firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
158 Commits 1 Branch 0 Tags
master
Commit Graph
158 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
chris 8058eedf61 default_basic_behavior.conf: take of SYN FLOOD Rules. Disable SYN flood rule by default (IPv4 + IPv6) 
The global limit (1 SYN/s, burst 3, no per-source tracking) dropped
legitimate TCP connections to the gateway itself (up to ~45% on busy
gateways: DNS zone transfers, SSH, monitoring), and a few SYNs per
second were enough to lock out all TCP access. Kernel SYN cookies
(tcp_syncookies) already provide proper SYN flood protection.
 2026-10-30 22:22:03 +01:00
chris 75273e68bf conf/post_decalrations.conf: fix some logical errors. 2026-09-09 16:15:18 +02:00
chris cd25250624 Adjust firewall scripts to support NTP TCO/4460. 2026-09-09 15:43:30 +02:00
chris 76d60cae2a FIX handling NTP protocol. 2026-09-09 15:39:34 +02:00
root cafa99d944 NTP timeprotokoll support also TCP/4460 2026-09-09 14:40:34 +02:00
chris 1ca7a6bf43 Fix errors setting '/proc/sys/net/ipv4/ip_dynaddr'. 2026-03-15 13:10:15 +01:00
chris e75665808e Set dynaddr_flag to '3' (instead of not defined value '5'). 2026-03-15 12:41:52 +01:00
chris 8622cee761 Forgot updateting firewall scripts. 2026-03-13 13:39:09 +01:00
chris 816673e601 Add support for MS SQL Datenbank Services. 2026-03-13 13:35:27 +01:00
chris c61a3cef4f Add some comments for RDP settings. 2026-03-11 14:18:30 +01:00
chris b84a7d8527 Add support for Remote Desktop Services (RDS). 2026-03-11 14:06:08 +01:00
chris 1f5c01d8c9 Its now possible to define port range at 'Allow extern service from given local network' instead of a single port. 2026-03-03 15:50:51 +01:00
chris a5b226284a Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2025-12-03 18:31:48 +01:00
chris bf7243caec ipt-firewall-gateway: fix error allowing DHCP requests: also consider unicast renewal requests. 2025-12-03 18:30:28 +01:00
chris a30a6f37d8 main_ipv4.conf.sample: changes in file comments. 2025-11-30 16:24:06 +01:00
chris 8b8060f0fa Add Support for IPMI access from outside. 2025-09-23 16:46:05 +02:00
chris b547d5dc0e Add some comments to interface konfiguration. 2025-08-03 11:41:55 +02:00
chris 01db31c39c Support IP range for 'Allow extern service'. 2025-05-23 12:44:02 +02:00
chris c2d62b72bd Add support for additional SMTP ports OUT. 2025-01-27 23:39:56 +01:00
chris 80bf02d7ad Add support for FreeIPA Service on local networks. 2024-08-17 22:19:12 +02:00
chris 06199517c7 ip6t-firewall-gateway,ipt-firewall-gateway: fix error replace '-dport' with '--dport'. 2024-06-24 15:11:14 +02:00
chris af41c79887 ip6t-firewall-gateway,ipt-firewall-gateway: add support for local mail relay hosts. 2024-05-06 17:39:02 +02:00
chris 4388ab6a68 Higher priority for allowing traffic from / to lo device. 2024-04-26 11:40:57 +02:00
chris 71e803388a Add China/Hon Long networks ti nan list. 2024-01-17 11:13:47 +01:00
chris 358a81cce9 Add support for speedtest. fix error txp/udp ports out. 2023-12-07 22:37:04 +01:00
chris 3052da6795 default_ports.conf: add port '8000' to 'standard_ip_camera_tcp_ports' variable. 2023-10-26 12:36:51 +02:00
chris 4c98319ddf Add support for restricted VPN networks. 2023-09-27 17:41:09 +02:00
chris c427d4fefd Add support for IP Camera. 2023-09-20 22:56:48 +02:00
chris 92acbfce17 Add support for ip-addresse, which have unlimited acces to inet but no access to (other) local networks - gaming devices.. 2023-06-08 15:31:32 +02:00
chris 0decc57848 Some minor changes.. 2023-02-11 16:02:49 +01:00
chris 372f1fb9f2 Fix typo - gameming -> gaming. 2023-02-11 15:38:51 +01:00
chris 4ade386634 Add MAC address filterimh for gamin devices 2023-02-11 15:15:10 +01:00
chris 63a8722a3e Some changes on unifi rules. 2022-11-21 21:01:01 +01:00
chris b0421b06c9 Fix error concernint in-/ou-ports for unifi devices. 2022-11-21 01:17:44 +01:00
chris a6c617a1ab some minor changes.. 2022-11-20 01:47:24 +01:00
chris d64f0f4b08 Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2022-11-13 02:40:08 +01:00
chris fa86a604d6 Modify gaming rules. 2022-11-13 02:36:50 +01:00
chris 9967a2dddc ip6t-firewall-gateway,ipt-firewall-gateway: add missing rules for wireguard VPN connection. 2022-11-11 10:56:34 +01:00
chris 338b2cf8d7 Adjust 'ip6t-firewall-gateway' and 'ipt-firewall-gateway'. Add forward rules for game ports if aliases in use. 2022-10-30 22:46:07 +01:00
chris 9fbc59fe09 conf/post_decalrations.conf: add ports of game 'Call of duty'. 2022-10-30 18:16:39 +01:00
chris ec050e7f7e default_ports.conf: add url for ports 'Call of Duty' to comments. 2022-10-30 02:00:52 +02:00
chris b7b2ad61cd Add support of Games 'Call of Duty'. 2022-10-30 01:07:18 +02:00
chris 9282609ebd main_ipv6.conf.sample:some minor changes. 2022-07-11 12:41:57 +02:00
root 5c7ae898c7 main_ipv4.conf.sample: some minor changes. 2022-07-11 00:13:09 +02:00
chris 4de6f50e12 ipt-firewall-gateway: some minor changes at script output. 2022-06-09 00:12:16 +02:00
chris 4e4c041f9f default_ports.conf: adjust game ports (steam). 2022-04-01 19:36:33 +02:00
chris a8e60aa4a3 Fix error in firewall rules concerning unifi controller. 2022-03-30 23:41:23 +02:00
chris 8ce2787fee Change default values section 'Router IPv4'. 2022-03-29 01:07:19 +02:00
chris d8e0c8ddd7 Fix another error in section 'Protection against syn-flooding'. 2022-03-29 00:48:25 +02:00
chris ccb09d0095 Fix error in section 'Protection against syn-flooding'. 2022-03-29 00:40:48 +02:00