Commit Graph

137 Commits

Author SHA1 Message Date
Alexander Marx
6233483ba7 Forward Firewall: Bugfix: When creating a rule which results in an error, the counters in the firewallgroups where increased.
Bugfix: When using icmp-type "all" there was no rule created

Conflicts:
	html/cgi-bin/forwardfw.cgi
2013-09-27 10:43:01 +02:00
Michael Tremer
35f95ba741 firewall: Remove version information. 2013-09-02 22:04:42 +02:00
Alexander Marx
b119578f02 Forward Firewall: Now all customhosts are colored correctly in ruletable. Also the ip addresses in firewall-groups (hosts) are colored correctly if they are part of green,orange,blue,openvpn or ipsec 2013-08-14 12:51:21 +02:00
Alexander Marx
5bee9a9df5 Forward Firewall: edited GPL-header 2013-08-13 13:47:27 +02:00
Alexander Marx
dc21519f68 Forward Firewall: added GPL header to all files 2013-08-13 12:44:01 +02:00
Alexander Marx
ab4fe66fc9 Forward Firewall: Network addresses are now allowed as source and the ip addressfield has now size 18. 2013-08-09 14:49:35 +02:00
Alexander Marx
43215686ce Forward Firewall: changed rule coloring. Now whole field is colored instead of just borders. Back Button in firewall groups /hostgroups showed a white site 2013-08-09 14:49:35 +02:00
Alexander Marx
653a71b951 Forward FIrewall: Bugfix: When using predefined services in rulecreation, the rule was not applied. Bugfix: when in rulecreationpage and pressing "back" the site gets white. 2013-08-09 14:49:35 +02:00
Alexander Marx
6143bc300e Forward FIrewall: BUGFIX: when setting outgoing to blocked and creating a rule, the last rule changes to "accept" 2013-08-09 14:49:35 +02:00
Alexander Marx
357b3fe80d Forward Firewall: renamed IPFire to Firewall in SNAT area 2013-08-09 14:49:35 +02:00
Alexander Marx
4affc3e889 Forward Firewall: show default rule when input is empty 2013-08-09 14:16:42 +02:00
Alexander Marx
cb051c577c Forward Firewall: language fixes on last rule in ruletable 2013-08-09 14:16:42 +02:00
Alexander Marx
b88c88291b Forward Firewall: added some java Script to automatically select radiobuttons when dropdowns are changed. Some cleanup of the code 2013-08-09 14:16:40 +02:00
Alexander Marx
6584a984a0 Forward Firewall: just increased version number 2013-08-09 14:15:33 +02:00
Alexander Marx
595a90f003 Forward Firewall: The default rule table (at the end of Forward) shows only default values depending on the network configuration 2013-08-09 14:15:33 +02:00
Alexander Marx
f8bf364f0d Forward Firewall: fixed check for already existing rules. 2013-08-09 14:15:33 +02:00
Alexander Marx
7326051edb Forward Firewall: Updated outgoingfw-converter. redesign of the ruletable's defaultrules 2013-08-09 14:15:32 +02:00
Alexander Marx
4d2e7a35d9 Forward Firewall: some textalignment in last rule row 2013-08-09 14:15:32 +02:00
Alexander Marx
a648546338 Forward Firewall: added "default-rules-table" at the end of forward ruletable 2013-08-09 14:15:31 +02:00
Alexander Marx
b044bb0569 Forward Firewall: Bugfixes wrong interface in ruletable,when selecting alias firewall interface 2013-08-09 14:15:31 +02:00
Alexander Marx
fc83b09d43 Forward Firewall: some bugfixes 2013-08-09 14:15:31 +02:00
Alexander Marx
72586f0ff0 Forward Firewall: colorize ip addresses when possible in firewall groups. subnetmask now in cidr format 2013-08-09 14:15:31 +02:00
Alexander Marx
f1934a05ad Forward Firewall: delted subnets from hosts in firewallgroups, colorized all ip-addresses from the firewall-groups if possible. Some minor changes in forwardfw.cgi 2013-08-09 14:15:31 +02:00
Alexander Marx
cb4439f394 Forward Firewall: Bugfix of last commit. Added "Interface" to source or target that uses "Firewall" interfaces 2013-08-09 14:15:31 +02:00
Alexander Marx
d4cb89d2d1 Forward Firewall: When using "Firewall" as source or target, the ruletable looks confusing. Theres "RED" in source and target. Now theres "INTERFACE RED". 2013-08-09 14:15:31 +02:00
root
43d8be093c Forward Firewall: some language changes de.pl and en.pl as well as forwardfw.cgi and fwhost.cgi 2013-08-09 14:15:30 +02:00
Alexander Marx
1a8fde0e84 Forward Firewall: changed some names and added subnets to dropdowns 2013-08-09 14:15:30 +02:00
Alexander Marx
a0fb1099ef Forward Firewall: Design changes
1) source has a new option "firewall" with dropdown for interfaces
2) source default networks->deleted IPFire, all ip's now in brackets
3) deleted warning message in Target that a mac is not usable
4) changes for "apply" button
5) in ruletable the protocol is now right beneath the ruletype column
6) changed target dropdown "INTERNET" to "RED"
7) renamed OpenVPN N-2N to OpenVPN Net-to-Net
8) set missing default firewall options
9) little changes on the en and de lang files
2013-08-09 14:15:30 +02:00
Alexander Marx
2af92cf5ac Forward Firewall: added new line at bottom of all ruletables with the "final rule" 2013-08-09 14:15:30 +02:00
Alexander Marx
ac9e77e3ba Forward Firewall: added missing fields to the converters (for dnat) 2013-08-09 14:15:30 +02:00
Alexander Marx
c12392c0ef Forward Firewall: removed NAT table and txt file. 2013-08-09 14:15:29 +02:00
Alexander Marx
4f3bd0ca20 Forward Firewall: changed layout of "apply-button" (after rules where changed. When using single hosts in rules, the prefix is no longer shown in the ruletable. Default settings for firewall-options changed 2013-08-09 14:15:29 +02:00
Alexander Marx
8442c93764 Forward Firewall: removed dmz from forwardfw.cgi 2013-08-09 14:15:29 +02:00
Alexander Marx
3b2ad4a1bd Forward Firewall: moved "firewall default behaviour" from firewall page to firewall-options page. Some changes in languagefiles de and en. 2013-08-09 14:15:29 +02:00
Alexander Marx
533a2da388 Forward Firewall: reorganised ruletable layout 2013-08-09 14:15:29 +02:00
Alexander Marx
fb0ce57589 Forward Firewall: cleanup unused code 2013-08-09 14:15:28 +02:00
Alexander Marx
d9b691e18e Forward Firewall: added checks if manual ip (src/tgt) is part of a OpenVPN to colour the rules accordingly 2013-08-09 14:15:28 +02:00
Alexander Marx
05d4f131e9 Forward Firewall: Implemented INPUT Firewall (extended external access)
Now you are able to define INPUT Rules on every interface ip
2013-08-09 14:15:27 +02:00
Alexander Marx
e1eef9d53e Forward Firewall: BUGFIX: When creating DMZ Rules with MANUAL IP as source and afterwards editing the rule, the rule was copied and not just edited.
BUGFIX: When using SNAT (outbound) the rule does not seem to work. The NAT_SOURCE chain was on wron position in POSTROUTING
2013-08-09 14:13:12 +02:00
Alexander Marx
bac7013b21 Forward Firewall: BUGFIX - when using source Protocol and NO target protocol only the target protocol is shown in ruletable.(But rule is applied correctly) 2013-08-09 14:13:12 +02:00
Alexander Marx
eff2dbf833 Forward Firewall: changed sort-order to Sort::Naturally. This Perl Module will be available since core 68. 2013-08-09 14:13:11 +02:00
Alexander Marx
e3c589276a Forward Firewall: if ipsec rw net is set to green subnet, the rules are colored green instead of purple 2013-08-09 14:13:11 +02:00
Alexander Marx
931e1fed53 Forward Firewall: added some plausi checks. Now it is checked if someone enters an manual ip address that is a openvpn client.
The colors are set correctly in ruletable when someone enters a manual ip which belongs to an IPsec Network, IPsec Roadwarrior (if iprange set) or openvpn n2n
2013-08-09 14:13:10 +02:00
Alexander Marx
dc82656bf9 Forward Firewall: 0.9.9.4a - Bugfix typo in firewallscript, DMZ Link on startpage now leads to firewall instead of dmzpinholes 2013-08-09 14:13:10 +02:00
Alexander Marx
08e1c65d85 Forward Firewall: added SNAT multiport support 2013-08-09 14:12:40 +02:00
Alexander Marx
98cee89f94 Forward Firewall: Added multiport support to DNAT/Portforwarding
Now it is possible to use multiple ports under DNAT when TARGET has no Port, one Port or one Portrange defined
2013-08-09 14:12:39 +02:00
Alexander Marx
ed618226bb Forward Firewall: little changes in ruletable layout. (Headline) 2013-08-09 14:12:39 +02:00
Alexander Marx
bc912c6e0c Forward Firewall: Version 0.9.9.2
1) Some changes in en.pl
2) DNAT now supports REJECT/DROP rules
3) Bugfix: comma in remark customservicegroup
4) improved installer
2013-08-09 14:12:39 +02:00
Alexander Marx
a60dbb4b6a Forward Firewall: added dmz-converter.
Also extended backup.pl script to support old backups. Now it is possible to restore old backups into new firewall. On restore, all config files of new firewall will be destroyed and the 4 converters will recreate them.
2013-08-09 14:12:37 +02:00
Alexander Marx
829697d076 Forward Firewall: enabled Portranges for DNAT 2013-08-09 14:11:58 +02:00