Alexander Marx
f38e0c4de0
Forward Firewall: added --kerneltz option to timeframe
2013-08-09 14:11:54 +02:00
Alexander Marx
8cb1afc817
Forward Firewall: Bugfix: When having more than 1 ICMP rule in a group, the rule is not created.
...
Also changed (INPUT) to (Input) in firewall-options
2013-08-09 14:11:54 +02:00
Alexander Marx
d47bb8a1ad
Forward Firewall: Added Firewall-Options for INPUT Policy (DROP/REJECT) and built a new INPUT-POLICY in firewall-policy.
2013-08-09 14:11:09 +02:00
Alexander Marx
3f6bba6dbb
Forward Firewall: Forgot to delete a dev-comment
2013-08-09 14:09:15 +02:00
Alexander Marx
31fef6cc2d
Forward Firewall: rules.pl supports now DMZ rules. These rules are applied first
2013-08-09 14:09:15 +02:00
Alexander Marx
12a43202a6
Forward Firewall: bugfix converter->default forward mode is now set correctly
...
some layout changes
2013-08-09 14:08:23 +02:00
Alexander Marx
6128ded855
Forward Firewall: convert-outgoingfw now supports outgoing rules
2013-08-09 14:08:22 +02:00
Alexander Marx
046d88c2d0
Forward Firewall: outgoing converter is now ble to set default policy correctly
2013-08-09 14:08:22 +02:00
Alexander Marx
c178bf21c1
Forward Firewall: added Policymode for OUTGOING to converterscript
2013-08-09 14:08:21 +02:00
Alexander Marx
aa8647835d
Forward Firewall: Finalize integration of OUTGOING into firewall
2013-08-09 14:08:21 +02:00
Alexander Marx
5d7faa4518
Forward Firewall: First part of adding OUTGOING to th efirewall
2013-08-09 14:08:20 +02:00
Alexander Marx
5b7ed8bbae
Forward Firewall: Tablegroup DMZ and WLAN now only show the own rules
2013-08-09 14:08:16 +02:00
Alexander Marx
6adcf1569c
Forward Firewall: set standard rules for blue in mode 2
2013-08-09 14:08:16 +02:00
Alexander Marx
210ee67b53
Forward Firewall: deleted mode0, added default Mode2 and fixed /etc/init.d/firewall to reload the rules correctly on reload. Also made it possible to create broadcastrules (To drop broadcastpackets)
2013-08-09 14:08:15 +02:00
Alexander Marx
70d38e5089
Forward Firewall: fixed converterbug and added ruleposition to new rules in forwardfw.cgi
2013-08-09 14:08:15 +02:00
Alexander Marx
e3afaf8890
Forward Firewall: bugfix: network ip was treated like single host
2013-08-09 14:08:15 +02:00
Alexander Marx
47a40c9726
Forward Firewall: set P2Protocols default to "off"
2013-08-09 14:08:14 +02:00
Alexander Marx
8d1beadce3
Forward Firewall:
...
1) fixed outgoingfw converter: now checkbox for logging is converted corectly
2) edited p2p_block: now a checked prot is allowed
2013-08-09 14:08:14 +02:00
Alexander Marx
3b81fad442
Forward Firewall: converter now creates cdir format from ip-addresses
2013-08-09 14:08:13 +02:00
Alexander Marx
5238a8719d
Forward Firewall: minor improvements, if an outgoingrule has a given port and prot "all", there are two new rules generated for UDP and TCP.
...
If an outgoingrule has only "all" as prot, but no port, there's only one new rule created
2013-08-09 14:08:13 +02:00
Alexander Marx
5a9fd5dbd1
Forward Firewall: extended converter
2013-08-09 14:08:13 +02:00
Alexander Marx
9edb1d7a8e
Forward Firewall: edited Backup.pl. If someone put /var/ipfire/outgoing into /var/ipfire/backup/include, the rules are backed up and need to be restored.
...
Now the backup takes care of this and checks if there are old rules to convert.
2013-08-09 14:08:13 +02:00
Alexander Marx
8794629653
Forward Firewall: edited convert-outgoingfw.
...
When a Protocol ESP or GRE is used AND a Port is selected (in old system), the rule was not converted successfully.
2013-08-09 14:08:12 +02:00
Alexander Marx
99e698d033
Forward Firewall: Minor changes...
...
1) improved convert-outgoingfw. source was wrong when tun+ interface
2) target had always a ":" in ruletable
3) convert-outgoingfw bugfix: ports where not cleared for next rule
2013-08-09 14:08:12 +02:00
Alexander Marx
93a5f4a582
Forward Firewall: implemented ne column in ruletable "protocol"
2013-08-09 14:08:12 +02:00
Alexander Marx
8b3dd79147
Forward Firewall: deleted comments from converterscript
2013-08-09 14:08:12 +02:00
Alexander Marx
8f0b047b4b
Forward Firewall: implemented multiport support for source and target ports
2013-08-09 14:08:12 +02:00
Alexander Marx
99e5d97623
Forward Firewall: removed newline when processing rules.pl
2013-08-09 14:08:11 +02:00
Alexander Marx
d7dc9718d3
Forward Firewall: edited rules.pl, so thatrules are created when source and target are 0.0.0.0/0.0.0.0
2013-08-09 14:08:11 +02:00
Alexander Marx
8910ee647c
Forward Firewall: Removed console output from outgoingfw-converter
2013-08-09 14:08:11 +02:00
Alexander Marx
2833f5678e
Forward Firewall: changed LOG directory to /var/log/converters
2013-08-09 14:08:11 +02:00
Alexander Marx
27f4a6b159
Forward Firewall: added converters for old exaccess rules and old rules from outgoingfw and old firewallgroups.
...
Also fixed a Bug: Day SUN was not checked when in rule-edit mode
2013-08-09 14:08:11 +02:00
Alexander Marx
af49e36723
Forward Firewall: edited p2pblock call in rules.pl
2013-08-09 14:08:11 +02:00
Alexander Marx
7f9d1c3969
Forward Firewall: added p2protocols to /var/ipfire/forward/ for p2pblocking options
2013-08-09 14:08:10 +02:00
Alexander Marx
36196d0d64
Forward Firewall: added P2P Block Option
2013-08-09 14:08:10 +02:00
Alexander Marx
992394d55c
Forward Firewall: changed hash sorting to get right ruleorder in Iptables
2013-08-09 14:08:09 +02:00
Alexander Marx
54cb7ff019
Forward Firewall: added check for mac rules
2013-08-09 14:08:08 +02:00
Alexander Marx
b526909163
Forward Firewall: BUGFIX: MAC source addresses where not created as rules
2013-08-09 14:08:08 +02:00
Alexander Marx
62fc851166
Forward Firewall: fixed 12 Bugs from forum.
...
1) Added more possible chars in remark: : / .
2) Added "Internet" to std networks to be able to define internetaccess
3) When renaming a custom address, the firewallrules get updated
4) Ports are now ignored when using GRE as Protocol
5) When saving a customservice, the cursor is now in first textfield
6) Added a customservices file to installation with predefined services
7) Added ESP as protocol
8) Fixed counterproblem
9) Dropdownboxes for customservices and groups now sorted
10) Firewallrules now sorted in right order
11) fixed a Bug when defining manual address in source and target, the hint message is no longer displayed
12) When defining an external access rule, the last forwardrule was deleted
2013-08-09 14:08:04 +02:00
Alexander Marx
fd10a52ca2
Forward firewall: commented out line in init.d/firewall that all Forward traffic from green is allowed and put it in rules.pl. Now rules.pl allows this traffic when firewall is set to Mode0 or Mode2
2013-08-09 14:07:15 +02:00
Alexander Marx
14f7cb87b9
Forward Firewall: fixed rules.pl error when using manual target address
...
Signed-off-by: Alexander Marx <amarx@ipfire.org >
2013-08-09 14:02:21 +02:00
Alexander Marx
2a81ab0d77
Forward Firewall: added new files
2013-08-09 14:02:21 +02:00
