summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Use only sshguard table for blocking ssh/gui attacks. Issue #9223jim-p2019-03-121-2/+1
* Fix NPt validation to allow single addresses. Fixes #9163jim-p2018-12-041-1/+2
* Fix #9121: Initialize arrays to prevent PHP 7 errorsjim-p2018-11-211-2/+2
* ssh settings alignment. Fixes #8974jim-p2018-09-281-1/+1
* Fix #7694: Replace sshlockout_pf by sshguardRenato Botelho2018-08-301-4/+4
* Fix some integer assumptions with calculate_ipv6_delegation_length()jim-p2018-08-271-1/+1
* Add the GUI support to set the VLAN Priority for the DHCP requests.Luiz Souza2018-08-211-22/+10
* Add default ICMPv6 rule for unspecified src per RFC4861. Fixes #8791jim-p2018-08-161-0/+1
* Merge pull request #3934 from PiBa-NL/20180406-outboundnat-ipv6-mixedaddressesRenato Botelho2018-08-101-39/+96
|\
| * include IPv6 in $tonathosts so nat rules can be expanded properly when IPv6 r...PiBa-NL2018-08-081-2/+2
| * outbound-nat, make sure rules generated wont have required missing options th...PiBa-NL2018-08-011-2/+14
| * outbound-nat, make sure rules generated with outbound-nat rules are valid als...PiBa-NL2018-08-011-37/+82
* | Use packagelock flag for checkingRenato Botelho2018-08-071-1/+1
|/
* Fix a potential PHP error from a pf filter reload error.jim-p2018-07-301-1/+1
* Add a mechanism to blacklist interfaces from filtering. Fixes #8685jim-p2018-07-251-0/+24
* Fix PHP7 error due to lack of int casting for gateway weight when making rules.jim-p2018-07-201-3/+3
* Fixed #8654Steve Beaver2018-07-161-1/+1
* Fixed #8640 PHP7 initialize variable as array instead of stringStephen Jones2018-07-131-1/+1
* Do not generate a NAT reflection rule with an interface source if that interf...jim-p2018-06-271-2/+10
* Validate NPt IPv6 address input and do not use invalid stored settings in rul...jim-p2018-06-141-0/+6
* Do not put "route-to" on rules for traffic outbound from the firewall itself ...jim-p2018-06-071-5/+7
* Fix IPsec VTI gateway generation to match interface changes. Fixes #8544jim-p2018-06-061-4/+0
* Please welcome routed IPsec using if_ipsec VTI interfaces. Implements #8544jim-p2018-05-301-1/+22
* Do not allow an empty address/mask combination to be used in a VIP rule for o...jim-p2018-05-161-0/+6
* Gateways, allow for configuring a gatewaygroup as the default gateway.PiBa-NL2018-04-231-2/+2
* Reword bogon block size error text. Ticket #8417jim-p2018-04-101-1/+1
* Merge pull request #3924 from PiBa-NL/20180331-filter-ipv6-vipsjim-p2018-04-051-3/+2
|\
| * filter vip usage, ipv6 vips cause invalid rules because a empty item gets add...PiBa-NL2018-03-311-3/+2
* | Fix #8417Renato Botelho2018-04-021-4/+12
* | Remove Whitespacerobjarsen2018-03-301-53/+53
|/
* fixed code styleBenjamin Schweizer2018-03-171-2/+6
* avoid firwall rules for proxyarp addressesBenjamin Schweizer2018-03-161-0/+2
* Add sanity check to rule passing out from host to ensure it does not have a b...jim-p2018-03-081-2/+2
* Fix #8290Renato Botelho2018-02-021-1/+1
* Merge pull request #3862 from marjohn56/pfsenseLuiz Souza2018-01-221-3/+7
|\
| * Set VLAN Priority on dhcp6c packetsmarjohn562017-11-021-3/+7
* | Merge pull request #3900 from PiBa-NL/20180111-pf-busySteve Beaver2018-01-151-0/+1
|\ \
| * | pf, device-busy, add another item DIOCADDRULE to the list of results to retryPiBa-NL2018-01-111-0/+1
* | | Update the Copyright notice for pfSense.Luiz Souza2018-01-051-1/+1
|/ /
* | Merge pull request #3738 from PiBa-NL/20170521-oneonone-nat-fix-empty-ipSteve Beaver2017-11-291-4/+4
|\ \
| * | NAT-1on1, don't write pf rules with wrong or missing from/to informationPiBa-NL2017-05-211-4/+4
* | | pf, retry pfctl -f rule loading when pf is 'busy', don't try and fail to forc...PiBa-NL2017-11-011-5/+23
| |/ |/|
* | Fix VLAN Priority set pf syntax. Fixes #7744jim-p2017-08-011-3/+15
* | nat, portforwards should not make up a new destination information when a con...PiBa-NL2017-07-121-4/+0
* | Removed MSS clamping exclusionsRobbert Rijkse2017-07-061-4/+1
|/
* Add underscores to is_port* function namesPhil Davis2017-03-271-3/+3
* Redmine #7428 Hanlde empty port aliasPhil Davis2017-03-261-10/+28
* Refactor filter_generate_nested_aliasPhil Davis2017-03-261-9/+18
* Provide functions for checking port range alias combinationsPhil Davis2017-03-261-1/+1
* Fix handling of port ranges in this validation test. Ticket #7421jim-p2017-03-241-2/+6
OpenPOWER on IntegriCloud