All pull requests

Pull requests

• fw4: reject unknown tokens in ipset references

  #110·one7two99 opened Oct 25, 2026·

  ·

• fw4: support multiple ipset references per rule and redirect

  #109·one7two99 opened Oct 25, 2026·

  ·

• fw4: restart in a single nft transaction

  #107·pylaterreur opened Oct 17, 2026·

  ·

• redirect: preserve destination ipsets in NAT reflection

  #104·TMelik opened Sep 14, 2026·

  ·
  4

• ruleset: use low-jitter vmap gadget to dispatch ct states

  #103·brada4 opened Sep 7, 2026Contributor·

  ·

• fw4: retain complete software offload device paths

  #102·dormancygrace opened Aug 9, 2026·

  ·
  28

• ruleset: avoid emitting default "policy accept"

  #97·brada4 opened May 25, 2026Contributor·

  ·

• ruleset: always reload entire fw4 table

  #96·brada4 opened May 17, 2026Contributor·

  ·

• ruleset: avoid port translating local sockets

  #92·brada4 opened Apr 10, 2026Contributor·

  ·
  1

  11

• firewall: skip reload on DHCP lease renewal without address change

  #91·anand16158 opened Mar 27, 2026·

  ·
  4

• templates: remove stray file

  #89·brada4 opened Mar 10, 2026Contributor·

  ·
  1

• templates: allow inverted limits

  #85·saldry opened Jan 7, 2026·

  ·
  5

• 20-firewall: Execute has_zone and and fw4 in background to avoid slow execution of hotplug.d/iface scripts

  #83·rdevshp opened Nov 12, 2025·

  ·
  1

  4

• config: add dest addr restrictions for DHCPv6 rules

  #81·AndyChiang888 opened Oct 27, 2025·

  ·
  7

• ruleset: Add snat_port support for MASQUERADE

  #79·HSXX opened Oct 21, 2025·

  ·
  4

• ruleset: avoid no-op port translation in dnat

  #77·brada4 opened Oct 17, 2025Contributor·

  ·
  2

• ruleset: add prerouting chain includes

  #76·brada4 opened Oct 13, 2025Contributor·

  ·
  5

• fw4: enable mac ranges for rule

  #74·ckorber opened Oct 2, 2025·

  ·
  39

• config: strict ip6 ipsec matches

  #65·brada4 opened May 31, 2025Contributor·

  ·
  4

• ruleset: skip _iifname match for !tcp in mss fix

  #64·brada4 opened May 25, 2025Contributor·

  ·
  5

• config: mark unsupported fw3 options correctly

  #63·brada4 opened May 23, 2025Contributor·

  ·
  1

• config: Make DHCP and DHCPv6 response rules strict

  #62·brada4 opened May 15, 2025Contributor·

  ·
  2

• scripts: restore fw3 ct flush behavior

  #61·brada4 opened May 11, 2025Contributor·

  ·
  2

• examples: add nftrace example ruleset

  #60·brada4 opened May 7, 2025Contributor·

  ·
  3

• ruleset: apply loopback in/out rules later

  #56·brada4 opened Apr 9, 2025Contributor·

  ·