ssongliu
e833787020
fix(firewall): preserve whitelist priority and rule ordering ( #13845 )
2026-09-17 13:02:08 +08:00
ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
78402e1b7d
refactor(firewall): consolidate utilities and flatten packages ( #13833 )
2026-09-16 16:48:48 +08:00
ssongliu
782bc1e67c
fix(firewall): manage SSH access and queue stop operations ( #13831 )
...
* fix(firewall): manage SSH access and queue stop operations
* fix(firewall): reconcile whitelist rules and sync differences
2026-09-16 16:45:33 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
b9c8e39560
fix: validate Docker IPv4 forwarding ( #13820 )
2026-09-15 18:36:36 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
ed51a5e1fa
fix(firewall): split UFW all-protocol port ranges ( #13806 )
2026-09-14 15:46:14 +08:00
ssongliu
7aefb47cc3
fix(firewall): improve rule loading, task labels and panel port cleanup ( #13798 )
2026-09-14 09:40:20 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
2fcfe56a30
refactor(firewall): queue rule operations and simplify synchronization ( #13784 )
2026-09-10 23:54:46 +08:00
ssongliu
4cd77d8ee1
fix(firewall): simplify rule editing and reject duplicate adoption ( #13779 )
2026-09-10 18:11:36 +08:00
ssongliu
eb0f5264d7
refactor: simplify firewall rule management and whitelist updates ( #13758 )
2026-09-09 15:33:24 +08:00
ssongliu
6bc9dd96af
fix: simplify firewall rule editing and dual-stack port handling ( #13748 )
2026-09-08 22:46:35 +08:00
ssongliu
da5682a600
fix(firewall): harden port switching and rule synchronization ( #13731 )
2026-09-07 18:05:31 +08:00
ssongliu
a71aea8aec
fix(firewall): hide inactive Docker ports ( #13716 )
2026-09-04 21:43:05 +08:00
ssongliu
2948b8ffe8
fix: normalize Docker firewall rule sync ( #13704 )
2026-09-03 18:22:48 +08:00
ssongliu
7be7368bb9
fix: improve firewall lifecycle recovery ( #13686 )
2026-09-02 14:48:59 +08:00
ssongliu
eab0bb4a94
fix: repair firewall forwarding migration ( #13689 )
2026-09-02 14:48:47 +08:00
ssongliu
fb377d2e99
fix(firewall): recover rules after upgrade ( #13680 )
2026-09-01 14:53:01 +08:00
ssongliu
3ab10848c8
fix: restore firewall-dependent rules after reset ( #13674 )
2026-08-31 17:15:56 +08:00
ssongliu
433f1a940f
fix: improve firewall abnormal state diagnostics ( #13673 )
2026-08-31 16:18:13 +08:00
ssongliu
1f12c09eb5
fix: improve firewall rule management ( #13670 )
2026-08-31 11:48:14 +08:00
ssongliu
31e6d523f9
fix: improve firewall runtime rule handling ( #13667 )
2026-08-31 09:28:15 +08:00
ssongliu
3c2d92dc5f
fix: improve firewall backend rule handling ( #13662 )
2026-08-28 16:11:11 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
ddfb816ef1
feat: improve firewall backend synchronization ( #13645 )
2026-08-27 10:37:09 +08:00
ssongliu
18428d108e
feat: improve firewall backend synchronization ( #13644 )
2026-08-27 10:31:39 +08:00
ssongliu
12f2484d12
feat: support firewall rule synchronization ( #13637 )
2026-08-25 18:50:27 +08:00
ssongliu
86af4fbd4d
feat: improve firewall status and UI translations ( #13630 )
2026-08-24 17:40:36 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
d55982bde0
refactor: update agent and core utilities ( #12621 )
2026-05-21 12:35:09 +08:00
MonkeyCode-AI
a95d9aa27a
fix: Add CheckIllegal validation to prevent command injection in 8 API endpoints ( #11857 )
...
- SSH log query: validate req.Info before grep concatenation
- iptables rule search: validate chain param in ReadFilterRulesByChain/LoadDefaultStrategy
- Firewalld port forward: validate port/protocol/targetIP/targetPort params
- Pure-FTPd user management: validate username/path in UserAdd/UserDel/SetPath/SetStatus
- PostgreSQL remote backup/recover: validate password/address/user/dbname
- MySQL remote backup/recover: validate password/address/user/dbname/format
- Website Composer: validate user/mirror/command/extCommand
- Disk operations: validate device/mountPoint/filesystem in Partition/Mount/Unmount
2026-02-10 18:32:42 +08:00
ssongliu
d8a08a6c0c
fix: Fix iptables rule display abnormality issue ( #11555 )
2026-01-05 14:48:49 +08:00
ssongliu
50947f4ddc
feat: ICMP ping disable compatibility with Debian 13 ( #11514 )
...
Refs #11472
2025-12-29 09:35:36 +00:00
ssongliu
c08e83e5d4
fix: Fix firewalld range port forwarding failure issue ( #11390 )
2025-12-18 09:21:13 +00:00
ssongliu
6aca579854
fix: Fix ufw IPv6 rule configuration issue ( #11349 )
...
Refs #11211
2025-12-16 08:31:59 +00:00
endymx
ce3fa94708
feat(iptables): range forward ( #11188 )
2025-12-08 16:35:01 +08:00
ssongliu
b3350b54b3
fix: Add iptables execution timeout ( #11176 )
2025-12-04 11:22:25 +08:00
ssongliu
3b306f990a
chore: Optimize iptables initial state loading speed ( #11085 )
2025-11-26 22:29:48 +08:00
ssongliu
c3cc26a136
fix: Fix the issue of abnormal iptables persistence loading ( #11066 )
2025-11-25 14:21:24 +08:00
ssongliu
496c0b50b4
fix: Fix the issue of abnormal iptables rule persistence ( #11056 )
...
Refs #11027
2025-11-24 14:33:15 +00:00
ssongliu
e4fbd3cf86
fix: Fix the issue of abnormal ufw status loading ( #10949 )
2025-11-13 21:36:35 +08:00
ssongliu
55cbf572e0
fix: Fix the issue where deleting rules in iptables advanced settings… ( #10942 )
...
… fails
2025-11-13 06:38:47 +00:00
ssongliu
0bc9e85734
fix: Fix the issue of abnormal iptables range port addition ( #10938 )
2025-11-12 22:26:59 +08:00
KOMATA
afd62e8539
fix: Fix bug in iptables firewall module ( #10927 )
2025-11-12 11:49:24 +08:00
ssongliu
102f7c316d
fix: display iptables default allowed ports ( #10922 )
2025-11-11 14:22:42 +00:00
ssongliu
HynoR
MonkeyCode-AI
ssongliu
endymx
KOMATA