Commit Graph

22 Commits

Author SHA1 Message Date
Alexander Marx
f38e0c4de0 Forward Firewall: added --kerneltz option to timeframe 2013-08-09 14:11:54 +02:00
Alexander Marx
8cb1afc817 Forward Firewall: Bugfix: When having more than 1 ICMP rule in a group, the rule is not created.
Also changed (INPUT) to (Input) in firewall-options
2013-08-09 14:11:54 +02:00
Alexander Marx
31fef6cc2d Forward Firewall: rules.pl supports now DMZ rules. These rules are applied first 2013-08-09 14:09:15 +02:00
Alexander Marx
5d7faa4518 Forward Firewall: First part of adding OUTGOING to th efirewall 2013-08-09 14:08:20 +02:00
Alexander Marx
5b7ed8bbae Forward Firewall: Tablegroup DMZ and WLAN now only show the own rules 2013-08-09 14:08:16 +02:00
Alexander Marx
6adcf1569c Forward Firewall: set standard rules for blue in mode 2 2013-08-09 14:08:16 +02:00
Alexander Marx
210ee67b53 Forward Firewall: deleted mode0, added default Mode2 and fixed /etc/init.d/firewall to reload the rules correctly on reload. Also made it possible to create broadcastrules (To drop broadcastpackets) 2013-08-09 14:08:15 +02:00
Alexander Marx
8d1beadce3 Forward Firewall:
1) fixed outgoingfw converter: now checkbox for logging is converted corectly
2) edited p2p_block: now a checked prot is allowed
2013-08-09 14:08:14 +02:00
Alexander Marx
5238a8719d Forward Firewall: minor improvements, if an outgoingrule has a given port and prot "all", there are two new rules generated for UDP and TCP.
If an outgoingrule has only "all" as prot, but no port, there's only one new rule created
2013-08-09 14:08:13 +02:00
Alexander Marx
93a5f4a582 Forward Firewall: implemented ne column in ruletable "protocol" 2013-08-09 14:08:12 +02:00
Alexander Marx
8f0b047b4b Forward Firewall: implemented multiport support for source and target ports 2013-08-09 14:08:12 +02:00
Alexander Marx
99e5d97623 Forward Firewall: removed newline when processing rules.pl 2013-08-09 14:08:11 +02:00
Alexander Marx
d7dc9718d3 Forward Firewall: edited rules.pl, so thatrules are created when source and target are 0.0.0.0/0.0.0.0 2013-08-09 14:08:11 +02:00
Alexander Marx
af49e36723 Forward Firewall: edited p2pblock call in rules.pl 2013-08-09 14:08:11 +02:00
Alexander Marx
36196d0d64 Forward Firewall: added P2P Block Option 2013-08-09 14:08:10 +02:00
Alexander Marx
992394d55c Forward Firewall: changed hash sorting to get right ruleorder in Iptables 2013-08-09 14:08:09 +02:00
Alexander Marx
54cb7ff019 Forward Firewall: added check for mac rules 2013-08-09 14:08:08 +02:00
Alexander Marx
b526909163 Forward Firewall: BUGFIX: MAC source addresses where not created as rules 2013-08-09 14:08:08 +02:00
Alexander Marx
62fc851166 Forward Firewall: fixed 12 Bugs from forum.
1) Added more possible chars in remark: : / .
2) Added "Internet" to std networks to be able to define internetaccess
3) When renaming a custom address, the firewallrules get updated
4) Ports are now ignored when using GRE as Protocol
5) When saving a customservice, the cursor is now in first textfield
6) Added a customservices file to installation with predefined services
7) Added ESP as protocol
8) Fixed counterproblem
9) Dropdownboxes for customservices and groups now sorted
10) Firewallrules now sorted in right order
11) fixed a Bug when defining manual address in source and target, the hint message is no longer displayed
12) When defining an external access rule, the last forwardrule was deleted
2013-08-09 14:08:04 +02:00
Alexander Marx
fd10a52ca2 Forward firewall: commented out line in init.d/firewall that all Forward traffic from green is allowed and put it in rules.pl. Now rules.pl allows this traffic when firewall is set to Mode0 or Mode2 2013-08-09 14:07:15 +02:00
Alexander Marx
14f7cb87b9 Forward Firewall: fixed rules.pl error when using manual target address
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
2a81ab0d77 Forward Firewall: added new files 2013-08-09 14:02:21 +02:00