Naredula Janardhana Reddy
5ca5851b1b
Bug 12808:
...
Summary of changes:
- Mutiple routing table for each public interface is added (previously there is only one routing table ). when the packet is send out of public interface corresponding per-interface routing table will be used. per-interface routing table will modified when ever ip/interface added/deleted.
- New parameter is added to ipassoc command to include the default gateway for every interface/ip. prevously it is using only one public interface to send out, default gateway is obtained at the boot up time.
- In the DNAT case. In the revese path(from guest vm to outside, or when DNAT packet receives from the eth0) the public ip/source ip will not be available till POSTROUTING. to overcome this, DNAT connection are marked with routing table number at the time of connection creation, in the reverse path the routing table# from DNAT connection is used to detect per-interface routing table.
2012-01-25 12:54:00 +05:30
frank
52610ffcb3
add copyright header to shell scripts
2012-01-11 18:41:53 -08:00
Edison Su
782b4d97b2
bug 11835: don't return error if it's delete firewall rules
...
status 11835: resolved fixed
Reviewed-by: frank
2011-11-10 17:59:01 -08:00
Sheng Yang
abc44ac283
bug 11266: Add lock file for every script in the systemVM
...
To prevent them from racy.
status 11266: resolved fixed
2011-09-09 18:27:33 -07:00
Chiradeep Vittal
779989ce6b
bug 11103: create firewall chains on ipassoc
...
status 11103: resolved fixed
bug 11106: this is somehow fixed / cannot reproduced
status 11106: resolved fixed
2011-08-15 10:18:44 -07:00
Chiradeep Vittal
88a1c69413
bug 10561: get static nat working
2011-08-11 12:41:21 -07:00
Naredula Janardhana Reddy
9e9ae52dbf
Revert "bug 10561: Allowing ICMP traffic through static NAT"
...
This reverts commit 5e74e24bb359456967866cb2c6cc0f6f73570f97.
2011-08-09 00:08:07 +05:30
Naredula Janardhana Reddy
46427fef91
bug 10561: Allowing ICMP traffic through static NAT
2011-08-03 21:15:02 +05:30
Edison Su
a3613f2762
It breaks port forwording.
...
Revert "bug 10329: changed - t :"
This reverts commit 16779afa0233e6ff33cdfca12611e6a43bcd0b42.
2011-07-07 18:30:42 -07:00
Abhinandan Prateek
73b79deb99
bug 10329: changed - t :
...
status 10329: resolved fixed
2011-07-07 11:52:04 +05:30
Abhinandan Prateek
6707048fd5
bug 9869: if several port forwarding rules are deleted in quick succession it makes the router iptables inconsistent
...
status 9869: resolved fixed
2011-05-16 13:49:24 +05:30
Abhinandan Prateek
d8b7f5c19b
bug 8115: Source IP filtering in Virtual Router
...
status 8115: resolved fixed
Changes to the router firewall.sh patch to add cidrs
2011-05-12 15:20:00 +05:30
Chiradeep Vittal
515981a436
bug 9544: deal with same ports forwarded from different public ips
...
status 9544: resolved fixed
2011-05-05 16:49:49 -07:00
Frank
92155522f2
Add license header to files
2011-04-14 11:23:14 -07:00
Chiradeep Vittal
10dc1c75d8
bug 8370: pass in original params when calling delete during add
...
status 8370: resolved fixed
2011-02-08 16:41:27 -08:00
Edison Su
99c6d823b0
fix setting port forword rules
2011-02-08 14:50:58 -05:00
Chiradeep Vittal
711c4eeaae
bug 8209,8370,8459: cleanup scripting
2011-02-08 12:10:07 -08:00
abhishek
1aee756184
bug 7345: During the expunge operation, we were not calling the deleteipforwardingrule method, for a rule which was static nat. Adding that logic. Also, making a change in the domr script as we do not need to execute a line on deletion of a rule
...
status 7345: resolved fixed
2010-11-30 10:07:10 -08:00
Chiradeep Vittal
de49fbad6f
1-1-NAT feature broke regular NAT, fixing
2010-11-18 14:05:03 -08:00
abhishek
1faaba8fb0
fixed a corner case; also changed the commands to be async and changed the method signatures to conform with the master refactor
2010-11-11 13:07:26 -08:00
abhishek
239942bbe1
refactored all the commands to cater to keshav's needs, and added the new apis. the initial set of testing is complete, will now focus on corner cases
2010-11-11 13:07:26 -08:00
edison
e67e7d0e7b
remove patches/systemv, and mv tools/systemvm into patches
2010-10-05 20:41:39 -07:00