summaryrefslogtreecommitdiff
path: root/main.c
Commit message (Expand)AuthorAgeFilesLines
* Revert "firewall3: support table load on access on Linux 5.15+"HEADmasterRui Salvaterra2022-02-211-11/+0
* firewall3: remove unnecessary fw3_has_tableWenli Looi2022-02-211-15/+0
* firewall3: support table load on access on Linux 5.15+Ansuel Smith2022-01-081-0/+11
* firewall3: ipset: Handle reload_set properlyKristian Evensen2019-08-191-0/+1
* firewall3: Improve ipset supportKristian Evensen2019-08-161-5/+11
* helpers: implement explicit CT helper assignment supportJo-Philipp Wich2018-02-201-0/+5
* firewall3: add UBUS support for include scriptsPierre Lebleu2017-05-091-1/+1
* firewall3: add UBUS support for ipset sectionsPierre Lebleu2017-05-091-1/+1
* firewall3: add UBUS support for forwarding sectionsPierre Lebleu2017-05-091-1/+1
* firewall3: add UBUS support for redirect sectionsPierre Lebleu2017-05-091-1/+1
* main: make failing ubus connection nonfatalJo-Philipp Wich2016-11-061-1/+1
* treewide: replace jow@openwrt.org with jo@mein.ioJo-Philipp Wich2016-06-071-1/+1
* load running state after lock is acquiredAlin Năstac2016-05-021-2/+11
* Use xt_id match to track own rulesJo-Philipp Wich2016-01-241-0/+37
* Selectively flush conntrackJo-Philipp Wich2014-08-111-9/+5
* use calloc instead of malloc+memsetFelix Fietkau2014-06-301-3/+1
* Add fw3 zone call to list devices in a zoneSteven Barth2014-06-261-0/+34
* Add support for netifd-generated rulesSteven Barth2014-04-141-2/+6
* Fix building with newer toolchainsSteven Barth2014-04-141-2/+2
* Reapply SNAT/MASQUERADE rules on firewall reloadsJo-Philipp Wich2014-04-111-0/+1
* Initial support for "config nat" rules - this allows configuring zone-indepen...Jo-Philipp Wich2014-04-061-1/+7
* Decouple handle destroying from committing, add fw3_ipt_close() insteadJo-Philipp Wich2013-06-031-0/+5
* Make IPv6 support optionalJo-Philipp Wich2013-05-271-2/+11
* Only perform selective reload if firewall was already running, else do a norm...Jo-Philipp Wich2013-05-221-20/+16
* Wait for ipsets to appear before continuingJo-Philipp Wich2013-05-171-14/+2
* Restore iptables-save include functionalityJo-Philipp Wich2013-05-171-2/+3
* Only process selected family for printJo-Philipp Wich2013-05-171-15/+16
* Add debug prints for policy setting, don't commit ruleset in print modeJo-Philipp Wich2013-05-171-1/+3
* Drop iptables-restore and create rules through libiptc and libxtablesJo-Philipp Wich2013-05-171-52/+30
* Use libiptc to clear current rulesetJo-Philipp Wich2013-05-131-28/+19
* Make reload atomicJo-Philipp Wich2013-05-081-29/+121
* Don't track family of ipsetsJo-Philipp Wich2013-04-301-11/+10
* Split runtime and config states, store runtime state in UCI formatJo-Philipp Wich2013-04-301-88/+113
* Consolidate and unify argument order for functionsJo-Philipp Wich2013-03-141-14/+14
* Only perform locking for start, stop, restart, reload and flush operations, t...Jo-Philipp Wich2013-03-141-14/+31
* Implement reload option for includes to decide whether includes should get re...Jo-Philipp Wich2013-03-141-5/+2
* Emit hotplug calls when flushing / creating zone chainsJo-Philipp Wich2013-03-131-3/+9
* Rework zone flush logicJo-Philipp Wich2013-03-111-18/+11
* Cosmetic output changesJo-Philipp Wich2013-03-101-8/+5
* Only run includes and set sysctls if either v4 or v6 firewall was actually st...Jo-Philipp Wich2013-03-101-6/+9
* Separate running from current state flags in ipset handling, remove ipsets pe...Jo-Philipp Wich2013-03-101-6/+8
* Get rid of redundant fw3_defaults object, instead add a running_flags bitfiel...Jo-Philipp Wich2013-03-101-1/+1
* add support for per-zone user chainsJo-Philipp Wich2013-03-081-2/+2
* clear conntrack table on flushJo-Philipp Wich2013-02-271-0/+10
* add debug flag to monitor fw3_pr() calls, set policies to drop during reloadJo-Philipp Wich2013-02-271-7/+12
* add support for setting sysctls, remove tcp_westwood option, its not present ...Jo-Philipp Wich2013-02-221-4/+8
* run/load includes on startJo-Philipp Wich2013-02-221-3/+9
* add reload command to selectively rebuild rules (to be invoked from hotplug h...Jo-Philipp Wich2013-02-221-4/+12
* add support for includesJo-Philipp Wich2013-02-221-0/+5
* rework runtime state trackingJo-Philipp Wich2013-02-211-35/+22