aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* rename 'reverse-type' to 'reply-type'v1.0.0Kaarle Ritvanen2014-03-072-4/+4
|
* awall/json: define telnet serviceLeonardo Arena2014-03-071-0/+1
|
* properly handle stateless ICMP rulesv0.3.5Kaarle Ritvanen2014-02-282-5/+9
| | | | fixes #2714
* constrain 'netbios-ns' service to IPv4 onlyv0.3.4Kaarle Ritvanen2013-09-303-88/+121
|
* create /var/run/awall directory at run-timev0.3.3Kaarle Ritvanen2013-09-112-1/+2
| | | | fixes #2247
* check correctness of 'action' attributev0.3.2Kaarle Ritvanen2013-08-152-6/+12
| | | | ref #2193
* services: correct the name of netbios-ns helperKaarle Ritvanen2013-08-151-1/+1
|
* split into multiple rules when multiport module's port limit is exceededKaarle Ritvanen2013-08-151-8/+30
| | | | fixes #2131
* add service definitionsKaarle Ritvanen2013-08-151-1/+4
|
* ignore ULOG for IPv6 rulesKaarle Ritvanen2013-08-151-4/+8
|
* add missing '-m helper' to rules when requiredKaarle Ritvanen2013-08-151-1/+1
| | | | fixes #2192
* allow defining after directive as stringKaarle Ritvanen2013-08-151-1/+3
|
* fix ratelimiting to work with bursts properlyTimo Teräs2013-08-021-1/+1
|
* limit packet/connection rate per source IPKaarle Ritvanen2013-08-021-1/+1
|
* awall/json: define service tftpv0.3.1Leonardo Arena2013-03-091-1/+2
|
* secure use of connection tracking helpersv0.3.0Kaarle Ritvanen2013-02-192-24/+106
| | | | | enable connection tracking helpers when required, fixes #1540 service-specific RELATED rules
* create /etc/awall/privatev0.2.17Kaarle Ritvanen2013-02-191-0/+1
|
* allow returning nil from module event functionsv0.2.16Kaarle Ritvanen2013-02-191-2/+4
|
* use the same mark for all transparent proxy rulesKaarle Ritvanen2013-02-193-70/+87
|
* ensure that awall's default policies are processed firstKaarle Ritvanen2013-02-193-11/+26
| | | | (and thus allow overriding them)
* fixed transparent proxy supportKaarle Ritvanen2013-02-082-27/+57
| | | | | use -p option in TPROXY rules constrain TPROXY rules to PREROUTING chain
* detect invalid import referencesKaarle Ritvanen2013-02-081-1/+5
|
* use connection marking with transparent proxiesKaarle Ritvanen2013-02-084-73/+64
|
* rewrote code combining zone and address option fragmentsKaarle Ritvanen2013-02-081-15/+19
| | | | now works also for reversed rules
* overhaul of policy file handlingKaarle Ritvanen2013-02-084-151/+160
| | | | | | private policies which can be imported but not directly enabled show more information about policies with awall list -a, fixes #1467 override policy file paths using AWALL_PATH_* environment variables
* packet logging without filteringKaarle Ritvanen2013-02-082-61/+100
|
* corrected processing order of module contentsKaarle Ritvanen2013-02-081-6/+11
|
* copyright and license notice in help textKaarle Ritvanen2013-02-051-1/+6
|
* included GPL2 license textKaarle Ritvanen2013-01-3121-20/+359
|
* statistical packet loggingKaarle Ritvanen2013-01-301-4/+20
| | | | fixes #1587
* deterministic (alphabetical) ordering for tables and chains in ip[6]tables filesKaarle Ritvanen2013-01-301-6/+10
|
* support for all NFLOG and ULOG optionsv0.2.15Kaarle Ritvanen2013-01-302-4/+27
| | | | fixes #1586
* combine limit and log chains when possibleKaarle Ritvanen2013-01-301-22/+24
|
* simplify limit definitionsKaarle Ritvanen2013-01-301-2/+8
| | | | | interval becomes optional (default: 1) simple limits can be specified as integers (use default interval and log settings)
* handle limit counts greater than max packet count for xt_recentKaarle Ritvanen2013-01-301-8/+33
| | | | fixes #1583
* stop using obsolete NOTRACK targetKaarle Ritvanen2013-01-301-1/+1
|
* improved error handlingKaarle Ritvanen2013-01-305-127/+189
| | | | | do not print stack trace in case of user errors, fixes #1453 immediate fallback after failed activation, even with --force, before main process exit, fixes #1584
* make to-port attribute optional in tproxy rulesKaarle Ritvanen2013-01-241-2/+2
|
* transparent proxy modulev0.2.14Kaarle Ritvanen2013-01-241-0/+41
| | | | fixes #1582
* allow manipulation of option fragments in the middle of Rule.trulesKaarle Ritvanen2013-01-241-2/+8
|
* move mark attribute checking to MarkRule.initKaarle Ritvanen2013-01-241-4/+6
|
* class loading function in main moduleKaarle Ritvanen2013-01-242-9/+8
|
* table update & copy functionsKaarle Ritvanen2013-01-242-12/+15
| | | | clean-up of require statements in filter module
* explicit processing order directives for modulesKaarle Ritvanen2013-01-248-85/+106
|
* dependency resolver functionKaarle Ritvanen2013-01-243-36/+71
|
* add missing local keyword into filter.luaKaarle Ritvanen2013-01-211-2/+2
|
* properly support ipset types other than hashesv0.2.13Kaarle Ritvanen2013-01-183-27/+43
| | | | | move ipset config object handling to model.lua fixes #1535
* filter: fix warning about -m state in newer iptablesNatanael Copa2013-01-011-1/+1
| | | | | | | Fixes this warning when using recent iptables: WARNING: The state match is obsolete. Use conntrack instead. ref #1497
* mention policy file path in error message when reading failsKaarle Ritvanen2012-10-301-1/+1
| | | | fixes #1449
* search for optional policies in /etc/awall/optionalv0.2.12Kaarle Ritvanen2012-10-232-3/+6
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-08 09:25:04 +0000