sad/firehol
1
0
Fork 0
mirror of https://github.com/firehol/firehol.git synced 2024-06-28 18:02:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,715 Commits 5 Branches 37 Tags 5.2 MiB
6af7967e53
Commit Graph

1715 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Whyme Lyu
6af7967e53
firehol.service: ExecReload= 2019-11-27 22:33:06 +08:00
philwhineray
623fa62185
Merge pull request #387 from epacke/patch-1 
Fix spelling error in in the documentation section
 2019-03-04 20:18:16 +00:00
Patrik Jonsson
10c5238844
Spelling error 2019-03-04 08:56:15 +01:00
philwhineray
825185b2d8
Merge pull request #373 from tycho/preserve-icmpv6-rules-in-optimal-mode 
firehol: don't drop icmpv6 rules with FIREHOL_RULESET_MODE optimal
 2018-11-05 18:24:56 +00:00
Steven Noonan
0215542d28
firehol: don't drop icmpv6 rules with FIREHOL_RULESET_MODE optimal 
ICMPv6 packets are stateless and necessary for basic interoperability.
If rules around them are dropped (as is the current behavior with
optimal mode), then assigned IPv6 addresses expire and eventually IPv6
connectivity is lost altogether.

Fixes: #372
Signed-off-by: Steven Noonan <steven@uplinklabs.net>
 2018-11-05 07:38:41 -08:00
Philip Whineray
193b3ed522 Fix to low-res timer check 
Latest openwrt recognises the %N but returns nothing
 2018-08-19 17:36:19 +01:00
Philip Whineray
aaa65529b2 Post release 3.1.6 2018-08-13 09:06:43 +01:00
Philip Whineray
0c9508a95b Prepare release 3.1.6 2018-08-13 09:05:02 +01:00
Philip Whineray
a6a9008c43 Further unit test hardening 2018-08-13 09:04:58 +01:00
Philip Whineray
022c26ddb2 Replace key used to check source tags in build 
I am transitioning my GPG key. See here for a statement signed by the
old and new keys:

  https://firehol.org/files/gpg-transition-2018-08-10.txt
 2018-08-12 10:36:55 +01:00
Philip Whineray
6969b7e019 Download public keys by fingerprint in travis 
The uid and fingerprint are more legible than the full key, which should
make future changes easier to review.

The keys are used by Travis only to validate that a git tag was signed
with a recognised key. The results of the build are signed separately.

You can confirm the fingerprints in .travis.yml match the ones in
the by running this on the old packaging/gpg.keys:

  gpg --import-options show-only --import packaging/gpg.keys
 2018-08-12 10:36:55 +01:00
Philip Whineray
fc3591fd64 Make iprange install problems evident 2018-08-12 10:36:55 +01:00
philwhineray
0863f119ad
Merge pull request #347 from jgmbenoit/debian/3.1.5+ds-2/lintian/spelling 
Fix typo as detected by lintian
 2018-07-10 07:00:16 +01:00
Costa Tsaousis
c0b8acd4e7
Merge pull request #349 from ktsaou/master 
updated URLs for coinbl (moved from github to gitlab)
 2018-06-10 23:38:13 +03:00
Costa Tsaousis (ktsaou)
1068905305
updated URLs for coinbl (moved from github to gitlab) 2018-06-10 23:16:28 +03:00
Jerome BENOIT
001a9ea496 Fix typo as detected by lintian 2018-05-26 19:06:31 +04:00
Costa Tsaousis
17eaa7c2a9
Merge pull request #344 from ktsaou/master 
detect incocistent cache during post-processing
 2018-05-15 14:25:41 +03:00
Costa Tsaousis (ktsaou)
22fde156b4
detect incocistent cache during post-processing 2018-05-15 14:18:18 +03:00
Costa Tsaousis
01fca5ecb2
Merge pull request #343 from ktsaou/master 
forced ipset reprocessing enabled
 2018-05-15 14:09:13 +03:00
Costa Tsaousis (ktsaou)
ffdb44d1bf
forced ipset reprocessing enabled 2018-05-15 14:04:28 +03:00
Costa Tsaousis
58e1ff1955
Merge pull request #342 from ktsaou/master 
update-ipsets: detect the need to reprocess an ipset
 2018-05-15 13:51:39 +03:00
Costa Tsaousis (ktsaou)
97597301e5
relaxed conditions for reprocessing 2018-05-15 13:44:59 +03:00
Costa Tsaousis (ktsaou)
a6d4621074
fixed condition 2018-05-15 13:40:45 +03:00
Costa Tsaousis (ktsaou)
91f60a8c99
added more info 2018-05-15 13:39:09 +03:00
Costa Tsaousis (ktsaou)
5546dd454c
fixed typo 2018-05-15 13:35:21 +03:00
Costa Tsaousis (ktsaou)
52ece42aec
detect cache file incocistency and reprocess the ipset 2018-05-15 13:34:19 +03:00
Costa Tsaousis
bf4128319d
Merge pull request #340 from ktsaou/master 
create backups of ipset metadata
 2018-05-14 19:36:17 +03:00
Costa Tsaousis (ktsaou)
618f8627f7
create backups of ipset metadata 2018-05-14 19:03:59 +03:00
Costa Tsaousis
2888c0f958
Merge pull request #334 from ktsaou/master 
update-ipsets was incorrectly filtering out subnets with /30
 2018-04-19 03:41:31 +03:00
Costa Tsaousis (ktsaou)
ad83ccf5d6
update-ipsets was incorrectly filtering out subnets with /30 2018-04-19 03:40:17 +03:00
Costa Tsaousis
d6136949f7
Merge pull request #333 from ktsaou/master 
fix recently added ipsets for support for IPs and subnets
 2018-04-19 03:04:14 +03:00
Costa Tsaousis (ktsaou)
6911e1401d
fix recently added ipsets for support for IPs and subnets 2018-04-19 03:03:35 +03:00
Costa Tsaousis
42cb189a37
Merge pull request #332 from ktsaou/master 
added ip2proxy_px1lite to firehol_proxies
 2018-04-19 02:23:31 +03:00
Costa Tsaousis (ktsaou)
2a55596bab
added ip2proxy_px1lite to firehol_proxies 2018-04-19 02:22:57 +03:00
Costa Tsaousis
2d2688dcd6
Merge pull request #331 from ktsaou/master 
added ip2location lite ip2proxy px1
 2018-04-19 02:04:15 +03:00
Costa Tsaousis (ktsaou)
b527f43124
added ip2location lite ip2proxy px1 2018-04-19 01:59:17 +03:00
Costa Tsaousis
93c29cad45
Merge pull request #329 from ktsaou/master 
start fireqos after network is online;
 2018-04-18 16:17:28 +03:00
Costa Tsaousis (ktsaou)
547e2f4f1e
added geolite2_asn (disabled) and datacenter 2018-04-18 11:23:35 +03:00
Costa Tsaousis (ktsaou)
f8749676bf
start fireqos after network is online; fixes #315 2018-03-24 13:58:02 +02:00
Costa Tsaousis
396d796c00
Merge pull request #316 from hcouplet/fix-linkdown-iface 
Issue #211. fix link balancer and ignore linkdown
 2018-03-24 13:47:21 +02:00
Costa Tsaousis
903361562b
Merge pull request #322 from ktsaou/master 
added option FIREHOL_ACCEPT_OUTPUT_UNMATCHED_TCP_RST
 2018-03-07 14:46:09 +02:00
Costa Tsaousis (ktsaou)
b8a16652bb
updated tests to match also the action on UNMATCHED logs 2018-03-07 14:41:06 +02:00
Costa Tsaousis (ktsaou)
fa15316b5e
added option FIREHOL_ACCEPT_OUTPUT_UNMATCHED_TCP_RST 2018-03-07 14:38:03 +02:00
Costa Tsaousis
08cadb41aa
Merge pull request #321 from ktsaou/master 
allow DROP_INVALID with any action (e.g. REJECT)
 2018-03-06 16:18:16 +02:00
Costa Tsaousis (ktsaou)
8e767fac61
updated tests for the new log text 2018-03-06 16:14:11 +02:00
Costa Tsaousis (ktsaou)
b776394cde
allow DROP_INVALID with any action (e.g. REJECT) 2018-03-06 15:47:01 +02:00
Herve Couplet
386ee4b9ce fix sed command : use instead of sed 2018-03-06 04:48:30 +01:00
Costa Tsaousis
08ee50c2a0
Merge pull request #318 from ktsaou/master 
fireqos status now works with newer iproute;
 2018-03-05 21:08:46 +02:00
Costa Tsaousis (ktsaou)
02cf5cb1fc
fireqos status now works with newer iproute; fixes #317 2018-03-05 21:01:54 +02:00
Herve Couplet
7da644e4a4 fix link balancer and ignore linkdown. with linkdown, routes can not be added or deleted as they are marked invalid 2018-03-01 00:52:44 +01:00