projects
/
pve-firewall.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
skip tap rule generation if vmfw is disabled
[pve-firewall.git]
/
src
/
PVE
/
Firewall.pm
2019-08-07
Fabian Grünbichler
skip tap rule generation if vmfw is disabled
blob
|
commitdiff
|
raw
2019-07-12
Christian Ebner
firewall macros: add new Ceph protocol v2 port while...
blob
|
commitdiff
|
raw
|
diff to current
2019-07-12
Thomas Lamprecht
followup code cleanup
blob
|
commitdiff
|
raw
|
diff to current
2019-07-12
Thomas Lamprecht
remove base path of runcommand calls
blob
|
commitdiff
|
raw
|
diff to current
2019-07-10
Thomas Lamprecht
use /usr/sbin as base path
blob
|
commitdiff
|
raw
|
diff to current
2019-07-10
Fabian Grünbichler
ebtables: treat chain deletion as change
blob
|
commitdiff
|
raw
|
diff to current
2019-07-10
Fabian Grünbichler
ebtables: remove PVE chains properly
blob
|
commitdiff
|
raw
|
diff to current
2019-07-03
Stefan Reiter
Check if corosync.conf exists before calling parser
blob
|
commitdiff
|
raw
|
diff to current
2019-07-02
Fabian Grünbichler
corosync: refactor if conditions
blob
|
commitdiff
|
raw
|
diff to current
2019-07-02
Fabian Grünbichler
corosync: fix multicast detection
blob
|
commitdiff
|
raw
|
diff to current
2019-07-02
Stefan Reiter
Only include multicast rules if transport is udp
blob
|
commitdiff
|
raw
|
diff to current
2019-07-02
Stefan Reiter
Create corosync firewall rules independently of localnet
blob
|
commitdiff
|
raw
|
diff to current
2019-05-28
Thomas Lamprecht
fix CT rule generation with ipfilter set
blob
|
commitdiff
|
raw
|
diff to current
2019-05-16
Christian Ebner
Remove redundant logging of packets passing the tap...
blob
|
commitdiff
|
raw
|
diff to current
2019-05-07
Thomas Lamprecht
followup: do not replace original variable content
blob
|
commitdiff
|
raw
|
diff to current
2019-05-07
Thomas Lamprecht
followup: code cleanup and comment
blob
|
commitdiff
|
raw
|
diff to current
2019-05-07
Alexandre Derumier
fix #2193: arpfilter: CT: remove mask from net ip cidr.
blob
|
commitdiff
|
raw
|
diff to current
2019-04-30
Alexandre Derumier
fix ipv6 PVEFW-reject
blob
|
commitdiff
|
raw
|
diff to current
2019-04-19
Thomas Lamprecht
fix reading host.fw through IPCC interface
blob
|
commitdiff
|
raw
|
diff to current
2019-04-17
Thomas Lamprecht
remove useless unused Data::Dumper uses
blob
|
commitdiff
|
raw
|
diff to current
2019-04-17
Thomas Lamprecht
firewall: split and order modules
blob
|
commitdiff
|
raw
|
diff to current
2019-04-17
Thomas Lamprecht
use IPCC to read FW files if the are backed by pmxcfs
blob
|
commitdiff
|
raw
|
diff to current
2019-04-17
Thomas Lamprecht
remove a level of indirection on FW config parsing
blob
|
commitdiff
|
raw
|
diff to current
2019-04-17
Thomas Lamprecht
make verbose a global state
blob
|
commitdiff
|
raw
|
diff to current
2019-04-01
Thomas Lamprecht
allow to enable/disable and modify cluster wide log...
blob
|
commitdiff
|
raw
|
diff to current
2019-03-30
Thomas Lamprecht
fix Razor macro
blob
|
commitdiff
|
raw
|
diff to current
2019-03-19
Mira Limbeck
add 'log_nf_conntrack' option description
blob
|
commitdiff
|
raw
|
diff to current
2019-03-19
Thomas Lamprecht
followup: minor code style fix
blob
|
commitdiff
|
raw
|
diff to current
2019-03-19
Thomas Lamprecht
followup: use default burst limit of 5
blob
|
commitdiff
|
raw
|
diff to current
2019-03-19
Christian Ebner
fix: #2123 Logging of user defined firewall rules
blob
|
commitdiff
|
raw
|
diff to current
2019-03-12
Alexandre Derumier
ebtables: test layer2_protocols in an external chain
blob
|
commitdiff
|
raw
|
diff to current
2019-03-12
Alexandre Derumier
ebtables: add arp filtering
blob
|
commitdiff
|
raw
|
diff to current
2019-02-05
Alexandre Derumier
log reject : add space after policy REJECT like drop
blob
|
commitdiff
|
raw
|
diff to current
2019-02-04
Thomas Lamprecht
followup: avoid long hash access, use own variable
blob
|
commitdiff
|
raw
|
diff to current
2019-02-04
Christian Ebner
Fix #1606 Add nf_conntrack_allow_invalid option
blob
|
commitdiff
|
raw
|
diff to current
2018-12-13
David Limbeck
add log_nf_conntrack host firewall option
blob
|
commitdiff
|
raw
|
diff to current
2018-12-03
Dominik Csapak
fix #2004: do not allow backwards ranges
blob
|
commitdiff
|
raw
|
diff to current
2018-12-03
Dominik Csapak
fix #2005: only allow ascii port digits
blob
|
commitdiff
|
raw
|
diff to current
2018-08-24
Stoiko Ivanov
Fix #1841: ebtables: sort interfaces per guest
blob
|
commitdiff
|
raw
|
diff to current
2018-06-28
Stoiko Ivanov
ebtables: sort guest chains during rulecreation
blob
|
commitdiff
|
raw
|
diff to current
2018-06-18
Wolfgang Bumiller
whitespace fixup
blob
|
commitdiff
|
raw
|
diff to current
2018-06-12
Wolfgang Bumiller
fixup active_chains distinction when deleting chains
blob
|
commitdiff
|
raw
|
diff to current
2018-06-06
Stoiko Ivanov
rename ebtables_enable to ebtables
blob
|
commitdiff
|
raw
|
diff to current
2018-05-29
Wolfgang Bumiller
typo fixup
blob
|
commitdiff
|
raw
|
diff to current
2018-05-29
Stoiko Ivanov
Don't change external ebtables rules
blob
|
commitdiff
|
raw
|
diff to current
2018-05-17
Wolfgang Bumiller
fix PVEFW-FORWARD chain not being used
blob
|
commitdiff
|
raw
|
diff to current
2018-03-29
Wolfgang Bumiller
ebtables_get_chains: deal with empty chains
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Wolfgang Bumiller
avoid double spaces in ruleset_addrule
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Alexandre Derumier
apply ebtables_ruleset
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Alexandre Derumier
compile ebtables rules
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Wolfgang Bumiller
/etc/services can also define 'sctp' services
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Wolfgang Bumiller
add get_etc_ethertypes
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Wolfgang Bumiller
parse_protocol_file: support lines without end comments
blob
|
commitdiff
|
raw
|
diff to current
2018-03-28
Wolfgang Bumiller
split parser out of get_etc_protocols
blob
|
commitdiff
|
raw
|
diff to current
2018-03-12
Fabian Grünbichler
multiport: add explaining comment
blob
|
commitdiff
|
raw
|
diff to current
2018-03-12
Wolfgang Bumiller
fix and improve multiport handling
blob
|
commitdiff
|
raw
|
diff to current
2018-03-08
Wolfgang Bumiller
check multiport limit in port ranges
blob
|
commitdiff
|
raw
|
diff to current
2017-12-07
Wolfgang Bumiller
honor disabled flag on group rules again
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
remove ruleset_generate_match, ruleset_generate_action
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
remove unused ruleset_generate_rule_insert
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
cleanup parameters to ruleset_generate_rule
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
rule_substitude_action, remove ruleset_generate_rule_old
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
remove unused ruleset_generate_cmdstr
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
implement ipt_rule_to_cmds, ruleset_add_ipt_cmd
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
iptables address matching in own subroutine
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
eliminate unused nbdport in pve_std_chains_conf
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
make $pve_std_chains a copy of $pve_std_chains_conf
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
convert string based rule definitions to hashes
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
integrate logging into ruleset_addrule
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
prepare code for more generic firewall logging
blob
|
commitdiff
|
raw
|
diff to current
2017-10-19
Tom Weber
remove unused $rule_format
blob
|
commitdiff
|
raw
|
diff to current
2017-04-10
Wolfgang Bumiller
log errors encountered by the daemon to syslog
blob
|
commitdiff
|
raw
|
diff to current
2017-04-10
Wolfgang Bumiller
forbid trailing commas in lists
blob
|
commitdiff
|
raw
|
diff to current
2016-11-29
Wolfgang Bumiller
ipsets: catch zero-prefix entries
blob
|
commitdiff
|
raw
|
diff to current
2016-11-29
Wolfgang Bumiller
improve search for local-network
blob
|
commitdiff
|
raw
|
diff to current
2016-10-06
Wolfgang Bumiller
don't try to apply ports to rules which don't support...
blob
|
commitdiff
|
raw
|
diff to current
2016-10-06
Wolfgang Bumiller
remove redundant checks
blob
|
commitdiff
|
raw
|
diff to current
2016-09-06
Emmanuel Kasper
add multicast DNS to the list of Macros
blob
|
commitdiff
|
raw
|
diff to current
2016-09-05
Dietmar Maurer
add missing parameter descriptions
blob
|
commitdiff
|
raw
|
diff to current
2016-06-03
Dominik Csapak
fix allowed group name length
blob
|
commitdiff
|
raw
|
diff to current
2016-06-03
Wolfgang Bumiller
use pve-common's ipv4_mask_hash_localnet
blob
|
commitdiff
|
raw
|
diff to current
2016-05-17
Fabian Grünbichler
fix #972: make PVEFW-FWBR-* rule order stable
blob
|
commitdiff
|
raw
|
diff to current
2016-04-21
Fabian Grünbichler
fix #945: add uninitialized check in lxc ipset compilation
blob
|
commitdiff
|
raw
|
diff to current
2016-04-01
Dietmar Maurer
move option definition to PVE::Firewall
blob
|
commitdiff
|
raw
|
diff to current
2016-04-01
Wolfgang Bumiller
use only the top bit for our accept marks
blob
|
commitdiff
|
raw
|
diff to current
2016-04-01
Dietmar Maurer
add description to DHCPv6 macro
blob
|
commitdiff
|
raw
|
diff to current
2016-03-31
Dietmar Maurer
cleanup descriptions (use single quote instead of backt...
blob
|
commitdiff
|
raw
|
diff to current
2016-03-31
Dietmar Maurer
cleanup descriptions (correctly quote backslash)
blob
|
commitdiff
|
raw
|
diff to current
2016-03-31
Dietmar Maurer
add property descriptions to improve docs
blob
|
commitdiff
|
raw
|
diff to current
2016-03-08
Fabian Grünbichler
Use cfs_config_path from PVE::QemuConfig
blob
|
commitdiff
|
raw
|
diff to current
2016-03-03
Fabian Grünbichler
LXC refactoring
blob
|
commitdiff
|
raw
|
diff to current
2016-03-03
Wolfgang Bumiller
whitespace cleanup
blob
|
commitdiff
|
raw
|
diff to current
2016-03-03
Wolfgang Bumiller
ipfilter: include configured container IPs by default
blob
|
commitdiff
|
raw
|
diff to current
2016-03-03
Wolfgang Bumiller
added the 'ipfilter' option
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
ipv6: fix ip_compress_address_call
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
ipfilter: imiplicitly add the default link local address
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
split compile_ipsets() out of compile_iptables_filter()
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
cleanup after old change
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
ndp: use PVEFW-SET-ACCEPT-MARK and move rules further...
blob
|
commitdiff
|
raw
|
diff to current
2016-03-02
Wolfgang Bumiller
only allow icmp names in the destination port field
blob
|
commitdiff
|
raw
|
diff to current
next