summaryrefslogtreecommitdiff
path: root/pkg/linux/bitmask-root
AgeCommit message (Collapse)Author
2015-05-07[bug] change the ip command location to /sbin/Ivan Alejandro
Change the 'ip' command location to support Fedora/RHEL distros. /bin/ip is pressent on Debian/Ubuntu but not on Fedora. /sbin/ip is a symlink to /bin/ip on Debian/Ubuntu and a binary on Fedora. - Resolves: #6894
2015-01-08Support for 'nobody' (used on Arch) group name.Ivan Alejandro
2014-12-05Bump bitmask-root version.0.7.0rc6Ivan Alejandro
2014-11-14vpn: support for the server setting custom fragment openvpn optionelijah
2014-09-22Use python2.7 instead of python2.Ivan Alejandro
The binary `python2` is not present on Debian systems. The common denominator for Ubuntu, Debian, Arch is `python2.7` Related to #6048.
2014-09-19bump versionKali Kaneko
because we've updated it with mail fw.
2014-09-11Add email firewallRuben Pollan
2014-09-05Use python2 explicitly to run bitmask-root.Ivan Alejandro
Closes #6048.
2014-07-25bump bitmask-root version numberkali
2014-07-25remove unused importskali
2014-07-16firewall: correctly rewrite DNS packets originally for local network.elijah
2014-07-10bitmask-root: pep8'edelijah
2014-07-10bitmask-root: rip out all resolvconf code and simply rewrite all DNS packets ↵elijah
to use the VPN nameserver.
2014-07-09firewall stop: try to be much more robust in stopping the firewall whenever ↵elijah
we can
2014-06-20fix bundle path for openvpnKali Kaneko
2014-06-05pep8 cleanupKali Kaneko
2014-06-05check for uid == 0Kali Kaneko
2014-06-05add version commandKali Kaneko
2014-06-04add null checks, fix error on get_default_device. Closes: #5732Kali Kaneko
Also: -make firewall aware of restarts, and not tear down the fw if an error happens while a restart is going on. -notify errors to syslog.
2014-05-30fix bug with ipv6 blocking (added to wrong chain, so never removed and also ↵elijah
it would keep getting added repeatedly)
2014-05-29linux firewall: s/insert/append, and switch order. it makes much more sense ↵elijah
to insert custom chain at start of OUTPUT, then append to that chain.
2014-05-29return instead of reject for multicastelijah
2014-05-29unblock local multicast IPs from linux firewall, to allow SSDP and ↵elijah
Bonjour/mDNS to work.
2014-05-21block ipv6 trafficKali Kaneko
2014-05-20fix nameserver restoring. Closes: #5692Kali Kaneko
2014-05-15avoid openvp soft-restart. Closes: #5669Kali Kaneko
2014-05-12wait on shutdown until firewall is downKali Kaneko
2014-05-12change paths for installing the latest helpersKali Kaneko
2014-05-12daemonize calls to resolvconf. Closes: #5618Kali Kaneko
2014-05-12add comment about pending ipv6 rulesKali Kaneko
2014-05-12ditch psutil, use stdlib onlyKali Kaneko
2014-05-12only switch the fw down if user asked for eip downKali Kaneko
2014-05-12change the rule to actually allow dns traffic to tunnel nameserver, not gatewayKali Kaneko
2014-05-12bitmask-root wrapper improvementsKali Kaneko
* add missing constant for ip command * use all prints as functions * add missing docstrings * add alternatives for openvpn bin and resolvconf script * use random dirs for management socket * use exec to spawn openvpn * make bitmask chain constant * add script name in stdout lines
2014-05-12pep8 fixesKali Kaneko
* do not strictly compare to bool values
2014-05-12add elijah's root-wrapper in pythonKali Kaneko