ssongliu
e833787020
fix(firewall): preserve whitelist priority and rule ordering ( #13845 )
2026-09-17 13:02:08 +08:00
ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
78402e1b7d
refactor(firewall): consolidate utilities and flatten packages ( #13833 )
2026-09-16 16:48:48 +08:00
ssongliu
782bc1e67c
fix(firewall): manage SSH access and queue stop operations ( #13831 )
...
* fix(firewall): manage SSH access and queue stop operations
* fix(firewall): reconcile whitelist rules and sync differences
2026-09-16 16:45:33 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
da5682a600
fix(firewall): harden port switching and rule synchronization ( #13731 )
2026-09-07 18:05:31 +08:00
ssongliu
3c2d92dc5f
fix: improve firewall backend rule handling ( #13662 )
2026-08-28 16:11:11 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
18428d108e
feat: improve firewall backend synchronization ( #13644 )
2026-08-27 10:31:39 +08:00
ssongliu
12f2484d12
feat: support firewall rule synchronization ( #13637 )
2026-08-25 18:50:27 +08:00
ssongliu
86af4fbd4d
feat: improve firewall status and UI translations ( #13630 )
2026-08-24 17:40:36 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
6495869664
fix: fix firewall whitelist rules not applied after restart ( #12957 )
2026-06-09 11:27:38 +08:00
ssongliu
7b7f840c2e
feat: support firewall port whitelist management ( #12912 )
2026-06-01 18:26:54 +08:00
ssongliu
HynoR