Commits · bbf1a5343f1d930096cd5ff6b98f3e1f2f0d3c9a · openwrt / luci

Mar 15, 2021
- luci-app-firewall: simplify some form actions · bbf1a534
  Jo-Philipp Wich authored Aug 06, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  bbf1a534
Mar 01, 2021
- luci-app-firewall: allow negative prefix lengths · f64b3d50
  Jo-Philipp Wich authored Mar 01, 2021
```
Fixes: #4812
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  f64b3d50
- luci-app-firewall: zones.js: fix HTML display in ct helper selection · 154117ff
  Jo-Philipp Wich authored Mar 01, 2021
```
Fixes: #4845
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  154117ff
- luci-app-firewall: fix creating multiple networks from zone network selector · 5d528da2
  Jo-Philipp Wich authored Mar 01, 2021
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  5d528da2
Jan 13, 2021
- luci-app-firewall: add tooltip on rules that have time restrictions enabled · ab390cf9
  Florian Eckert authored Jan 13, 2021
```
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
```
  ab390cf9
- luci-app-firewall: add limited masquerading tooltip · 4bbf6db9
  Florian Eckert authored Dec 18, 2020
```
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
```
  4bbf6db9
Nov 20, 2020
- luci-app-firewall: fix removing networks from zone · 4dbf600d
  Jo-Philipp Wich authored Nov 20, 2020
```
Fixes: #4608
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  4dbf600d
Oct 01, 2020

luci-app-firewall: rules: add ICMPv6 Packet Too Big (Type 2) · 43dc4208

Robby K authored Oct 01, 2020



The "Match ICMP type" drop-down menu was missing this ICMPv6 type. According to RFC 4890 section 4.3.1 it is essential for communications and must not be dropped. This patch allows for doing this through LuCI.

Signed-off-by: Robby K <robbyke@gmail.com>

43dc4208

Jul 05, 2020
- luci-app-firewall: migrate syn_flood option to synflood_protect on save · 0abcb39b
  Jo-Philipp Wich authored Jul 05, 2020
```
Fixes: #4220
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  0abcb39b
Apr 03, 2020
- treewide: import utility classes explicitly · 3c4bc228
  Jo-Philipp Wich authored Apr 03, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  3c4bc228
Mar 26, 2020

luci-app-firewall: use Firewall.removeZone() helper · 0ff4dc82

Jo-Philipp Wich authored Mar 26, 2020



Fixes: FS#2932
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2932
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

0ff4dc82

Mar 02, 2020

luci-app-firewall: don't treat zone name as network fallback · 663134cd

Jo-Philipp Wich authored Mar 02, 2020

Drop obsolete extra logic which treats the zone name as covered network
name in case the network list is unset. This behaviour applied to the
pre-fw3 uci firewall, but is not supported since fw3 anymore.

Ref: https://forum.openwrt.org/t/luci-zone-creation-bug/55921
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

663134cd

Feb 22, 2020
- luci-app-firewall: snats.js: fix rewrite IP validation for SNAT target · d527c28f
  Jo-Philipp Wich authored Feb 22, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d527c28f
Jan 20, 2020
- luci-app-firewall: fix variable clash leading to incorrect family display · 9fd7e9fc
  Jo-Philipp Wich authored Jan 20, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  9fd7e9fc
Jan 19, 2020

luci-app-firewall: add SNAT config migration · f1771d14
Jo-Philipp Wich authored Jan 19, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
f1771d14

luci-app-firewall: rework rule descriptions, deduplicate code · 7944b0a9

Jo-Philipp Wich authored Jan 19, 2020



Use a simple custom format string DSL to assemble the rule description
texts in the overview page.

Also move common code for shared, complex cbi options to the firewall
tool class.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

7944b0a9

Jan 16, 2020
- luci-app-firewall: consolidate duplicate option code · 0608ff09
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  0608ff09
- luci-app-firewall: support 'limit' and 'limit_burst' options · 28f4a9fc
  Jo-Philipp Wich authored Jan 16, 2020
```
Also resync firewall translations.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  28f4a9fc
- luci-app-firewall: support 'DSCP' action and matches for rules · aa62419e
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  aa62419e
- luci-app-firewall: support 'MARK' action and matches for rules · 3c0fcf49
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  3c0fcf49
- luci-app-firewall: support 'mark' parameter for redirects · cdf240f0
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  cdf240f0
- luci-app-firewall: support 'helper' and 'reflection_src' parameters for redirects · 61fe2146
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  61fe2146
- luci-app-firewall: support 'helper' and 'set_helper' parameters for rules · d601e79d
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d601e79d
- luci-app-firewall: support 'direction' and 'device' parameters for rules · 267085cf
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  267085cf
- luci-app-firewall: fix family display for port forwards · a178cdb5
  Jo-Philipp Wich authored Jan 16, 2020
```
The underlying fw3 program currently only does IPv4 port forwards while
LuCI incorrectly reports IPv4 + IPv6 for each forward. Adjust the text
accordingly to fix this.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  a178cdb5
Jan 15, 2020
- luci-app-firewall: introduce support for "config nat" sections · c8b8ae6b
  Jo-Philipp Wich authored Jan 15, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  c8b8ae6b
Jan 04, 2020

luci-app-firewall: fix zone network default · d60a1a13

Jo-Philipp Wich authored Jan 04, 2020

When a `config zone` section lacks an `option network` or `list network`
setting, its contained interface list defaults to the name of the zone,
e.g. a zone named `foo` will implicitely contain the network `foo` unless
a deviating or empty `option network` is specified.

Adjust the zones.js model accordingly to reflect that implicit default.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

d60a1a13

Dec 30, 2019
- luci-app-firewall: update rule ip hints based on address family · d07cfba1
  Jo-Philipp Wich authored Dec 30, 2019
```
Fixes: #3119
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d07cfba1
- luci-app-firewall: store week- and monthday restrictions as strings · 18c60968
  Jo-Philipp Wich authored Dec 30, 2019
```
Fixes: FS#2661
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2661
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  18c60968
Nov 22, 2019
- luci-app-firewall: remove obsolete "conntrack" option · f6e56e67
  Jo-Philipp Wich authored Nov 22, 2019
```
Fixes: #3342
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  f6e56e67
Nov 03, 2019
- treewide: require ui.js explicitly · 86f49217
  Jo-Philipp Wich authored Nov 03, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  86f49217
- luci-base, luci-app-firewall: port custom rules to client side view · 9e57fbb2
  Jo-Philipp Wich authored Nov 03, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  9e57fbb2
Nov 01, 2019
- luci-base, luci-mod-network, luci-app-firewall: migrate luci/getHostHints · 37b6092a
  Jo-Philipp Wich authored Oct 31, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  37b6092a
Sep 11, 2019
- luci-app-firewall: display "this new zone" instead of "undefined" · f9e2d60f
  Nicholas Smith authored Sep 02, 2019
```
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
```
  f9e2d60f
- luci-app-firewall: disallow creating zone without name · eeced347
  Jo-Philipp Wich authored Sep 11, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  eeced347
Sep 10, 2019
- luci-app-firewall: filter alias interfaces in zone device selection · 42bc712e
  Jo-Philipp Wich authored Aug 21, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  42bc712e
Aug 15, 2019

luci-app-firewall: fix zone overview page after rpc procedure renaming · 42bd5aa9

Jo-Philipp Wich authored Aug 15, 2019



The "conntrack_helpers" method has been renamed to "getConntrackHelpers".

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

42bd5aa9

Aug 14, 2019
- luci-app-firewall: honour global default policies in per-zone settings · ed8f1c4c
  Jo-Philipp Wich authored Aug 14, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  ed8f1c4c
- luci-app-firewall: drop usage of getOffloadSupport() · 9f032e02
  Jo-Philipp Wich authored Aug 14, 2019
```
Rely on the more generic L.hasSystemFeature() from now on.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  9f032e02
Aug 11, 2019

luci-app-firewall: rules: sort ICMP types alphabetically · f7cb913d

Aaron Jones authored Aug 11, 2019



This just makes it easier to find the type one would want.
No types were added or removed, only re-arranged.

Signed-off-by: Aaron Jones <aaronmdjones@gmail.com>

f7cb913d