38 hours ago Wolfgang Bumillerbump version to 5.0.1 master
38 hours ago Wolfgang Bumillerchange vm/ prefix to guest/ prefix
39 hours ago Wolfgang Bumillerd/control: add missing anyevent dependency
39 hours ago Leo Nunnerfix #4556: introduce 'dc' and 'vm' prefix for aliases
39 hours ago Leo Nunnerfix #4556: introduce 'dc' and 'vm' prefix for IPSets
2023-05-22 Thomas Lamprechtbump version to 5.0.0
2023-05-22 Thomas Lamprechtd/control: raise standards version compliance to 4.6.2
2023-05-22 Thomas Lamprechtd/control: define compat level via build-depends and...
2023-05-22 Thomas Lamprechtbuildsys: add sbuild convenience target
2023-05-22 Thomas Lamprechtbuildsys: derive upload dist automatically
2023-05-22 Thomas Lamprechtbuildsys: use full DEB_VERSION and correct DEB_HOST_ARCH
2023-05-22 Thomas Lamprechtbuildsys: cleanup and expand clean target
2023-05-22 Thomas Lamprechtadd basic gitignore file
2023-05-22 Thomas Lamprechtd/control: do not depend on obsolete lsb-base
2023-05-22 Thomas Lamprechtmakefile: convert to use simple parenthesis
2023-05-22 Thomas Lamprechtbuildsys: rework doc-gen cleanup and makefile inclusion
2023-05-16 Thomas Lamprechtbump version to 4.3-2
2023-05-16 Fabian Grünbichlerfix #4730: add safeguards to prevent ICMP type misuse
2023-05-16 Fabian Grünbichlericmp: factor out check for relevant protocols
2023-04-26 Thomas Lamprechtd/changelog: fixup released
2023-04-11 Thomas Lamprechtfix variables declared in conditional statement
2023-03-17 Thomas Lamprechtd/changelog: fix typo
2023-03-17 Thomas Lamprechtbump version to 4.3-1
2023-03-13 Alexandre DerumierFix #4550 : host options: add nf_conntrack_helpers
2023-01-27 Wolfgang Bumillerd/control: depend on pve-common 7.3-2 for new dump...
2023-01-27 Christian Ebnerapi: Add optional parameters `since` and `until` for...
2022-12-14 Stefan Hrdlickacleanup: don't capture "/xx" of CIDR
2022-12-14 Stefan Hrdlickaallow non zero ip address host bits to be entered
2022-11-17 Thomas Lamprechtbump version to 4.2-7
2022-11-16 Leo Nunnerfix #4268: add 'force' parameter to delete IPSet with...
2022-11-16 Thomas Lamprechthelpers: move over missing lock_vmfw_conf
2022-11-16 Thomas Lamprechthelpers: re-introduce original call site for backward...
2022-11-16 Alexandre Derumiermove clone_vmfw_conf && remove_vmfw_conf to a Helpers
2022-10-04 Wolfgang Bumillerwhitespace fixup
2022-10-04 Leo Nunnerfix #4204: automatically update usages of group when...
2022-09-12 Thomas Lamprechtmacros: s/SPICE/SPICEproxy/
2022-09-12 Oguz Bektasfix #4018: add firewall macro for SPICE
2022-08-29 Thomas Lamprechtbump version to 4.2-6
2022-08-29 Fabian Grünbichlerfix #4175: ignore non-filter ebtables tables
2022-08-25 Mira Limbeckfix invalid vmfw config being interpreted as enabled
2022-08-25 Thomas Lamprechtdaemon: code cleanup/shortify
2022-08-25 Thomas Lamprechtwhitespace/indentation/line-length cleanup
2022-05-15 Thomas Lamprechtconfig defaults: macfilter defaults to on
2021-11-04 Thomas Lamprechtbump version to 4.2-5
2021-10-29 Thomas Lamprechtfix #3677: follow up: actually handle bucket size and...
2021-10-28 Mark Yardleyfix #3677 ipset_get_chains fixed to work with new ipset...
2021-10-12 Thomas Lamprechtbump version to 4.2-4
2021-09-10 Thomas Lamprechtbump version to 4.2-3
2021-08-06 Lorenz Stechaunerfix #2721: remove reject tcp 43 from default drop and...
2021-06-21 Thomas Lamprechtbump version to 4.2-2
2021-05-26 Stoiko Ivanovset sysctls on every apply
2021-05-24 Thomas Lamprechtbuildsys: change upload/repo dist to bullseye
2021-05-24 Thomas Lamprechtd/rules: cleanup systemd overrides
2021-05-12 Thomas Lamprechtbump version to 4.2-1
2021-05-12 Thomas Lamprechtdebian: run wrap-and-sort -abt
2021-05-12 Thomas Lamprechtinstall pvefw-logger.service in multi-user.target
2021-05-12 Thomas Lamprechtd/control: bump debhelper compat to >= 12
2021-05-12 Thomas Lamprechtfw logger: cosmetic fixes
2021-04-22 Aaron Lautererfix #967: source: dest: limit length
2021-02-22 Mira Limbeckfix #2358: allow --<opt> in firewall rule config files
2020-09-18 Thomas Lamprechtbump version to 4.1-3
2020-09-18 Thomas Lamprechtimprove log burst property description
2020-09-18 Thomas Lamprechtvarious typo fixes
2020-09-09 Mira Limbeckintroduce new icmp-type parameter
2020-07-01 Stoiko Ivanovfix #2773: ebtables: keep policy of custom chains
2020-05-06 Thomas Lamprechtbump version to 4.1-2
2020-05-06 Thomas LamprechtRevert "rules: verify referenced security group exists"
2020-05-04 Thomas Lamprechtbump version to 4.1-1
2020-05-04 Thomas Lamprechtadd dport: factor out ICMP-type validity checking
2020-05-04 Thomas Lamprechticmp: allow to specify the echo-reply (0) type as integer
2020-05-04 Thomas Lamprechtfix typo: s/ICPM/ICMP/
2020-05-04 Thomas Lamprechttest/simulator: add very basic ICMP type functionallity
2020-05-04 Thomas Lamprechtfwtester: reduce extra empty lines a bit
2020-05-04 Thomas Lamprechttest/README: whitespace fixes and slight rewording
2020-05-04 Mira Limbeckfix wrong icmpv6 types
2020-05-04 Mira Limbeckfix iptables-restore failing if icmp-type value > 255
2020-05-02 Thomas Lamprechtd/control: bump pve-cluster dependency for new lock...
2020-05-02 Fabian Grünbichlerrules: verify referenced security group exists
2020-05-02 Fabian Grünbichlerconfigs: warn about duplicate ipset entries
2020-05-02 Fabian Grünbichlerapi/ipsets: parse_cidr before checking for duplicates
2020-05-02 Fabian Grünbichlerclone_vmfw_conf: lock new config
2020-05-02 Fabian Grünbichlerapi: lock configs
2020-05-02 Fabian Grünbichlerapi: add locking helpers
2020-05-02 Fabian Grünbichlerconfigs: add locking helpers
2020-05-02 Mira Limbeckfix #2686: don't add arp-ip-src filter for dhcp
2020-02-05 Christian Ebnerlogging: Add missing logmsg for inbound rules
2020-01-27 Thomas Lamprechtbump version to 4.0-10
2020-01-25 Christian Ebnermacros: add macro for Proxmox Mail Gateway web interface
2020-01-09 Thomas Lamprechtfwtester: sort and group module usage
2020-01-09 Thomas Lamprechtapi node: always pass cluster conf to node FW parser
2019-12-13 Thomas Lamprechtgrammar fix: s/does not exists/does not exist/g
2019-12-03 Thomas Lamprechtbump version to 4.0-9
2019-12-03 Christian Ebnerrules: allow connections on port range 60000:60050...
2019-11-18 Wolfgang Bumillerbump version to 4.0-8
2019-11-18 Alexandre Derumieradd synflood protection
2019-11-18 Alexandre Derumieriptables : add raw table support
2019-11-18 Fabian Grünbichlerd/control: add (build-)depends on libpve-cluster-perl
2019-10-22 Thomas Lamprechtfw schemas: add defaults and improve some descriptions
2019-10-22 Thomas Lamprechtincrease default nf_conntrack_max to kernel default
2019-08-27 Mira Limbeckfix use of uninitialized value