summaryrefslogtreecommitdiffstats
path: root/usr/local/www/firewall_rules_edit.php
Commit message (Collapse)AuthorAgeFilesLines
* Ticket #14. Implement an advanced option to allow disabling autogenerated ↵Ermal Luçi2010-02-101-0/+9
| | | | reply-to. Submitted-by: Dan Swartzendruber
* Ticket #136.Ermal Luçi2010-01-261-8/+16
| | | | | | | | Fix associated nat rules. Now both the filter rules and the nat ones contain a associated-rule-id tag which helps link the items together. The API to use for this is in itemid.inc. All the issues should be solved now.
* add PPP support to dynamic gatewaysChris Buechler2009-12-211-0/+8
|
* shift this around a little, put the dynamic gateways beneath the static ↵Chris Buechler2009-12-211-13/+14
| | | | ones, not beneath the gateway groups. Also show the dynamic gateways correctly ($ifent not $if)
* clean up textChris Buechler2009-12-211-4/+4
|
* fix reject rules to the same as in 1_2. return is valid on all rulesChris Buechler2009-12-181-1/+1
|
* fixup textChris Buechler2009-12-181-6/+5
|
* fix textChris Buechler2009-12-131-1/+1
|
* Add missing PF 'max' tracking option , and clarify message for 'max-src-nodes'pierrepomes2009-12-131-2/+5
|
* Add patch from lietu (Janne Enberg). Ticket #136pierrepomes2009-12-121-11/+35
| | | | | | | | | | | | | | | | | | | | | 1) Multiple NAT rules can be assigned the same filter rule -> Fixed, added assigned-nat-rule-id to filter rules to keep track of the assignment 2) when removing the link (i.e. switching to "pass" or "none", the linked rule isn't deleted (should it be? probably yes) -> Fixed, when a NAT rule's association is removed, the filter rule is deleted. Added a "create new associated filter rule" option to the dropdown if there is none selected. 3) The destination IP and port of linked rules can be edited in firewall_rules_edit.php and shouldn't be. Source should be editable but not destination, since that should strictly be tied to the NAT rule. -> Fixed, you cannot edit the destination for the filter rules that are linked to NAT rules, this has been disabled both by JavaScript and PHP. 4) If you edit the source in a linked firewall rule, it gets overwritten when you edit the NAT rule. The NAT rule should never touch the firewall rule source after the rule exists. -> Fixed, previously the old rule was deleted and a new one created, now it only updates the old rule and doesn't touch the source. Also added crosslinking from the NAT rule to the filter rule and back, so you can jump to edit the filter rule from the NAT rule and vice-versa.
* Add listtopic and extra save button.sullrich2009-12-061-8/+26
|
* Ticket #146 Fix typos ansd copy/pasto errors.Ermal Luçi2009-12-041-11/+11
|
* Oops, unbreak tdsullrich2009-12-031-1/+2
|
* Fixup Source OS boxsullrich2009-12-031-2/+2
|
* Minor formatting + hide Source OS behind Advanced boxsullrich2009-12-031-22/+29
|
* Style / formatting changessullrich2009-12-031-94/+81
|
* Show advanced option instead of Show state for every entrysullrich2009-12-031-9/+9
|
* Hide layer7 and in/out behind advanced buttonsullrich2009-12-031-2/+11
|
* Make xmlrpc sync, schedule, gateway, in/out, ackqueue and layer7 all ↵sullrich2009-12-031-106/+129
| | | | advanced type buttons simplifying the firewall rule edit form for 99% of the cases
* Resolves #146 Add propper validation on alias usage. Allow port type aliases ↵Ermal Luçi2009-12-031-7/+7
| | | | only on port side and other aliases in ip specifications and similar. Introduce a new function is_portoralias to ressemble the is_ipaddroralias to check for the cases.
* Ticket #146. Fix the autocompletion of ports aliases only for the ports and ↵Ermal Luçi2009-11-301-5/+12
| | | | host/network aliases for the src/dst. Checking if a valid alias is entered end if it is a correct one for this box seems like to much overhead and work for this.
* Seperate diffserv box into a <select> dropdown. Hide item behind advanced ↵sullrich2009-11-281-8/+16
| | | | button. Move down one section near other advanced items. Resolves #60
* Diffserv code point is not a reqired fieldsullrich2009-11-281-1/+1
|
* Include filter.inc and shaper.incScott Ullrich2009-11-211-1/+2
|
* Add support for 'max-src-conn' PF feature, to limit the maximum number of ↵pierrepomes2009-11-161-0/+3
| | | | established connections per host
* Fixes Issue #142Ermal Luçi2009-11-091-0/+6
|
* Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to ↵Scott Ullrich2009-09-141-0/+3
| | | | include 2009 on files that I have asserted (C) on
* Pretty sure ruleid should be a hidden field.Scott Ullrich2009-08-251-6/+2
|
* Merge branch 'master' of ↵Scott Ullrich2009-08-241-0/+12
|\ | | | | | | git://rcs.pfsense.org/pfsense/automatically-managing-firewall-rules-with-nat-rules into review/master
| * Added support for automatically managing firewall rules with NAT rules.unknown2009-08-141-0/+12
| |
* | Add avanced item indicator which will show when hovering the mouse over the ↵Scott Ullrich2009-08-201-3/+4
|/ | | | icon which advanced item has been enabled
* Fix typo its tagged and not tag.Ermal Luçi2009-08-111-1/+1
| | | | | Reported-by: mileswu Patch-extracted-from: https://rcs.pfsense.org/projects/pfsense/repos/mainline/merge_requests/30
* Prevent users to misconfigure layer7 rules for now.(Ther are supported only ↵Ermal Luçi2009-07-091-0/+2
| | | | on pass rules)
* Fix some typos.Ermal Luçi2009-07-071-1/+2
|
* fix some other shortcuts provided by the GUI.Ermal Luçi2009-07-071-11/+7
| | | | This commit fixes even Bug #27
* Add l2tpErmal Luçi2009-07-071-0/+3
|
* Fix interface list usageErmal Luçi2009-07-071-1/+1
| | | | WARN: Please ask before introducing old code on what have changed!
* * Reorganize the 'apply' button infrustructure in the GUI.Ermal Luçi2009-06-301-1/+1
| | | | | | - Present three new functions is/mark/clear_subsystem_dirty('name_of_subsystem'). This makes easier to create such things without needing to introduce new globals. - Convert all pages to the new infrustructure - This improves a lot the control on this notification
* Fix the issue reported on ↵Ermal Luçi2009-05-281-9/+0
| | | | http://forum.pfsense.org/index.php/topic,16559.0.html. Basically a missing convertion from 'source'/'destination' to target.
* Show interface groups first in the interface dropdown.Ermal Luçi2009-04-261-6/+6
|
* * Convert schedules to pf(4).Ermal Luçi2009-04-261-1/+0
| | | | | | | This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc... * Whitespace cleaning on filter.inc * Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_. * Small bugfixes here and there.
* Read shaper config only once. This should speedup on large shaper config the ↵Ermal Luçi2009-03-301-6/+7
| | | | loading of the page.
* * Introduce interface groups. For now they are availble only on ↵Ermal Luçi2009-03-161-0/+6
| | | | | | Firewall:Rules section maybe it would be usable to have tham on nat too. * Some fixes and cleanup.
* Revert "Merge IPv6 changes"Chris Buechler2009-02-151-109/+14
| | | | This reverts commit f193cf92b2c925a2f3f71a713d766efd1e4d81e0.
* Remove the 'L2TP clients' option on firewall src/dst address cause it does ↵Ermal Luçi2009-02-011-6/+0
| | | | not make sense without a subnet.
* More L2TP fixesErmal Luçi2009-02-011-0/+10
|
* Add allow-opts filter rule option which is useful in multicast rule options.Ermal Luci2009-01-251-0/+9
|
* Merge IPv6 changesSimon Cornelius P. Umacob2009-01-201-14/+109
|
* Frontend part for the layer7 with little cleaning up by me.Ermal Luçi2008-12-241-0/+34
| | | | Submitted-by: Helder Pereira
* Back out check we can handle this now.Ermal Luçi2008-11-111-3/+0
| | | | Discussed-with: cmb@
OpenPOWER on IntegriCloud