ssongliu
f226fed8cd
feat(firewall): support restoring rule backups on startup ( #14108 )
2026-10-16 10:50:07 +08:00
ssongliu
00ce5a7b36
fix(firewall): preserve IPv6 RA protection and simplify error messages ( #14015 )
2026-10-09 17:45:57 +08:00
ssongliu
e119239d3d
refactor: manage firewall rules through runtime state and file backups ( #13998 )
...
Replace database rule synchronization with native rule operations and file-based backup, import, and recovery. Update firewall management views, descriptions, whitelist handling, and translations.
Include terminal reconnect fixes and xpack build tags for Darwin build targets. Remove temporary regression test files before committing.
2026-10-08 18:19:30 +08:00
ssongliu
19bb823b05
fix(firewall): guard IPv6 forwarding against RA disruption ( #13882 )
2026-09-21 17:12:17 +08:00
ssongliu
3a5371652e
refactor(firewall): simplify state reads and batch verification ( #13881 )
2026-09-21 15:09:13 +08:00
ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
2fcfe56a30
refactor(firewall): queue rule operations and simplify synchronization ( #13784 )
2026-09-10 23:54:46 +08:00
ssongliu
4cd77d8ee1
fix(firewall): simplify rule editing and reject duplicate adoption ( #13779 )
2026-09-10 18:11:36 +08:00
ssongliu
6bc9dd96af
fix: simplify firewall rule editing and dual-stack port handling ( #13748 )
2026-09-08 22:46:35 +08:00
ssongliu
a71aea8aec
fix(firewall): hide inactive Docker ports ( #13716 )
2026-09-04 21:43:05 +08:00
ssongliu
7be7368bb9
fix: improve firewall lifecycle recovery ( #13686 )
2026-09-02 14:48:59 +08:00
ssongliu
fb377d2e99
fix(firewall): recover rules after upgrade ( #13680 )
2026-09-01 14:53:01 +08:00
ssongliu
deddd392ba
fix(firewall): handle Docker host input ports ( #13675 )
2026-09-01 09:33:29 +08:00
ssongliu
3ab10848c8
fix: restore firewall-dependent rules after reset ( #13674 )
2026-08-31 17:15:56 +08:00
ssongliu
433f1a940f
fix: improve firewall abnormal state diagnostics ( #13673 )
2026-08-31 16:18:13 +08:00
ssongliu
1f12c09eb5
fix: improve firewall rule management ( #13670 )
2026-08-31 11:48:14 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
18428d108e
feat: improve firewall backend synchronization ( #13644 )
2026-08-27 10:31:39 +08:00
ssongliu
12f2484d12
feat: support firewall rule synchronization ( #13637 )
2026-08-25 18:50:27 +08:00
ssongliu
86af4fbd4d
feat: improve firewall status and UI translations ( #13630 )
2026-08-24 17:40:36 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
8fb3e78554
chore: Fix some internationalization content ( #11528 )
...
Refs #11517
2025-12-31 14:35:38 +00:00
ssongliu
402931862f
fix: Fix the issue where iptables description does not take effect ( #10947 )
2025-11-13 08:36:47 +00:00
ssongliu
102f7c316d
fix: display iptables default allowed ports ( #10922 )
2025-11-11 14:22:42 +00:00
ssongliu
6db79f4b7b
feat: support iptables firewall control ( #10903 )
2025-11-10 21:17:53 +08:00
双向极端 and live
d0bb9165bf
feat: Add inbound interface restriction option for ufw forward rules ( #10345 ) ( #10549 )
...
* 修复https防窜站关闭时修改默认站点报错的问题
* feat: Add inbound interface restriction option for ufw forward rules (#10345 )
---------
Co-authored-by: live <Anxys@outlook.com >
2025-10-02 20:33:20 +08:00
ssongliu
ea25b800d2
fix: Add Docker restart option to firewall operations ( #10253 )
...
Refs #10247
2025-09-03 09:29:30 +00:00
ssongliu
47d8c405dd
fix: Merge dev code up to pr #8141 ( #8147 )
2025-03-14 10:08:31 +08:00
ssongliu
55a6cdcf10
feat: uniform application service status return ( #7426 )
2024-12-18 10:06:15 +00:00
ssongliu
8d28b7db94
pref: backend 重命名 agent
2024-07-23 14:48:37 +08:00
ssongliu
HynoR
ssongliu
双向极端andlive
ssongliu