summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-firewall/htdocs/luci-static/resources/view/firewall/rules.js
AgeCommit message (Collapse)Author
2020-10-01luci-app-firewall: rules: add ICMPv6 Packet Too Big (Type 2)Robby K
The "Match ICMP type" drop-down menu was missing this ICMPv6 type. According to RFC 4890 section 4.3.1 it is essential for communications and must not be dropped. This patch allows for doing this through LuCI. Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-03treewide: import utility classes explicitlyJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-20luci-app-firewall: fix variable clash leading to incorrect family displayJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-19luci-app-firewall: add SNAT config migrationJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-19luci-app-firewall: rework rule descriptions, deduplicate codeJo-Philipp Wich
Use a simple custom format string DSL to assemble the rule description texts in the overview page. Also move common code for shared, complex cbi options to the firewall tool class. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: consolidate duplicate option codeJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: support 'limit' and 'limit_burst' optionsJo-Philipp Wich
Also resync firewall translations. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: support 'DSCP' action and matches for rulesJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: support 'MARK' action and matches for rulesJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: support 'helper' and 'set_helper' parameters for rulesJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-app-firewall: support 'direction' and 'device' parameters for rulesJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-30luci-app-firewall: update rule ip hints based on address familyJo-Philipp Wich
Fixes: #3119 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-30luci-app-firewall: store week- and monthday restrictions as stringsJo-Philipp Wich
Fixes: FS#2661 Ref: https://bugs.openwrt.org/index.php?do=details&task_id=2661 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base, luci-mod-network, luci-app-firewall: migrate luci/getHostHintsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-08-14luci-app-firewall: honour global default policies in per-zone settingsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-08-11luci-app-firewall: rules: sort ICMP types alphabeticallyAaron Jones
This just makes it easier to find the type one would want. No types were added or removed, only re-arranged. Signed-off-by: Aaron Jones <aaronmdjones@gmail.com>
2019-08-11luci-app-firewall: rules: allow ICMPv6 ND typesAaron Jones
The "Match ICMP Type" dropdown had entries for router solicitation & router advertisements, but not the more generic neighbour solicitation & neighbour advertisements. A LAN cannot function without Neighbour Discovery; this means that setting a LAN interface default input policy to REJECT breaks IPv6 WAN access for all hosts on that LAN; as they can no longer discover their gateway's MAC address. This can be fixed with appropriate rules allowing ND input, which this patch allows one to do in LuCI. The spelling is the same as in [1]. [1] <https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=package/network/config/firewall/files/firewall.config> Signed-off-by: Aaron Jones <aaronmdjones@gmail.com>
2019-07-21luci-app-firewall: fix cbi form for rulesJo-Philipp Wich
- Set src/dest defaults only in initial section create state, otherwise it is impossible to specify output rules - Get rid of dest_remote/dest_local widget switching and implement change logic directly in tools.widgets.CBIZoneSelect - Remove leftover debug code Ref: https://github.com/openwrt/luci/issues/2889 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-07-18luci-app-firewall: format protocol family for forwards and rulesAnton Kikin
Fixes: #2878 Signed-off-by: Anton Kikin <a.kikin@tano-systems.com>
2019-07-07treewide: switch to shared isObject(), toArray() and sortedKeys() helpersJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-07-07luci-app-firewall: switch to client side CBI viewsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-24 13:53:16 +0000