv.confcyrus
In some cases IPv6 DNS-servers were not added correctly. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36095 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-19firewall3: update to git headjow
* fixes reload handling of zones and ipsets that are still running but already deleted from the config git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-19firewall3: update to git headjow
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197) - do not allow src_mac option for SNAT rules git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36090 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-14firewall3: update to git headjow
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains) * Allow "network" and "device" commands while firewall is running (to make them usable in includes) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36009 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-13firewall3: update to git headjow
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd) * Make NAT reflection direction configurable * Map init script stop action to flush * Map init script reload action to reload * Respect init script disabled state in hotplug handler git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35998 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-11firewall3: update to git headjow
* Fixes compilation against eglibc * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall * Fixes tracking logic for user chains by differentiating between reloads and restarts * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule * Supports legacy "tcpudp" protocol notation again git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35969 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08Revert "firewall3: update to git head"jow
This reverts commit 89969fa333c90fdb217b7289272f3427add107de. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35904 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-16 18:58:08 +0000