Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
14181 commits 13 branches 13 tags 306 MiB
Commit graph

15 commits

Author SHA1 Message Date
Jo-Philipp Wich
0abcb39b62 luci-app-firewall: migrate syn_flood option to synflood_protect on save 
Fixes: 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-07-05 00:51:59 +02:00
Jo-Philipp Wich
3c4bc228a1 treewide: import utility classes explicitly 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-04-03 10:00:06 +02:00
Jo-Philipp Wich
0ff4dc822b luci-app-firewall: use Firewall.removeZone() helper 
Fixes: FS#2932
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2932
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-03-26 19:15:27 +01:00
Jo-Philipp Wich
663134cd2d luci-app-firewall: don't treat zone name as network fallback 
Drop obsolete extra logic which treats the zone name as covered network
name in case the network list is unset. This behaviour applied to the
pre-fw3 uci firewall, but is not supported since fw3 anymore.

Ref: https://forum.openwrt.org/t/luci-zone-creation-bug/55921
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-03-02 10:11:44 +01:00
Jo-Philipp Wich
f1771d14aa luci-app-firewall: add SNAT config migration 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-01-19 19:38:07 +01:00
Jo-Philipp Wich
d60a1a13b0 luci-app-firewall: fix zone network default 
When a `config zone` section lacks an `option network` or `list network`
setting, its contained interface list defaults to the name of the zone,
e.g. a zone named `foo` will implicitely contain the network `foo` unless
a deviating or empty `option network` is specified.

Adjust the zones.js model accordingly to reflect that implicit default.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-01-04 18:48:49 +01:00
Jo-Philipp Wich
f6e56e67e8 luci-app-firewall: remove obsolete "conntrack" option 
Fixes: 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-11-22 08:50:14 +01:00
Nicholas Smith
f9e2d60f13 luci-app-firewall: display "this new zone" instead of "undefined" 
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
 2019-09-11 12:52:24 +02:00
Jo-Philipp Wich
eeced34765 luci-app-firewall: disallow creating zone without name 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-09-11 12:46:59 +02:00
Jo-Philipp Wich
42bc712e2c luci-app-firewall: filter alias interfaces in zone device selection 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-09-10 15:28:16 +02:00
Jo-Philipp Wich
42bd5aa9c4 luci-app-firewall: fix zone overview page after rpc procedure renaming 
The "conntrack_helpers" method has been renamed to "getConntrackHelpers".

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-08-15 15:40:46 +02:00
Jo-Philipp Wich
ed8f1c4c1c luci-app-firewall: honour global default policies in per-zone settings 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-08-14 22:58:15 +02:00
Jo-Philipp Wich
9f032e02e4 luci-app-firewall: drop usage of getOffloadSupport() 
Rely on the more generic L.hasSystemFeature() from now on.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-08-14 22:58:15 +02:00
Jo-Philipp Wich
df77b47bad luci-app-firewall: add support for further per-zone options 
This commit introduces support for zone devices, subnets, conntrack helpers
and iptables extra options.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-07-22 16:46:51 +02:00
Jo-Philipp Wich
9c16090780 luci-app-firewall: switch to client side CBI views 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2019-07-07 15:36:26 +02:00