hak5/wifipineapple-openwrt
1
0
Fork 0
mirror of https://github.com/hak5/wifipineapple-openwrt.git synced 2025-10-29 16:57:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
20,628 Commits 1 Branch 0 Tags
e8ff7031dd67a1c55d031dbfffae39856ca408dc
Commit Graph

9 Commits

Author SHA1 Message Date
Jo-Philipp Wich
5baf4fe290 [package] fireall: 
- support negations for src_ip, dest_ip, src_dip options in rules and redirects
	- add NOTRACK target to rule sections, allows to define fine grained notrack rules


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23141 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-28 10:42:56 +00:00
Jo-Philipp Wich
6be00316a1 [package] firewall: 
- simplify masquerade rule setup
	- remove various subshell invocations
	- speedup fw() by not relying on xargs and pipes
	- rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@23024 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-11 20:04:34 +00:00
Jo-Philipp Wich
ca7164cb5a [package] firewall: 
- fix possible endless loop when the family option is used for forwardings
	- only generate forwarding rules in SNAT redirect sections if src_dip is specified


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22938 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-09-05 20:17:23 +00:00
Jo-Philipp Wich
2ef5ba1813 [package] firewall: 
- fix processing of rules with an ip family option
	- append interface rules at the end of internal zone chains, simplifies injecting user or addon rules
	- support simple file logging (option log + option log_limit per zone)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22847 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-08-31 01:54:08 +00:00
Jo-Philipp Wich
df297315f7 [package] firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21642 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-31 01:34:47 +00:00
Jo-Philipp Wich
e903e01368 [package] firewall: 
- fix ip6tables rules when icmp_type option is set
	- add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21508 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 21:35:23 +00:00
Jo-Philipp Wich
390b2e6dca [package] firewall: implement disable_ipv6 uci option 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21503 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-19 01:55:46 +00:00
Jo-Philipp Wich
7eaaebd00a [package] firewall: properly unset position for delete command, fixes rule removal in ifdown 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21378 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-05 15:50:21 +00:00
Jo-Philipp Wich
64175a0ded [package] firewall: 
- replace uci firewall with a modular dual stack implementation	developed by Malte S. Stretz
	- bump version to 2


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@21286 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2010-05-01 18:22:01 +00:00