Jo-Philipp Wich f3dd8278bb firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source ...

SVN-Revision: 23024

2010-09-11 20:04:34 +00:00

..

bin

…

lib

firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source

2010-09-11 20:04:34 +00:00

firewall.config

firewall: don't apply default udp/68 rule to ip6tables

2010-05-19 21:37:12 +00:00

firewall.hotplug

firewall (#7355) - partially revert r21486, start firewall on init again - skip iface hotplug events if base fw is not up yet - get ifname and up state with uci_get_state() in iface setup since the values gathered by scan_interfaces() may be outdated when iface coldplugging happens (observed with pptp) - ignore up state when bringing down interfaces because ifdown reverts state vars before dispatching the iface event - bump package revision

2010-05-19 00:50:14 +00:00

firewall.init

firewall (#7355) - partially revert r21486, start firewall on init again - skip iface hotplug events if base fw is not up yet - get ifname and up state with uci_get_state() in iface setup since the values gathered by scan_interfaces() may be outdated when iface coldplugging happens (observed with pptp) - ignore up state when bringing down interfaces because ifdown reverts state vars before dispatching the iface event - bump package revision

2010-05-19 00:50:14 +00:00

firewall.user

…

reflection.hotplug

firewall: introduce SNAT support for redirect sections

2010-09-05 19:03:17 +00:00