git.proxmox.com Git - pve-firewall.git/history

]> git.proxmox.com Git - pve-firewall.git/history - src/PVE/Firewall.pm

[pve-firewall.git] / src / PVE / Firewall.pm

4 hours ago	Daniel Krambrock...	fix #5335: stable sorting in cluster.fw master	commit \| commitdiff
2023-07-17	Leo Nunner	parser: fix scoped alias resolution	commit \| commitdiff
2023-06-07	Wolfgang Bumiller	change vm/ prefix to guest/ prefix	commit \| commitdiff
2023-06-07	Leo Nunner	fix #4556: introduce 'dc' and 'vm' prefix for aliases	commit \| commitdiff
2023-06-07	Leo Nunner	fix #4556: introduce 'dc' and 'vm' prefix for IPSets	commit \| commitdiff
2023-05-16	Fabian Grünbichler	fix #4730: add safeguards to prevent ICMP type misuse	commit \| commitdiff
2023-05-16	Fabian Grünbichler	icmp: factor out check for relevant protocols	commit \| commitdiff
2023-04-11	Thomas Lamprecht	fix variables declared in conditional statement	commit \| commitdiff
2023-03-13	Alexandre Derumier	Fix #4550 : host options: add nf_conntrack_helpers	commit \| commitdiff
2022-12-14	Stefan Hrdlicka	cleanup: don't capture "/xx" of CIDR	commit \| commitdiff
2022-12-14	Stefan Hrdlicka	allow non zero ip address host bits to be entered	commit \| commitdiff
2022-11-16	Thomas Lamprecht	helpers: move over missing lock_vmfw_conf	commit \| commitdiff
2022-11-16	Thomas Lamprecht	helpers: re-introduce original call site for backward...	commit \| commitdiff
2022-11-16	Alexandre Derumier	move clone_vmfw_conf && remove_vmfw_conf to a Helpers	commit \| commitdiff
2022-10-04	Leo Nunner	fix #4204: automatically update usages of group when...	commit \| commitdiff
2022-09-12	Thomas Lamprecht	macros: s/SPICE/SPICEproxy/	commit \| commitdiff
2022-09-12	Oguz Bektas	fix #4018: add firewall macro for SPICE	commit \| commitdiff
2022-08-29	Fabian Grünbichler	fix #4175: ignore non-filter ebtables tables	commit \| commitdiff
2022-08-25	Mira Limbeck	fix invalid vmfw config being interpreted as enabled	commit \| commitdiff
2022-08-25	Thomas Lamprecht	whitespace/indentation/line-length cleanup	commit \| commitdiff
2022-05-15	Thomas Lamprecht	config defaults: macfilter defaults to on	commit \| commitdiff
2021-10-29	Thomas Lamprecht	fix #3677: follow up: actually handle bucket size and...	commit \| commitdiff
2021-10-28	Mark Yardley	fix #3677 ipset_get_chains fixed to work with new ipset...	commit \| commitdiff
2021-08-06	Lorenz Stechauner	fix #2721: remove reject tcp 43 from default drop and...	commit \| commitdiff
2021-05-26	Stoiko Ivanov	set sysctls on every apply	commit \| commitdiff
2021-04-22	Aaron Lauterer	fix #967: source: dest: limit length	commit \| commitdiff
2021-02-22	Mira Limbeck	fix #2358: allow --<opt> in firewall rule config files	commit \| commitdiff
2020-09-18	Thomas Lamprecht	improve log burst property description	commit \| commitdiff
2020-09-18	Thomas Lamprecht	various typo fixes	commit \| commitdiff
2020-09-09	Mira Limbeck	introduce new icmp-type parameter	commit \| commitdiff
2020-07-01	Stoiko Ivanov	fix #2773: ebtables: keep policy of custom chains	commit \| commitdiff
2020-05-06	Thomas Lamprecht	Revert "rules: verify referenced security group exists"	commit \| commitdiff
2020-05-04	Thomas Lamprecht	add dport: factor out ICMP-type validity checking	commit \| commitdiff
2020-05-04	Thomas Lamprecht	icmp: allow to specify the echo-reply (0) type as integer	commit \| commitdiff
2020-05-04	Thomas Lamprecht	fix typo: s/ICPM/ICMP/	commit \| commitdiff
2020-05-04	Mira Limbeck	fix wrong icmpv6 types	commit \| commitdiff
2020-05-04	Mira Limbeck	fix iptables-restore failing if icmp-type value > 255	commit \| commitdiff
2020-05-02	Fabian Grünbichler	rules: verify referenced security group exists	commit \| commitdiff
2020-05-02	Fabian Grünbichler	configs: warn about duplicate ipset entries	commit \| commitdiff
2020-05-02	Fabian Grünbichler	clone_vmfw_conf: lock new config	commit \| commitdiff
2020-05-02	Fabian Grünbichler	configs: add locking helpers	commit \| commitdiff
2020-05-02	Mira Limbeck	fix #2686: don't add arp-ip-src filter for dhcp	commit \| commitdiff
2020-02-05	Christian Ebner	logging: Add missing logmsg for inbound rules	commit \| commitdiff
2020-01-25	Christian Ebner	macros: add macro for Proxmox Mail Gateway web interface	commit \| commitdiff
2019-12-13	Thomas Lamprecht	grammar fix: s/does not exists/does not exist/g	commit \| commitdiff
2019-12-03	Christian Ebner	rules: allow connections on port range 60000:60050...	commit \| commitdiff
2019-11-18	Alexandre Derumier	add synflood protection	commit \| commitdiff
2019-11-18	Alexandre Derumier	iptables : add raw table support	commit \| commitdiff
2019-10-22	Thomas Lamprecht	fw schemas: add defaults and improve some descriptions	commit \| commitdiff
2019-10-22	Thomas Lamprecht	increase default nf_conntrack_max to kernel default	commit \| commitdiff
2019-08-07	Mira Limbeck	only add VM chains if VM firewall is enabled	commit \| commitdiff
2019-08-07	Fabian Grünbichler	fix indentation/whitspace	commit \| commitdiff
2019-08-07	Fabian Grünbichler	skip tap rule generation if vmfw is disabled	commit \| commitdiff
2019-07-12	Christian Ebner	firewall macros: add new Ceph protocol v2 port while...	commit \| commitdiff
2019-07-12	Thomas Lamprecht	followup code cleanup	commit \| commitdiff
2019-07-12	Thomas Lamprecht	remove base path of runcommand calls	commit \| commitdiff
2019-07-10	Thomas Lamprecht	use /usr/sbin as base path	commit \| commitdiff
2019-07-10	Fabian Grünbichler	ebtables: treat chain deletion as change	commit \| commitdiff
2019-07-10	Fabian Grünbichler	ebtables: remove PVE chains properly	commit \| commitdiff
2019-07-03	Stefan Reiter	Check if corosync.conf exists before calling parser	commit \| commitdiff
2019-07-02	Fabian Grünbichler	corosync: refactor if conditions	commit \| commitdiff
2019-07-02	Fabian Grünbichler	corosync: fix multicast detection	commit \| commitdiff
2019-07-02	Stefan Reiter	Only include multicast rules if transport is udp	commit \| commitdiff
2019-07-02	Stefan Reiter	Create corosync firewall rules independently of localnet	commit \| commitdiff
2019-05-28	Thomas Lamprecht	fix CT rule generation with ipfilter set	commit \| commitdiff
2019-05-16	Christian Ebner	Remove redundant logging of packets passing the tap...	commit \| commitdiff
2019-05-07	Thomas Lamprecht	followup: do not replace original variable content	commit \| commitdiff
2019-05-07	Thomas Lamprecht	followup: code cleanup and comment	commit \| commitdiff
2019-05-07	Alexandre Derumier	fix #2193: arpfilter: CT: remove mask from net ip cidr.	commit \| commitdiff
2019-04-30	Alexandre Derumier	fix ipv6 PVEFW-reject	commit \| commitdiff
2019-04-19	Thomas Lamprecht	fix reading host.fw through IPCC interface	commit \| commitdiff
2019-04-17	Thomas Lamprecht	remove useless unused Data::Dumper uses	commit \| commitdiff
2019-04-17	Thomas Lamprecht	firewall: split and order modules	commit \| commitdiff
2019-04-17	Thomas Lamprecht	use IPCC to read FW files if the are backed by pmxcfs	commit \| commitdiff
2019-04-17	Thomas Lamprecht	remove a level of indirection on FW config parsing	commit \| commitdiff
2019-04-17	Thomas Lamprecht	make verbose a global state	commit \| commitdiff
2019-04-01	Thomas Lamprecht	allow to enable/disable and modify cluster wide log...	commit \| commitdiff
2019-03-30	Thomas Lamprecht	fix Razor macro	commit \| commitdiff
2019-03-19	Mira Limbeck	add 'log_nf_conntrack' option description	commit \| commitdiff
2019-03-19	Thomas Lamprecht	followup: minor code style fix	commit \| commitdiff
2019-03-19	Thomas Lamprecht	followup: use default burst limit of 5	commit \| commitdiff
2019-03-19	Christian Ebner	fix: #2123 Logging of user defined firewall rules	commit \| commitdiff
2019-03-12	Alexandre Derumier	ebtables: test layer2_protocols in an external chain	commit \| commitdiff
2019-03-12	Alexandre Derumier	ebtables: add arp filtering	commit \| commitdiff
2019-02-05	Alexandre Derumier	log reject : add space after policy REJECT like drop	commit \| commitdiff
2019-02-04	Thomas Lamprecht	followup: avoid long hash access, use own variable	commit \| commitdiff
2019-02-04	Christian Ebner	Fix #1606 Add nf_conntrack_allow_invalid option	commit \| commitdiff
2018-12-13	David Limbeck	add log_nf_conntrack host firewall option	commit \| commitdiff
2018-12-03	Dominik Csapak	fix #2004: do not allow backwards ranges	commit \| commitdiff
2018-12-03	Dominik Csapak	fix #2005: only allow ascii port digits	commit \| commitdiff
2018-08-24	Stoiko Ivanov	Fix #1841: ebtables: sort interfaces per guest	commit \| commitdiff
2018-06-28	Stoiko Ivanov	ebtables: sort guest chains during rulecreation	commit \| commitdiff
2018-06-18	Wolfgang Bumiller	whitespace fixup	commit \| commitdiff
2018-06-12	Wolfgang Bumiller	fixup active_chains distinction when deleting chains	commit \| commitdiff
2018-06-06	Stoiko Ivanov	rename ebtables_enable to ebtables	commit \| commitdiff
2018-05-29	Wolfgang Bumiller	typo fixup	commit \| commitdiff
2018-05-29	Stoiko Ivanov	Don't change external ebtables rules	commit \| commitdiff
2018-05-17	Wolfgang Bumiller	fix PVEFW-FORWARD chain not being used	commit \| commitdiff
2018-03-29	Wolfgang Bumiller	ebtables_get_chains: deal with empty chains	commit \| commitdiff
2018-03-28	Wolfgang Bumiller	avoid double spaces in ruleset_addrule	commit \| commitdiff
next

Firewall test scripts

RSS Atom