2014-11-28 Dietmar Maurerverify_rule: correctly set ipversion for aliases
2014-11-28 Dietmar Maurersave restore commands into files (debug help)
2014-11-26 Dietmar Maurerbump version to 1.0-10
2014-11-26 Dietmar Maurerpve-firewall compile: improve output format
2014-11-17 Dietmar MaurerAPI2::Firewall::IPSet: fix alias check for ipv6 addresses
2014-11-10 Dietmar Maurerget_ipset_cmdlist: avoid restore problems due to wrong...
2014-11-10 Dietmar Maurerimprove error messages
2014-11-10 Dietmar Maurerdo not emit smurfs chain for ipv6
2014-11-10 Dietmar Maureripv6 addrtype does not work with kernel 2.6.32, use...
2014-11-04 Alexandre Derumieradd ipv6 examples
2014-11-04 Alexandre Derumierip6tables : remove_pvefw_chains
2014-11-04 Alexandre Derumierapply ipv6 ruleset
2014-11-04 Alexandre Derumiercompile ipv6 ruleset
2014-11-04 Alexandre Derumieradd ip6tables standard chains
2014-11-04 Dietmar Maureradd icmpv6 support
2014-11-04 Dietmar Maureradd ipv6 ipset support
2014-11-04 Dietmar Maureripset_match: implement simulation of list type ipsets
2014-11-03 Dietmar Maurerresolve_alias: use better regex to detect alias
2014-10-31 Dietmar Maurercode cleanup
2014-10-31 Alexandre Derumiercheck ipversion of aliases
2014-10-31 Alexandre Derumierskip group rules generation if rule ipversion don't...
2014-10-31 Dietmar Maureruse integer compare for $ipversion
2014-10-31 Alexandre Derumierenable hostfw for ipv4 only
2014-10-31 Dietmar Maurerfix venet rule generation: venet can have ipv4 and...
2014-10-30 Dietmar Maurer$ipversion is interger, so use '!=' instead of string...
2014-10-30 Alexandre Derumierskip vms rules generation if rule ipversion don't match...
2014-10-30 Dietmar Maurerverify_rule: detected mixed ipv4/ipv6 addresses
2014-10-30 Dietmar Maurerparse_address_list: improve type detection
2014-10-30 Dietmar Maurerparse_address_list: make sure we only have one type...
2014-10-30 Dietmar Maurerfix error message
2014-10-30 Dietmar Maurerrename pve-fw-v4addr-spec to pve-fw-addr-spec
2014-10-30 Alexandre Derumierparse_rules src && dst ipversion
2014-10-30 Dietmar Maurercleanup generate_std_chains: don't overwrite global...
2014-10-30 Alexandre Derumiermove $pve_std_chains to $pve_std_chains->{$ipversion}
2014-10-30 Alexandre Derumiersplit compile to compile_iptables_filter
2014-10-14 Dietmar Maurerbump version to 1.0-9
2014-10-14 Dietmar Maurerfix max ipset name lenght
2014-09-08 Dietmar Maurermake dependency to cman/clvm optional
2014-09-08 Dietmar Maurerdo not start daemons during installation
2014-09-08 Dietmar Maurerbump version to 1.0-8
2014-07-21 Dietmar MaurerFirewall/IPSet: implement permission
2014-07-21 Dietmar MaurerFirewall/Rules: add permissions
2014-07-21 Dietmar MaurerFirewall/Groups: add permissions
2014-07-21 Dietmar MaurerFirewall/VM: add permissions
2014-07-21 Dietmar MaurerFirewall/Host: add permissions
2014-07-21 Dietmar MaurerFirewall/Cluster: add permissions
2014-06-26 Dietmar Maurergenerate MAC and IP filter rules if firewall is enabled...
2014-06-26 Dietmar Maurerbump version to 1.0-7
2014-06-26 Dietmar Maurerproxy host rule API calls to correct node
2014-06-12 Dietmar Maurerbump version to 1.0-6
2014-06-12 Dietmar Maureradd example for ipfilter ipset
2014-06-12 Dietmar Maureradd regression tests for ipfilter
2014-06-12 Dietmar Maurerfwtester: add more network (net1, net2) to vm100 to...
2014-06-12 Dietmar Maurerimplement negative ipset match
2014-06-12 Dietmar Maureruse separate ipfilter ipset on each interface
2014-06-11 Dietmar Maureradd support for ipfilter ipset
2014-06-04 Dietmar Maurergenerate /etc/pve/firewall directory automatically
2014-06-04 Dietmar Maureravoid errors about undefined values
2014-06-04 Dietmar Maurerbump version to 1.0-5
2014-06-04 Dietmar Maurerremove ipsets when firewall disabled
2014-06-04 Dietmar Maurerreturn empty ruleset if firewall disabled in cluster.fw
2014-06-04 Dietmar Maurerbump version to 1.0-4
2014-06-04 Dietmar Maurerdepend on iptables and ipset
2014-06-04 Dietmar Maurerchange dh_installinit order
2014-06-02 Dietmar Maurerimprove error message
2014-06-02 Dietmar Maurergenerate warnings when we read the configuration file
2014-05-30 Dietmar Maurerpass ipset errors to GUI
2014-05-30 Dietmar Maurerskip non-existent aliases inside ipset configuration
2014-05-30 Dietmar Maurerremove dead code from previous commit
2014-05-30 Dietmar Maurercode cleanup - introcduce new method resolve_alias
2014-05-30 Dietmar Maureranother regression test
2014-05-30 Dietmar Maurercleanup: try to use more consistent method naming
2014-05-30 Dietmar MaurerAPI: add ability to restrict ref list to specified...
2014-05-30 Dietmar MaurerAPI fix: allow aliases in IPSets
2014-05-30 Dietmar Maurerparser: verify group and ipset names
2014-05-28 Dietmar Maurerimplement API to get list of possible refs (aliases...
2014-05-28 Dietmar Maurerintroduce ipset_name_pattern to avoid confusion
2014-05-28 Dietmar Maurerlimit alias/ipset name length to 64 characters
2014-05-28 Dietmar Maureradd test for long ipset names
2014-05-28 Dietmar Maurerfix ipset match - s/src/dst/
2014-05-28 Dietmar Maurerimplement VM ipsets, allow long ipset names
2014-05-28 Dietmar Maureralways pass cluster_conf to load_vmfw_conf
2014-05-27 Dietmar Maurerimplement ipsets for VM/CT
2014-05-27 Dietmar Maurerdo not print trace when debug is not set
2014-05-27 Dietmar Maurerwhite space cleanup
2014-05-27 Dietmar Maurerimplement aliases at VM level
2014-05-27 Dietmar Maureradd test for aliases inside vm firewall configuration
2014-05-27 Dietmar Maurerfwtester.pl: add warnings to trace
2014-05-27 Alexandre Derumieroptimize blacklist : create a PVEFW-blacklist chain
2014-05-26 Dietmar Maurerfix comment
2014-05-26 Dietmar Maurerskip diabled rules and rules with errors early
2014-05-26 Dietmar Maurerruleset_generate_vm_rules: skip rules with errors
2014-05-26 Dietmar Maurerimprove rule verification
2014-05-26 Dietmar Maurerpass $rule_env (cluster/host/vm/ct) to rule parser.
2014-05-23 Dietmar Maurerimprove error handling
2014-05-23 Dietmar Maurerallow to read rule with errors
2014-05-22 Dietmar Maurerclose inotify handle before restart
2014-05-21 Dietmar Maurerimprove rules API
2014-05-21 Dietmar Maurerfix API: property sport/dport requires protocol
2014-05-21 Dietmar Maurerfix test/test-errors3 - protect rule generation with...