Commit Graph

65 Commits

Author SHA1 Message Date
14b72b2ad2 Add support for unifi devices outside internal network. 2019-08-01 17:22:48 +02:00
8e94cdcd3b Add support or blocking UPnP traffic (in and out). 2019-07-09 20:17:53 +02:00
39ec118374 Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2019-07-09 15:48:06 +02:00
f535a29ca6 Add: Allow all traffic from local ip to the internet 2019-07-09 15:47:48 +02:00
42c14d90e8 default_ports.conf: set standard_cups_port to 631. 2019-07-09 02:22:43 +02:00
837aeac025 Adjust default ports. 2019-06-30 15:27:39 +02:00
45b144f416 Fix error concerning variable 'loopback' 2019-06-30 01:24:46 +02:00
bbffa0fabb Moved some default values (Port) from main_ipv[4|6] to default_ports.conf. 2019-06-30 00:17:57 +02:00
a74b57e0a0 add support for ulog daemon. 2019-06-29 17:20:59 +02:00
07ffaea9a7 Add support for Checkmk monitoring service. 2019-06-20 14:06:00 +02:00
aead4e0ba8 Add support or forwarding rsynd protokoll from local networks. 2019-06-13 13:03:53 +02:00
7b34fa3222 Add HACK for integrating suricata IPS (at 'gw-ckubu'). 2019-05-20 17:16:33 +02:00
e2a8392a8c Fix error for bloccking ULA addresses. 2019-04-03 14:29:29 +02:00
609b93ef61 Minor changes on main_ipv6.conf.sample 2019-04-03 14:06:58 +02:00
8c6c34aa52 Adjust INSTALL docu. 2019-04-03 13:13:11 +02:00
3e4d7f3f7b Add TCP/UDP Ports out - forgot firewall scripts 2019-03-19 12:45:37 +01:00
495369b06f Add TCP/UDP Ports out. 2019-03-19 12:42:15 +01:00
908eeb69fc Only remove some commented lines. 2019-03-04 01:52:57 +01:00
70f8e953e2 Rededign rules foe 'FTP Service DMZ'. 2019-03-04 01:49:50 +01:00
b39014e611 Redesign of rules 'FTP Service local Networks'. 2019-03-03 23:19:15 +01:00
967aa4b9d3 Fis errors concerning FTP rules. Make encrypted TLS connections to extern ftp service available. 2019-03-02 15:00:40 +01:00
b697715679 Use CT helper for ftp rules. 2019-02-24 17:15:04 +01:00
29c0ad1906 Fix different errors concerning extern resources from local networks/inferfaces. 2019-02-23 21:11:32 +01:00
17906277b7 Merge branch 'master' of git.oopen.de:firewall/ipt-gateway 2019-02-23 18:02:47 +01:00
57ed8ceca5 Add some extern resources from local network / local interfaces. 2019-02-23 18:02:24 +01:00
442dc29d8b Change handling for natted networks - Set rule for both, incomming and outgoing. 2019-02-20 12:27:08 +01:00
e9f1c30ad2 Fix error for 'Samba Service out only' IPv6. Remove 'echo-lines' at Samba Service (IPv4). 2018-10-21 18:29:01 +02:00
9417303654 Fix error: add missing code for 'allow_samba_requests_out'. 2018-10-21 18:17:21 +02:00
d47af85e5c Only documentation changes. 2018-10-14 02:12:26 +02:00
1c31d9dc83 Fix error in applying PowerChute Network Shutdown rules. 2018-10-05 13:40:54 +02:00
7d0f0539fb Fix error for allowing active ftp connections from local network to the internet. 2018-09-11 18:43:43 +02:00
9e3f3012f9 Adjust Unifi Rules - Open STUN PORT from controller to APs. 2018-07-27 14:05:48 +02:00
2affc448c2 main_ipv4.conf.sample: complete IPMI Ports. 2018-06-02 22:31:04 +02:00
de0ebb6162 Adjust file 'INSTALL'. 2018-04-19 17:41:55 +02:00
8f6fd8354d Support external file containing IPs/Networks to ban. 2018-04-19 17:38:44 +02:00
b6b7aa2e79 Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2018-03-19 01:17:44 +01:00
6765ae9020 Change rule for masquerading, but i don't know, if the new one is correct. 2018-03-19 01:17:11 +01:00
87c274b2bd Fix error in section 'Local DHCP Client'. 2018-03-19 00:08:52 +01:00
aa6a6aa992 Fix error in documentation file 'INSTALL'. 2017-12-19 03:00:18 +01:00
afff762ede Add support for CISCO kompartibles VPN (user by FRITZBox). 2017-11-11 17:09:32 +01:00
355086a2a4 FIX DNS Rules: allow protocol tcp for requesting large records. 2017-06-02 12:09:10 +02:00
8ed62f8377 Support dhcp client on gateway on extern interfaces. 2017-05-20 02:55:06 +02:00
ccf7d7a81d New net-tools 'ifconfig' command output has change. So 'ifconfig' is replaced by 'ip a'. 2017-05-16 13:53:32 +02:00
ddff7f8345 Fix rules for 'allow_ext_net_to_local_service' 2017-05-10 00:22:13 +02:00
a2fe7ce5ff - Add 'any_access_from_inet_networks'
- Add 'allow_ext_net_to_local_service'
- Add 'allow_ext_net_to_local_net'
- Add 'block_all_ext_to_local_net'
2017-05-04 01:22:52 +02:00
528b43ff11 Add rules for local mail relay service. 2017-04-22 13:53:36 +02:00
99c8301305 Prevent UniFy controller from WAN access. 2017-04-22 02:48:26 +02:00
0c55b9afe0 Fix errors on rules for unify controllers. 2017-04-21 17:06:19 +02:00
c7b8effe17 Prevent network natting on an interface already natted. 2017-04-16 13:10:45 +02:00
f668ea62fe Add 'nat_netwoks' i.e. 172.16.1.0/24 on interface eth1. 2017-04-16 12:48:13 +02:00