2014-02-25 Alexandre Derumieruse RETURN instead ACCEPT for tap-out rules
2014-02-25 Dietmar Maurerimplement VM policy option
2014-02-25 Dietmar Maurerimplement 'enable' option
2014-02-25 Dietmar Maurercompile: use verbose output when started from CLI
2014-02-25 Dietmar Maurerrename chain $bridge to $bridge-FW
2014-02-25 Alexandre Derumieroptimize bridge chains
2014-02-25 Alexandre Derumierparse_port_name_number_or_range fix range check
2014-02-21 Dietmar Maurerdo not delete PVEFW-INPUT, PVEFW-OUTPUT and PVEFW-FORWA...
2014-02-21 Dietmar Maurerimplement simple option parser
2014-02-20 Dietmar Maureruse conntrack instead of state
2014-02-20 Dietmar Maurerallow traffic from lo (PVEFW-INPUT)
2014-02-20 Dietmar Maurerdefine more macros (converted most shorewall macros)
2014-02-20 Dietmar Maureruse $rule->{dest} instead of $rule->{destination}
2014-02-20 Dietmar Maurerimplement macros
2014-02-19 Dietmar Maureronly use --mark for OUT chain
2014-02-19 Dietmar Maurerjump to ACCEPT for IN rules
2014-02-19 Dietmar Maurerimprove parser
2014-02-19 Dietmar Maureruse accept mark for security groups
2014-02-19 Dietmar Maurercorrectly remove stale chains
2014-02-18 Dietmar Maurerpass $ruleset instead of $rule
2014-02-18 Dietmar Maurercheck chain name length (max 28 chars)
2014-02-18 Dietmar Maureruse --comment to store SHA1 signature
2014-02-18 Dietmar Maurersplit compile from apply
2014-02-18 Dietmar Maureravoid perl warning
2014-02-18 Dietmar Maurerenable proc/sys/net/bridge/bridge-nf-call-iptables
2014-02-18 Dietmar Maureradd MAC filter
2014-02-18 Dietmar Maurercleanup chain names
2014-02-18 Alexandre Derumiertest if BRIDGEFW-OUT and BRIDGEFW-IN exist
2014-02-17 Dietmar Maurersimplify firewall and use MD5 hash to detect changes
2014-02-17 Dietmar Maurerconsider host-IN/OUT chains in iptables_get_chains
2014-02-17 Dietmar Maurerconsider security group chains in iptables_get_chains
2014-02-14 Dietmar Maurerimplement stop command using new iptables_get_chains
2014-02-14 Dietmar Maurerexperimental code to read existing chains and compute...
2014-02-14 Dietmar Maurerfix iptables-restore - correctly add newline after...
2014-02-14 Dietmar Maurerremove shorewall rule compiler
2014-02-13 Dietmar Maureruse input parameter to feed iptables-restore
2014-02-13 Dietmar Maurerimplement locking
2014-02-13 Dietmar Maurerremove shorewall specific commands
2014-02-13 Alexandre Derumieradd support for security groups
2014-02-13 Alexandre Derumierrename ./pvefw enabletaprules -> ./pvefw enablevmfw
2014-02-13 Alexandre Derumierhost firewall support
2014-02-13 Alexandre Derumieradd src and destination range
2014-02-13 Alexandre Derumieradd support for multiport
2014-02-13 Alexandre Derumierbasic bridge iptables implementation
2012-08-21 Michel LoiseleurClarify zone names
2012-08-16 Dietmar Maurerparse protocols and ports
2012-08-16 Dietmar Maurerparse source and destination address lists
2012-08-14 Dietmar Maurerimplement workaround for inbound rules with source IP
2012-08-10 Dietmar Maurerdescribe the problem
2012-08-10 Dietmar Maureradd more docu
2012-08-10 Dietmar Maurerimprove docu
2012-08-10 Dietmar Maurercleanups
2012-08-10 Dietmar Maurerbetter documentation
2012-08-10 Dietmar Maureruse 'all' instead of 'any'
2012-08-10 Dietmar Maureruse extra zone for physical devices
2012-08-09 Dietmar Maureruse shell variables for zones
2012-08-09 Dietmar Maureradd comments to generated rules file
2012-08-09 Dietmar Maurerread in shorewall macros
2012-08-07 Dietmar Maurerrename firewall setup script to 'pvefw'
2012-08-07 Dietmar Maureruse real vm configs, and write to /etc/shorewall
2012-08-06 Dietmar Maurergenerate maclist
2012-08-06 Dietmar Maureradd original zone names as comments
2012-08-06 Dietmar Maurercompile simple rules
2012-08-06 Dietmar Maurercode cleanup
2012-08-06 Dietmar Maurerwrite real files
2012-08-03 Dietmar Maurergenerate example zone and interfaces file
2012-08-03 Dietmar Maurerstart example code
2012-08-03 Dietmar Maureradd config dir to store firewall configuration examples
2012-08-03 Dietmar Maureradd README