~mdw / firewall / shortlog
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
firewall
2012-03-12 Mark WoodingExtend proper ICMP handling to IPv6. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-12 Mark Woodingbookends.m4: Optimize checking for forwarding IPv6... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodingvampire.m4: Extend services to untrusted hosts over... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark WoodingIntroduce variable for expected input chains. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodinglocal.m4: Fix the `safe' network prefix length. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodinglocal.m4: Define the IPv6 network structure. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodinglocal.m4: Add routes to/from the `safe' network. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodinglocal.m4: The VPN will be available through the colo. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-11 Mark Woodingfunctions.m4: Correct defaulting of IPv6 host addresses. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-08 Mark Woodingclassify.m4: Reject the RFC5737 documentation-only... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-07 Mark WoodingMove per-host filtering to diversion 86 as promised. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-07 Mark Woodinglocal.m4: Add `unsafe' to ibanez `br-dmz' interface. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-07 Mark Woodingfunctions: Move NTP server list out of line. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-06 Mark Woodinglocal.m4: Allow dmz/jump packets on unsafe/colo network... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-06 Mark Woodingradius.m4: Forbid traffic directly to the NAT address. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-06 Mark Woodingradius.m4: Use the correct interface name for NAT. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-06 Mark Woodinglocal.m4: Fix IGMP acceptance (debris from old interfac... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark Woodingfunctions.m4: Write the netclass ids to the trace output. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark Woodingbookends.m4: If debugging, dump the final tables. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark WoodingDetermine forwarding and reverse-path filtering from... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark WoodingOverhaul address classification. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark Woodinglocal.m4: Promote the NTP server configuration to a... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark WoodingRenumber the diversions. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark Woodingfixup! WIP on emergency: 7a108d1 Makefile: New target... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark WoodingMakefile: New target for tracking diversions. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-03-05 Mark WoodingMakefile, base.m4: Inject the target hostname into... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-02-12 Mark Woodingnumbers.m4, gibson.m4: Allow gibson to receive IPMI... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-02-12 Mark Woodingbookends.m4: Open up tables we clobbered at exit. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-02-11 Mark Woodingfender: New host, with basic firewall. commit | commitdiff | tree | snapshot (tar.gz zip)
2012-02-11 Mark Woodingnumbers.m4, vampire.m4: Serve TFTP to the untrusted... commit | commitdiff | tree | snapshot (tar.gz zip)
2012-02-11 Mark Woodingnumbers.m4, gibson.m4: Allow gibson public SIP access. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingjem.m4: Add a hook for SAUCE. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingfunctions.m4: New function for arranging that an ipset... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingfunctions.m4: Make clearchain tolerant of existing... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingbookends.m4: Much more intelligent initialization. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingjem.m4: Remove SMB for untrusted hosts. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-23 Mark Woodingfunctions.m4: Rate-limit rejections on error chains. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-17 Mark Woodingbookends.m4: Provide a hook chain for fail2ban. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-15 Mark Woodingradius.m4: Allow IPv6 tunnel from Hurricane Electric... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-15 Mark Woodingfunctions.m4, numbers.m4: Define protocol number for... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-15 Mark Woodingbookend.m4: Finish off the IPv6 chains. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-13 Mark Woodinghosts: Allow incoming ident requests. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingradius.m4: Take over NAT duties. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark WoodingMajor network restructuring. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingbookends.m4, config.m4: Allow configuration of reverse... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingfunctions.m4: Set IPv6 options in setopt and setdevopt. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingbookends.m4: Only disable filtering on bridges if we... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingbookends.m4: Allow responding to broadcast and multicas... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingclassify.m4, functions.m4: Multiple interfaces can... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingfunctions.m4: Allow multiple interfaces to be defined... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingfunctions.m4, local.m4: Workaround for option parser... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-07-10 Mark Woodingbase.m4: Fix LSB init-script ordering. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-19 Mark Woodingbookends, classify, local: Fixes for IP multicasting. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-19 Mark Woodinglocal, vampire, ibanez: Centralize definition of NTP... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-07 Mark Woodingibanez, radius: Move NTP service to ibanez. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-06 Mark Woodingbase.m4: Include an LSB header so that insserv can... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-06 Mark WoodingMakefile: Better rule hacking for installation. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-06-06 Mark Woodingprologue.m4: Use iptables-{save,restore} for the molly... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark WoodingHost changeover. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodingconfig.m4: Stupid typo. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodingbase.m4: Fix missing comma in `setconf', which has... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodingbase.m4: On second thoughts, this one is more m4 than... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodinglocal.m4: Disable forwarding multicasts until I work... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodingclassify.m4: Dislike multicast addresses as a source... commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Woodingprologue, Makefile, local.mk: Overhaul installation. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark WoodingMakefie: Give the main build the silent treatment. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark WoodingMakefile: Add licence block at the top. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-31 Mark Wooding*.m4: Use `sh' mode for editing these. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-22 Mark WoodingIPv6 firewall support. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-22 Mark Woodinglocal.mk: Introduce new target for testing. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-22 Mark WoodingWhitespace fixing. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-05-20 Mark Woodingvampire: Allow incoming IMAPS and Submission. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-03-07 Mark WoodingMerge branch 'master' of /home/mdw/public-git/firewall commit | commitdiff | tree | snapshot (tar.gz zip)
2011-03-07 Mark Woodingvampire: Allow outside access to squid. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-03-07 Mark Woodingvampire: Allow SMB from the untrusted network. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-01-17 Mark Woodingmetalzone: Allow incoming `submission' connections. commit | commitdiff | tree | snapshot (tar.gz zip)
2011-01-17 Mark WoodingMerge branch 'master' of /home/mdw/public-git/firewall commit | commitdiff | tree | snapshot (tar.gz zip)
2010-05-09 Mark Woodinglocal.m4: Put the default network stanza at the end. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-05-09 Mark Woodinglocal.m4: Note terror's participation in the VPN. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-27 Mark WoodingMerge branch 'master' of /home/mdw/public-git/firewall commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-26 Mark Woodingvampire: Allow incoming I2P traffic. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-24 Mark Woodingmetalzone: Open up incoming IMAPS. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-17 Mark WoodingMerge branch 'master' of /home/mdw/public-git/firewall commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-17 Mark Woodingvampire.m4: Allow MPD again. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-17 Mark WoodingMerge branch 'master' of metalzone:public-git/firewall commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-17 Mark WoodingAdd iodine support.. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-15 Mark Woodinglocal.mk: Fix spurious failure. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-15 Mark Woodingfunctions.m4, local.m4: Handle fragments in a useful... commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-15 Mark Woodingclassify.m4: Correct summary line at the top. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-04-08 Mark Woodingvampire.m4: Remove the magical DNS DDoS hack. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-02-01 Mark Woodingvampire: Open `disorder' port; close `mpd'. commit | commitdiff | tree | snapshot (tar.gz zip)
2010-01-28 Mark Woodingvampire: Allow MPD traffic through. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-07-23 Mark Woodingvampire.m4: Log messages when rejecting DNS DDOS packets. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-06-04 Mark Woodingvampire: Add special hook for DNS badness. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-13 Mark Woodingvampire: Add accounting rules for Tor on the OUTPUT... commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-12 Mark Woodingvampire: Move tor ports to a separate rule. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-12 Mark Woodingvampire: Open up public ports for tor. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-07 Mark Woodinglocal.mk: Add install rule. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-07 Mark WoodingMakefile: Put default rule before local makefile. commit | commitdiff | tree | snapshot (tar.gz zip)
2009-01-07 Mark Woodingbookends: Prevent packets with destination localhost. commit | commitdiff | tree | snapshot (tar.gz zip)
next
Firewall scripts for distorted.org.uk.