Alexander Marx
6945e46310
Forward Firewall: rewrote portcheck routine in ovpnmain so that checks for portforwardingports are made against /var/ipfire/forward/nat instead of /var/ipfire/portfw/config
2013-08-09 14:13:11 +02:00
Alexander Marx
931e1fed53
Forward Firewall: added some plausi checks. Now it is checked if someone enters an manual ip address that is a openvpn client.
...
The colors are set correctly in ruletable when someone enters a manual ip which belongs to an IPsec Network, IPsec Roadwarrior (if iprange set) or openvpn n2n
2013-08-09 14:13:10 +02:00
Alexander Marx
dc82656bf9
Forward Firewall: 0.9.9.4a - Bugfix typo in firewallscript, DMZ Link on startpage now leads to firewall instead of dmzpinholes
2013-08-09 14:13:10 +02:00
Alexander Marx
aff15defbc
Forward Firewall: rules for collectd now in firewall-policy instead of /etc/init.d/firewall
2013-08-09 14:13:10 +02:00
Alexander Marx
53f4c74d9b
Forward Firewall: some changes in firewall script to make collectd work
2013-08-09 14:13:10 +02:00
Alexander Marx
9468a6f713
Forward Firewall: Firewall Hits graph now with stacked values
2013-08-09 14:13:10 +02:00
Alexander Marx
ed31c098f5
Forward Firewall: added drop rules to firewall's stop script so that collectd is working
2013-08-09 14:13:10 +02:00
Alexander Marx
be9be7cb5b
Forward Firewall: enabled /var/ipfire/optionsfw/settings in configroot
2013-08-09 14:13:10 +02:00
Alexander Marx
94ea1f0346
Forward Firewall: fixed firewall hits statistik and extended it to show input,output,forward,newnotsyn and portscan seperately.
2013-08-09 14:13:10 +02:00
Alexander Marx
6f348fcb9d
Forward Firewall: edited include file of backup.
2013-08-09 14:13:07 +02:00
Alexander Marx
08e1c65d85
Forward Firewall: added SNAT multiport support
2013-08-09 14:12:40 +02:00
Alexander Marx
98cee89f94
Forward Firewall: Added multiport support to DNAT/Portforwarding
...
Now it is possible to use multiple ports under DNAT when TARGET has no Port, one Port or one Portrange defined
2013-08-09 14:12:39 +02:00
Alexander Marx
ed618226bb
Forward Firewall: little changes in ruletable layout. (Headline)
2013-08-09 14:12:39 +02:00
Alexander Marx
d526a95bf1
Forward Firewall: some changes in en.pl and de.pl. Also adapted "apply" button in fwhosts.cgi
2013-08-09 14:12:39 +02:00
Alexander Marx
bc912c6e0c
Forward Firewall: Version 0.9.9.2
...
1) Some changes in en.pl
2) DNAT now supports REJECT/DROP rules
3) Bugfix: comma in remark customservicegroup
4) improved installer
2013-08-09 14:12:39 +02:00
Alexander Marx
e09884e04f
Forward Firewall: some fixes:
...
1) Counter was not correctly decreased when deleting a network from a customgroup
2) Convert-outgoingfw improved
3) Backup didn't set filepermissions correctly
2013-08-09 14:12:39 +02:00
Alexander Marx
f7e649ddfb
Forward Firewall: some typos in dmz-converter
2013-08-09 14:12:39 +02:00
Alexander Marx
a60dbb4b6a
Forward Firewall: added dmz-converter.
...
Also extended backup.pl script to support old backups. Now it is possible to restore old backups into new firewall. On restore, all config files of new firewall will be destroyed and the 4 converters will recreate them.
2013-08-09 14:12:37 +02:00
Alexander Marx
829697d076
Forward Firewall: enabled Portranges for DNAT
2013-08-09 14:11:58 +02:00
Alexander Marx
6be32fe504
Forward Firewall: bugfix: DNAT now correctly creates rules, when customservice defined as target
2013-08-09 14:11:58 +02:00
Alexander Marx
28640b7365
Forward Firewall: fix NAT-rules: iptables rule was not applied correctly in PORTFWACCESS
2013-08-09 14:11:58 +02:00
Alexander Marx
82e136591e
Forward Firewall: bugfix
...
1) When editing a NAT rule, error message "port already used" fixed
2013-08-09 14:11:57 +02:00
Alexander Marx
f0da8d53d0
Forward Firewall: Version update forwardfw.cgi
2013-08-09 14:11:57 +02:00
Alexander Marx
218b3341b6
Forward Firewall: cleanup of initscript. Fixes double log entries when INPUT is set to REJECT
2013-08-09 14:11:57 +02:00
Alexander Marx
fb61ec6715
Forward Firewall: Bugfix: blue was allowed to connect to everywhere if forward firewall was open
2013-08-09 14:11:57 +02:00
Alexander Marx
8343fd1250
Forward Firewall: Fix converter-outgoingfw. Produced wrong counters while converting
2013-08-09 14:11:57 +02:00
Alexander Marx
f833ef4660
Forward Firewall: fixed layout of deleted host in custom group
...
changed version nr in forwardfw.cgi
2013-08-09 14:11:57 +02:00
Alexander Marx
54d6863787
Forward Firewall: fixed converter bug: Remark is "0" and Alias ip is taken as ip instead of name
2013-08-09 14:11:57 +02:00
Alexander Marx
6b681c40d2
Forward Firewall: 0.9.8.7 Implemented SNAT/DNAT
...
reorganized firewall chains
2013-08-09 14:11:57 +02:00
Alexander Marx
93b75f31ad
Forward Firewall: clean up some files
...
Fix iptables loop wirelessctrl
Fix firewall chain order
Fix policies (added comment for statistic)
2013-08-09 14:11:56 +02:00
Alexander Marx
6397b6e789
Forward Firewall: deleted portfw from buildsystem
2013-08-09 14:11:56 +02:00
Alexander Marx
e800ca53b2
Forward Firewall: delete old Portforwarding from Firewall-menu
2013-08-09 14:11:56 +02:00
Alexander Marx
9efd8d1c7e
Forward Firewall: delete old portforwarding from system and fix for wlan-firewall part 1 (loop)
2013-08-09 14:11:56 +02:00
Alexander Marx
a6edca5a89
Forward Firewall: support for SNAT/DNAT in GUI and rules.pl
2013-08-09 14:11:56 +02:00
Alexander Marx
2669161dab
Forward Firewall: Added support for DNAT/SNAT to forwardfw.cgi
2013-08-09 14:11:56 +02:00
Alexander Marx
ddcec9d339
Forward Firewall: Firewall sets Internetdevice correctly now (was always red0)
2013-08-09 14:11:56 +02:00
Alexander Marx
f2ab6fba4a
Forward Firewall:
...
1) Custom Hosts: now 17 chars can be entered into IP/MAC field
2) Forwardfw: Bugfix: When no alias is set and IPFIRE is selected as target, no target address is recognised
3) Forwardfw: Now source and Target addressfield (manual) are set to 17 chars maxlegth.
4) Converter: Bugfix: When starting converter from commandline, all hosts are entered into groups again.
2013-08-09 14:11:56 +02:00
Alexander Marx
bedb72f3d4
Forward Firewall: moved ruleaction-dropdown from top to target area.
...
some layout changes in forwardfw.cgi (when no alias exists, the dropdown after ipfire is not shown)
2013-08-09 14:11:55 +02:00
Alexander Marx
05612a544b
Forward Firewall: fix converter for outgoingfw. remarkfield (new) was not implemented here
...
fwhosts: Some layout changes in tables (cellspacing='0')
2013-08-09 14:11:55 +02:00
Alexander Marx
d58677779f
Forward Firewall: forgot to delete devel-comment
2013-08-09 14:11:55 +02:00
Alexander Marx
fccf52cf7e
Forward Firewall: fixed a bug in convert-outgoingfw. THe hosts are created with wrong amount of fields in hasharray.
...
Also fixed a bug which sets wrong firewall mode for FORWARD when outgoing rules are used.
2013-08-09 14:11:55 +02:00
Alexander Marx
21b9a50c68
Forward Firewall: changes in de languagefile
2013-08-09 14:11:55 +02:00
Alexander Marx
472136c927
Forward Firewall: Fix ruletimes. Now the timevalues which are entered in the gui are saved to the rulefile.
...
Wenn rule.pl is called, the script calculates the difference to UTC time and sets the iptables times accordingly.
With this approach there's no need to save if the times are created in summertime or wintertime.
2013-08-09 14:11:55 +02:00
Alexander Marx
ef6f983b17
Forward Firewall: put rule OUTGOING ACCEPT Related, established into /etc/init.d/firewall
...
deleted ACCEPT OUTGOINGFW related,established from POLICYOUT
2013-08-09 14:11:55 +02:00
Alexander Marx
a0f267b92c
Forward Firewall: removed --kerneltz from rules.pl. New function timeconvert in forwardfw.cgiu takes care of timeconversion now
2013-08-09 14:11:55 +02:00
Alexander Marx
c773075074
Forward Firewall: Try to implement a timeconverter for Rules. New function timeconvert should convert localtime agains gmtime.
2013-08-09 14:11:54 +02:00
Alexander Marx
f69ea1c7c5
Forward Firewall: New Version 0.9.8.2
2013-08-09 14:11:54 +02:00
Alexander Marx
7874d8200d
Forward Firewall: wrong <font> Tag leads to a sidemenu with small font
2013-08-09 14:11:54 +02:00
Alexander Marx
f38e0c4de0
Forward Firewall: added --kerneltz option to timeframe
2013-08-09 14:11:54 +02:00
Alexander Marx
b3f4a4efcf
Forward Firewall: Fixed ruletable (view of protocols)
2013-08-09 14:11:54 +02:00
