Commit Graph

24 Commits

Author SHA1 Message Date
Michael Tremer
5906c96206 wirelessctrl: Disable MAC filter on blue if captive portal is enabled
Fixes #11038

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-22 18:54:03 +01:00
Michael Tremer
645378fbb9 firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue
device where accepted too early to be processed by the
firewall input chain rules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-05 10:24:03 +00:00
Michael Tremer
0aa71600ef wirelessctrl: Remove some unused code
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-02-04 14:31:53 +00:00
Michael Tremer
7506baa2eb wirelesscrtl: Add --wait to iptables command line.
With a huge number of access rules, inserting all rules
into the kernel took a long while in which other iptables
tried to access the kernel's ruleset as well, which then
lead to resource conflicts.

Since iptables 1.4.20, the --wait parameter is supported
that will wait for a global xtables lock and then proceed.
2013-12-12 21:05:56 +01:00
Michael Tremer
52e54c1c9a misc-progs: Move network stuff to own header file. 2013-10-12 18:22:51 +02:00
Arne Fitzenreiter
f7bb003150 wirelessctrl: fix blue access "enabled" checkbox. 2013-10-03 14:50:33 +02:00
Michael Tremer
ec36876e6a wirelessctrl: Fix evaluation of configuration settings. 2013-10-01 17:45:00 +02:00
Michael Tremer
27ba58fb46 wirelessctrl: Silence error messages when no BLUE device is configured. 2013-09-07 16:10:02 +02:00
Michael Tremer
d69bf6191a wirelessctrl: Re-indent the code. 2013-09-07 15:21:40 +02:00
Alexander Marx
93b75f31ad Forward Firewall: clean up some files
Fix iptables loop wirelessctrl
Fix firewall chain order
Fix policies (added comment for statistic)
2013-08-09 14:11:56 +02:00
Alexander Marx
9efd8d1c7e Forward Firewall: delete old portforwarding from system and fix for wlan-firewall part 1 (loop) 2013-08-09 14:11:56 +02:00
Alexander Marx
8dc23ff4fc Forward Firewall: adapted initscripts/firewall and wirelessctrl.c
Now the Wirelesschains should work with new firewall.
2013-08-09 14:08:09 +02:00
Alexander Marx
8139398721 Forward Firewall: edited /src/initscripts/init.d/firewall and misc-progs/wirelessctrl.c
added WIRELESSFORWARD to FORWARDFW (instead of FORWARD) so that rules work
commented out DMZHOLES lines in wirelessctrl.c to get rid of booterrormessages (There's no DMZHOLES anymore)
2013-08-09 14:08:09 +02:00
Arne Fitzenreiter
45f2673554 Allow also ip/netmask for blue access. 2010-06-24 13:14:05 +02:00
Michael Tremer
8cc93ee11f misc-progs: Cleanup chain creation of wirelessctrl.
This changes the behaviour of the wirelessctrl binary
that will no longer create useless rules in the WIRELESSINPUT
and WIRELESSFORWARD chains that have no use at all.

So we keep this chain empty if /var/ipfire/wireless/nodrop
is existant.
2010-04-23 14:18:01 +02:00
Christian Schmidt
bf137f5bb6 Fixed cosemtic naming of firewall groups for webinterface. 2010-04-23 13:21:09 +02:00
Arne Fitzenreiter
dd79c3999b Change some iptables rules to match new negation syntax. 2010-02-15 20:15:11 +01:00
maniacikarus
0b06ad0567 Some little code corrections
git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1260 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-03-08 11:26:56 +00:00
maniacikarus
0aaef8e9a3 Added some FW Options for the blue interface
Started building of core10


git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1258 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-03-08 10:03:43 +00:00
maniacikarus
9fb6a10b7d little changes in core8 - backup before extract
changed if clause in wirelessctrl if key is not existing eq on


git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1228 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-02-23 14:02:22 +00:00
maniacikarus
0a56f193d3 corrected because micha said so :D
git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1224 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-02-19 20:41:37 +00:00
maniacikarus
87f7ed9683 fixed wirelesscontrol and included in core 8
git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1223 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-02-19 20:09:19 +00:00
maniacikarus
42dc0090e3 Added option for firewall adjustment on blue
Added the Asterisk GUI written by Peter
Changed the style of the graphs


git-svn-id: http://svn.ipfire.org/svn/ipfire/branches/2.1/trunk@1183 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2008-02-04 06:47:55 +00:00
maniacikarus
900832fa06 Alle Restartskripte umbenannt in CTRL Skripte
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@812 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
2007-08-23 10:58:00 +00:00