summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2025-10-03build: require CMake >= 3.10 due to dropped legacy supportmasterHauke Mehrtens
2024-10-18defaults.c: fix ipv6 flow offloadingFelix Fietkau
2023-06-10iptables: fix regression with unintended free in need_protomatchChristian Marangi
2023-05-29iptables: free xtables_match if found in need_protomatchChristian Marangi
2022-02-21Revert "firewall3: support table load on access on Linux 5.15+"Rui Salvaterra
2022-02-21firewall3: remove unnecessary fw3_has_tableWenli Looi
2022-01-09options.c: add DSCP code LE Least EffortKevin Darbyshire-Bryant
2022-01-08firewall3: remove redundant syn checkKevin Darbyshire-Bryant
2022-01-08firewall3: fix locking issueFlorian Eckert
2022-01-08firewall3: support table load on access on Linux 5.15+Ansuel Smith
2021-08-14ipsets: permit default timeout of 0Kevin Darbyshire-Bryant
2021-03-23firewall3: clean up the flow table detection logicRui Salvaterra
2021-03-23firewall3: create a common helper to find strings in filesRui Salvaterra
2021-03-23rules: fix device and chain usage for DSCP/MARK targetsTony Ambardar
2021-03-23zone: avoid duplicates in devices listTony Ambardar
2021-02-28firewall3: remove last remaining sprintf()Philip Prindeville
2020-12-06iptables: fix serializing multiple weekdaysJo-Philipp Wich
2020-12-06firewall3: fix duplicate defaults section detectionRui Salvaterra
2020-12-06ipsets: allow blank/commented lines with loadfileDaniel Harding
2020-09-05fw3: zones: limit zone names to 11 bytesAlexey Dobrovolsky
2020-08-20options: fix parsing of boolean attributesRemi NGUYEN VAN
2020-07-25zones: apply tcp mss clamping also on ingress pathYousong Zhou
2020-06-03redirects: fix segmentation faultAlin Nastac
2020-06-03treewide: replace unsafe string functionsJo-Philipp Wich
2020-06-02improve reload logicJo-Philipp Wich
2020-03-16redurects: add support to define multiple zones for dnat reflection rulesAnton Engelhardt
2020-03-13firewall3: defaults: fix uci flow_offloading optionWangYanlong
2020-03-03rules: fix typoYousong Zhou
2020-01-28defaults: robustify flow table detection.Rui Salvaterra
2019-11-22utils: persist effective extra_src and extra_dest options in state fileJo-Philipp Wich
2019-11-22zones: fix emitting match rules for zones with only "extra" optionsJo-Philipp Wich
2019-09-23utils: fix resource leakHans Dedecker
2019-09-18ubus: do not overwrite ipset name attributeJo-Philipp Wich
2019-09-15firewall3: fix typo that affects ICMPv6 rules with numeric icmp_typeAlin Nastac
2019-09-08utils: Fix string format messageHauke Mehrtens
2019-09-03firewall3: Fix some format string problemsHauke Mehrtens
2019-08-22iptables.c: lock the xtables.lockAlexander Couzens
2019-08-22utils: implement fw3_lock_path() & fw3_unlock_path()Alexander Couzens
2019-08-19firewall3: ipset: Handle reload_set properlyKristian Evensen
2019-08-16firewall3: Improve ipset supportKristian Evensen
2019-06-12utils: coverity resource leak warningKevin Darbyshire-Bryant
2019-01-02zones: add zone identifying local traffic in raw OUTPUT chainHans Dedecker
2018-12-20utils: Free args in __fw3_command_pipe()Hauke Mehrtens
2018-12-20options: redirects: Fix possible buffer overflowsHauke Mehrtens
2018-12-06redirects: properly handle src_dport in SNAT rulesHans Dedecker
2018-08-13defaults: fix check_kmod() functionJo-Philipp Wich
2018-08-07defaults: use a generic check_kmod() functionJoe Holden
2018-08-03Add support for DSCP matches and targetJo-Philipp Wich
2018-07-26ubus: avoid dumping interface state with NULL messageJo-Philipp Wich
2018-07-16firewall3: make reject types selectable by userAlin Nastac