summaryrefslogtreecommitdiff
path: root/pkg/linux/bitmask-root
AgeCommit message (Collapse)Author
2015-08-31Merge tag '0.9.0rc2' into debian/experimentalKali Kaneko
Tag leap.bitmask version 0.9.0rc2
2015-05-07[bug] change the ip command location to /sbin/Ivan Alejandro
Change the 'ip' command location to support Fedora/RHEL distros. /bin/ip is pressent on Debian/Ubuntu but not on Fedora. /sbin/ip is a symlink to /bin/ip on Debian/Ubuntu and a binary on Fedora. - Resolves: #6894
2015-01-08Merge branch 'release/0.8.x' into debian/experimentalKali Kaneko
2015-01-08Support for 'nobody' (used on Arch) group name.0.8.0rc3Ivan Alejandro
2015-01-08Support for 'nobody' (used on Arch) group name.Ivan Alejandro
2014-12-23Merge tag '0.7.0' into debian/experimentalKali Kaneko
Tag leap.bitmask version 0.7.0
2014-12-05Bump bitmask-root version.0.7.0rc6Ivan Alejandro
2014-11-24Merge tag '0.7.0rc5' into debian/experimentalKali Kaneko
Tag leap.bitmask version 0.7.0rc5
2014-11-14vpn: support for the server setting custom fragment openvpn optionelijah
2014-09-24Merge branch 'develop' into deb-0.7.0-rc1Kali Kaneko
Conflicts: docs/man/bitmask-root.1.rst
2014-09-22Use python2.7 instead of python2.Ivan Alejandro
The binary `python2` is not present on Debian systems. The common denominator for Ubuntu, Debian, Arch is `python2.7` Related to #6048.
2014-09-19bump versionKali Kaneko
because we've updated it with mail fw.
2014-09-11Add email firewallRuben Pollan
2014-09-05Use python2 explicitly to run bitmask-root.Ivan Alejandro
Closes #6048.
2014-08-08Merge branch '0.6.1-rc' into deb-0.6.1-rckali
Conflicts: pkg/linux/bitmask-root src/leap/bitmask/gui/login.py
2014-07-25bump bitmask-root version numberkali
2014-07-25remove unused importskali
2014-07-25Merge tag '0.5.4' into deb-0.5.4kali
Tag leap.bitmask version 0.5.4
2014-07-21firewall: correctly rewrite DNS packets originally for local network.elijah
2014-07-21bitmask-root: pep8'edelijah
2014-07-21bitmask-root: rip out all resolvconf code and simply rewrite all DNS packets ↵elijah
to use the VPN nameserver.
2014-07-21firewall stop: try to be much more robust in stopping the firewall whenever ↵elijah
we can
2014-07-16firewall: correctly rewrite DNS packets originally for local network.elijah
2014-07-10bitmask-root: pep8'edelijah
2014-07-10bitmask-root: rip out all resolvconf code and simply rewrite all DNS packets ↵elijah
to use the VPN nameserver.
2014-07-09firewall stop: try to be much more robust in stopping the firewall whenever ↵elijah
we can
2014-07-01Merge branch 'develop' into deb-0.5.3Kali Kaneko
2014-06-20fix bundle path for openvpnKali Kaneko
2014-06-10Merge tag '0.5.2' into deb-0.5.2Kali Kaneko
Tag leap.bitmask version 0.5.2 Conflicts: docs/man/bitmask-root.1.rst docs/man/bitmask.1.rst
2014-06-05pep8 cleanupKali Kaneko
2014-06-05check for uid == 0Kali Kaneko
2014-06-05add version commandKali Kaneko
2014-06-04add null checks, fix error on get_default_device. Closes: #5732Kali Kaneko
Also: -make firewall aware of restarts, and not tear down the fw if an error happens while a restart is going on. -notify errors to syslog.
2014-05-30fix bug with ipv6 blocking (added to wrong chain, so never removed and also ↵elijah
it would keep getting added repeatedly)
2014-05-29linux firewall: s/insert/append, and switch order. it makes much more sense ↵elijah
to insert custom chain at start of OUTPUT, then append to that chain.
2014-05-29return instead of reject for multicastelijah
2014-05-29unblock local multicast IPs from linux firewall, to allow SSDP and ↵elijah
Bonjour/mDNS to work.
2014-05-21block ipv6 trafficKali Kaneko
2014-05-21block ipv6 trafficKali Kaneko
2014-05-20fix nameserver restoring. Closes: #5692Kali Kaneko
2014-05-20fix nameserver restoring. Closes: #5692Kali Kaneko
2014-05-15avoid openvp soft-restart. Closes: #5669Kali Kaneko
2014-05-12wait on shutdown until firewall is downKali Kaneko
2014-05-12change paths for installing the latest helpersKali Kaneko
2014-05-12daemonize calls to resolvconf. Closes: #5618Kali Kaneko
2014-05-12add comment about pending ipv6 rulesKali Kaneko
2014-05-12ditch psutil, use stdlib onlyKali Kaneko
2014-05-12only switch the fw down if user asked for eip downKali Kaneko
2014-05-12change the rule to actually allow dns traffic to tunnel nameserver, not gatewayKali Kaneko
2014-05-12bitmask-root wrapper improvementsKali Kaneko
* add missing constant for ip command * use all prints as functions * add missing docstrings * add alternatives for openvpn bin and resolvconf script * use random dirs for management socket * use exec to spawn openvpn * make bitmask chain constant * add script name in stdout lines