summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Check if the protocol is empty, not just if it's set. Fixes #1323jim-p2011-03-041-1/+1
* Make this lowercase before checking, or people who ended up with TCP or UDP i...jim-p2011-03-031-0/+1
* Pass the -a parameters to pgrep to be certain we search ancestors as well. Th...Ermal2011-03-011-1/+1
* Add Global reply-to disable checkbox, resolves the issue #1137lgcosta2011-02-221-1/+1
* reversal of accidentally deleted fileslgcosta2011-02-221-4/+17
* Add Global reply-to disable checkbox, resolves the issue #1137Luiz Gustavo S. Costa2011-02-211-17/+4
* fix log textChris Buechler2011-02-181-1/+1
* Add automatic rules to pass DHCP failover traffic if a failover peer is defin...jim-p2011-02-161-0/+9
* Add snort2c table back in for now.jim-p2011-02-151-0/+3
* Adding support for snortsam from Robert ZScott Ullrich2011-02-141-5/+6
* Add alias support for source and destination ports on outbound NAT.Erik Fonnesbeck2011-02-131-4/+12
* Allow action match to be passed down to pf.Ermal2011-02-111-1/+1
* Add backend support for aliases on source and destination address of outbound...Erik Fonnesbeck2011-02-041-4/+7
* These are pf type aliases.Ermal2011-01-261-1/+1
* Resolves #1216. Do not create nat entries on ovpn interfaces.Ermal2011-01-241-0/+2
* Only copy 52 chars of a user descr to the pf rule. When added to the "USER_RU...jim-p2011-01-121-1/+1
* Allow entering an arbitrary subnet for outbound NAT translations.jim-p2010-12-291-2/+3
* Add address pool support to outbound NAT. Allow specifying a subnet for outbo...jim-p2010-12-291-10/+17
* Allow any port to go out for CP. This should unbreak traffic of CP rdr!Ermal2010-12-281-2/+2
* nuke trailing carriage returnsScott Ullrich2010-12-221-1/+1
* Move the CP rule below webConfigurator abusal rule to allow adding the same p...Ermal2010-12-201-36/+37
* Well now that CP has the proper conditions and fastforwarding is disabled by ...Ermal2010-12-201-1/+1
* Remove config lock for filter reload, since no config file reads or writes ar...Erik Fonnesbeck2010-12-141-7/+1
* No functional change just simple cleanup.Ermal2010-12-141-3/+1
* Make sure filter_configure() is not called during bootup since its harmful.Ermal2010-12-061-1/+9
* Silence this.Ermal2010-12-061-1/+1
* Restore locking to filter reload, using an exclusive filter lock around the f...Erik Fonnesbeck2010-12-041-3/+8
* Actually make the other code correct.Ermal2010-12-031-4/+4
* Ooops actually return after disabling flowtables.Ermal2010-12-031-1/+3
* Actually do something on flowtables. Seems later image kernels have this incl...Ermal2010-12-031-13/+7
* If the protocol is not set in the config, it defaults to https, so assume por...jim-p2010-12-011-1/+1
* Use new style filterdns argument passing on cmd and remove hack for killall n...Ermal2010-12-011-4/+2
* Ensure inetd.conf existsScott Ullrich2010-11-301-5/+6
* Temporarily killall -9 filterdns until the signal issue can be resolved. Will...Scott Ullrich2010-11-301-0/+2
* Make sure a port is always set. Remove trailing newlineScott Ullrich2010-11-301-3/+5
* Set portScott Ullrich2010-11-301-4/+4
* Adding webConfiguratorlockout table and code.Scott Ullrich2010-11-301-0/+12
* Ticket #911. Provide an option under system->advanced->misc to disable killin...Ermal2010-11-301-1/+4
* Nuke trailing c/rScott Ullrich2010-11-241-1/+1
* Add option to control automatic creation of NAT rules which assist forwarding...Erik Fonnesbeck2010-11-221-0/+5
* In filter_generate_reflection_nat, generate a rule with the actual subnet ins...Erik Fonnesbeck2010-11-221-15/+21
* Remove these anchors they just provide overhead and are not really used much ...Ermal2010-11-151-27/+0
* Remove gre helping rules they are not anymore needed.Ermal2010-11-151-17/+0
* Rework handling of ports for reflection on port forwards to work properly wit...Erik Fonnesbeck2010-11-141-59/+96
* Add whitespace to avoid breaking the resulting rule.Ermal2010-11-121-1/+1
* Whitespace fixes.Ermal2010-11-121-11/+10
* Make sure there is a direction specified otherwise errors might occur.Ermal2010-11-121-1/+1
* Initialize rule keeping array to avoid possible caching effects on php.Ermal2010-11-121-0/+2
* Take into account if we have redirection active to allow even port 443.Ermal2010-11-101-0/+2
* Make the antilockout rule match the webgui and ssh(if enabled) rather than an...Ermal2010-11-101-3/+12
OpenPOWER on IntegriCloud