 Edvinas Valatka
|
905cb8ef26
State NEW must have SYN flag
|
8 years ago |
|
Edvinas Valatka
|
1c8a5547e0
Fix masquerading for LAN
|
8 years ago |
|
Edvinas Valatka
|
c7ec23d346
Rework logging
|
8 years ago |
|
Edvinas Valatka
|
948e1884fb
Custom chain for REJECT
|
8 years ago |
|
Edvinas Valatka
|
1d44827cc3
Make hooks names short
|
8 years ago |
|
Edvinas Valatka
|
0714af9b27
Make iptables invocation configurable
|
8 years ago |
|
Edvinas Valatka
|
1e78539acc
Use array for hooks
|
8 years ago |
|
Edvinas Valatka
|
568bf88103
Rework init and lan parts
|
8 years ago |
|
Edvinas Valatka
|
ba062c3614
Add scanner to ipset
|
8 years ago |
|
Edvinas Valatka
|
b885eda08b
Better logging
|
8 years ago |
|
Edvinas Valatka
|
5d9b1350c1
Define default IPTABLESCMD
|
8 years ago |
|
Edvinas Valatka
|
d5f34ed7d9
Use $IPTABLESCMD over iptables
|
8 years ago |
|
Edvinas Valatka
|
11adc6aa3c
Accuire lock when inserting iptables rules
|
9 years ago |
|
Edvinas Valatka
|
ec0e426859
Make ipset set size configurable
|
9 years ago |
|
Edvinas Valatka
|
36b9bcbfb5
Implement port range forwarding
|
9 years ago |
|
Edvinas Valatka
|
4b3c8c1b41
Cleanup
|
9 years ago |
|
Edvinas Valatka
|
550ee9b239
Bugfixes:
|
9 years ago |
|
Edvinas Valatka
|
c15857fe68
Implement nat forwarding
|
9 years ago |
|
Edvinas Valatka
|
7e9a96b6f8
rename _open to _public
|
9 years ago |
|
Edvinas Valatka
|
258fee895c
Use semantic names for config files
|
9 years ago |
|
Edvinas Valatka
|
76e5a8394f
Fix loop syntax
|
9 years ago |
|
Edvinas Valatka
|
66cb1273c4
wip
|
9 years ago |
|
Edvinas Valatka
|
33963babcc
Add proto to rules
|
9 years ago |
|
Edvinas Valatka
|
21fa420f7e
Move to conntrack module
|
9 years ago |
|
Edvinas Valatka
|
20f9b3b7b7
Reject only NEW state
|
9 years ago |
|
Edvinas Valatka
|
3969c133b9
[e-router] Feat: scanips, debug levels, refactor names
|
9 years ago |
|
Edvinas Valatka
|
ed96019ba8
Set/update entry timeout at insert
|
9 years ago |
|
Edvinas Valatka
|
2309d9d785
Set default timeout for goodips
|
9 years ago |
|
Edvinas Valatka
|
2887cb2f1a
Ping allowed only from whiteipsets
|
9 years ago |
|
Edvinas Valatka
|
c9a66c9781
Tune new connection passing
|
9 years ago |
