| 2012-09-12 |
Mark Wooding | local.m4: artist should expect untrusted source addrs...
|
commit | commitdiff | tree |
| 2012-09-12 |
Mark Wooding | local.m4: Track VLAN renumbering in vampire's interface...
|
commit | commitdiff | tree |
| 2012-06-08 |
Mark Wooding | Rate limiting for incoming DNS queries over UDP.
|
commit | commitdiff | tree |
| 2012-06-08 |
Mark Wooding | radius.m4: Handy ipset hook for ad-hoc safe/unstrusted...
|
commit | commitdiff | tree |
| 2012-06-08 |
Mark Wooding | local.m4: Refactor common SSH permission between safe...
|
commit | commitdiff | tree |
| 2012-05-03 |
Mark Wooding | local.m4: Packets can be routed over the safe network.
|
commit | commitdiff | tree |
| 2012-04-25 |
Mark Wooding | local.m4: Add the colocated servers to the VPN.
|
commit | commitdiff | tree |
| 2012-04-23 |
Mark Wooding | local.m4: Untrusted source addresses appear on the...
|
commit | commitdiff | tree |
| 2012-04-23 |
Mark Wooding | bookends.m4: Allow redirects to (non-routing) hosts.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | Configuration for new colocated virtual servers.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | local.m4: More interfaces for artist.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | local.m4: Default addresses reach the IPv6 tunnel interface.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | jem.m4, artist.m4: Allow answers to DNS queries.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | radius.m4: Load NAT helpers (from d119795).
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | bookends.m4: Configure IPv6 router advertisement stuff.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | functions.m4, local.m4: Introduce more kinds of hosts.
|
commit | commitdiff | tree |
| 2012-04-20 |
Mark Wooding | functions.m4: Actually set the IPv6 options.
|
commit | commitdiff | tree |
| 2012-03-30 |
Mark Wooding | fender.m4: Define an address to be a guaranteed black...
|
commit | commitdiff | tree |
| 2012-03-23 |
Mark Wooding | local.m4: A new network for the SGO VPN.
|
commit | commitdiff | tree |
| 2012-03-23 |
Mark Wooding | functions.m4, classify.m4: Handle negative address...
|
commit | commitdiff | tree |
| 2012-03-23 |
Mark Wooding | Make FW_NOACT work properly.
|
commit | commitdiff | tree |
| 2012-03-17 |
Mark Wooding | local.m4: Declare network for anycast services.
|
commit | commitdiff | tree |
| 2012-03-17 |
Mark Wooding | local.m4: Reorder forwarding networks for `default'.
|
commit | commitdiff | tree |
| 2012-03-17 |
Mark Wooding | local.m4: Move `vpn' to the common networks section.
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | Overhaul address classification for link-local and...
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | functions.m4: Publish the per-class forwarding bitmasks.
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | functions.m4: The mark-{from,to}-* rules no longer...
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | classify.m4: Use canonical forms for IPv6 addresses.
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | local.m4: Actually use the IPv6 fragmentation forbidding...
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | Extend proper ICMP handling to IPv6.
|
commit | commitdiff | tree |
| 2012-03-12 |
Mark Wooding | bookends.m4: Optimize checking for forwarding IPv6...
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | vampire.m4: Extend services to untrusted hosts over...
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | Introduce variable for expected input chains.
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | local.m4: Fix the `safe' network prefix length.
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | local.m4: Define the IPv6 network structure.
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | local.m4: Add routes to/from the `safe' network.
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | local.m4: The VPN will be available through the colo.
|
commit | commitdiff | tree |
| 2012-03-11 |
Mark Wooding | functions.m4: Correct defaulting of IPv6 host addresses.
|
commit | commitdiff | tree |
| 2012-03-08 |
Mark Wooding | classify.m4: Reject the RFC5737 documentation-only...
|
commit | commitdiff | tree |
| 2012-03-07 |
Mark Wooding | Move per-host filtering to diversion 86 as promised.
|
commit | commitdiff | tree |
| 2012-03-07 |
Mark Wooding | local.m4: Add `unsafe' to ibanez `br-dmz' interface.
|
commit | commitdiff | tree |
| 2012-03-07 |
Mark Wooding | functions: Move NTP server list out of line.
|
commit | commitdiff | tree |
| 2012-03-06 |
Mark Wooding | local.m4: Allow dmz/jump packets on unsafe/colo networks...
|
commit | commitdiff | tree |
| 2012-03-06 |
Mark Wooding | radius.m4: Forbid traffic directly to the NAT address.
|
commit | commitdiff | tree |
| 2012-03-06 |
Mark Wooding | radius.m4: Use the correct interface name for NAT.
|
commit | commitdiff | tree |
| 2012-03-06 |
Mark Wooding | local.m4: Fix IGMP acceptance (debris from old interface...
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | functions.m4: Write the netclass ids to the trace output.
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | bookends.m4: If debugging, dump the final tables.
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | Determine forwarding and reverse-path filtering from...
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | Overhaul address classification.
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | local.m4: Promote the NTP server configuration to a...
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | Renumber the diversions.
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | fixup! WIP on emergency: 7a108d1 Makefile: New target...
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | Makefile: New target for tracking diversions.
|
commit | commitdiff | tree |
| 2012-03-05 |
Mark Wooding | Makefile, base.m4: Inject the target hostname into...
|
commit | commitdiff | tree |
| 2012-02-12 |
Mark Wooding | numbers.m4, gibson.m4: Allow gibson to receive IPMI...
|
commit | commitdiff | tree |
| 2012-02-12 |
Mark Wooding | bookends.m4: Open up tables we clobbered at exit.
|
commit | commitdiff | tree |
| 2012-02-11 |
Mark Wooding | fender: New host, with basic firewall.
|
commit | commitdiff | tree |
| 2012-02-11 |
Mark Wooding | numbers.m4, vampire.m4: Serve TFTP to the untrusted...
|
commit | commitdiff | tree |
| 2012-02-11 |
Mark Wooding | numbers.m4, gibson.m4: Allow gibson public SIP access.
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | jem.m4: Add a hook for SAUCE.
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | functions.m4: New function for arranging that an ipset...
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | functions.m4: Make clearchain tolerant of existing...
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | bookends.m4: Much more intelligent initialization.
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | jem.m4: Remove SMB for untrusted hosts.
|
commit | commitdiff | tree |
| 2011-07-23 |
Mark Wooding | functions.m4: Rate-limit rejections on error chains.
|
commit | commitdiff | tree |
| 2011-07-17 |
Mark Wooding | bookends.m4: Provide a hook chain for fail2ban.
|
commit | commitdiff | tree |
| 2011-07-15 |
Mark Wooding | radius.m4: Allow IPv6 tunnel from Hurricane Electric...
|
commit | commitdiff | tree |
| 2011-07-15 |
Mark Wooding | functions.m4, numbers.m4: Define protocol number for...
|
commit | commitdiff | tree |
| 2011-07-15 |
Mark Wooding | bookend.m4: Finish off the IPv6 chains.
|
commit | commitdiff | tree |
| 2011-07-13 |
Mark Wooding | hosts: Allow incoming ident requests.
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | radius.m4: Take over NAT duties.
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | Major network restructuring.
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | bookends.m4, config.m4: Allow configuration of reverse...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | functions.m4: Set IPv6 options in setopt and setdevopt.
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | bookends.m4: Only disable filtering on bridges if we...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | bookends.m4: Allow responding to broadcast and multicast...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | classify.m4, functions.m4: Multiple interfaces can...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | functions.m4: Allow multiple interfaces to be defined...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | functions.m4, local.m4: Workaround for option parser...
|
commit | commitdiff | tree |
| 2011-07-10 |
Mark Wooding | base.m4: Fix LSB init-script ordering.
|
commit | commitdiff | tree |
| 2011-06-19 |
Mark Wooding | bookends, classify, local: Fixes for IP multicasting.
|
commit | commitdiff | tree |
| 2011-06-19 |
Mark Wooding | local, vampire, ibanez: Centralize definition of NTP...
|
commit | commitdiff | tree |
| 2011-06-07 |
Mark Wooding | ibanez, radius: Move NTP service to ibanez.
|
commit | commitdiff | tree |
| 2011-06-06 |
Mark Wooding | base.m4: Include an LSB header so that insserv can...
|
commit | commitdiff | tree |
| 2011-06-06 |
Mark Wooding | Makefile: Better rule hacking for installation.
|
commit | commitdiff | tree |
| 2011-06-06 |
Mark Wooding | prologue.m4: Use iptables-{save,restore} for the molly...
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | Host changeover.
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | config.m4: Stupid typo.
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | base.m4: Fix missing comma in `setconf', which has...
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | base.m4: On second thoughts, this one is more m4 than...
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | local.m4: Disable forwarding multicasts until I work...
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | classify.m4: Dislike multicast addresses as a source...
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | prologue, Makefile, local.mk: Overhaul installation.
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | Makefie: Give the main build the silent treatment.
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | Makefile: Add licence block at the top.
|
commit | commitdiff | tree |
| 2011-05-31 |
Mark Wooding | *.m4: Use `sh' mode for editing these.
|
commit | commitdiff | tree |
| 2011-05-22 |
Mark Wooding | IPv6 firewall support.
|
commit | commitdiff | tree |
| 2011-05-22 |
Mark Wooding | local.mk: Introduce new target for testing.
|
commit | commitdiff | tree |
| 2011-05-22 |
Mark Wooding | Whitespace fixing.
|
commit | commitdiff | tree |
| next |
~mdw / firewall / search