projects
/
pve-firewall.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
bump version to 3.0-14
[pve-firewall.git]
/
src
/
2018-08-24
Stoiko Ivanov
Fix #1841: ebtables: sort interfaces per guest
tree
|
commitdiff
2018-06-28
Stoiko Ivanov
ebtables: sort guest chains during rulecreation
tree
|
commitdiff
2018-06-18
Thomas Lamprecht
api: host, vm: explicit import raise_param_exc
tree
|
commitdiff
2018-06-18
Wolfgang Bumiller
whitespace fixup
tree
|
commitdiff
2018-06-12
Wolfgang Bumiller
fixup active_chains distinction when deleting chains
tree
|
commitdiff
2018-06-06
Stoiko Ivanov
rename ebtables_enable to ebtables
tree
|
commitdiff
2018-05-29
Wolfgang Bumiller
typo fixup
tree
|
commitdiff
2018-05-29
Stoiko Ivanov
Don't change external ebtables rules
tree
|
commitdiff
2018-05-17
Wolfgang Bumiller
fix PVEFW-FORWARD chain not being used
tree
|
commitdiff
2018-03-29
Wolfgang Bumiller
ebtables_get_chains: deal with empty chains
tree
|
commitdiff
2018-03-28
Wolfgang Bumiller
avoid double spaces in ruleset_addrule
tree
|
commitdiff
2018-03-28
Alexandre Derumier
apply ebtables_ruleset
tree
|
commitdiff
2018-03-28
Alexandre Derumier
compile ebtables rules
tree
|
commitdiff
2018-03-28
Wolfgang Bumiller
/etc/services can also define 'sctp' services
tree
|
commitdiff
2018-03-28
Wolfgang Bumiller
add get_etc_ethertypes
tree
|
commitdiff
2018-03-28
Wolfgang Bumiller
parse_protocol_file: support lines without end comments
tree
|
commitdiff
2018-03-28
Wolfgang Bumiller
split parser out of get_etc_protocols
tree
|
commitdiff
2018-03-12
Fabian Grünbichler
multiport: add explaining comment
tree
|
commitdiff
2018-03-12
Wolfgang Bumiller
fix and improve multiport handling
tree
|
commitdiff
2018-03-08
Wolfgang Bumiller
check multiport limit in port ranges
tree
|
commitdiff
2017-12-07
Wolfgang Bumiller
honor disabled flag on group rules again
tree
|
commitdiff
2017-11-15
Dominik Csapak
sort ipsets so that the digest is consistent
tree
|
commitdiff
2017-10-19
Tom Weber
remove ruleset_generate_match, ruleset_generate_action
tree
|
commitdiff
2017-10-19
Tom Weber
remove unused ruleset_generate_rule_insert
tree
|
commitdiff
2017-10-19
Tom Weber
cleanup parameters to ruleset_generate_rule
tree
|
commitdiff
2017-10-19
Tom Weber
rule_substitude_action, remove ruleset_generate_rule_old
tree
|
commitdiff
2017-10-19
Tom Weber
remove unused ruleset_generate_cmdstr
tree
|
commitdiff
2017-10-19
Tom Weber
implement ipt_rule_to_cmds, ruleset_add_ipt_cmd
tree
|
commitdiff
2017-10-19
Tom Weber
iptables address matching in own subroutine
tree
|
commitdiff
2017-10-19
Tom Weber
eliminate unused nbdport in pve_std_chains_conf
tree
|
commitdiff
2017-10-19
Tom Weber
make $pve_std_chains a copy of $pve_std_chains_conf
tree
|
commitdiff
2017-10-19
Tom Weber
convert string based rule definitions to hashes
tree
|
commitdiff
2017-10-19
Tom Weber
integrate logging into ruleset_addrule
tree
|
commitdiff
2017-10-19
Tom Weber
prepare code for more generic firewall logging
tree
|
commitdiff
2017-10-19
Tom Weber
remove unused $rule_format
tree
|
commitdiff
2017-10-18
Philip Abernethy
Use run_cli_handler instead of deprecated run_cli
tree
|
commitdiff
2017-10-17
Fabian Grünbichler
pvefw-logger: fix typo
tree
|
commitdiff
2017-09-04
Wolfgang Bumiller
Fix #1492: logger: print timestamps only if we have one
tree
|
commitdiff
2017-04-10
Wolfgang Bumiller
log errors encountered by the daemon to syslog
tree
|
commitdiff
2017-04-10
Wolfgang Bumiller
forbid trailing commas in lists
tree
|
commitdiff
2017-02-06
Wolfgang Bumiller
logger: drop gthread dependency
tree
|
commitdiff
2017-02-06
Wolfgang Bumiller
simulator: make lxc/qemu optional
tree
|
commitdiff
2016-12-13
Thomas Lamprecht
fix ambiguous if statements
tree
|
commitdiff
2016-11-29
Wolfgang Bumiller
ipset: don't allow the creation of zero-prefix entries
tree
|
commitdiff
2016-11-29
Wolfgang Bumiller
ipsets: catch zero-prefix entries
tree
|
commitdiff
2016-11-29
Wolfgang Bumiller
improve search for local-network
tree
|
commitdiff
2016-10-06
Wolfgang Bumiller
don't try to apply ports to rules which don't support...
tree
|
commitdiff
2016-10-06
Wolfgang Bumiller
remove redundant checks
tree
|
commitdiff
2016-09-06
Emmanuel Kasper
add multicast DNS to the list of Macros
tree
|
commitdiff
2016-09-05
Dietmar Maurer
add missing parameter descriptions
tree
|
commitdiff
2016-06-03
Dominik Csapak
prevent overwriting ipsets/sec. groups by renaming
tree
|
commitdiff
2016-06-03
Dominik Csapak
fix allowed group name length
tree
|
commitdiff
2016-06-03
Dominik Csapak
make group digest stable
tree
|
commitdiff
2016-06-03
Wolfgang Bumiller
use pve-common's ipv4_mask_hash_localnet
tree
|
commitdiff
2016-05-17
Fabian Grünbichler
fix #972: make PVEFW-FWBR-* rule order stable
tree
|
commitdiff
2016-05-09
Dietmar Maurer
install sysctl file set set rp_filter=2
tree
|
commitdiff
2016-04-21
Fabian Grünbichler
fix #945: add uninitialized check in lxc ipset compilation
tree
|
commitdiff
2016-04-06
Dietmar Maurer
use pve-doc-generator, bump version to 2.0-24
tree
|
commitdiff
2016-04-01
Dietmar Maurer
move option definition to PVE::Firewall
tree
|
commitdiff
2016-04-01
Wolfgang Bumiller
use only the top bit for our accept marks
tree
|
commitdiff
2016-04-01
Dietmar Maurer
add description to DHCPv6 macro
tree
|
commitdiff
2016-03-31
Dietmar Maurer
cleanup descriptions (use single quote instead of backt...
tree
|
commitdiff
2016-03-31
Dietmar Maurer
cleanup descriptions (correctly quote backslash)
tree
|
commitdiff
2016-03-31
Dietmar Maurer
add property descriptions to improve docs
tree
|
commitdiff
2016-03-08
Fabian Grünbichler
Use cfs_config_path from PVE::QemuConfig
tree
|
commitdiff
2016-03-03
Fabian Grünbichler
LXC refactoring
tree
|
commitdiff
2016-03-03
Wolfgang Bumiller
whitespace cleanup
tree
|
commitdiff
2016-03-03
Wolfgang Bumiller
ipfilter: include configured container IPs by default
tree
|
commitdiff
2016-03-03
Wolfgang Bumiller
added the 'ipfilter' option
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
ipv6: fix ip_compress_address_call
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
ipfilter: imiplicitly add the default link local address
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
split compile_ipsets() out of compile_iptables_filter()
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
cleanup after old change
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
ndp: use PVEFW-SET-ACCEPT-MARK and move rules further...
tree
|
commitdiff
2016-03-02
Wolfgang Bumiller
only allow icmp names in the destination port field
tree
|
commitdiff
2016-02-29
Dominik Csapak
fix 901: encode unicode characters in sha digest
tree
|
commitdiff
2016-02-27
Wolfgang Bumiller
Add radv option to VM options.
tree
|
commitdiff
2016-02-19
Wolfgang Bumiller
Add router-solicitation to NeighborDiscovery macro
tree
|
commitdiff
2016-02-19
Wolfgang Bumiller
Add ndp option to host and VM firewall options
tree
|
commitdiff
2016-02-08
Fabian Grünbichler
Don't leave empty FW config files behind
tree
|
commitdiff
2016-01-26
Dietmar Maurer
pvefw-logger.c: remove unused var
tree
|
commitdiff
2016-01-26
Wolfgang Bumiller
logger: basic ipv6 support
tree
|
commitdiff
2016-01-26
Wolfgang Bumiller
factor out IPPROTO switch for reuse
tree
|
commitdiff
2016-01-26
Wolfgang Bumiller
add DHCPv6 macro
tree
|
commitdiff
2016-01-26
Wolfgang Bumiller
add dhcpv6 support to the dhcp option
tree
|
commitdiff
2016-01-26
Wolfgang Bumiller
make LEPRINT* macros safe to use with if/else pairs
tree
|
commitdiff
2016-01-07
Wolfgang Bumiller
use $security_group_name_pattern in iptables_get_chains
tree
|
commitdiff
2016-01-07
Wolfgang Bumiller
fix some regular expressions mixups
tree
|
commitdiff
2015-10-23
Wolfgang Bumiller
allow numeric icmp types
tree
|
commitdiff
2015-10-23
Wolfgang Bumiller
make clean fix
tree
|
commitdiff
2015-09-24
Dietmar Maurer
use service class to generate pod and bash-completion...
tree
|
commitdiff
2015-09-24
Dietmar Maurer
convert pve-firewall into a PVE::Service class
tree
|
commitdiff
2015-09-16
Dietmar Maurer
add better inline documentation
tree
|
commitdiff
2015-09-08
Dietmar Maurer
iptables_get_chains: fix veth device name
tree
|
commitdiff
2015-08-25
Alen Grizonic
subroutine for cloning vm's firewall config file
tree
|
commitdiff
2015-08-19
Alen Grizonic
firewall remove config file subroutine added
tree
|
commitdiff
2015-08-12
Dietmar Maurer
adopt regresion tests for lxc containers
tree
|
commitdiff
2015-08-12
Alen Grizonic
removed firewall code for openVZ
tree
|
commitdiff
2015-08-10
Alen Grizonic
added firewall code for lxc
tree
|
commitdiff
2015-08-04
Alen Grizonic
firewall ipversion comparison fix
tree
|
commitdiff
next