]>
git.ipfire.org Git - people/ms/ipfire-2.x.git/log
Alexander Marx [Wed, 26 Jun 2013 13:25:50 +0000 (15:25 +0200)]
Forward Firewall: added missing fields to the converters (for dnat)
Alexander Marx [Wed, 26 Jun 2013 11:54:18 +0000 (13:54 +0200)]
UPNP: changed firewall chain from PORTFW to UPNPFW
Alexander Marx [Wed, 26 Jun 2013 11:43:53 +0000 (13:43 +0200)]
Forward Firewall: removed PORTFWACCESS flushing from rules.pl
Alexander Marx [Wed, 26 Jun 2013 11:30:30 +0000 (13:30 +0200)]
Forward Firewall: removed NAT table and txt file.
Alexander Marx [Wed, 26 Jun 2013 08:29:02 +0000 (10:29 +0200)]
Forward Firewall: changed layout of "apply-button" (after rules where changed. When using single hosts in rules, the prefix is no longer shown in the ruletable. Default settings for firewall-options changed
Alexander Marx [Wed, 26 Jun 2013 07:42:38 +0000 (09:42 +0200)]
Forward Firewall: removed dmz from forwardfw.cgi
Alexander Marx [Wed, 26 Jun 2013 07:07:05 +0000 (09:07 +0200)]
Forward Firewall: removed DMZ from rules.pl (does no longer exist, is forward now
Alexander Marx [Wed, 26 Jun 2013 05:56:35 +0000 (07:56 +0200)]
Forward Firewall: convert-dmz now puts converted files into /var/ipfire/forward/config instead of /var/ipfire/forward/dmz
Alexander Marx [Wed, 26 Jun 2013 05:38:15 +0000 (07:38 +0200)]
Forward Firewall: moved "firewall default behaviour" from firewall page to firewall-options page. Some changes in languagefiles de and en.
Alexander Marx [Tue, 25 Jun 2013 10:35:01 +0000 (12:35 +0200)]
Forward Firewall: reorganised ruletable layout
Alexander Marx [Thu, 20 Jun 2013 09:23:43 +0000 (11:23 +0200)]
Forward Firewall: on every reload of the new firewall-rules the firewall.local is also reloaded
Alexander Marx [Wed, 19 Jun 2013 11:31:40 +0000 (13:31 +0200)]
Forward Firewall: changed /etc/init.d/firewall. deleted stop routine and rearranged iptables_init and restart routine
Now it should be possible to use /etc/init.d/firewall restart without errors
Alexander Marx [Mon, 17 Jun 2013 10:45:57 +0000 (12:45 +0200)]
Forward Firewall: cleanup unused code
Alexander Marx [Mon, 17 Jun 2013 08:21:24 +0000 (10:21 +0200)]
Forward Firewall: changed order of LOG and DROP rules for INPUT Chain
Alexander Marx [Thu, 13 Jun 2013 08:17:18 +0000 (10:17 +0200)]
Forward Firewall: added checks if manual ip (src/tgt) is part of a OpenVPN to colour the rules accordingly
Alexander Marx [Wed, 12 Jun 2013 13:17:12 +0000 (15:17 +0200)]
Forward Firewall: INPUT Firewall added "ALL" with ip 0.0.0.0
Alexander Marx [Wed, 12 Jun 2013 13:05:31 +0000 (15:05 +0200)]
Forward Firewall 0.9.9.7: reordered INPUT POLICY.
Alexander Marx [Wed, 12 Jun 2013 11:00:20 +0000 (13:00 +0200)]
Forward Firewall: added OVPNBLOCK and fixed rules.pl to correctly get ip address of red iface
Michael Tremer [Wed, 12 Jun 2013 12:14:53 +0000 (14:14 +0200)]
openvpnctrl: Cleanup flushChain functions.
Michael Tremer [Wed, 12 Jun 2013 10:50:33 +0000 (12:50 +0200)]
openvpnctl: Flush BLOCK and SNAT chain when needed.
Alexander Marx [Tue, 11 Jun 2013 13:53:31 +0000 (15:53 +0200)]
Forward Firewall: Implemented INPUT Firewall (extended external access)
Now you are able to define INPUT Rules on every interface ip
Michael Tremer [Fri, 31 May 2013 11:31:48 +0000 (13:31 +0200)]
openvpnctrl: Block all transfer subnets.
Michael Tremer [Thu, 30 May 2013 19:55:26 +0000 (21:55 +0200)]
openvpnctrl: Remove unneeded code.
Alexander Marx [Mon, 27 May 2013 08:33:50 +0000 (10:33 +0200)]
Forward Firewall: BUGFIX: When creating DMZ Rules with MANUAL IP as source and afterwards editing the rule, the rule was copied and not just edited.
BUGFIX: When using SNAT (outbound) the rule does not seem to work. The NAT_SOURCE chain was on wron position in POSTROUTING
Alexander Marx [Wed, 22 May 2013 05:43:46 +0000 (07:43 +0200)]
Forward Firewall: extended the customservices list
Alexander Marx [Wed, 8 May 2013 06:19:03 +0000 (08:19 +0200)]
Forward Firewall: BUGFIX - when using source Protocol and NO target protocol only the target protocol is shown in ruletable.(But rule is applied correctly)
Alexander Marx [Tue, 7 May 2013 10:02:17 +0000 (12:02 +0200)]
Forward Firewall: fixed wrong log Entries INPUT_DROP when connected via Web or ssh
Alexander Marx [Thu, 2 May 2013 13:55:14 +0000 (15:55 +0200)]
Forward Firewall: restored old settings in graphs.pl. With new Monofont the columnsize is ok now
Alexander Marx [Tue, 30 Apr 2013 07:58:01 +0000 (09:58 +0200)]
Forward Firewall: edited rules.pl so that in the rules the ip addresses from the remote ovpn N2N subnet are used instead of the openvpn subnet(because its only used as transfer net)
Alexander Marx [Tue, 30 Apr 2013 06:13:54 +0000 (08:13 +0200)]
Forward Firewall: reordered some rules to get rid of INPUT_DROP messages in log when connected to webinterface
Alexander Marx [Mon, 29 Apr 2013 14:12:14 +0000 (16:12 +0200)]
Forward Firewall: bugfix: counter failure when adding one host to more than 1 Group
Alexander Marx [Fri, 26 Apr 2013 08:24:34 +0000 (10:24 +0200)]
Forward Firewall: changed sort-order to Sort::Naturally. This Perl Module will be available since core 68.
Alexander Marx [Wed, 24 Apr 2013 09:49:11 +0000 (11:49 +0200)]
Forward Firewall: if ipsec rw net is set to green subnet, the rules are colored green instead of purple
Alexander Marx [Tue, 23 Apr 2013 12:21:52 +0000 (14:21 +0200)]
Forward Firewall: removed devel-tags
Alexander Marx [Tue, 23 Apr 2013 12:14:58 +0000 (14:14 +0200)]
Forward Firewall: rewrote portcheck routine in ovpnmain so that checks for portforwardingports are made against /var/ipfire/forward/nat instead of /var/ipfire/portfw/config
Alexander Marx [Fri, 19 Apr 2013 11:12:56 +0000 (13:12 +0200)]
Forward Firewall: added some plausi checks. Now it is checked if someone enters an manual ip address that is a openvpn client.
The colors are set correctly in ruletable when someone enters a manual ip which belongs to an IPsec Network, IPsec Roadwarrior (if iprange set) or openvpn n2n
Alexander Marx [Wed, 17 Apr 2013 10:02:13 +0000 (12:02 +0200)]
Forward Firewall: 0.9.9.4a - Bugfix typo in firewallscript, DMZ Link on startpage now leads to firewall instead of dmzpinholes
Alexander Marx [Mon, 15 Apr 2013 18:29:15 +0000 (20:29 +0200)]
Forward Firewall: rules for collectd now in firewall-policy instead of /etc/init.d/firewall
Alexander Marx [Mon, 15 Apr 2013 13:02:50 +0000 (15:02 +0200)]
Forward Firewall: some changes in firewall script to make collectd work
Alexander Marx [Mon, 15 Apr 2013 10:00:35 +0000 (12:00 +0200)]
Forward Firewall: Firewall Hits graph now with stacked values
Alexander Marx [Mon, 15 Apr 2013 07:50:39 +0000 (09:50 +0200)]
Forward Firewall: added drop rules to firewall's stop script so that collectd is working
Alexander Marx [Mon, 15 Apr 2013 03:50:20 +0000 (05:50 +0200)]
Forward Firewall: enabled /var/ipfire/optionsfw/settings in configroot
Alexander Marx [Sun, 14 Apr 2013 13:10:13 +0000 (15:10 +0200)]
Forward Firewall: fixed firewall hits statistik and extended it to show input,output,forward,newnotsyn and portscan seperately.
Alexander Marx [Fri, 12 Apr 2013 10:39:57 +0000 (12:39 +0200)]
Forward Firewall: edited include file of backup.
Alexander Marx [Thu, 11 Apr 2013 15:33:22 +0000 (17:33 +0200)]
Forward Firewall: added SNAT multiport support
Alexander Marx [Thu, 11 Apr 2013 08:50:29 +0000 (10:50 +0200)]
Forward Firewall: Added multiport support to DNAT/Portforwarding
Now it is possible to use multiple ports under DNAT when TARGET has no Port, one Port or one Portrange defined
Alexander Marx [Mon, 8 Apr 2013 13:32:49 +0000 (15:32 +0200)]
Forward Firewall: little changes in ruletable layout. (Headline)
Alexander Marx [Thu, 4 Apr 2013 12:18:04 +0000 (14:18 +0200)]
Forward Firewall: some changes in en.pl and de.pl. Also adapted "apply" button in fwhosts.cgi
Alexander Marx [Thu, 4 Apr 2013 11:02:50 +0000 (13:02 +0200)]
Forward Firewall: Version 0.9.9.2
1) Some changes in en.pl
2) DNAT now supports REJECT/DROP rules
3) Bugfix: comma in remark customservicegroup
4) improved installer
Alexander Marx [Tue, 2 Apr 2013 09:24:22 +0000 (11:24 +0200)]
Forward Firewall: some fixes:
1) Counter was not correctly decreased when deleting a network from a customgroup
2) Convert-outgoingfw improved
3) Backup didn't set filepermissions correctly
Alexander Marx [Tue, 2 Apr 2013 06:43:18 +0000 (08:43 +0200)]
Forward Firewall: some typos in dmz-converter
Alexander Marx [Tue, 2 Apr 2013 03:40:50 +0000 (05:40 +0200)]
Forward Firewall: added dmz-converter.
Also extended backup.pl script to support old backups. Now it is possible to restore old backups into new firewall. On restore, all config files of new firewall will be destroyed and the 4 converters will recreate them.
Alexander Marx [Mon, 1 Apr 2013 04:26:58 +0000 (06:26 +0200)]
Forward Firewall: enabled Portranges for DNAT
Alexander Marx [Sun, 31 Mar 2013 14:18:12 +0000 (16:18 +0200)]
Forward Firewall: bugfix: DNAT now correctly creates rules, when customservice defined as target
Alexander Marx [Wed, 27 Mar 2013 11:36:19 +0000 (12:36 +0100)]
Forward Firewall: fix NAT-rules: iptables rule was not applied correctly in PORTFWACCESS
Alexander Marx [Tue, 26 Mar 2013 07:35:45 +0000 (08:35 +0100)]
Forward Firewall: bugfix
1) When editing a NAT rule, error message "port already used" fixed
Alexander Marx [Fri, 22 Mar 2013 06:55:17 +0000 (07:55 +0100)]
Forward Firewall: Version update forwardfw.cgi
Alexander Marx [Thu, 21 Mar 2013 16:34:30 +0000 (17:34 +0100)]
Forward Firewall: cleanup of initscript. Fixes double log entries when INPUT is set to REJECT
Alexander Marx [Thu, 21 Mar 2013 13:36:29 +0000 (14:36 +0100)]
Forward Firewall: Bugfix: blue was allowed to connect to everywhere if forward firewall was open
Alexander Marx [Thu, 21 Mar 2013 09:35:07 +0000 (10:35 +0100)]
Forward Firewall: Fix converter-outgoingfw. Produced wrong counters while converting
Alexander Marx [Thu, 21 Mar 2013 06:47:28 +0000 (07:47 +0100)]
Forward Firewall: fixed layout of deleted host in custom group
changed version nr in forwardfw.cgi
Alexander Marx [Thu, 21 Mar 2013 06:34:05 +0000 (07:34 +0100)]
Forward Firewall: fixed converter bug: Remark is "0" and Alias ip is taken as ip instead of name
Alexander Marx [Wed, 20 Mar 2013 10:03:29 +0000 (11:03 +0100)]
Forward Firewall: 0.9.8.7 Implemented SNAT/DNAT
reorganized firewall chains
Alexander Marx [Tue, 19 Mar 2013 11:56:38 +0000 (12:56 +0100)]
Forward Firewall: clean up some files
Fix iptables loop wirelessctrl
Fix firewall chain order
Fix policies (added comment for statistic)
Alexander Marx [Tue, 19 Mar 2013 04:39:53 +0000 (05:39 +0100)]
Forward Firewall: deleted portfw from buildsystem
Alexander Marx [Tue, 19 Mar 2013 04:23:54 +0000 (05:23 +0100)]
Forward Firewall: delete old Portforwarding from Firewall-menu
Alexander Marx [Tue, 19 Mar 2013 04:15:20 +0000 (05:15 +0100)]
Forward Firewall: delete old portforwarding from system and fix for wlan-firewall part 1 (loop)
Alexander Marx [Tue, 19 Mar 2013 03:48:23 +0000 (04:48 +0100)]
Forward Firewall: support for SNAT/DNAT in GUI and rules.pl
Alexander Marx [Sun, 17 Mar 2013 12:49:57 +0000 (13:49 +0100)]
Forward Firewall: Added support for DNAT/SNAT to forwardfw.cgi
Alexander Marx [Thu, 14 Mar 2013 15:24:52 +0000 (16:24 +0100)]
Forward Firewall: Firewall sets Internetdevice correctly now (was always red0)
Alexander Marx [Thu, 14 Mar 2013 05:11:28 +0000 (06:11 +0100)]
Forward Firewall:
1) Custom Hosts: now 17 chars can be entered into IP/MAC field
2) Forwardfw: Bugfix: When no alias is set and IPFIRE is selected as target, no target address is recognised
3) Forwardfw: Now source and Target addressfield (manual) are set to 17 chars maxlegth.
4) Converter: Bugfix: When starting converter from commandline, all hosts are entered into groups again.
Alexander Marx [Wed, 13 Mar 2013 07:50:32 +0000 (08:50 +0100)]
Forward Firewall: moved ruleaction-dropdown from top to target area.
some layout changes in forwardfw.cgi (when no alias exists, the dropdown after ipfire is not shown)
Alexander Marx [Wed, 13 Mar 2013 05:02:35 +0000 (06:02 +0100)]
Forward Firewall: fix converter for outgoingfw. remarkfield (new) was not implemented here
fwhosts: Some layout changes in tables (cellspacing='0')
Alexander Marx [Tue, 12 Mar 2013 13:51:34 +0000 (14:51 +0100)]
Forward Firewall: forgot to delete devel-comment
Alexander Marx [Tue, 12 Mar 2013 13:46:16 +0000 (14:46 +0100)]
Forward Firewall: fixed a bug in convert-outgoingfw. THe hosts are created with wrong amount of fields in hasharray.
Also fixed a bug which sets wrong firewall mode for FORWARD when outgoing rules are used.
Alexander Marx [Fri, 8 Mar 2013 07:58:22 +0000 (08:58 +0100)]
Forward Firewall: changes in de languagefile
Alexander Marx [Fri, 8 Mar 2013 07:38:41 +0000 (08:38 +0100)]
Forward Firewall: Fix ruletimes. Now the timevalues which are entered in the gui are saved to the rulefile.
Wenn rule.pl is called, the script calculates the difference to UTC time and sets the iptables times accordingly.
With this approach there's no need to save if the times are created in summertime or wintertime.
Alexander Marx [Thu, 7 Mar 2013 09:01:24 +0000 (10:01 +0100)]
Forward Firewall: put rule OUTGOING ACCEPT Related, established into /etc/init.d/firewall
deleted ACCEPT OUTGOINGFW related,established from POLICYOUT
Alexander Marx [Thu, 7 Mar 2013 06:43:28 +0000 (07:43 +0100)]
Forward Firewall: removed --kerneltz from rules.pl. New function timeconvert in forwardfw.cgiu takes care of timeconversion now
Alexander Marx [Thu, 7 Mar 2013 05:35:03 +0000 (06:35 +0100)]
Forward Firewall: Try to implement a timeconverter for Rules. New function timeconvert should convert localtime agains gmtime.
Alexander Marx [Tue, 5 Mar 2013 10:33:21 +0000 (11:33 +0100)]
Forward Firewall: New Version 0.9.8.2
Alexander Marx [Tue, 5 Mar 2013 10:21:13 +0000 (11:21 +0100)]
Forward Firewall: wrong <font> Tag leads to a sidemenu with small font
Alexander Marx [Tue, 5 Mar 2013 08:47:21 +0000 (09:47 +0100)]
Forward Firewall: added --kerneltz option to timeframe
Alexander Marx [Tue, 5 Mar 2013 05:00:07 +0000 (06:00 +0100)]
Forward Firewall: Fixed ruletable (view of protocols)
Alexander Marx [Mon, 4 Mar 2013 19:56:20 +0000 (20:56 +0100)]
Forward Firewall: Bugfix: When having more than 1 ICMP rule in a group, the rule is not created.
Also changed (INPUT) to (Input) in firewall-options
Alexander Marx [Sun, 3 Mar 2013 19:29:29 +0000 (20:29 +0100)]
Forward Firewall: Added versionnumber on bottom right of firewall.
Alexander Marx [Sun, 3 Mar 2013 19:12:34 +0000 (20:12 +0100)]
Forward Firewall: Updated strongswan patch provided my Michael. (Changes _updown script from FORWARD ACCEPT to RETURN)
Alexander Marx [Sun, 3 Mar 2013 05:12:01 +0000 (06:12 +0100)]
Forward Firewall: Added configoption in Buildsystem -< POLICY2='DROP' (for POLICYIN)
Alexander Marx [Sun, 3 Mar 2013 04:59:42 +0000 (05:59 +0100)]
Forward Firewall: /etc/init.d/firewall now creates POLICYIN
Alexander Marx [Sun, 3 Mar 2013 04:14:22 +0000 (05:14 +0100)]
Forward Firewall: Added Firewall-Options for INPUT Policy (DROP/REJECT) and built a new INPUT-POLICY in firewall-policy.
Alexander Marx [Sat, 2 Mar 2013 11:43:16 +0000 (12:43 +0100)]
Forward Firewall: update _updown on build
Alexander Marx [Sat, 2 Mar 2013 05:11:16 +0000 (06:11 +0100)]
Forward Firewall: deleted outgoingfwmac, is now useless
Alexander Marx [Fri, 1 Mar 2013 09:43:25 +0000 (10:43 +0100)]
Forward Firewall: deleted creation of OVPNFORWARD and the accept rule.
Alexander Marx [Thu, 28 Feb 2013 08:49:45 +0000 (09:49 +0100)]
Forward FIrewall: fixed typo
Alexander Marx [Thu, 28 Feb 2013 07:27:16 +0000 (08:27 +0100)]
Forward Firewall: LAyout change: All dropdowns now have same size
Alexander Marx [Thu, 28 Feb 2013 07:13:13 +0000 (08:13 +0100)]
Forward Firewall: chnaged "Internet" to "INTERNET" in dropdown (Target)
Alexander Marx [Thu, 28 Feb 2013 06:30:24 +0000 (07:30 +0100)]
Forward Firewall: reordered Firewall Menu and changed header.pl to reflect the new menuposition for Blue Access
Alexander Marx [Thu, 28 Feb 2013 05:05:32 +0000 (06:05 +0100)]
Forward Firewall: added an option to firewall-options to show all dropdowns on rulecreation site.
Alexander Marx [Wed, 27 Feb 2013 13:23:20 +0000 (14:23 +0100)]
Forward Firewall: Changed layout of rulecreation. Now only the dropdowns for configured networks are shown on the site
Also changed fwhosts.cgi (custom groups) to the same feature
Alexander Marx [Wed, 27 Feb 2013 04:35:41 +0000 (05:35 +0100)]
Forward Firewall: Some changes in langagefiles and layout in fwhosts.cgi