Alexander Marx
632e0a3e5e
Firewall: added amarx to credits.cgi
2013-12-23 15:16:59 +01:00
Alexander Marx
3c037075d0
Firewall: when DNAT external port is given and dest port is empty, theres now an errormessage displayed
2013-12-20 13:04:56 +01:00
Alexander Marx
a8b113e73d
Firewall: Now servicegroups and networkgroups can be renamed
2013-12-20 12:10:35 +01:00
Alexander Marx
5f037986b7
Firewall: added JS to automatically select radiobuttons in fwhosts
2013-12-20 12:10:03 +01:00
Alexander Marx
484269ceac
FIrewall: Rewrote complete counters for firewall-groups (hosts,networks, network-groups)
2013-12-20 12:09:52 +01:00
Alexander Marx
ce2dbe92ce
Firewall: Bugfix - When editing a DNAT rule and setting prot to "all" the port from previus rule was not resettet
2013-12-20 12:08:43 +01:00
Alexander Marx
3a162dc14f
Firewall: rebuild complete counter procedure in firewall-groups. This way the counters are on the fly generated and stable. also this is a prequisite to the new option that firewall-servicegroups can be rolled out by installation
2013-12-10 12:21:48 +01:00
Alexander Marx
fe2bae3b74
Firewall: Fix BETA8 - It was not possible to delete single services from servicegroups
2013-12-09 09:33:21 +01:00
Alexander Marx
82b837cff8
Firewall: Added new feature: Now protocols can be added to servicegroups (GRE,AH,ESP,IPIP,IPV6)
2013-12-06 08:47:11 +01:00
Alexander Marx
0c733ab750
Firewall: Bugfix: Fixed wrong language strings in outgoing FW rules when using std networks or ipfire
2013-12-05 15:16:19 +01:00
Alexander Marx
2be048cedc
Firewall: FIxed wrong language strings in outgoing Firewall
2013-12-05 15:16:02 +01:00
Alexander Marx
5558ca2a96
Firewall: fixes commit http://git.ipfire.org/?p=people/amarx/ipfire-2.x.git;a=commitdiff;h=1ed4b214d785ad0538b0a864f43babccd55475b1
...
Conflicts:
html/cgi-bin/firewall.cgi
2013-12-05 15:12:37 +01:00
Arne Fitzenreiter
0037264780
Merge branch 'next' into fifteen
...
Conflicts:
doc/language_issues.tr
2013-11-30 12:45:31 +01:00
Michael Tremer
4f160f04cb
proxy: Set number of file descriptors much higher.
...
Some users are hitting the 65k limit regularly, so
we set the limit to a much higher number.
2013-11-21 21:36:02 +01:00
Alexander Marx
35ca8e0203
Firewall: Bugfix: Last rule for outgoing showed wrong color, Bugfix:When using a rule with sourceport and afterwards editing this rule to use service or servicegroup, there was an errormessage.
2013-11-21 21:09:22 +01:00
Alexander Marx
7db6ad6acb
Firewall: appended check of maximum ports per protocol. portranges 100:200 count as 2 ports
2013-11-13 00:34:08 +01:00
Alexander Marx
49192c7b31
Firewall: The maximum of definable services in a servicegroup is limited to 13 per protocol (tcp,udp) because iptables can only handle max 13 services in Multiport
2013-11-13 00:33:46 +01:00
Alexander Marx
a15f7d0dd5
Firewall: Bugfix: the routine to check if a vpn net or host was deleted did not work as expected. Now it even works when source and target contain a vpn host or net
2013-11-13 00:29:44 +01:00
Alexander Marx
d8afe3e2c0
Firewall: fixed colors of target column when using standard networks
...
When using RED, OpenVPN-Dyn or IPsec RW as target, the column was not
colored.
2013-11-13 00:29:21 +01:00
Michael Tremer
d3527a38c1
Multiple CGI files: Check if BLUE or ORANGE are actually configured.
2013-11-08 14:32:08 +01:00
Alexander Marx
f8cbcb7c8a
Firewall: Bugfix: When creating a servcie in firewall-groups and selecting a protocol other than icmp, the enty in the ruletable shows correct values PLUS the "all icmp-types" under ICMP.
...
Now the ICMP FIeld is emtpy when selecting another protocol than icmp
2013-11-08 13:41:06 +01:00
Alexander Marx
7b82bee7c4
Firewall: Bugfix: When creating a rule and using brackets in comment, the rule is denied because of invalid characters in String. But when creating a rule with just valid characters (witjout brackets) and then editing the rule it is possible to use brackets without errormessage.
...
Now brackets are allowed.
2013-11-08 13:40:45 +01:00
Michael Tremer
cb92b363cf
Merge remote-tracking branch 'amarx/firewall-fifteen' into fifteen
2013-10-31 15:35:34 +01:00
Michael Tremer
12b901f846
firewall: Fix wrong symbol for variable.
2013-10-31 15:34:40 +01:00
Alexander Marx
11ab2c7d9a
Firewall: added IP-Address to dropdown in DNAT part and now all ip-addresses are in brackets
2013-10-30 15:49:21 +01:00
Alexander Marx
68f6312ac5
Firewall: Show IP-Adresses in NAT-Source dropdown
2013-10-30 13:41:33 +01:00
Michael Tremer
c03d4a5e8a
firewall: Simplify code which shows the last rule.
...
Also change headings of the rule sections.
2013-10-29 18:45:40 +01:00
Michael Tremer
bee56a2d5d
firewall: NAT section: Don't show irrelevant controls.
2013-10-29 16:57:58 +01:00
Michael Tremer
2a6e9ae967
Merge remote-tracking branch 'amarx/firewall-fifteen' into fifteen
2013-10-29 16:23:35 +01:00
Michael Tremer
e9a0562345
P2P block: Add notice that the user will reload the firewall ruleset.
2013-10-29 16:22:13 +01:00
Alexander Marx
daf400fa4d
Firewall: fixed untranslated Strings
2013-10-29 08:34:42 +01:00
Michael Tremer
85860aff26
firewall: Fix rendering issue of the rule table.
2013-10-28 20:35:36 +01:00
Michael Tremer
901aa8b943
firewall: Fix layout of protocol selection.
2013-10-25 11:40:06 +02:00
Alexander Marx
39e360b26c
Firewall: added missing translation for short IPv6 protcol in ruletable
2013-10-24 16:24:45 +02:00
Alexander Marx
9c89c64de1
Firewall: rename Protocol 41 in Dropdown and ruletable ->Now "IPv6 Encapsulation (protocol 41)" in dropdown and "IPv6 Encap" in ruletable
2013-10-24 16:04:26 +02:00
Alexander Marx
8039a71099
Firewall: renamed forwardfwctrl to firewallctrl
2013-10-24 09:42:42 +02:00
Alexander Marx
6d8eb5dec7
Firewall: Renamed directory /var/ipfire/forward to /var/ipfire/firewall
2013-10-24 09:24:12 +02:00
Alexander Marx
11760a7075
Firewall: Added protocols IPv6 (41) and IPIP (94)
2013-10-24 07:59:42 +02:00
Alexander Marx
b161bfa868
FIREWALL: renamed forwardfw.cgi in firewall.cgi
2013-10-23 16:32:26 +02:00
Alexander Marx
8cdfbf5aeb
Firewall: Make it possible to use NAT without Ports specified
2013-10-23 16:30:17 +02:00
Michael Tremer
989d0fd717
firewall: Straighten the format of the rule table.
...
Lots of markup and code cleanup.
2013-10-22 20:21:33 +02:00
Michael Tremer
4a75efa5a7
p2p-block.cgi: Fix coding style.
2013-10-22 19:08:35 +02:00
Michael Tremer
0e43079789
firewall: Cleanup rules reloading.
...
This has been messed up a lot because there were multiple
files which indicated that a reload is needed; shell commands
were used to create and remove the indicator file; some
functions were duplicated.
2013-10-22 18:53:48 +02:00
Michael Tremer
0eadfdad4a
firewall: Predefine value for checkboxes.
...
It turns out, that this is not good style, but as the
rest of the CGI depends on it, we need to stick with
this.
2013-10-22 17:39:56 +02:00
Michael Tremer
6bcb5ffe56
firewall: Move NAT port field to the protocol section.
2013-10-22 17:23:23 +02:00
Michael Tremer
93e0855b6f
firewall: Fix collapsing the NAT menu.
...
Also removing a lot of redundant HTML code and invalid
attributes.
2013-10-22 16:59:16 +02:00
Michael Tremer
85d6e8a910
firewall: Update the re-read button.
...
Change to a more meaningful description and remove the
big green box.
2013-10-22 16:44:43 +02:00
Michael Tremer
d8d7dd3bd8
firewall: Don't show rule activation checkbox when creating a rule.
...
Almost certainly, the user wants the new rule to be active when
it is created. We should put as few input elements as possible
on the rule creation page.
2013-10-17 17:58:45 +02:00
Michael Tremer
d50ef220b6
firewall: Fix invalid HTML syntax.
2013-10-17 17:39:12 +02:00
Michael Tremer
0c7d0c0883
firewall: Simplify rule action selection.
...
Instead of two clicks, this is now changable with only
one click. The color coding should make the decision easier
and warn to not make unwanted configurations.
2013-10-17 17:33:46 +02:00
