summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
...
* Put configured limits on rules.limits file and load them before loading the r...Ermal2012-06-111-22/+25
* fix: Call to undefined function errorDarren Embry2012-06-071-0/+1
* Get rid of carpdev, it will never beErmal2012-06-071-1/+0
* Always use the uppercase descriptionsmos2012-06-051-1/+2
* Import OpenVPN cisco style radius attributes applying policy to logged in use...Ermal2012-06-051-0/+2
* Fixes #2428. Reference limiters in rules by name to avoid issues. Also put up...Ermal2012-06-011-19/+17
* Add a inet46 filter type on the firewall rules page. I have locked down a few...smos2012-05-311-0/+3
* Up the default for tables to 3000jim-p2012-05-291-4/+3
* Add a knob to tune the maximum number of tables that can be defined, the pf d...jim-p2012-05-291-0/+5
* Switch to a common function to determine anti-lockout ports, and fix a bug th...jim-p2012-05-251-13/+24
* Unset the IP protocol tag while processing this array. This prevents a log me...smos2012-05-231-0/+2
* Make sure that we match multiple characters.smos2012-05-221-1/+1
* First round of CARP vip renaming changessmos2012-05-221-1/+1
* Allow 802.1p tags to be controlled from firewall rules edit screenErmal2012-05-181-2/+6
* implement #2407: create config option for captive portal listening portDarren Embry2012-05-031-2/+4
* Restore protection for the "destination any" case for port forward NAT Reflec...Erik Fonnesbeck2012-04-281-9/+14
* The descr field might not exist, use a uppercase friendly namesmos2012-04-251-0/+2
* go back to scrub rather than "scrub in", the latter breaks MSS clamping for e...Chris Buechler2012-04-231-3/+3
* Allow optionally using the type of NAT reflection implementation used for 1:1...Erik Fonnesbeck2012-04-201-18/+77
* Clean up filter_generate_reflection_nat, remove obsolete checks, and add new ...Erik Fonnesbeck2012-04-201-35/+32
* Use filter_get_direct_networks_list instead of dumping a copy of the routing ...Erik Fonnesbeck2012-04-201-17/+17
* Modify filter_get_direct_networks_list to optionally return an array instead,...Erik Fonnesbeck2012-04-201-12/+34
* Add support for SLAAC on the WAN interface, this is required for Stateless au...smos2012-04-181-0/+1
* Modify get_configured_ip_aliases_list to optionally return the full vip entry...Erik Fonnesbeck2012-04-111-7/+7
* For consistency, generate a masked out subnet IP from the IP alias instead of...Erik Fonnesbeck2012-04-111-1/+4
* Also return IP alias VIP networks in filter_get_direct_networks_list.Erik Fonnesbeck2012-04-111-0/+6
* Remove duplicated functionjim-p2012-04-111-5/+0
* Add alias support to static routes (needs some testing) Ticket #2239jim-p2012-04-111-17/+18
* Restore this piece of logic, otherwise the firewall rules break.smos2012-04-091-1/+11
* Prevent duplicate 6rd or 6to4 interfaces, these conflict and both use the stf...smos2012-04-081-29/+6
* Correct typo in the filter rulesmos2012-04-071-1/+1
* Add automatic firewall rules that allow traffic destined for a downstream del...smos2012-04-071-0/+6
* use existing filter_expand_alias (well, via a wrapper) instead ofDarren Embry2012-04-051-0/+5
* Add a fix so that proper rules for 6to4 and 6rd are created which would other...smos2012-04-051-1/+13
* Change the firewall rules to prevent firewall rule errorssmos2012-04-041-4/+4
* Set the table limit before loading tables. This may help in cases where a rul...jim-p2012-04-041-4/+4
* Add filter code that will automatically add pass rules for delegated IPv6 pre...smos2012-04-031-0/+30
* Fix the comment text for 6to4 proto 41 rules.smos2012-04-031-4/+5
* Add quick to the DHCP6 client and server rulessmos2012-04-021-9/+9
* Open up the DHCPv6 server firewall ruilessmos2012-04-021-2/+4
* Reverse the echo request and echo reply for input and output filterssmos2012-04-021-5/+5
* Adjust the DHCP6 client firewall rulessmos2012-04-021-1/+2
* Adjust the firewall rules for 6rd and 6to4 proto 41 trafficsmos2012-04-011-2/+12
* Move CARP settings from pkg XML to a real PHP pageDarren Embry2012-03-221-3/+1
* Don't put an extra space here or later tests will fail to match this as a pas...jim-p2012-03-141-1/+1
* Add 6rd backend code support, adds rules for proto 41 traffic for 6rd on WAN ...smos2012-02-251-1/+15
* For nat reflection inetd rules, udp/dgram requires wait, instead of nowait/0....jim-p2012-02-221-1/+3
* Add nat rule if the target is in a subnet handled by a static route whose gat...Erik Fonnesbeck2012-02-041-0/+12
* Add static route subnets if their gateway is within the source subnet for the...Erik Fonnesbeck2012-02-041-3/+15
* Use the specific IP for NAT IP in filter_generate_reflection_nat to prevent a...Erik Fonnesbeck2012-02-041-3/+20
OpenPOWER on IntegriCloud