summaryrefslogtreecommitdiff
path: root/pkg/linux/bitmask-root
AgeCommit message (Collapse)Author
2014-07-16firewall: correctly rewrite DNS packets originally for local network.elijah
2014-07-10bitmask-root: pep8'edelijah
2014-07-10bitmask-root: rip out all resolvconf code and simply rewrite all DNS packets ↵elijah
to use the VPN nameserver.
2014-07-09firewall stop: try to be much more robust in stopping the firewall whenever ↵elijah
we can
2014-06-20fix bundle path for openvpnKali Kaneko
2014-06-05pep8 cleanupKali Kaneko
2014-06-05check for uid == 0Kali Kaneko
2014-06-05add version commandKali Kaneko
2014-06-04add null checks, fix error on get_default_device. Closes: #5732Kali Kaneko
Also: -make firewall aware of restarts, and not tear down the fw if an error happens while a restart is going on. -notify errors to syslog.
2014-05-30fix bug with ipv6 blocking (added to wrong chain, so never removed and also ↵elijah
it would keep getting added repeatedly)
2014-05-29linux firewall: s/insert/append, and switch order. it makes much more sense ↵elijah
to insert custom chain at start of OUTPUT, then append to that chain.
2014-05-29return instead of reject for multicastelijah
2014-05-29unblock local multicast IPs from linux firewall, to allow SSDP and ↵elijah
Bonjour/mDNS to work.
2014-05-21block ipv6 trafficKali Kaneko
2014-05-20fix nameserver restoring. Closes: #5692Kali Kaneko
2014-05-15avoid openvp soft-restart. Closes: #5669Kali Kaneko
2014-05-12wait on shutdown until firewall is downKali Kaneko
2014-05-12change paths for installing the latest helpersKali Kaneko
2014-05-12daemonize calls to resolvconf. Closes: #5618Kali Kaneko
2014-05-12add comment about pending ipv6 rulesKali Kaneko
2014-05-12ditch psutil, use stdlib onlyKali Kaneko
2014-05-12only switch the fw down if user asked for eip downKali Kaneko
2014-05-12change the rule to actually allow dns traffic to tunnel nameserver, not gatewayKali Kaneko
2014-05-12bitmask-root wrapper improvementsKali Kaneko
* add missing constant for ip command * use all prints as functions * add missing docstrings * add alternatives for openvpn bin and resolvconf script * use random dirs for management socket * use exec to spawn openvpn * make bitmask chain constant * add script name in stdout lines
2014-05-12pep8 fixesKali Kaneko
* do not strictly compare to bool values
2014-05-12add elijah's root-wrapper in pythonKali Kaneko