aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* rename 'newchain' to 'uniqueid'Kaarle Ritvanen2014-09-183-12/+10
|
* services: pop3sKaarle Ritvanen2014-09-111-0/+1
|
* services: pop3Kaarle Ritvanen2014-07-021-0/+1
|
* check against definition type mismatch (objects vs. arrays)Kaarle Ritvanen2014-07-011-10/+27
| | | | fixes #3098
* read policy files at onceKaarle Ritvanen2014-06-051-3/+1
|
* diff command: print error when output dump file does not existKaarle Ritvanen2014-05-051-0/+5
|
* move require statementKaarle Ritvanen2014-05-051-2/+1
|
* move saved dump file to /etc/iptablesKaarle Ritvanen2014-05-051-1/+1
|
* do not generate superfluous chain when 'dnat' used without 'dest'v1.2.1Kaarle Ritvanen2014-04-161-2/+3
|
* handle properly multiple explicit related rulesKaarle Ritvanen2014-04-161-5/+7
|
* make 'dnat' and 'out' parameters work togetherKaarle Ritvanen2014-04-161-10/+14
|
* allow 'dnat' parameter without 'dest'Kaarle Ritvanen2014-04-161-3/+0
|
* error message for invalid top-level attributesKaarle Ritvanen2014-04-151-0/+4
|
* use extra rule cache key in generated chain namesv1.2.0Kaarle Ritvanen2014-04-032-2/+5
|
* cache extra rule generator objectsKaarle Ritvanen2014-04-031-17/+27
| | | | fixes chain names in dump output
* apply prior drop/reject rules to accept rules with flow-limitKaarle Ritvanen2014-04-024-18/+37
|
* split Filter class into twoKaarle Ritvanen2014-04-021-36/+46
|
* make DNAT work correctly with conntrack helpersKaarle Ritvanen2014-04-021-14/+19
|
* correct filtering order for stateless flow-limit rulesKaarle Ritvanen2014-04-021-1/+2
|
* require connection tracking with conn-limitKaarle Ritvanen2014-04-021-0/+3
|
* remove unnecessary action and log parameters (default values)Kaarle Ritvanen2014-04-021-1/+1
|
* 'awall diff' commandKaarle Ritvanen2014-03-314-14/+52
|
* deterministic ordering in 'awall dump'Kaarle Ritvanen2014-03-313-13/+21
|
* prefix ipset files in development modeKaarle Ritvanen2014-03-312-3/+3
|
* make variables local in awall-cliKaarle Ritvanen2014-03-311-18/+22
|
* switch to cjson moduleKaarle Ritvanen2014-03-312-2/+2
|
* remove Lua version number from source fileKaarle Ritvanen2014-03-312-8/+12
|
* eliminate deprecated module styleKaarle Ritvanen2014-03-3120-331/+350
|
* super function for accessing methods of parent classKaarle Ritvanen2014-03-318-25/+41
|
* make class tables callableKaarle Ritvanen2014-03-316-18/+17
|
* eliminate explicit use of string moduleKaarle Ritvanen2014-03-319-39/+38
|
* eliminate deprecated varargs styleKaarle Ritvanen2014-03-319-18/+21
|
* default 'after' to relative complement of 'before' in 'imported'v1.1.0Kaarle Ritvanen2014-03-311-4/+12
|
* include/exclude actions in dnat, snat, and no-track rulesKaarle Ritvanen2014-03-314-17/+25
|
* default filter action to acceptKaarle Ritvanen2014-03-311-0/+2
|
* optimize chain selection for related rules (always ACCEPT)Kaarle Ritvanen2014-03-311-8/+6
|
* distinguish local-destined packets before routing decisionKaarle Ritvanen2014-03-312-14/+18
|
* make boolean variables workKaarle Ritvanen2014-03-281-2/+2
|
* rename 'reverse-type' to 'reply-type'v1.0.0Kaarle Ritvanen2014-03-072-4/+4
|
* awall/json: define telnet serviceLeonardo Arena2014-03-071-0/+1
|
* properly handle stateless ICMP rulesv0.3.5Kaarle Ritvanen2014-02-282-5/+9
| | | | fixes #2714
* constrain 'netbios-ns' service to IPv4 onlyv0.3.4Kaarle Ritvanen2013-09-303-88/+121
|
* create /var/run/awall directory at run-timev0.3.3Kaarle Ritvanen2013-09-112-1/+2
| | | | fixes #2247
* check correctness of 'action' attributev0.3.2Kaarle Ritvanen2013-08-152-6/+12
| | | | ref #2193
* services: correct the name of netbios-ns helperKaarle Ritvanen2013-08-151-1/+1
|
* split into multiple rules when multiport module's port limit is exceededKaarle Ritvanen2013-08-151-8/+30
| | | | fixes #2131
* add service definitionsKaarle Ritvanen2013-08-151-1/+4
|
* ignore ULOG for IPv6 rulesKaarle Ritvanen2013-08-151-4/+8
|
* add missing '-m helper' to rules when requiredKaarle Ritvanen2013-08-151-1/+1
| | | | fixes #2192
* allow defining after directive as stringKaarle Ritvanen2013-08-151-1/+3
|