chris
0f2676eea6
post_decalrations.conf: add missing array of wireguard interfaces 'wg_ifs_arr'.
2021-11-26 02:22:57 +01:00
chris
b464b0c039
Add support for WireGuard.
2021-11-22 18:35:58 +01:00
chris
1d2d6a6fae
Adjust Video and Streaming services.
2021-07-01 01:38:23 +02:00
chris
c097136b33
Add Support for Streaming (Livestreaming) for most providers (YouTube, Linkedin,..).
2021-06-30 19:12:06 +02:00
chris
701655c193
Add support for ZOOM Meetings.
2021-06-09 16:38:34 +02:00
chris
75a5c40430
Adjust ports of BigBlueButton Video Service.
2021-06-07 11:59:05 +02:00
chris
5d8ef9a8f5
Adjust BigBlueButton TCP Ports out.
2021-06-07 11:31:30 +02:00
chris
8faab2827a
main_ipv4.conf.sample: fix error: change variable name from 'jitsi_udp_port_range' to 'jitsi_udp_ports'.
2021-04-24 16:10:38 +02:00
chris
82f2e6486e
Merge branch 'master' of git.oopen.de:firewall/ipt-gateway
2021-04-20 02:08:44 +02:00
chris
a570445a32
main_ipv6.conf.sample: add 'allow_alfaview_video_conference_out' - was forgotten.
2021-04-20 02:08:32 +02:00
chris
83a50e5b56
Add support for masquerading udp and icmp connections.
2021-04-12 18:23:07 +02:00
chris
d6cf429736
Change default ports for Unifi Controller and define them in file 'default_ports.conf'.
2021-03-23 11:14:18 +01:00
chris
b005fff18f
Add support for 'Webex Meeting'.
2021-03-18 20:32:18 +01:00
chris
5918f50bdb
main_ipv4.conf.sample: some really minor changes.
2020-09-20 11:22:49 +02:00
chris
4b97303acd
Add 'allow_to_ext_net' and 'allow_to_ext_service'.
2020-09-19 13:40:39 +02:00
chris
a9961a5dde
Fix comments for allow_all_ext_traffic_to_local_service IPv6.
2020-07-30 16:41:41 +02:00
chris
2b95b780ee
Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway
2020-07-30 16:06:25 +02:00
chris
f6db682d37
Add support for local service reachable from all extern networks.
2020-07-30 16:06:18 +02:00
chris
5a958fa332
Add support for Epson Network Scanner.
2020-07-26 21:08:04 +02:00
chris
0a2aba1f29
Add Video Conferencing System 'alfaview'.
2020-06-15 13:52:10 +02:00
chris
32048f3a35
Add suport for BigBlueButton video conference service.
2020-04-01 00:54:16 +02:00
chris
fe55462803
Add support for NC's Talk App (only client).
2020-03-21 15:11:39 +01:00
chris
1eeb01411e
Add Jitsi Video Conference Service out only.
2020-03-18 00:15:28 +01:00
chris
b995c6c4e1
Add Mumble Service out (allow_mumble_request_out).
2020-03-09 13:44:44 +01:00
chris
0f72f2419a
Some monor changes..
2019-09-04 17:40:30 +02:00
chris
e4775f2155
Fix error in creation a list of local IPv4/IPv6. Move this to firewall script 'ipt-firewall-gateway'/'ip6t-firewall-gateway'.
2019-09-04 13:27:54 +02:00
chris
626e167854
Fix error concerning unifi controller.
2019-08-01 18:06:46 +02:00
chris
14b72b2ad2
Add support for unifi devices outside internal network.
2019-08-01 17:22:48 +02:00
chris
8e94cdcd3b
Add support or blocking UPnP traffic (in and out).
2019-07-09 20:17:53 +02:00
chris
39ec118374
Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway
2019-07-09 15:48:06 +02:00
chris
f535a29ca6
Add: Allow all traffic from local ip to the internet
2019-07-09 15:47:48 +02:00
chris
42c14d90e8
default_ports.conf: set standard_cups_port to 631.
2019-07-09 02:22:43 +02:00
chris
837aeac025
Adjust default ports.
2019-06-30 15:27:39 +02:00
chris
45b144f416
Fix error concerning variable 'loopback'
2019-06-30 01:24:46 +02:00
chris
bbffa0fabb
Moved some default values (Port) from main_ipv[4|6] to default_ports.conf.
2019-06-30 00:17:57 +02:00
chris
a74b57e0a0
add support for ulog daemon.
2019-06-29 17:20:59 +02:00
chris
07ffaea9a7
Add support for Checkmk monitoring service.
2019-06-20 14:06:00 +02:00
chris
aead4e0ba8
Add support or forwarding rsynd protokoll from local networks.
2019-06-13 13:03:53 +02:00
chris
7b34fa3222
Add HACK for integrating suricata IPS (at 'gw-ckubu').
2019-05-20 17:16:33 +02:00
chris
e2a8392a8c
Fix error for bloccking ULA addresses.
2019-04-03 14:29:29 +02:00
chris
609b93ef61
Minor changes on main_ipv6.conf.sample
2019-04-03 14:06:58 +02:00
chris
8c6c34aa52
Adjust INSTALL docu.
2019-04-03 13:13:11 +02:00
chris
3e4d7f3f7b
Add TCP/UDP Ports out - forgot firewall scripts
2019-03-19 12:45:37 +01:00
chris
495369b06f
Add TCP/UDP Ports out.
2019-03-19 12:42:15 +01:00
chris
908eeb69fc
Only remove some commented lines.
2019-03-04 01:52:57 +01:00
chris
70f8e953e2
Rededign rules foe 'FTP Service DMZ'.
2019-03-04 01:49:50 +01:00
chris
b39014e611
Redesign of rules 'FTP Service local Networks'.
2019-03-03 23:19:15 +01:00
chris
967aa4b9d3
Fis errors concerning FTP rules. Make encrypted TLS connections to extern ftp service available.
2019-03-02 15:00:40 +01:00
chris
b697715679
Use CT helper for ftp rules.
2019-02-24 17:15:04 +01:00
chris
29c0ad1906
Fix different errors concerning extern resources from local networks/inferfaces.
2019-02-23 21:11:32 +01:00
chris
17906277b7
Merge branch 'master' of git.oopen.de:firewall/ipt-gateway
2019-02-23 18:02:47 +01:00
chris
57ed8ceca5
Add some extern resources from local network / local interfaces.
2019-02-23 18:02:24 +01:00
chris
442dc29d8b
Change handling for natted networks - Set rule for both, incomming and outgoing.
2019-02-20 12:27:08 +01:00
chris
e9f1c30ad2
Fix error for 'Samba Service out only' IPv6. Remove 'echo-lines' at Samba Service (IPv4).
2018-10-21 18:29:01 +02:00
chris
9417303654
Fix error: add missing code for 'allow_samba_requests_out'.
2018-10-21 18:17:21 +02:00
chris
d47af85e5c
Only documentation changes.
2018-10-14 02:12:26 +02:00
chris
1c31d9dc83
Fix error in applying PowerChute Network Shutdown rules.
2018-10-05 13:40:54 +02:00
chris
7d0f0539fb
Fix error for allowing active ftp connections from local network to the internet.
2018-09-11 18:43:43 +02:00
chris
9e3f3012f9
Adjust Unifi Rules - Open STUN PORT from controller to APs.
2018-07-27 14:05:48 +02:00
chris
2affc448c2
main_ipv4.conf.sample: complete IPMI Ports.
2018-06-02 22:31:04 +02:00
chris
de0ebb6162
Adjust file 'INSTALL'.
2018-04-19 17:41:55 +02:00
chris
8f6fd8354d
Support external file containing IPs/Networks to ban.
2018-04-19 17:38:44 +02:00
chris
b6b7aa2e79
Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway
2018-03-19 01:17:44 +01:00
chris
6765ae9020
Change rule for masquerading, but i don't know, if the new one is correct.
2018-03-19 01:17:11 +01:00
chris
87c274b2bd
Fix error in section 'Local DHCP Client'.
2018-03-19 00:08:52 +01:00
chris
aa6a6aa992
Fix error in documentation file 'INSTALL'.
2017-12-19 03:00:18 +01:00
chris
afff762ede
Add support for CISCO kompartibles VPN (user by FRITZBox).
2017-11-11 17:09:32 +01:00
chris
355086a2a4
FIX DNS Rules: allow protocol tcp for requesting large records.
2017-06-02 12:09:10 +02:00
chris
8ed62f8377
Support dhcp client on gateway on extern interfaces.
2017-05-20 02:55:06 +02:00
chris
ccf7d7a81d
New net-tools 'ifconfig' command output has change. So 'ifconfig' is replaced by 'ip a'.
2017-05-16 13:53:32 +02:00
chris
ddff7f8345
Fix rules for 'allow_ext_net_to_local_service'
2017-05-10 00:22:13 +02:00
chris
a2fe7ce5ff
- Add 'any_access_from_inet_networks'
...
- Add 'allow_ext_net_to_local_service'
- Add 'allow_ext_net_to_local_net'
- Add 'block_all_ext_to_local_net'
2017-05-04 01:22:52 +02:00
chris
528b43ff11
Add rules for local mail relay service.
2017-04-22 13:53:36 +02:00
chris
99c8301305
Prevent UniFy controller from WAN access.
2017-04-22 02:48:26 +02:00
chris
0c55b9afe0
Fix errors on rules for unify controllers.
2017-04-21 17:06:19 +02:00
chris
c7b8effe17
Prevent network natting on an interface already natted.
2017-04-16 13:10:45 +02:00
chris
f668ea62fe
Add 'nat_netwoks' i.e. 172.16.1.0/24 on interface eth1.
2017-04-16 12:48:13 +02:00
chris
636f55f3a5
Add Comment for special local network rules as local_net_to_local_ip
2017-04-07 22:12:50 +02:00
chris
c21758eb14
Fix errors for special local network rules as local_net_to_local_ip.
2017-04-07 18:36:23 +02:00
chris
62bf18a5f0
Add SNMP comment to sample file main_ipv6.conf.sample
2017-04-05 19:38:45 +02:00
chris
c9b4b1dc72
Adjust/Cleanup main_ipv4.conf.sample
2017-04-05 18:44:09 +02:00
chris
e5a0f7329c
- Fix protocol SNMP
...
- Minor fixes on firewall execution scripts ip6t-firewall-gateway
- Add rules "local ip-address to local network"
- Add rules "local network to (another) local network"
2017-04-05 18:29:47 +02:00
chris
729539ecfb
Add 'nat_devices': a list of devices that will be natted (beside dsl devices)
2017-03-21 02:25:52 +01:00
chris
df03336118
Fix printer rules (if allow_printing_between_local_nets=true)
2017-03-20 04:41:27 +01:00
chris
d3414d982c
Minor fixes
2017-02-24 17:28:07 +01:00
chris
b54e85241f
Delete conf file interfaces.conf
2017-02-24 14:04:53 +01:00
chris
764080a4c4
Adjust INSTALL file
2017-02-24 14:01:03 +01:00
chris
47487219f1
Add rules for local ssh services
2017-02-24 13:31:20 +01:00
chris
1c5531ccaf
Add file INSTALL
2017-02-24 04:24:38 +01:00
chris
c10647e763
Initial import
2017-02-24 04:13:22 +01:00