ssongliu
f226fed8cd
feat(firewall): support restoring rule backups on startup ( #14108 )
2026-10-16 10:50:07 +08:00
ssongliu
00ce5a7b36
fix(firewall): preserve IPv6 RA protection and simplify error messages ( #14015 )
2026-10-09 17:45:57 +08:00
ssongliu
e119239d3d
refactor: manage firewall rules through runtime state and file backups ( #13998 )
...
Replace database rule synchronization with native rule operations and file-based backup, import, and recovery. Update firewall management views, descriptions, whitelist handling, and translations.
Include terminal reconnect fixes and xpack build tags for Darwin build targets. Remove temporary regression test files before committing.
2026-10-08 18:19:30 +08:00
ssongliu
c4a6791271
fix: allow updated SSH ports through firewall before restart ( #13894 )
2026-09-22 14:51:54 +08:00
ssongliu
387e9fbeed
fix: correct firewall port allowances and whitelist sync reporting ( #13892 )
2026-09-22 12:48:40 +08:00
ssongliu
3a5371652e
refactor(firewall): simplify state reads and batch verification ( #13881 )
2026-09-21 15:09:13 +08:00
ssongliu
e833787020
fix(firewall): preserve whitelist priority and rule ordering ( #13845 )
2026-09-17 13:02:08 +08:00
ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
78402e1b7d
refactor(firewall): consolidate utilities and flatten packages ( #13833 )
2026-09-16 16:48:48 +08:00
ssongliu
782bc1e67c
fix(firewall): manage SSH access and queue stop operations ( #13831 )
...
* fix(firewall): manage SSH access and queue stop operations
* fix(firewall): reconcile whitelist rules and sync differences
2026-09-16 16:45:33 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
ed51a5e1fa
fix(firewall): split UFW all-protocol port ranges ( #13806 )
2026-09-14 15:46:14 +08:00
ssongliu
7aefb47cc3
fix(firewall): improve rule loading, task labels and panel port cleanup ( #13798 )
2026-09-14 09:40:20 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
2fcfe56a30
refactor(firewall): queue rule operations and simplify synchronization ( #13784 )
2026-09-10 23:54:46 +08:00
ssongliu
4cd77d8ee1
fix(firewall): simplify rule editing and reject duplicate adoption ( #13779 )
2026-09-10 18:11:36 +08:00
ssongliu
eb0f5264d7
refactor: simplify firewall rule management and whitelist updates ( #13758 )
2026-09-09 15:33:24 +08:00
ssongliu
6bc9dd96af
fix: simplify firewall rule editing and dual-stack port handling ( #13748 )
2026-09-08 22:46:35 +08:00
ssongliu
da5682a600
fix(firewall): harden port switching and rule synchronization ( #13731 )
2026-09-07 18:05:31 +08:00
ssongliu
7be7368bb9
fix: improve firewall lifecycle recovery ( #13686 )
2026-09-02 14:48:59 +08:00
ssongliu
3ab10848c8
fix: restore firewall-dependent rules after reset ( #13674 )
2026-08-31 17:15:56 +08:00
ssongliu
433f1a940f
fix: improve firewall abnormal state diagnostics ( #13673 )
2026-08-31 16:18:13 +08:00
ssongliu
1f12c09eb5
fix: improve firewall rule management ( #13670 )
2026-08-31 11:48:14 +08:00
ssongliu
31e6d523f9
fix: improve firewall runtime rule handling ( #13667 )
2026-08-31 09:28:15 +08:00
ssongliu
3c2d92dc5f
fix: improve firewall backend rule handling ( #13662 )
2026-08-28 16:11:11 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
68a871a5d7
fix: restore fail2ban after firewall start ( #13364 )
2026-07-27 10:16:04 +08:00
ssongliu
07a658582d
fix: restore fail2ban bans after firewall restart ( #13272 )
2026-07-15 16:31:09 +08:00
ssongliu
cbcb628bff
fix: normalize firewall import addresses ( #13196 )
2026-07-03 16:37:03 +08:00
ssongliu
6495869664
fix: fix firewall whitelist rules not applied after restart ( #12957 )
2026-06-09 11:27:38 +08:00
ssongliu
7b7f840c2e
feat: support firewall port whitelist management ( #12912 )
2026-06-01 18:26:54 +08:00
ssongliu
79ff565995
fix: Firewall remove status filtering ( #11868 )
2026-02-11 14:02:34 +08:00
KOMATA
e5b7e99cce
feat: retrieve listening processes in firewall port page ( #11665 )
...
* feat: Add endpoint to retrieve listening processes and update related services
* fix: Update listening process retrieval logic to include socket type checks
* refactor: accept context for improved request handling
2026-01-16 16:54:15 +08:00
ssongliu
ef6e342737
fix: Fix ICMP ping disable status update abnormality issue ( #11571 )
2026-01-06 04:01:43 +00:00
ssongliu
8fb3e78554
chore: Fix some internationalization content ( #11528 )
...
Refs #11517
2025-12-31 14:35:38 +00:00
ssongliu
50947f4ddc
feat: ICMP ping disable compatibility with Debian 13 ( #11514 )
...
Refs #11472
2025-12-29 09:35:36 +00:00
HynoR
dc47eb5ae4
feat: Add UDP port 443 acceptance rule to firewall and iptables configuration
2025-12-22 15:55:47 +08:00
ssongliu
3b306f990a
chore: Optimize iptables initial state loading speed ( #11085 )
2025-11-26 22:29:48 +08:00
ssongliu
e4fbd3cf86
fix: Fix the issue of abnormal ufw status loading ( #10949 )
2025-11-13 21:36:35 +08:00
ssongliu
402931862f
fix: Fix the issue where iptables description does not take effect ( #10947 )
2025-11-13 08:36:47 +00:00
ssongliu
55cbf572e0
fix: Fix the issue where deleting rules in iptables advanced settings… ( #10942 )
...
… fails
2025-11-13 06:38:47 +00:00
ssongliu
0bc9e85734
fix: Fix the issue of abnormal iptables range port addition ( #10938 )
2025-11-12 22:26:59 +08:00
ssongliu
5b0fccd19a
fix: Fix the issue of license status refresh after import ( #10934 )
2025-11-12 18:29:10 +08:00
KOMATA
afd62e8539
fix: Fix bug in iptables firewall module ( #10927 )
2025-11-12 11:49:24 +08:00
ssongliu
102f7c316d
fix: display iptables default allowed ports ( #10922 )
2025-11-11 14:22:42 +00:00
ssongliu
HynoR
ssongliu
KOMATA