summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Catch upScott Ullrich2011-02-121-1/+1
|\
| * Allow action match to be passed down to pf.Ermal2011-02-111-1/+1
* | Fix typo in the subnetmask for the unblockable icmp types. This makes the all...Seth Mos2011-02-091-1/+1
* | Remove the icmp6 ping requests from the mandatory allow rulESeth Mos2011-02-071-1/+1
* | Merge remote branch 'upstream/master'Seth Mos2011-02-061-4/+7
|\ \ | |/
| * Add backend support for aliases on source and destination address of outbound...Erik Fonnesbeck2011-02-041-4/+7
* | Merge remote branch 'upstream/master'Seth Mos2011-02-011-1/+1
|\ \ | |/
| * These are pf type aliases.Ermal2011-01-261-1/+1
* | Further improvements on the ICMP6 allow rulesSeth Mos2011-02-011-0/+1
* | Activate the firewall rules for DHCPDv6.Seth Mos2011-01-281-5/+3
* | adjust the firewall rules to allow for proper ICMP6 allow so that normal pmtu...Seth Mos2011-01-281-5/+16
* | Merge remote branch 'upstream/master'Seth Mos2011-01-261-0/+2
|\ \ | |/
| * Resolves #1216. Do not create nat entries on ovpn interfaces.Ermal2011-01-241-0/+2
* | Move the ICMP rules further to the top in order for normal neighbour contact ...Seth Mos2011-01-261-5/+5
* | Do not block fec0::/10 as this includes fe80:: local link addresses which bre...Seth Mos2011-01-261-1/+0
* | reference the IPv6 bogons table as wellSeth Mos2011-01-261-1/+4
* | Add the IPv6 fc00::/7 and fEc0::/10 to the Private block on WANSeth Mos2011-01-261-4/+6
* | Setup packet spoofing rules for inet and inet6Seth Mos2011-01-261-2/+4
* | Adjust firewall rule to reflect inet or inet6Seth Mos2011-01-261-1/+1
* | Adjust the loopback firewall rules for inet and inet6 and give them unique la...Seth Mos2011-01-261-4/+4
* | Add filter code for adding the binat rules required for Network Prefix Transl...Seth Mos2011-01-211-0/+29
* | Merge remote branch 'upstream/master'Seth Mos2011-01-181-13/+21
|\ \ | |/
| * Only copy 52 chars of a user descr to the pf rule. When added to the "USER_RU...jim-p2011-01-121-1/+1
| * Allow entering an arbitrary subnet for outbound NAT translations.jim-p2010-12-291-2/+3
| * Add address pool support to outbound NAT. Allow specifying a subnet for outbo...jim-p2010-12-291-10/+17
| * Allow any port to go out for CP. This should unbreak traffic of CP rdr!Ermal2010-12-281-2/+2
| * nuke trailing carriage returnsScott Ullrich2010-12-221-1/+1
* | Merge remote branch 'upstream/master'Seth Mos2010-12-201-124/+111
|\ \ | |/
| * Move the CP rule below webConfigurator abusal rule to allow adding the same p...Ermal2010-12-201-36/+37
| * Well now that CP has the proper conditions and fastforwarding is disabled by ...Ermal2010-12-201-1/+1
| * Remove config lock for filter reload, since no config file reads or writes ar...Erik Fonnesbeck2010-12-141-7/+1
| * No functional change just simple cleanup.Ermal2010-12-141-3/+1
| * Make sure filter_configure() is not called during bootup since its harmful.Ermal2010-12-061-1/+9
| * Silence this.Ermal2010-12-061-1/+1
| * Restore locking to filter reload, using an exclusive filter lock around the f...Erik Fonnesbeck2010-12-041-3/+8
| * Actually make the other code correct.Ermal2010-12-031-4/+4
| * Ooops actually return after disabling flowtables.Ermal2010-12-031-1/+3
| * Actually do something on flowtables. Seems later image kernels have this incl...Ermal2010-12-031-13/+7
| * If the protocol is not set in the config, it defaults to https, so assume por...jim-p2010-12-011-1/+1
| * Use new style filterdns argument passing on cmd and remove hack for killall n...Ermal2010-12-011-4/+2
| * Ensure inetd.conf existsScott Ullrich2010-11-301-5/+6
| * Temporarily killall -9 filterdns until the signal issue can be resolved. Will...Scott Ullrich2010-11-301-0/+2
| * Make sure a port is always set. Remove trailing newlineScott Ullrich2010-11-301-3/+5
| * Set portScott Ullrich2010-11-301-4/+4
| * Adding webConfiguratorlockout table and code.Scott Ullrich2010-11-301-0/+12
| * Ticket #911. Provide an option under system->advanced->misc to disable killin...Ermal2010-11-301-1/+4
| * Nuke trailing c/rScott Ullrich2010-11-241-1/+1
| * Add option to control automatic creation of NAT rules which assist forwarding...Erik Fonnesbeck2010-11-221-0/+5
| * In filter_generate_reflection_nat, generate a rule with the actual subnet ins...Erik Fonnesbeck2010-11-221-15/+21
| * Remove these anchors they just provide overhead and are not really used much ...Ermal2010-11-151-27/+0
OpenPOWER on IntegriCloud