openwrtv4/package/firewall/files
2011-06-30 01:36:09 +00:00
..
bin firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2 2010-05-01 18:22:01 +00:00
lib firewall: restore local port relocation ability from r26617 2011-06-30 01:36:09 +00:00
firewall.config firewall: - allow multiple ports, protocols, macs, icmp types per rule - implement "limit" and "limit_burst" options for rules - implement "extra" option to rules and redirects for passing arbritary flags to iptables - implement negations for "src_port", "dest_port", "src_dport", "src_mac", "proto" and "icmp_type" options - allow wildcard (*) "src" and "dest" options in rules to allow specifying "any" source or destination - validate symbolic icmp-type names against the selected iptables binary - properly handle forwarded ICMPv6 traffic in the default configuration 2011-06-30 01:31:23 +00:00
firewall.hotplug firewall: run ifdown hotplug events synchronized, fixes a racecondition on "ifup iface" when ifdown and ifup events are delivered with a small dealy 2010-09-15 01:53:36 +00:00
firewall.init firewall (#7355) - partially revert r21486, start firewall on init again - skip iface hotplug events if base fw is not up yet - get ifname and up state with uci_get_state() in iface setup since the values gathered by scan_interfaces() may be outdated when iface coldplugging happens (observed with pptp) - ignore up state when bringing down interfaces because ifdown reverts state vars before dispatching the iface event - bump package revision 2010-05-19 00:50:14 +00:00
firewall.upgrade Keep firewall.user during sysupgrades 2011-03-20 00:57:47 +00:00
firewall.user firewall: enable /etc/firewall.user by default and install sample firewall.user file 2009-04-12 22:38:34 +00:00
reflection.hotplug firewall: - allow multiple ports, protocols, macs, icmp types per rule - implement "limit" and "limit_burst" options for rules - implement "extra" option to rules and redirects for passing arbritary flags to iptables - implement negations for "src_port", "dest_port", "src_dport", "src_mac", "proto" and "icmp_type" options - allow wildcard (*) "src" and "dest" options in rules to allow specifying "any" source or destination - validate symbolic icmp-type names against the selected iptables binary - properly handle forwarded ICMPv6 traffic in the default configuration 2011-06-30 01:31:23 +00:00