fix call to register_restart_command (set $use_hup to true)
[pve-firewall.git] / src /
2015-01-15 Dietmar Maurerfix call to register_restart_command (set $use_hup...
2014-12-31 Dietmar Maurerremove class paramenter from register_XXX_command
2014-12-31 Dietmar Maurersimplify code (error log is done inside
2014-12-31 Dietmar Maurerimprove logging
2014-12-18 Dietmar Maurerfix arguments for register_restart_command
2014-12-18 Dietmar Maureruse Daemon class from pve-common
2014-12-12 Alexandre Derumierfirewall update : load cluster conf for host rules
2014-12-05 Dietmar Maurerdo not use ipset list chains
2014-11-28 Dietmar Maurerfix ipset remove order
2014-11-28 Dietmar Maureradd debian/dirs file to install /var/lib/pve-firewall
2014-11-28 Dietmar Maurerverify_rule: correctly set ipversion for aliases
2014-11-28 Dietmar Maurersave restore commands into files (debug help)
2014-11-26 Dietmar Maurerpve-firewall compile: improve output format
2014-11-17 Dietmar MaurerAPI2::Firewall::IPSet: fix alias check for ipv6 addresses
2014-11-10 Dietmar Maurerget_ipset_cmdlist: avoid restore problems due to wrong...
2014-11-10 Dietmar Maurerimprove error messages
2014-11-10 Dietmar Maurerdo not emit smurfs chain for ipv6
2014-11-10 Dietmar Maureripv6 addrtype does not work with kernel 2.6.32, use...
2014-11-04 Alexandre Derumierip6tables : remove_pvefw_chains
2014-11-04 Alexandre Derumierapply ipv6 ruleset
2014-11-04 Alexandre Derumiercompile ipv6 ruleset
2014-11-04 Alexandre Derumieradd ip6tables standard chains
2014-11-04 Dietmar Maureradd icmpv6 support
2014-11-04 Dietmar Maureradd ipv6 ipset support
2014-11-04 Dietmar Maureripset_match: implement simulation of list type ipsets
2014-11-03 Dietmar Maurerresolve_alias: use better regex to detect alias
2014-10-31 Dietmar Maurercode cleanup
2014-10-31 Alexandre Derumiercheck ipversion of aliases
2014-10-31 Alexandre Derumierskip group rules generation if rule ipversion don't...
2014-10-31 Dietmar Maureruse integer compare for $ipversion
2014-10-31 Alexandre Derumierenable hostfw for ipv4 only
2014-10-31 Dietmar Maurerfix venet rule generation: venet can have ipv4 and...
2014-10-30 Dietmar Maurer$ipversion is interger, so use '!=' instead of string...
2014-10-30 Alexandre Derumierskip vms rules generation if rule ipversion don't match...
2014-10-30 Dietmar Maurerverify_rule: detected mixed ipv4/ipv6 addresses
2014-10-30 Dietmar Maurerparse_address_list: improve type detection
2014-10-30 Dietmar Maurerparse_address_list: make sure we only have one type...
2014-10-30 Dietmar Maurerfix error message
2014-10-30 Dietmar Maurerrename pve-fw-v4addr-spec to pve-fw-addr-spec
2014-10-30 Alexandre Derumierparse_rules src && dst ipversion
2014-10-30 Dietmar Maurercleanup generate_std_chains: don't overwrite global...
2014-10-30 Alexandre Derumiermove $pve_std_chains to $pve_std_chains->{$ipversion}
2014-10-30 Alexandre Derumiersplit compile to compile_iptables_filter
2014-10-14 Dietmar Maurerfix max ipset name lenght
2014-07-21 Dietmar MaurerFirewall/IPSet: implement permission
2014-07-21 Dietmar MaurerFirewall/Rules: add permissions
2014-07-21 Dietmar MaurerFirewall/Groups: add permissions
2014-07-21 Dietmar MaurerFirewall/VM: add permissions
2014-07-21 Dietmar MaurerFirewall/Host: add permissions
2014-07-21 Dietmar MaurerFirewall/Cluster: add permissions
2014-06-26 Dietmar Maurergenerate MAC and IP filter rules if firewall is enabled...
2014-06-26 Dietmar Maurerproxy host rule API calls to correct node
2014-06-12 Dietmar Maurerimplement negative ipset match
2014-06-12 Dietmar Maureruse separate ipfilter ipset on each interface
2014-06-11 Dietmar Maureradd support for ipfilter ipset
2014-06-04 Dietmar Maurergenerate /etc/pve/firewall directory automatically
2014-06-04 Dietmar Maureravoid errors about undefined values
2014-06-04 Dietmar Maurerremove ipsets when firewall disabled
2014-06-04 Dietmar Maurerreturn empty ruleset if firewall disabled in cluster.fw
2014-06-02 Dietmar Maurerimprove error message
2014-06-02 Dietmar Maurergenerate warnings when we read the configuration file
2014-05-30 Dietmar Maurerpass ipset errors to GUI
2014-05-30 Dietmar Maurerskip non-existent aliases inside ipset configuration
2014-05-30 Dietmar Maurerremove dead code from previous commit
2014-05-30 Dietmar Maurercode cleanup - introcduce new method resolve_alias
2014-05-30 Dietmar Maurercleanup: try to use more consistent method naming
2014-05-30 Dietmar MaurerAPI: add ability to restrict ref list to specified...
2014-05-30 Dietmar MaurerAPI fix: allow aliases in IPSets
2014-05-30 Dietmar Maurerparser: verify group and ipset names
2014-05-28 Dietmar Maurerimplement API to get list of possible refs (aliases...
2014-05-28 Dietmar Maurerintroduce ipset_name_pattern to avoid confusion
2014-05-28 Dietmar Maurerlimit alias/ipset name length to 64 characters
2014-05-28 Dietmar Maurerfix ipset match - s/src/dst/
2014-05-28 Dietmar Maurerimplement VM ipsets, allow long ipset names
2014-05-28 Dietmar Maureralways pass cluster_conf to load_vmfw_conf
2014-05-27 Dietmar Maurerimplement ipsets for VM/CT
2014-05-27 Dietmar Maurerwhite space cleanup
2014-05-27 Dietmar Maurerimplement aliases at VM level
2014-05-27 Dietmar add warnings to trace
2014-05-27 Alexandre Derumieroptimize blacklist : create a PVEFW-blacklist chain
2014-05-26 Dietmar Maurerskip diabled rules and rules with errors early
2014-05-26 Dietmar Maurerruleset_generate_vm_rules: skip rules with errors
2014-05-26 Dietmar Maurerimprove rule verification
2014-05-26 Dietmar Maurerpass $rule_env (cluster/host/vm/ct) to rule parser.
2014-05-23 Dietmar Maurerimprove error handling
2014-05-23 Dietmar Maurerallow to read rule with errors
2014-05-22 Dietmar Maurerclose inotify handle before restart
2014-05-21 Dietmar Maurerimprove rules API
2014-05-21 Dietmar Maurerfix API: property sport/dport requires protocol
2014-05-21 Dietmar Maurerfix test/test-errors3 - protect rule generation with...
2014-05-21 Dietmar Maurerallow igmp traffic
2014-05-21 Dietmar Maurerfix for test case test/test-errors1
2014-05-21 Dietmar Maureruse GET instead of POST for command that do not change...
2014-05-21 Dietmar Maureradd new localnet command
2014-05-21 Dietmar Maurerrename cluster_network to local_network, introduce...
2014-05-21 Dietmar MaurerIntroduce new management ipset
2014-05-21 Dietmar Maurerdo not use ctstate in corosync rule
2014-05-20 Dietmar Maurerstart alias support for VMs
2014-05-20 Dietmar Maurerimprove documentation
2014-05-20 Dietmar Maurerdo not log simulate warnings to syslog