Commit Graph

12 Commits (b32148f92ff42313c9a967c53ddeccf847c5ca73)

Author SHA1 Message Date
Jo-Philipp Wich 2d4ba544c5 [package] firewall: don't apply default udp/68 rule to ip6tables
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21509 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-05-19 21:37:12 +00:00
Jo-Philipp Wich 7280e77771 [package] firewall: add commented disable_ipv6 option to default config
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21505 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-05-19 09:49:21 +00:00
Travis Kemen 70209c3b33 allow ping
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@20261 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-03-18 03:46:41 +00:00
Nicolas Thill f935a18907 [package] firewall: fix MSS issue affection RELATED new connections (closes: #5173)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17762 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-09-27 13:57:09 +00:00
Jo-Philipp Wich 0af2a7d056 [package] firewall: allow incoming udp/68 packets in the default configuration (#4108, #4781)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@17238 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-08-13 03:31:53 +00:00
Jo-Philipp Wich 53c1991114 [package] firewall: enable /etc/firewall.user by default and install sample firewall.user file
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@15221 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-04-12 22:38:34 +00:00
Felix Fietkau f8d52e2dbc re-enable the mss fix by default for now - see discussion at http://lists.openwrt.org/pipermail/openwrt-devel/2009-January/003724.html for more information
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@14293 3c298f89-4303-0410-b956-a3cf2f4a3e73
2009-01-31 02:14:27 +00:00
Felix Fietkau 1907e1587a disable the MSS fixup hack by default (most ISPs don't require this as a workaround for MTU problems, only some do). this should give a nice speedup for routing on standard-compliant ISPs
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13788 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-12-31 19:02:03 +00:00
Felix Fietkau 7f0d2f2042 set default input policy to ACCEPT to bring the firewall behavior closer to the one of previous versions
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12766 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-09-28 16:17:49 +00:00
Nicolas Thill 6ae3247115 firewall changes:
- implement a REJECT policy and enable it by default, reject packets with approriate response (closes: #3970)
 - cleanup syn_flood and remove logging


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12688 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-09-24 15:10:16 +00:00
John Crispin 1d44d1a5ba use proto instead of protocol in uci firewall
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12391 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-26 07:23:29 +00:00
John Crispin 4b924f0d7b uci firewall
- make uci firewall default and remove old code
- fix up dependencies


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12284 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-11 22:27:36 +00:00