hak5
/
wifipineapple-openwrt
mirror of https://github.com/hak5/wifipineapple-openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
23,944 Commits
1 Branch
0 Tags
128 MiB
Commit Graph

147 Commits (0e8ecb48249b6e5e1343a8ff92682ebca768cfcc)

Author SHA1 Message Date
Jo-Philipp Wich 9d4221adef [package] firewall: mark /etc/firewall.user as conffile 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23231 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-10-05 07:31:49 +00:00
Jo-Philipp Wich 7cd9ce2291 [package] firewall: also establish forward rules when setting up nat reflection, back out early if reflection is disabled 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23201 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-10-03 18:11:59 +00:00
Jo-Philipp Wich 20e84127cd [package] add maintainer information 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23159 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-30 10:48:37 +00:00
Jo-Philipp Wich 7e3379391f [package] firewall: fix chain selection logic, option dest must be ignored for notrack targets 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23143 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-28 11:38:31 +00:00
Jo-Philipp Wich 96be565c54 [package] firewall: don't setup nat reflection if negations are used 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23142 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-28 11:11:11 +00:00
Jo-Philipp Wich 5baf4fe290 [package] fireall: 
- support negations for src_ip, dest_ip, src_dip options in rules and redirects
	- add NOTRACK target to rule sections, allows to define fine grained notrack rules


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23141 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-28 10:42:56 +00:00
Jo-Philipp Wich 45585b8777 [package] firewall: protect iptables invocations with locks in interface ops, it might run concurrently due to hotplug invocations on network restart 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23090 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-19 15:01:47 +00:00
Jo-Philipp Wich 4cc4a08534 [package] firewall: make invalid redirects and duplicate zones non-fatal, print a notice and discard them 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23080 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-16 11:47:35 +00:00
Jo-Philipp Wich 7a8dd63781 [package] firewall: run ifdown hotplug events synchronized, fixes a racecondition on "ifup iface" when ifdown and ifup events are delivered with a small dealy 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23064 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-15 01:53:36 +00:00
Jo-Philipp Wich 016f54cd4f [package] firewall: deliver remove hotplug events for all active zones/networks when restarting the firewall 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23062 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-14 23:11:12 +00:00
Jo-Philipp Wich 6be00316a1 [package] firewall: 
- simplify masquerade rule setup
	- remove various subshell invocations
	- speedup fw() by not relying on xargs and pipes
	- rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23024 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-11 20:04:34 +00:00
Jo-Philipp Wich ca7164cb5a [package] firewall: 
- fix possible endless loop when the family option is used for forwardings
	- only generate forwarding rules in SNAT redirect sections if src_dip is specified


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22938 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-05 20:17:23 +00:00
Jo-Philipp Wich 9edcfdff2d [package] firewall: introduce SNAT support for redirect sections 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22937 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-05 19:03:17 +00:00
Jo-Philipp Wich 3ae9a34f6d [package] firewall: add option to disable NAT reflection 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22908 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-04 17:49:14 +00:00
Jo-Philipp Wich 4d644e43c4 [package] firewall: clean up description (#7875) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22905 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-04 17:39:00 +00:00
Jo-Philipp Wich e5450d5a1b [package] firewall: 
- handle NAT reflection in firewall hotplug, solves synchronizing issues on boot
	- introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22888 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-04 15:49:13 +00:00
Jo-Philipp Wich 2ef5ba1813 [package] firewall: 
- fix processing of rules with an ip family option
	- append interface rules at the end of internal zone chains, simplifies injecting user or addon rules
	- support simple file logging (option log + option log_limit per zone)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22847 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-08-31 01:54:08 +00:00
Jo-Philipp Wich e6131cac2b [package] firwall: fix nat reflection for zones covering multiple networks 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22442 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-31 13:25:56 +00:00
Jo-Philipp Wich abf8fea6c9 [package] firewall: add basic NAT reflection/NAT loopback support 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22441 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-31 13:06:14 +00:00
Jo-Philipp Wich 5d550758f0 [package] firewall: allow redirecting only destination port (#7197) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22227 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-16 06:03:15 +00:00
Jo-Philipp Wich 8253f19290 [package] firewall: fix another notrack related bug 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22218 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-15 23:24:01 +00:00
Jo-Philipp Wich df7742c8aa [package] firewall: 
- notrack support was broken in multiple ways, fix it
	- also consider a zone conntracked if any redirect references it (#7196)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22215 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-07-15 22:01:48 +00:00
Jo-Philipp Wich a1e5363353 [package] firewall: 
- support alias ifnames different from parent ifname
	- properly handle multiple subnets per alias (v4+v6)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21656 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-06-02 00:59:35 +00:00
Jo-Philipp Wich 3275fb4560 [package] firewall: Initial alias interface support. This allows to define zones covering alias interfaces and associated entries like rules and forwardings. 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21653 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-06-01 21:58:48 +00:00
Jo-Philipp Wich df297315f7 [package] firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21642 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-31 01:34:47 +00:00
Jo-Philipp Wich 864132cf2c [package] firewall: fix support for netranges in redirect and rule sections 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21640 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-30 23:49:47 +00:00
Jo-Philipp Wich 40c91330ed [package] firewall: count rules per chain and family, fix wrong order of ip6tables rules when ipv4 only or dual family rules are defined 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21533 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-22 02:01:19 +00:00
Jo-Philipp Wich 2d4ba544c5 [package] firewall: don't apply default udp/68 rule to ip6tables 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21509 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 21:37:12 +00:00
Jo-Philipp Wich e903e01368 [package] firewall: 
- fix ip6tables rules when icmp_type option is set
	- add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21508 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 21:35:23 +00:00
Jo-Philipp Wich 7280e77771 [package] firewall: add commented disable_ipv6 option to default config 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21505 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 09:49:21 +00:00
Jo-Philipp Wich 390b2e6dca [package] firewall: implement disable_ipv6 uci option 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21503 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 01:55:46 +00:00
Jo-Philipp Wich 36a417a05f [package] firewall (#7355) 
- partially revert r21486, start firewall on init again
	- skip iface hotplug events if base fw is not up yet
	- get ifname and up state with uci_get_state() in iface setup
	  since the values gathered by scan_interfaces() may be outdated
	  when iface coldplugging happens (observed with pptp)
	- ignore up state when bringing down interfaces because ifdown
	  reverts state vars before dispatching the iface event
	- bump package revision


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21502 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 00:50:14 +00:00
Jo-Philipp Wich dd8ec17c9d [package] firewall: fix a possible deadlock when the firewall config has syntax errors during restart 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21501 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-18 20:15:47 +00:00
Jo-Philipp Wich 3392cdb9b8 [package] firewall: use uci_get_state() wrapper 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21493 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-17 19:38:13 +00:00
Jo-Philipp Wich a4edacd329 [package] firewall: properly clear hooks in fw_stop() to prevent extensions from being called twice after fw_restart() 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21488 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-17 17:20:37 +00:00
Jo-Philipp Wich fa11019822 [package] firewall: 
- defer firewall start until the first interface is brought up by hotplug, fixes race conditions on slow devices
	- create a file lock during firewall start and wait for it in hotplug events, prevents race conditions between start and addif
	- start firewall actions in background from hotplug handler since the firewall itself fires further hotplug events which results in a deadlock if not forked off
	- get loaded state direcly from the uci binary since updated value is not recognized by config_get after uci_set_state
	- bump package revision to r2


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21486 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-17 12:47:14 +00:00
Jo-Philipp Wich 7eaaebd00a [package] firewall: properly unset position for delete command, fixes rule removal in ifdown 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21378 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-05 15:50:21 +00:00
Jo-Philipp Wich 5c30b827f2 [package] firewall: fix bug in iface hotplug handler 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21360 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-05 01:43:08 +00:00
Jo-Philipp Wich 64175a0ded [package] firewall: 
- replace uci firewall with a modular dual stack implementation	developed by Malte S. Stretz
	- bump version to 2


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21286 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-01 18:22:01 +00:00
Travis Kemen 70209c3b33 allow ping 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@20261 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-03-18 03:46:41 +00:00
Jo-Philipp Wich ef66d316b2 [package] firewall: insert rules at the beginning of chains again while maintaining non reversed order, fixes wrong ordering introduced by r18015 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@19946 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-03-02 11:02:24 +00:00
Jo-Philipp Wich fad5d4222b [package] firewall: fix bad number error in fw_redirect() (#6704) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@19765 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-02-20 03:39:55 +00:00
Travis Kemen bc79d644e6 Add destination ip of the wan adapter useful if you have multiple ip addresses. 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@19574 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-02-11 02:33:34 +00:00
Jo-Philipp Wich 1739b7427a [package] firewall: fix a race condition preventing interfaces from being added to the firewall on boot 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@19232 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-01-19 23:02:11 +00:00
Felix Fietkau d46ae9ced2 firewall: fix fallout from r18716 (fixes #6338) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18733 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-12-10 18:18:37 +00:00
Felix Fietkau 4476454249 firewall: get rid of recursive shell script inclusion to improve hush compatibility 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18716 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-12-09 14:04:37 +00:00
Felix Fietkau b561f00181 adjust dependencies of firewall and qos-scripts, so that these packages are visible even when iptables is not selected 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18714 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-12-09 13:36:39 +00:00
Jo-Philipp Wich 6c70ebe4d5 [package] firewall: initialize dest_port with src_dport if omitted in redirect sections to narrow 
down corresponding forward rules to the actual target ports - thanks Niels Boehm! (#6249)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18617 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-12-01 22:31:10 +00:00
Felix Fietkau b83fd240a2 firewall: fix zone defaults 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18028 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-10-11 02:42:22 +00:00
Felix Fietkau a0071bba09 firewall: do not process rules in reverse 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@18015 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-10-10 18:08:26 +00:00
Nicolas Thill f935a18907 [package] firewall: fix MSS issue affection RELATED new connections (closes: #5173) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17762 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-09-27 13:57:09 +00:00
Felix Fietkau 5584cbac07 firewall: add sanity checks to zone default rules (patch from #5459) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17713 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-09-24 21:59:16 +00:00
Jo-Philipp Wich 1e6ac8639e [package] firewall: move the config_get out of the loop, no need to call it multiple times 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17581 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-09-14 15:18:48 +00:00
Jo-Philipp Wich c148764357 [package] firewall: properly dispatch delif events if the network has a different name then the corresponding zone 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17580 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-09-14 14:47:43 +00:00
Andy Boyett fd376111a2 [package] bump some revisions and update copyrights 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17554 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-09-10 10:07:04 +00:00
Felix Fietkau 13e7d00b5c firewall: emit hotplug events for interface add/remove 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17415 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-08-26 22:46:24 +00:00
Jo-Philipp Wich 0af2a7d056 [package] firewall: allow incoming udp/68 packets in the default configuration (#4108, #4781) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17238 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-08-13 03:31:53 +00:00
Jo-Philipp Wich 5c4b352bf5 [package] firewall: add icmp_type option to specify the icmp type in rule sections, bump pkg revision (#5554) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17115 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-08-03 22:24:48 +00:00
Florian Fainelli 0962dfabb8 [package] set PKGARCH to all for packages in trunk containing only arch-neutral files (#5572) 
Signed-off-by: Malte S. Stretz <mss@apache.org>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@16966 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-07-24 12:08:01 +00:00
Florian Fainelli 4008fffa25 [package] fix typo in the uci firewall script 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@16076 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-05-26 10:51:01 +00:00
Felix Fietkau d81b224aec firewall: automatically set up NOTRACK rules to disable connection tracking for zones that have no masquerading, no conntrack and no forwarding from/to other zones with masq/conntrack 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15855 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-05-14 21:46:38 +00:00
Jo-Philipp Wich d7d055321a [package] firewall: actually copy firewall.user to image 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15286 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-04-19 21:14:47 +00:00
Jo-Philipp Wich 1c368aad4c [package] firewall: process custom rules after forwardings and redirects, this actually allows blocking traffic to certain hosts and other rules 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15278 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-04-19 20:39:02 +00:00
Jo-Philipp Wich 53c1991114 [package] firewall: enable /etc/firewall.user by default and install sample firewall.user file 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15221 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-04-12 22:38:34 +00:00
Felix Fietkau f8d52e2dbc re-enable the mss fix by default for now - see discussion at http://lists.openwrt.org/pipermail/openwrt-devel/2009-January/003724.html for more information 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@14293 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-31 02:14:27 +00:00
Felix Fietkau f9279ae206 firewall: don't clear the mangle table at startup or stop - it doesn't use it and clearing it breaks qos 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@14114 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-20 13:07:30 +00:00
Jo-Philipp Wich 053133c343 firewall: introduce drop_invalid option to allow disabling the invalid state match 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@14061 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-16 18:09:19 +00:00
Felix Fietkau 28722a2ec0 firewall: allow multiple interfaces to be part of one zone, fix the sanity checks for that 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@14058 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-16 17:39:03 +00:00
Felix Fietkau 3863a62c91 firewall: clear the MSSFIX rules 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13826 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-02 21:58:58 +00:00
Steven Barth 79d4a6ac4a Unify portrange-support in firewall rule generator 
fixes #4404

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13791 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2009-01-01 13:05:16 +00:00
Felix Fietkau 1907e1587a disable the MSS fixup hack by default (most ISPs don't require this as a workaround for MTU problems, only some do). this should give a nice speedup for routing on standard-compliant ISPs 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13788 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-12-31 19:02:03 +00:00
John Crispin b4b461e666 fixes firewall for trunk, custom chains were never reched, as policies apply beforehand 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12978 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-10-14 10:53:55 +00:00
John Crispin 3f4018d1b5 fixes firewall rule generation. forwarding rules were inserted in input chains, fixes #4028 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12768 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-28 17:40:09 +00:00
John Crispin 1e14eeaa9f custom chains were never reached on DROP/REJECT policy, fixes #4004 #4029 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12767 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-28 17:06:39 +00:00
Felix Fietkau 7f0d2f2042 set default input policy to ACCEPT to bring the firewall behavior closer to the one of previous versions 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12766 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-28 16:17:49 +00:00
Felix Fietkau 9ba765af49 firewall: fix default policies, add a check for duplicate defaults sections and make custom chains more generic 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12765 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-28 16:17:37 +00:00
Nicolas Thill 6ae3247115 firewall changes: 
- implement a REJECT policy and enable it by default, reject packets with approriate response (closes: #3970)
 - cleanup syn_flood and remove logging


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12688 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-24 15:10:16 +00:00
Nicolas Thill af6c34ae44 make the whole iptables/netfiter modular (closes: #3871, #3527) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12649 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-22 15:19:59 +00:00
Steven Barth a7fb86ba05 Fixed a typo in the firewall scripts 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12616 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-16 22:01:14 +00:00
Steven Barth 7f56337ca4 Fixed a typo in firewall scripts, closes #4000 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12613 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-09-15 18:57:39 +00:00
John Crispin 81f3bf9bcc make uci firewall backwards compatible to the old firewall.user 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12408 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 19:16:54 +00:00
John Crispin e5dc30a7f7 add proto tcpudp to firewall 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12407 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 18:54:52 +00:00
John Crispin 44382e0f8b fix device duplication in firewall if the balancing of ifup and ifdown is broken 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12404 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 18:31:34 +00:00
John Crispin 1392ad82ec make sure uci firewall reverts its states when stopped 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12403 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 16:48:54 +00:00
John Crispin 66c129b027 fixes uci firewall init order, Signed-off-by: Roberto Riggio 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12402 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 15:55:21 +00:00
Steven Barth 350ebaa373 firewall: Added support for port-ranges as firstPort-lastPort to redirect sections 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12396 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 14:04:52 +00:00
John Crispin 48d2b4210f adds 5 new chains to the uci firewall that can be used to hook custom rules 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12395 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-27 12:03:48 +00:00
John Crispin 9f8fc52bbc adds more sanity checks to uci firewall 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12392 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-26 11:07:04 +00:00
John Crispin 1d44d1a5ba use proto instead of protocol in uci firewall 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12391 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-26 07:23:29 +00:00
Felix Fietkau be9817233c fix some firewall script typos (patch from #3897) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12332 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-17 12:01:01 +00:00
Travis Kemen e113628223 fix typo, proto should be protocol 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12318 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-16 06:33:22 +00:00
John Crispin 4a9e003471 trigger error if dport is used when no proto is defined 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12317 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-15 20:18:13 +00:00
John Crispin 6425308580 fixes firewall makefile description 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12285 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-11 22:28:52 +00:00
John Crispin 4b924f0d7b uci firewall 
- make uci firewall default and remove old code
- fix up dependencies


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12284 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-11 22:27:36 +00:00
John Crispin 27a335d8de uci_firewall 
- fixes hotplug.d script



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12282 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-11 20:51:51 +00:00
John Crispin 94acd858c9 uci firewall 
- remove implicit creation of zones, based on network interfaces


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12281 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-11 20:46:17 +00:00
John Crispin 275038cae7 adds a new uci firewall 
- iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default
- there are some examples in the file /etc/config/firewall
- iptables-save/restore are still missing
- hotplug takes care of adding/removing netdevs during runtime
- misisng features ? wishes ? let me know ...



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12089 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2008-08-04 11:51:58 +00:00