Commit Graph

18 Commits

Author SHA1 Message Date
Hauke Mehrtens
e50d6f12f7 Update layer7 rules
SVN-Revision: 15544
2009-05-01 15:20:34 +00:00
John Crispin
21bbdc24c3 adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
2008-08-04 11:51:58 +00:00
Felix Fietkau
c89de79512 move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
SVN-Revision: 10383
2008-02-04 22:03:18 +00:00
Felix Fietkau
0cf1a58282 Here comes the new UCI. Enjoy :)
SVN-Revision: 10367
2008-02-03 06:48:15 +00:00
Tim Yardley
85b17a4e9e update stripped subset of l7 patterns to 11-03-2007 patterns
SVN-Revision: 9582
2007-11-19 23:07:00 +00:00
Florian Fainelli
9d7192e5fa Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
SVN-Revision: 9503
2007-11-05 14:19:16 +00:00
Florian Fainelli
ada8e5dd95 Only masquerade LAN, other settings need manual tweaking
SVN-Revision: 9461
2007-10-29 11:00:33 +00:00
Florian Fainelli
304d5c8845 Only masquerade non routable addresses (#2535)
SVN-Revision: 9460
2007-10-29 10:31:16 +00:00
Felix Fietkau
2cc2d7707b make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
SVN-Revision: 7806
2007-06-30 19:30:38 +00:00
Florian Fainelli
01b4fd853a Initialise firewall before network (#1988)
SVN-Revision: 7757
2007-06-28 12:56:55 +00:00
Felix Fietkau
c05a061e4e fix a problem with the firewall script (multicast traffic could produce packet loss)
SVN-Revision: 6726
2007-03-27 16:45:10 +00:00
Felix Fietkau
8e88bb54ba port [6229] to kamikaze
SVN-Revision: 6275
2007-02-08 01:25:18 +00:00
Felix Fietkau
4323774d59 prepare for moving part of the firewall to hotplug. created new chains {input,forwarding,prerouting}_wan for wan port forwardings and updated the examples. syntax of /etc/config/firewall unchanged and old firewall.user files are still compatible
SVN-Revision: 5878
2006-12-20 05:58:41 +00:00
Felix Fietkau
223fdb0443 replace br0 with $LAN
SVN-Revision: 5492
2006-11-09 23:13:15 +00:00
Florian Fainelli
a72fd20a82 export WAN variable so that firewall works (#907)
SVN-Revision: 5412
2006-11-03 10:10:08 +00:00
Felix Fietkau
afd6539a65 add firewall protection for wan_device in addition to wan_ifname (fixes #852)
SVN-Revision: 5136
2006-10-15 23:04:23 +00:00
Felix Fietkau
8612d33691 init script cleanup, use /etc/rc.d/ for enabled scripts, /etc/init.d/<pkgname> (enable|disable) manages symlinks
SVN-Revision: 5128
2006-10-15 21:03:30 +00:00
Felix Fietkau
60c1f0f64d finally move buildroot-ng to trunk 2016-03-20 17:29:15 +01:00