Skip to content
  1. Apr 03, 2020
  3. Mar 26, 2020
  5. Mar 04, 2020
  7. Mar 02, 2020
  9. Feb 22, 2020
  11. Jan 20, 2020
  13. Jan 19, 2020
  15. Jan 16, 2020
  17. Jan 15, 2020
  19. Jan 04, 2020
    • Jo-Philipp Wich's avatar
      luci-app-firewall: fix zone network default · d60a1a13
      Jo-Philipp Wich authored 
      

When a `config zone` section lacks an `option network` or `list network`
setting, its contained interface list defaults to the name of the zone,
e.g. a zone named `foo` will implicitely contain the network `foo` unless
a deviating or empty `option network` is specified.

Adjust the zones.js model accordingly to reflect that implicit default.

Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
      d60a1a13
  21. Dec 30, 2019
  23. Nov 22, 2019
  25. Nov 03, 2019
  27. Nov 01, 2019
  29. Sep 11, 2019
  31. Sep 10, 2019
  33. Aug 15, 2019
  35. Aug 14, 2019
  37. Aug 11, 2019
    • Aaron Jones's avatar
      luci-app-firewall: rules: sort ICMP types alphabetically · f7cb913d
      Aaron Jones authored 
      

This just makes it easier to find the type one would want.
No types were added or removed, only re-arranged.

Signed-off-by: default avatarAaron Jones <aaronmdjones@gmail.com>
      f7cb913d
    • Aaron Jones's avatar
      luci-app-firewall: rules: allow ICMPv6 ND types · 17f3e039
      Aaron Jones authored 
      

The "Match ICMP Type" dropdown had entries for router
solicitation & router advertisements, but not the more
generic neighbour solicitation & neighbour advertisements.

A LAN cannot function without Neighbour Discovery; this
means that setting a LAN interface default input policy to
REJECT breaks IPv6 WAN access for all hosts on that LAN;
as they can no longer discover their gateway's MAC address.
This can be fixed with appropriate rules allowing ND input,
which this patch allows one to do in LuCI.

The spelling is the same as in [1].

[1] <https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=package/network/config/firewall/files/firewall.config>

Signed-off-by: default avatarAaron Jones <aaronmdjones@gmail.com>
      17f3e039
  39. Jul 26, 2019
  41. Jul 22, 2019
  43. Jul 21, 2019
    • Jo-Philipp Wich's avatar
      luci-app-firewall: fix cbi form for rules · 0be4ad51
      Jo-Philipp Wich authored 
      

 - Set src/dest defaults only in initial section create state, otherwise it
   is impossible to specify output rules
 - Get rid of dest_remote/dest_local widget switching and implement change
   logic directly in tools.widgets.CBIZoneSelect
 - Remove leftover debug code

Ref: https://github.com/openwrt/luci/issues/2889
Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
      0be4ad51
  45. Jul 18, 2019
  47. Jul 07, 2019