Commit Graph

6357 Commits

Author SHA1 Message Date
Alexander Marx
f7e649ddfb Forward Firewall: some typos in dmz-converter 2013-08-09 14:12:39 +02:00
Alexander Marx
a60dbb4b6a Forward Firewall: added dmz-converter.
Also extended backup.pl script to support old backups. Now it is possible to restore old backups into new firewall. On restore, all config files of new firewall will be destroyed and the 4 converters will recreate them.
2013-08-09 14:12:37 +02:00
Alexander Marx
829697d076 Forward Firewall: enabled Portranges for DNAT 2013-08-09 14:11:58 +02:00
Alexander Marx
6be32fe504 Forward Firewall: bugfix: DNAT now correctly creates rules, when customservice defined as target 2013-08-09 14:11:58 +02:00
Alexander Marx
28640b7365 Forward Firewall: fix NAT-rules: iptables rule was not applied correctly in PORTFWACCESS 2013-08-09 14:11:58 +02:00
Alexander Marx
82e136591e Forward Firewall: bugfix
1) When editing a NAT rule, error message "port already used" fixed
2013-08-09 14:11:57 +02:00
Alexander Marx
f0da8d53d0 Forward Firewall: Version update forwardfw.cgi 2013-08-09 14:11:57 +02:00
Alexander Marx
218b3341b6 Forward Firewall: cleanup of initscript. Fixes double log entries when INPUT is set to REJECT 2013-08-09 14:11:57 +02:00
Alexander Marx
fb61ec6715 Forward Firewall: Bugfix: blue was allowed to connect to everywhere if forward firewall was open 2013-08-09 14:11:57 +02:00
Alexander Marx
8343fd1250 Forward Firewall: Fix converter-outgoingfw. Produced wrong counters while converting 2013-08-09 14:11:57 +02:00
Alexander Marx
f833ef4660 Forward Firewall: fixed layout of deleted host in custom group
changed version nr in forwardfw.cgi
2013-08-09 14:11:57 +02:00
Alexander Marx
54d6863787 Forward Firewall: fixed converter bug: Remark is "0" and Alias ip is taken as ip instead of name 2013-08-09 14:11:57 +02:00
Alexander Marx
6b681c40d2 Forward Firewall: 0.9.8.7 Implemented SNAT/DNAT
reorganized firewall chains
2013-08-09 14:11:57 +02:00
Alexander Marx
93b75f31ad Forward Firewall: clean up some files
Fix iptables loop wirelessctrl
Fix firewall chain order
Fix policies (added comment for statistic)
2013-08-09 14:11:56 +02:00
Alexander Marx
6397b6e789 Forward Firewall: deleted portfw from buildsystem 2013-08-09 14:11:56 +02:00
Alexander Marx
e800ca53b2 Forward Firewall: delete old Portforwarding from Firewall-menu 2013-08-09 14:11:56 +02:00
Alexander Marx
9efd8d1c7e Forward Firewall: delete old portforwarding from system and fix for wlan-firewall part 1 (loop) 2013-08-09 14:11:56 +02:00
Alexander Marx
a6edca5a89 Forward Firewall: support for SNAT/DNAT in GUI and rules.pl 2013-08-09 14:11:56 +02:00
Alexander Marx
2669161dab Forward Firewall: Added support for DNAT/SNAT to forwardfw.cgi 2013-08-09 14:11:56 +02:00
Alexander Marx
ddcec9d339 Forward Firewall: Firewall sets Internetdevice correctly now (was always red0) 2013-08-09 14:11:56 +02:00
Alexander Marx
f2ab6fba4a Forward Firewall:
1) Custom Hosts: now 17 chars can be entered into IP/MAC field
2) Forwardfw: Bugfix: When no alias is set and IPFIRE is selected as target, no target address is recognised
3) Forwardfw: Now source and Target addressfield (manual) are set to 17 chars maxlegth.
4) Converter: Bugfix: When starting converter from commandline, all hosts are entered into groups again.
2013-08-09 14:11:56 +02:00
Alexander Marx
bedb72f3d4 Forward Firewall: moved ruleaction-dropdown from top to target area.
some layout changes in forwardfw.cgi (when no alias exists, the dropdown after ipfire is not shown)
2013-08-09 14:11:55 +02:00
Alexander Marx
05612a544b Forward Firewall: fix converter for outgoingfw. remarkfield (new) was not implemented here
fwhosts: Some layout changes in tables (cellspacing='0')
2013-08-09 14:11:55 +02:00
Alexander Marx
d58677779f Forward Firewall: forgot to delete devel-comment 2013-08-09 14:11:55 +02:00
Alexander Marx
fccf52cf7e Forward Firewall: fixed a bug in convert-outgoingfw. THe hosts are created with wrong amount of fields in hasharray.
Also fixed a bug which sets wrong firewall mode for FORWARD when outgoing rules are used.
2013-08-09 14:11:55 +02:00
Alexander Marx
21b9a50c68 Forward Firewall: changes in de languagefile 2013-08-09 14:11:55 +02:00
Alexander Marx
472136c927 Forward Firewall: Fix ruletimes. Now the timevalues which are entered in the gui are saved to the rulefile.
Wenn rule.pl is called, the script calculates the difference to UTC time and sets the iptables times accordingly.

With this approach there's no need to save if the times are created in summertime or wintertime.
2013-08-09 14:11:55 +02:00
Alexander Marx
ef6f983b17 Forward Firewall: put rule OUTGOING ACCEPT Related, established into /etc/init.d/firewall
deleted ACCEPT OUTGOINGFW related,established from POLICYOUT
2013-08-09 14:11:55 +02:00
Alexander Marx
a0f267b92c Forward Firewall: removed --kerneltz from rules.pl. New function timeconvert in forwardfw.cgiu takes care of timeconversion now 2013-08-09 14:11:55 +02:00
Alexander Marx
c773075074 Forward Firewall: Try to implement a timeconverter for Rules. New function timeconvert should convert localtime agains gmtime. 2013-08-09 14:11:54 +02:00
Alexander Marx
f69ea1c7c5 Forward Firewall: New Version 0.9.8.2 2013-08-09 14:11:54 +02:00
Alexander Marx
7874d8200d Forward Firewall: wrong <font> Tag leads to a sidemenu with small font 2013-08-09 14:11:54 +02:00
Alexander Marx
f38e0c4de0 Forward Firewall: added --kerneltz option to timeframe 2013-08-09 14:11:54 +02:00
Alexander Marx
b3f4a4efcf Forward Firewall: Fixed ruletable (view of protocols) 2013-08-09 14:11:54 +02:00
Alexander Marx
8cb1afc817 Forward Firewall: Bugfix: When having more than 1 ICMP rule in a group, the rule is not created.
Also changed (INPUT) to (Input) in firewall-options
2013-08-09 14:11:54 +02:00
Alexander Marx
a7d7f5a3da Forward Firewall: Added versionnumber on bottom right of firewall. 2013-08-09 14:11:54 +02:00
Alexander Marx
dc33c23b1f Forward Firewall: Updated strongswan patch provided my Michael. (Changes _updown script from FORWARD ACCEPT to RETURN) 2013-08-09 14:11:52 +02:00
Alexander Marx
36e9534f24 Forward Firewall: Added configoption in Buildsystem -< POLICY2='DROP' (for POLICYIN) 2013-08-09 14:11:09 +02:00
Alexander Marx
a9b3ae26a3 Forward Firewall: /etc/init.d/firewall now creates POLICYIN 2013-08-09 14:11:09 +02:00
Alexander Marx
d47bb8a1ad Forward Firewall: Added Firewall-Options for INPUT Policy (DROP/REJECT) and built a new INPUT-POLICY in firewall-policy. 2013-08-09 14:11:09 +02:00
Alexander Marx
dafaa41427 Forward Firewall: update _updown on build 2013-08-09 14:11:07 +02:00
Alexander Marx
fd4d137dbe Forward Firewall: deleted outgoingfwmac, is now useless 2013-08-09 14:10:16 +02:00
Alexander Marx
443a6e8a5f Forward Firewall: deleted creation of OVPNFORWARD and the accept rule. 2013-08-09 14:09:17 +02:00
Alexander Marx
ec329c0699 Forward FIrewall: fixed typo 2013-08-09 14:09:17 +02:00
Alexander Marx
97e2e7b4b7 Forward Firewall: LAyout change: All dropdowns now have same size 2013-08-09 14:09:17 +02:00
Alexander Marx
223d3b1dca Forward Firewall: chnaged "Internet" to "INTERNET" in dropdown (Target) 2013-08-09 14:09:17 +02:00
Alexander Marx
a615cab30e Forward Firewall: reordered Firewall Menu and changed header.pl to reflect the new menuposition for Blue Access 2013-08-09 14:09:17 +02:00
Alexander Marx
d998784149 Forward Firewall: added an option to firewall-options to show all dropdowns on rulecreation site. 2013-08-09 14:09:17 +02:00
Alexander Marx
8013bd0ac2 Forward Firewall: Changed layout of rulecreation. Now only the dropdowns for configured networks are shown on the site
Also changed fwhosts.cgi (custom groups) to the same feature
2013-08-09 14:09:16 +02:00
Alexander Marx
92e4ae9db1 Forward Firewall: Some changes in langagefiles and layout in fwhosts.cgi 2013-08-09 14:09:16 +02:00