summaryrefslogtreecommitdiffstats
path: root/plugin/firewall/iptables
Commit message (Collapse)AuthorAgeFilesLines
* Updated copyright datesDavid Sommerseth2012-10-082-2/+2
| | | | Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* efw-iptables: Use the iptables conntrack moduleMatthew Gyurgyik2010-12-241-4/+4
| | | | | | | Make use of the iptables conntrack module instead of the older state module for stateful firewalling. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Add preliminary support for using IP addresses in the firewall moduleDavid Sommerseth2010-12-011-17/+17
| | | | | | | | | | | The current implementation uses the MAC address of the client's VPN interface. This also restricts eurephia to use TAP mode. This patch adds preliminary support for also accepting the clients IP address when updating the firewall rules. But the complete support for TUN mode is not completed yet. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Update efw-iptables version number and API versionDavid Sommerseth2010-11-301-2/+2
| | | | | | | | | | | | As the firewall API has changed in regards to moving a way from a string based implementation to a struct based implementation, the older eurephia firewall module will not work any longer. To make sure nothing bad happens, enforce that the efw-iptables module is at least using API version 2. Also updated the module version to reflect some changes as well. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Fixed Doxygen complaintsDavid Sommerseth2010-08-261-1/+4
| | | | | | Removed some #defines which was not needed and added missing comments. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Completed the needed changes for the new firewall plug-in APIDavid Sommerseth2010-08-251-113/+79
| | | | | | | Moved over the missing pieces to use the eFWupdateRequest struct. This is a continuation of the work started in commit bdd956adcccd91ff553278fd73cea7 Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Updated Copyright dates to include 2010David Sommerseth2010-07-302-2/+2
|
* Added debug logging of free_nullsafe() calls as wellDavid Sommerseth2009-09-071-1/+1
|
* Cleaned up and added some missing commentsDavid Sommerseth2009-09-051-3/+3
|
* Added doxygen commentsDavid Sommerseth2009-09-021-1/+49
|
* Added copyright info in CMake filesDavid Sommerseth2009-09-021-0/+19
|
* Cleaned up the efw-iptables CMake rulesDavid Sommerseth2009-09-021-3/+11
|
* Rewritten CMake rules to build common/ as static libraryDavid Sommerseth2009-04-111-2/+1
| | | | | | This static library is later on linked in. This is to avoid recompiling the same source files several times during a complete eurephia compilation.
* Restructured ./configure and improved the path setupDavid Sommerseth2009-03-301-1/+1
| | | | Also added install rules to XSLT files
* Made the licence explicit GPLv2 onlyDavid Sommerseth2009-03-261-1/+1
|
* Cleaned up the code a little bitDavid Sommerseth2009-03-261-3/+2
| | | | | Made sure we only include needed include files and checked that the copyright headers are equal and correct
* Made some messages clearer in efw-iptablesDavid Sommerseth2008-12-021-2/+2
|
* Made eurephia_context.h even more generic and independentDavid Sommerseth2008-11-281-1/+3
| | | | | | | | | eurephia_context.h do only need to know about the eurephiaFWINTF * struct when compiling the auth plug-in and firewall modules. To enable this, EUREPHIA_FWINTF needs to be defined as well as the eurephiafw_struct.h must be included before including eurephia_context.h in the source. When this is not done, *fwcfg will just be a void *.
* Renamed eurephia_struct.h to eurephia_context.hDavid Sommerseth2008-11-271-1/+1
| | | | | | | | | | | | | Since this include file now only consists of eurephiaCTX definition, it was moved to the common/ directory and renamed. Moved the SESSION_* definitions out of this file and into plugin/eurephiadb_session.h where they belong. Moved the Posix MQ definitions into plugin/firewall/eurephiafw_struct.h where they belong. eurephia_context.h is now containing only context related things.
* Renamed efw_iptables to efw-iptables (underscore -> dash)David Sommerseth2008-11-052-6/+6
|
* FEATURE: Enhanced firewall blacklisting to make it more flexibleDavid Sommerseth2008-11-051-2/+14
| | | | | | It will now support config option 'firewall_blacklist_send_to'. If set it will send all blacklisted IP addresses to this chain (iptables -j). If this option is not set, it will default to DROP.
* BUGFIX (2/2) ... implemented master side fix of shutdown bugDavid Sommerseth2008-11-011-2/+20
| | | | | Also changed the worker side to use sem_timedwait(), to not wait forever on shutdown acknowledge
* BUGFIX (1/2) ... implemented worker side fix of shutdown bugDavid Sommerseth2008-10-311-1/+9
|
* Created install rules via cmakeDavid Sommerseth2008-10-211-0/+1
|
* Added (untested) firewall block when IP addresses are blacklistedDavid Sommerseth2008-10-211-5/+32
| | | | | | | | If the configuration variable 'firewall_blacklist_destination' is set, it will insert DROP rules when a blacklisted IP address is attempted. Feature not tested yet.
* Reorganised the source codeDavid Sommerseth2008-10-152-0/+246
Moved all OpenVPN plug-in related things into ./plugins, including firewall Moved all shared code into ./common and moved the generic part of the database files into ./database Updated all CMakeLists.txt files and created a new one for the root directory
generated by cgit (git 2.34.1) at 2026-01-01 12:12:35 +0000