Commits · f64b3d509446cc78a7df746b174bdab330f23ab2 · openwrt / luci

Mar 01, 2021
- luci-app-firewall: allow negative prefix lengths · f64b3d50
  Jo-Philipp Wich authored Mar 01, 2021
```
Fixes: #4812
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  f64b3d50
- luci-app-firewall: zones.js: fix HTML display in ct helper selection · 154117ff
  Jo-Philipp Wich authored Mar 01, 2021
```
Fixes: #4845
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  154117ff
- luci-app-firewall: fix creating multiple networks from zone network selector · 5d528da2
  Jo-Philipp Wich authored Mar 01, 2021
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  5d528da2
Feb 19, 2021

luci-app-firewall: properly handle custom multi IP/MAC input · b60be8cf

Jo-Philipp Wich authored Feb 19, 2021



Store multiple space separated custom address values as separate uci
list items in the configuration.

Fixes: #4822
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

b60be8cf

Jan 13, 2021
- luci-app-firewall: add tooltip on rules that have time restrictions enabled · ab390cf9
  Florian Eckert authored Jan 13, 2021
```
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
```
  ab390cf9
- luci-app-firewall: add limited masquerading tooltip · 4bbf6db9
  Florian Eckert authored Dec 18, 2020
```
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
```
  4bbf6db9
Dec 16, 2020

luci-app-firewall: map proto '*' and 'any' to all on rule config · 972096bf

Florian Eckert authored Dec 11, 2020

Before the change, the options '*' and 'any' in the drop down were not
recognized as valid options, when loaded from the uci. With this change,
the options '*' and 'any' are mapped to 'all' and saved as such. This
change is especially important if the proto option is changed manually
to '*' or 'any' in shell and then further configured via LuCI.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

972096bf

Nov 20, 2020
- luci-app-firewall: fix removing networks from zone · 4dbf600d
  Jo-Philipp Wich authored Nov 20, 2020
```
Fixes: #4608
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  4dbf600d
Oct 01, 2020

luci-app-firewall: rules: add ICMPv6 Packet Too Big (Type 2) · 43dc4208

Robby K authored Oct 01, 2020



The "Match ICMP type" drop-down menu was missing this ICMPv6 type. According to RFC 4890 section 4.3.1 it is essential for communications and must not be dropped. This patch allows for doing this through LuCI.

Signed-off-by: Robby K <robbyke@gmail.com>

43dc4208

Jul 05, 2020
- luci-app-firewall: migrate syn_flood option to synflood_protect on save · 0abcb39b
  Jo-Philipp Wich authored Jul 05, 2020
```
Fixes: #4220
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  0abcb39b
Apr 14, 2020
- luci-app-firewall: tools/firewall.js: honour readonly property · 952b1691
  Jo-Philipp Wich authored Apr 13, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  952b1691
Apr 03, 2020
- treewide: import utility classes explicitly · 3c4bc228
  Jo-Philipp Wich authored Apr 03, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  3c4bc228
Mar 26, 2020

luci-app-firewall: use Firewall.removeZone() helper · 0ff4dc82

Jo-Philipp Wich authored Mar 26, 2020



Fixes: FS#2932
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2932
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

0ff4dc82

Mar 04, 2020
- luci-app-firewall: tools.firewall: properly handle protocol 0 · 2c036b36
  Jo-Philipp Wich authored Mar 04, 2020
```
The existing code failed to anticipate that '' == 0 in JS.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  2c036b36
Mar 02, 2020

luci-app-firewall: don't treat zone name as network fallback · 663134cd

Jo-Philipp Wich authored Mar 02, 2020

Drop obsolete extra logic which treats the zone name as covered network
name in case the network list is unset. This behaviour applied to the
pre-fw3 uci firewall, but is not supported since fw3 anymore.

Ref: https://forum.openwrt.org/t/luci-zone-creation-bug/55921
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

663134cd

Feb 22, 2020
- luci-app-firewall: snats.js: fix rewrite IP validation for SNAT target · d527c28f
  Jo-Philipp Wich authored Feb 22, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d527c28f
Jan 20, 2020
- luci-app-firewall: fix variable clash leading to incorrect family display · 9fd7e9fc
  Jo-Philipp Wich authored Jan 20, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  9fd7e9fc
Jan 19, 2020

luci-app-firewall: add SNAT config migration · f1771d14
Jo-Philipp Wich authored Jan 19, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
f1771d14

luci-app-firewall: rework rule descriptions, deduplicate code · 7944b0a9

Jo-Philipp Wich authored Jan 19, 2020



Use a simple custom format string DSL to assemble the rule description
texts in the overview page.

Also move common code for shared, complex cbi options to the firewall
tool class.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

7944b0a9

Jan 16, 2020
- luci-app-firewall: consolidate duplicate option code · 0608ff09
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  0608ff09
- luci-app-firewall: support 'limit' and 'limit_burst' options · 28f4a9fc
  Jo-Philipp Wich authored Jan 16, 2020
```
Also resync firewall translations.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  28f4a9fc
- luci-app-firewall: support 'DSCP' action and matches for rules · aa62419e
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  aa62419e
- luci-app-firewall: support 'MARK' action and matches for rules · 3c0fcf49
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  3c0fcf49
- luci-app-firewall: support 'mark' parameter for redirects · cdf240f0
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  cdf240f0
- luci-app-firewall: support 'helper' and 'reflection_src' parameters for redirects · 61fe2146
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  61fe2146
- luci-app-firewall: support 'helper' and 'set_helper' parameters for rules · d601e79d
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d601e79d
- luci-app-firewall: support 'direction' and 'device' parameters for rules · 267085cf
  Jo-Philipp Wich authored Jan 16, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  267085cf
- luci-app-firewall: fix family display for port forwards · a178cdb5
  Jo-Philipp Wich authored Jan 16, 2020
```
The underlying fw3 program currently only does IPv4 port forwards while
LuCI incorrectly reports IPv4 + IPv6 for each forward. Adjust the text
accordingly to fix this.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  a178cdb5
Jan 15, 2020
- luci-app-firewall: introduce support for "config nat" sections · c8b8ae6b
  Jo-Philipp Wich authored Jan 15, 2020
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  c8b8ae6b
Jan 04, 2020

luci-app-firewall: fix zone network default · d60a1a13

Jo-Philipp Wich authored Jan 04, 2020

When a `config zone` section lacks an `option network` or `list network`
setting, its contained interface list defaults to the name of the zone,
e.g. a zone named `foo` will implicitely contain the network `foo` unless
a deviating or empty `option network` is specified.

Adjust the zones.js model accordingly to reflect that implicit default.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

d60a1a13

Dec 30, 2019
- luci-app-firewall: update rule ip hints based on address family · d07cfba1
  Jo-Philipp Wich authored Dec 30, 2019
```
Fixes: #3119
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  d07cfba1
- luci-app-firewall: store week- and monthday restrictions as strings · 18c60968
  Jo-Philipp Wich authored Dec 30, 2019
```
Fixes: FS#2661
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2661
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  18c60968
Nov 22, 2019
- luci-app-firewall: remove obsolete "conntrack" option · f6e56e67
  Jo-Philipp Wich authored Nov 22, 2019
```
Fixes: #3342
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  f6e56e67
Nov 03, 2019
- treewide: require ui.js explicitly · 86f49217
  Jo-Philipp Wich authored Nov 03, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  86f49217
- luci-base, luci-app-firewall: port custom rules to client side view · 9e57fbb2
  Jo-Philipp Wich authored Nov 03, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  9e57fbb2
Nov 01, 2019
- luci-base, luci-mod-network, luci-app-firewall: migrate luci/getHostHints · 37b6092a
  Jo-Philipp Wich authored Oct 31, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  37b6092a
Sep 11, 2019
- luci-app-firewall: display "this new zone" instead of "undefined" · f9e2d60f
  Nicholas Smith authored Sep 02, 2019
```
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
```
  f9e2d60f
- luci-app-firewall: disallow creating zone without name · eeced347
  Jo-Philipp Wich authored Sep 11, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  eeced347
Sep 10, 2019
- luci-app-firewall: filter alias interfaces in zone device selection · 42bc712e
  Jo-Philipp Wich authored Aug 21, 2019
```
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
```
  42bc712e
Aug 15, 2019

luci-app-firewall: fix zone overview page after rpc procedure renaming · 42bd5aa9

Jo-Philipp Wich authored Aug 15, 2019



The "conntrack_helpers" method has been renamed to "getConntrackHelpers".

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

42bd5aa9