ebtables_get_chains: deal with empty chains
[pve-firewall.git] / src / PVE / Firewall.pm
2018-03-29 Wolfgang Bumillerebtables_get_chains: deal with empty chains
2018-03-28 Wolfgang Bumilleravoid double spaces in ruleset_addrule
2018-03-28 Alexandre Derumierapply ebtables_ruleset
2018-03-28 Alexandre Derumiercompile ebtables rules
2018-03-28 Wolfgang Bumiller/etc/services can also define 'sctp' services
2018-03-28 Wolfgang Bumilleradd get_etc_ethertypes
2018-03-28 Wolfgang Bumillerparse_protocol_file: support lines without end comments
2018-03-28 Wolfgang Bumillersplit parser out of get_etc_protocols
2018-03-12 Fabian Grünbichlermultiport: add explaining comment
2018-03-12 Wolfgang Bumillerfix and improve multiport handling
2018-03-08 Wolfgang Bumillercheck multiport limit in port ranges
2017-12-07 Wolfgang Bumillerhonor disabled flag on group rules again
2017-10-19 Tom Weberremove ruleset_generate_match, ruleset_generate_action
2017-10-19 Tom Weberremove unused ruleset_generate_rule_insert
2017-10-19 Tom Webercleanup parameters to ruleset_generate_rule
2017-10-19 Tom Weberrule_substitude_action, remove ruleset_generate_rule_old
2017-10-19 Tom Weberremove unused ruleset_generate_cmdstr
2017-10-19 Tom Weberimplement ipt_rule_to_cmds, ruleset_add_ipt_cmd
2017-10-19 Tom Weberiptables address matching in own subroutine
2017-10-19 Tom Webereliminate unused nbdport in pve_std_chains_conf
2017-10-19 Tom Webermake $pve_std_chains a copy of $pve_std_chains_conf
2017-10-19 Tom Weberconvert string based rule definitions to hashes
2017-10-19 Tom Weberintegrate logging into ruleset_addrule
2017-10-19 Tom Weberprepare code for more generic firewall logging
2017-10-19 Tom Weberremove unused $rule_format
2017-04-10 Wolfgang Bumillerlog errors encountered by the daemon to syslog
2017-04-10 Wolfgang Bumillerforbid trailing commas in lists
2016-11-29 Wolfgang Bumilleripsets: catch zero-prefix entries
2016-11-29 Wolfgang Bumillerimprove search for local-network
2016-10-06 Wolfgang Bumillerdon't try to apply ports to rules which don't support...
2016-10-06 Wolfgang Bumillerremove redundant checks
2016-09-06 Emmanuel Kasperadd multicast DNS to the list of Macros
2016-09-05 Dietmar Maureradd missing parameter descriptions
2016-06-03 Dominik Csapakfix allowed group name length
2016-06-03 Wolfgang Bumilleruse pve-common's ipv4_mask_hash_localnet
2016-05-17 Fabian Grünbichlerfix #972: make PVEFW-FWBR-* rule order stable
2016-04-21 Fabian Grünbichlerfix #945: add uninitialized check in lxc ipset compilation
2016-04-01 Dietmar Maurermove option definition to PVE::Firewall
2016-04-01 Wolfgang Bumilleruse only the top bit for our accept marks
2016-04-01 Dietmar Maureradd description to DHCPv6 macro
2016-03-31 Dietmar Maurercleanup descriptions (use single quote instead of backt...
2016-03-31 Dietmar Maurercleanup descriptions (correctly quote backslash)
2016-03-31 Dietmar Maureradd property descriptions to improve docs
2016-03-08 Fabian GrünbichlerUse cfs_config_path from PVE::QemuConfig
2016-03-03 Fabian GrünbichlerLXC refactoring
2016-03-03 Wolfgang Bumillerwhitespace cleanup
2016-03-03 Wolfgang Bumilleripfilter: include configured container IPs by default
2016-03-03 Wolfgang Bumilleradded the 'ipfilter' option
2016-03-02 Wolfgang Bumilleripv6: fix ip_compress_address_call
2016-03-02 Wolfgang Bumilleripfilter: imiplicitly add the default link local address
2016-03-02 Wolfgang Bumillersplit compile_ipsets() out of compile_iptables_filter()
2016-03-02 Wolfgang Bumillercleanup after old change
2016-03-02 Wolfgang Bumillerndp: use PVEFW-SET-ACCEPT-MARK and move rules further...
2016-03-02 Wolfgang Bumilleronly allow icmp names in the destination port field
2016-02-29 Dominik Csapakfix 901: encode unicode characters in sha digest
2016-02-27 Wolfgang BumillerAdd radv option to VM options.
2016-02-19 Wolfgang BumillerAdd router-solicitation to NeighborDiscovery macro
2016-02-19 Wolfgang BumillerAdd ndp option to host and VM firewall options
2016-02-08 Fabian GrünbichlerDon't leave empty FW config files behind
2016-01-26 Wolfgang Bumilleradd DHCPv6 macro
2016-01-26 Wolfgang Bumilleradd dhcpv6 support to the dhcp option
2016-01-07 Wolfgang Bumilleruse $security_group_name_pattern in iptables_get_chains
2016-01-07 Wolfgang Bumillerfix some regular expressions mixups
2015-10-23 Wolfgang Bumillerallow numeric icmp types
2015-09-16 Dietmar Maureradd better inline documentation
2015-09-08 Dietmar Maureriptables_get_chains: fix veth device name
2015-08-25 Alen Grizonicsubroutine for cloning vm's firewall config file
2015-08-19 Alen Grizonicfirewall remove config file subroutine added
2015-08-12 Alen Grizonicremoved firewall code for openVZ
2015-08-10 Alen Grizonicadded firewall code for lxc
2015-08-04 Alen Grizonicfirewall ipversion comparison fix
2015-07-28 Wolfgang Bumillerlocal_network: ipv6 support + correctness
2015-07-28 Wolfgang Bumillerfix ipv6 address normalization
2015-07-23 Wolfgang Bumilleripv6 neighbor discovery and solicitation macros
2015-07-23 Wolfgang BumillerAdd ipv6 macros to the macro list
2015-07-23 Wolfgang Bumillerip6tables accepts both spellings of the word neighbor
2015-07-22 Alen Grizonicfirewall - Ceph macro added
2015-06-26 Alen Grizonicfirewall_module_duplicate
2015-06-26 Alen Grizonicfirewall autodisable
2015-03-16 Dietmar Maureralways use local_network alias if specified by user
2015-03-15 Dietmar Maurercorrectly emit ipv6 rules for host firewall
2015-02-27 Dietmar Maurerfix path to ipset binary
2015-02-09 Dietmar Maurerfix alias lookup
2014-12-12 Alexandre Derumierfirewall update : load cluster conf for host rules
2014-12-05 Dietmar Maurerdo not use ipset list chains
2014-11-28 Dietmar Maurerfix ipset remove order
2014-11-28 Dietmar Maurerverify_rule: correctly set ipversion for aliases
2014-11-28 Dietmar Maurersave restore commands into files (debug help)
2014-11-17 Dietmar MaurerAPI2::Firewall::IPSet: fix alias check for ipv6 addresses
2014-11-10 Dietmar Maurerget_ipset_cmdlist: avoid restore problems due to wrong...
2014-11-10 Dietmar Maurerimprove error messages
2014-11-10 Dietmar Maurerdo not emit smurfs chain for ipv6
2014-11-10 Dietmar Maureripv6 addrtype does not work with kernel 2.6.32, use...
2014-11-04 Alexandre Derumierip6tables : remove_pvefw_chains
2014-11-04 Alexandre Derumierapply ipv6 ruleset
2014-11-04 Alexandre Derumiercompile ipv6 ruleset
2014-11-04 Alexandre Derumieradd ip6tables standard chains
2014-11-04 Dietmar Maureradd icmpv6 support
2014-11-04 Dietmar Maureradd ipv6 ipset support
2014-11-03 Dietmar Maurerresolve_alias: use better regex to detect alias
next