summaryrefslogtreecommitdiff
path: root/rules.c
Commit message (Expand)AuthorAgeFilesLines
* rules: fix device and chain usage for DSCP/MARK targetsTony Ambardar2021-03-231-25/+43
* treewide: replace unsafe string functionsJo-Philipp Wich2020-06-031-3/+3
* rules: fix typoYousong Zhou2020-03-031-1/+1
* Add support for DSCP matches and targetJo-Philipp Wich2018-08-031-7/+29
* helpers: fix the set_helper in the rule structurePierre Lebleu2018-05-141-1/+1
* helpers: make the proto field as a list rather than one optionPierre Lebleu2018-05-141-2/+2
* helpers: implement explicit CT helper assignment supportJo-Philipp Wich2018-02-201-4/+90
* firewall3: add fw3_attr_parse_name_type() functionPierre Lebleu2017-05-091-9/+7
* firewall3: replace warn_rule() by warn_section()Pierre Lebleu2017-05-091-23/+14
* rules: fix UCI context in error reportingJo-Philipp Wich2017-04-271-108/+114
* utils.h: Avoid name clashes for setbit/delbit/hasbitFlorian Fainelli2016-09-181-4/+4
* treewide: replace jow@openwrt.org with jo@mein.ioJo-Philipp Wich2016-06-071-1/+1
* set mark for locally generated traffic in OUTPUT chainDaniel Golle2016-04-281-1/+1
* Use xt_id match to track own rulesJo-Philipp Wich2016-01-241-5/+5
* ubus: print rule name when reporting errorsJo-Philipp Wich2015-04-181-2/+5
* Add support for netifd-generated rulesSteven Barth2014-04-141-23/+53
* Add support for device and direction parametersSteven Barth2014-04-141-0/+4
* Skip rules with invalid optionsJo-Philipp Wich2013-11-181-1/+6
* Use "-j CT --notrack" instead of deprecated "-j NOTRACK"Jo-Philipp Wich2013-08-141-1/+2
* Properly handle reject target in rules with specific destinationJo-Philipp Wich2013-06-131-2/+4
* For ingress rules, only jump into zone_name_src_ACTION chains if the target i...Jo-Philipp Wich2013-06-061-2/+8
* Use zone_name_src_ACTION chain for input rules with non-wildcard sourceJo-Philipp Wich2013-06-051-4/+12
* Extend ipset option syntax to support specifying directions inplace.Jo-Philipp Wich2013-06-051-10/+10
* Only emit different ip family warnings if the ip wasn't automatically resolvedJo-Philipp Wich2013-05-261-1/+3
* Fix output rules with "option dest *"Jo-Philipp Wich2013-05-251-1/+7
* Allow devices for src_ip, src_dip and dest_ip optionsJo-Philipp Wich2013-05-251-2/+2
* Also add comments for unnamed rulesJo-Philipp Wich2013-05-171-3/+12
* Drop iptables-restore and create rules through libiptc and libxtablesJo-Philipp Wich2013-05-171-56/+60
* Simplify ipset external checks and optionally initialize ispet name from exte...Jo-Philipp Wich2013-05-021-2/+2
* Check whether ipset exists before referencing it in rules or redirectsJo-Philipp Wich2013-05-021-0/+8
* Remove unused "running" argument form fw3_lookup_ipset()Jo-Philipp Wich2013-04-301-1/+1
* Remove unused "running" argument form fw3_lookup_zone()Jo-Philipp Wich2013-04-301-2/+2
* Add support for fwmark matches and targetsJo-Philipp Wich2013-04-091-3/+45
* Increase compatibility to old firewall by initializing protocol of rules and ...Jo-Philipp Wich2013-03-221-0/+6
* Consolidate and unify argument order for functionsJo-Philipp Wich2013-03-141-9/+10
* Unify fw3_default and fw3_target enumsJo-Philipp Wich2013-03-131-12/+12
* Rework zone flush logicJo-Philipp Wich2013-03-111-2/+6
* Remove src_flags and running_src_flags from fw3_zone struct, rename dst_flags...Jo-Philipp Wich2013-03-101-1/+1
* introduce support for enabled option in zones, forwards, rules, redirects, ip...Jo-Philipp Wich2013-03-021-0/+10
* add time match supportJo-Philipp Wich2013-02-211-16/+25
* unify object freeingJo-Philipp Wich2013-02-211-19/+4
* rework runtime state trackingJo-Philipp Wich2013-02-211-3/+3
* track used family for ipsetsJo-Philipp Wich2013-02-201-11/+29
* rename flag fields in structuresJo-Philipp Wich2013-02-191-1/+1
* properly deal with only v4 or only v6 start/stop/restartJo-Philipp Wich2013-02-191-1/+1
* selectively delete chains in filter and nat tablesJo-Philipp Wich2013-02-181-1/+1
* initial commitJo-Philipp Wich2013-02-171-0/+332
View Lorry Controller Status