2017-05-26 Jo-Philipp... options: improve handling of negations when parsing...
2017-05-26 Jo-Philipp... iptables: support -i, -o, -s and -d in option extra
2017-05-17 Hans Dedeckerubus: increase ubus network interface dump timeout
2017-05-12 Jo-Philipp... iptables: add exception handling
2017-05-09 Pierre Lebleufirewall3: add check_snat() function
2017-05-09 Pierre Lebleufirewall3: display the section type for UBUS rules
2017-05-09 Pierre Lebleufirewall3: add UBUS support for include scripts
2017-05-09 Pierre Lebleufirewall3: add UBUS support for ipset sections
2017-05-09 Pierre Lebleufirewall3: add UBUS support for forwarding sections
2017-05-09 Pierre Lebleufirewall3: add UBUS support for redirect sections
2017-05-09 Pierre Lebleufirewall3: add fw3_attr_parse_name_type() function
2017-05-09 Pierre Lebleufirewall3: replace warn_rule() by warn_section()
2017-05-09 Pierre Lebleufirewall3: check the return value of fw3_parse_options()
2017-05-09 Felix Fietkaubuild: use -Wno-format-truncation instead of -Wno-error...
2017-05-04 Felix Fietkauutils: replace sprintf use with snprintf to avoid overflows
2017-05-04 Felix Fietkaubuild: disable the format-truncation warning error...
2017-04-27 Jo-Philipp... zones: drop outgoing invalid traffic in masqueraded...
2017-04-27 Jo-Philipp... rules: fix UCI context in error reporting
2017-04-13 Hans Dedeckerubus: fix interface name and proto lookup
2017-02-22 Jo-Philipp... firewall3: fix handling of UTC times
2017-02-07 Jo-Philipp... iptables: support xtables API > 11
2017-01-13 Jo-Philipp... zones: do not check conntrack state in zone_*_dest_ACCE...
2016-11-29 Jo-Philipp... global: remove automatic notrack rules
2016-11-07 Jo-Philipp... forwards: properly propagate conntrack flag
2016-11-06 Jo-Philipp... iptables: move includes into iptables.c to avoid kernel...
2016-11-06 Ralph Sennhausermusl-compat: avoid kernel header conflicts
2016-11-06 Jo-Philipp... iptables: remove usage of xt_id
2016-11-06 Jo-Philipp... main: make failing ubus connection nonfatal
2016-11-06 Jo-Philipp... iptables: rework extension loader
2016-11-06 Jo-Philipp... iptables: declare _GNU_SOURCE to define RTLD_NEXT
2016-11-06 Ralph Sennhauseriptables: optional loading of static extensions
2016-11-05 Ralph Sennhauseriptables: fix loading standard target
2016-11-04 Ralph Sennhauseriptables: add support for version 1.6.0
2016-11-01 Jo-Philipp... zones: properly handle multiple masq_src / masq_dest...
2016-11-01 Jo-Philipp... iptables: use different approach for managing loadable...
2016-09-18 Florian Fainelliutils.h: Avoid name clashes for setbit/delbit/hasbit
2016-08-08 Jo-Philipp... zones: allow untracked traffic as well
2016-08-08 Jo-Philipp... defaults: disable drop_invalid by default
2016-08-08 Jo-Philipp... zones: restrict default ACCEPT rules to NEW ctstate
2016-07-24 Florian Fainellicmake: Find uci.h
2016-06-07 Jo-Philipp... treewide: replace with
2016-05-02 Alin Năstacload running state after lock is acquired
2016-04-28 Daniel Golleset mark for locally generated traffic in OUTPUT chain
2016-04-27 Alexandru Ardeleandefaults.c: remove toplevel_rule struct
2016-01-29 Jo-Philipp... defaults: emit ctstate INVALID drop rules by default
2016-01-29 Len Whiteiptables: fix inversion flags
2016-01-24 Jo-Philipp... Remove commented code
2016-01-24 Jo-Philipp... Use xt_id match to track own rules
2015-05-26 Jo-Philipp... redirects: only emit REDIRECT rules if dest_ip is unset
2015-05-26 Jo-Philipp... Rework match initialization
2015-05-26 Jo-Philipp... Link libext dynamically
2015-05-22 Jo-Philipp... iptables: initialize multiport match
2015-05-21 Jo-Philipp... ubus: allow proto handlers to override device in announ...
2015-04-18 Jo-Philipp... ubus: print rule name when reporting errors
2015-04-18 Jo-Philipp... ubus: store rule origin as comment
2015-02-26 Hans Dedeckerfirewall3: fix null pointer access when no target is...
2015-01-13 Jo-Philipp... redirects: fix possible null pointer access
2015-01-08 Ulrich Weberfirewall3: fix left shift on 64 bit systems in fw3_bitl...
2015-01-08 Jo-Philipp... redirects: respect src_dip option for reflection rules
2014-09-19 Jo-Philipp... options: allow '*' as value for protocols and families
2014-09-18 Jo-Philipp... utils: rework fw3_bitlen2netmask() IPv6 mask calculation
2014-09-17 Jo-Philipp... redirect: emit -j REDIRECT rules for local port forwards
2014-09-17 Jo-Philipp... utils: fix invalid memory access in fw3_bitlen2netmask()
2014-08-11 Jo-Philipp... utils: ifa_addr may be NULL, skip such entries
2014-08-11 Jo-Philipp... Selectively flush conntrack
2014-07-21 Jo-Philipp... zones: make forward policy destination bound
2014-07-19 Jo-Philipp... options: fix logic flaw when parsing ipaddr/mask notation
2014-07-19 Jo-Philipp... Use netmasks instead of prefix lengths internally
2014-07-10 Jo-Philipp... ubus: handle attribute access after NULL check in parse...
2014-07-10 Jo-Philipp... ubus: fix fw3_ubus_address()
2014-07-10 Jo-Philipp... ubus: fix fw3_ubus_device() to only return a pointer...
2014-07-03 Jo-Philipp... options: fix fw3_parse_network() when destination point...
2014-07-02 Felix Fietkauubus: add support for fetching firewall rules from...
2014-06-30 Felix Fietkauubus: use blobmsg_parse to validate device attributes...
2014-06-30 Felix Fietkaumake fw3_ubus_address take a list_head * argument inste...
2014-06-30 Felix Fietkauuse calloc instead of malloc+memset
2014-06-30 Felix Fietkauubus: use blobmsg_parse to validate data from network...
2014-06-26 Steven BarthAdd fw3 zone call to list devices in a zone
2014-04-14 Steven BarthAdd support for netifd-generated rules
2014-04-14 Steven BarthAdd support for device and direction parameters
2014-04-14 Steven Barthsnat: add support for connlimiting port-range SNAT
2014-04-14 Steven BarthFix building with newer toolchains
2014-04-14 Steven Barthsnat: ICMP can be port-natted as well
2014-04-14 Steven Barthnat: allow ACCEPT-target to explicitely disable NAT
2014-04-11 Jo-Philipp... Reapply SNAT/MASQUERADE rules on firewall reloads
2014-04-06 Jo-Philipp... Initial support for "config nat" rules - this allows...
2014-03-20 Felix Fietkauutils: define _GNU_SOURCE to get clearenv()
2014-02-21 Jo-Philipp... Several ipset bugfixes
2013-12-17 Jo-Philipp... Change set_default() to take value as integer, required...
2013-12-17 Jo-Philipp... Treat option tcp_ecn as integer, not bool
2013-12-17 Jo-Philipp... Properly check strtol() results when paring values...
2013-11-18 Jo-Philipp... Clean up dead code
2013-11-18 Jo-Philipp... Skip redirects with invalid options
2013-11-18 Jo-Philipp... Skip rules with invalid options
2013-11-18 Jo-Philipp... Change fw3_parse_options() to indicate whether all...
2013-11-07 Jo-Philipp... Use a global -m conntrack --ctstate DNAT rule to accept...
2013-10-23 Steven BarthImprove ubus support
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up zone interfa...
2013-10-10 Jo-Philipp... Use fw3_ipt_rule_replace() when setting up reflection
2013-10-10 Jo-Philipp... Allow any protocol for reflection rules