ssongliu
e833787020
fix(firewall): preserve whitelist priority and rule ordering ( #13845 )
2026-09-17 13:02:08 +08:00
ssongliu
673ffac516
refactor(firewall): simplify whitelist configuration and rule protection ( #13838 )
2026-09-16 22:09:49 +08:00
ssongliu
78402e1b7d
refactor(firewall): consolidate utilities and flatten packages ( #13833 )
2026-09-16 16:48:48 +08:00
ssongliu
782bc1e67c
fix(firewall): manage SSH access and queue stop operations ( #13831 )
...
* fix(firewall): manage SSH access and queue stop operations
* fix(firewall): reconcile whitelist rules and sync differences
2026-09-16 16:45:33 +08:00
ssongliu
86e4ed6f64
perf(firewall): optimize large rule sets and queue deletions ( #13829 )
2026-09-16 15:34:10 +08:00
ssongliu
fe742b9f41
fix(firewall): improve whitelist management and rule lifecycle ( #13826 )
2026-09-15 23:55:01 +08:00
ssongliu
005f240fb7
fix: improve firewall lifecycle and sync ( #13809 )
2026-09-15 10:04:53 +08:00
ssongliu
ed51a5e1fa
fix(firewall): split UFW all-protocol port ranges ( #13806 )
2026-09-14 15:46:14 +08:00
ssongliu
7aefb47cc3
fix(firewall): improve rule loading, task labels and panel port cleanup ( #13798 )
2026-09-14 09:40:20 +08:00
ssongliu
9300bf4141
refactor(firewall): queue rule operations and simplify synchronization ( #13786 )
2026-09-11 15:16:44 +08:00
ssongliu
2fcfe56a30
refactor(firewall): queue rule operations and simplify synchronization ( #13784 )
2026-09-10 23:54:46 +08:00
ssongliu
4cd77d8ee1
fix(firewall): simplify rule editing and reject duplicate adoption ( #13779 )
2026-09-10 18:11:36 +08:00
ssongliu
eb0f5264d7
refactor: simplify firewall rule management and whitelist updates ( #13758 )
2026-09-09 15:33:24 +08:00
ssongliu
6bc9dd96af
fix: simplify firewall rule editing and dual-stack port handling ( #13748 )
2026-09-08 22:46:35 +08:00
ssongliu
da5682a600
fix(firewall): harden port switching and rule synchronization ( #13731 )
2026-09-07 18:05:31 +08:00
ssongliu
7be7368bb9
fix: improve firewall lifecycle recovery ( #13686 )
2026-09-02 14:48:59 +08:00
ssongliu
3ab10848c8
fix: restore firewall-dependent rules after reset ( #13674 )
2026-08-31 17:15:56 +08:00
ssongliu
433f1a940f
fix: improve firewall abnormal state diagnostics ( #13673 )
2026-08-31 16:18:13 +08:00
ssongliu
1f12c09eb5
fix: improve firewall rule management ( #13670 )
2026-08-31 11:48:14 +08:00
ssongliu
31e6d523f9
fix: improve firewall runtime rule handling ( #13667 )
2026-08-31 09:28:15 +08:00
ssongliu
3c2d92dc5f
fix: improve firewall backend rule handling ( #13662 )
2026-08-28 16:11:11 +08:00
ssongliu
f15ff46e34
fix: improve firewall rule management ( #13648 )
2026-08-27 22:24:15 +08:00
ssongliu
53f75826d8
refactor: simplify firewall service structure ( #13646 )
2026-08-27 14:00:43 +08:00
ssongliu
7915230121
refactor: rebuild firewall management ( #13628 )
...
* refactor(firewall): rebuild rule management foundation
* refactor(firewall): streamline rule checks and inventory
* feat(firewall): improve native rule inventory
* refactor(firewall): refine rule management
* feat: add Docker port guard
* feat(firewall): support native nftables
* feat(firewall): add configurable firewall selection
* feat(firewall): support nftables docker port guard
* refactor(firewall): complete v2 rule management and migration
* refactor(firewall): align state and API contracts
* refactor(firewall): unify rule management operations
* feat: refine firewall v2 rules and forwarding
* fix(firewall): harden dual-stack rule management
* refactor(firewall): consolidate rule validation and persistence
2026-08-24 12:51:34 +08:00
HynoR
f35b0deb29
refactor(firewall): extract port forwarding subsystem ( #13347 )
...
Port forwarding no longer shares the filter client. FilterClient keeps only
filter capabilities, and forwarding gets its own adapter, service and boot
replay:
- utils/firewall/forwarding holds the provider adapters. firewalld uses native
forward-port, ufw and iptables share the NAT implementation moved out of
client/iptables/forward.go.
- service/forwarding.go owns base info, search, operate, enable and replay.
The API keeps its routes and dispatches on name/type/operate.
- init/firewall replays forwarding through that service instead of loading NAT
rule files inline.
Also adds 1PANEL_FORWARD to the IptablesOp name enum: the frontend already
sends {"name":"1PANEL_FORWARD","operate":"init-forward"} and the validator
rejected it with 400 before reaching the service. Besides that, the only
observable difference is that a forward-tab search no longer triggers the
port/address record cleanup goroutine on the side.
2026-07-30 14:07:41 +08:00
ssongliu
68a871a5d7
fix: restore fail2ban after firewall start ( #13364 )
2026-07-27 10:16:04 +08:00
ssongliu
07a658582d
fix: restore fail2ban bans after firewall restart ( #13272 )
2026-07-15 16:31:09 +08:00
ssongliu
cbcb628bff
fix: normalize firewall import addresses ( #13196 )
2026-07-03 16:37:03 +08:00
ssongliu
6495869664
fix: fix firewall whitelist rules not applied after restart ( #12957 )
2026-06-09 11:27:38 +08:00
ssongliu
7b7f840c2e
feat: support firewall port whitelist management ( #12912 )
2026-06-01 18:26:54 +08:00
ssongliu
79ff565995
fix: Firewall remove status filtering ( #11868 )
2026-02-11 14:02:34 +08:00
KOMATA
e5b7e99cce
feat: retrieve listening processes in firewall port page ( #11665 )
...
* feat: Add endpoint to retrieve listening processes and update related services
* fix: Update listening process retrieval logic to include socket type checks
* refactor: accept context for improved request handling
2026-01-16 16:54:15 +08:00
ssongliu
ef6e342737
fix: Fix ICMP ping disable status update abnormality issue ( #11571 )
2026-01-06 04:01:43 +00:00
ssongliu
8fb3e78554
chore: Fix some internationalization content ( #11528 )
...
Refs #11517
2025-12-31 14:35:38 +00:00
ssongliu
50947f4ddc
feat: ICMP ping disable compatibility with Debian 13 ( #11514 )
...
Refs #11472
2025-12-29 09:35:36 +00:00
HynoR
dc47eb5ae4
feat: Add UDP port 443 acceptance rule to firewall and iptables configuration
2025-12-22 15:55:47 +08:00
ssongliu
3b306f990a
chore: Optimize iptables initial state loading speed ( #11085 )
2025-11-26 22:29:48 +08:00
ssongliu
e4fbd3cf86
fix: Fix the issue of abnormal ufw status loading ( #10949 )
2025-11-13 21:36:35 +08:00
ssongliu
402931862f
fix: Fix the issue where iptables description does not take effect ( #10947 )
2025-11-13 08:36:47 +00:00
ssongliu
55cbf572e0
fix: Fix the issue where deleting rules in iptables advanced settings… ( #10942 )
...
… fails
2025-11-13 06:38:47 +00:00
ssongliu
0bc9e85734
fix: Fix the issue of abnormal iptables range port addition ( #10938 )
2025-11-12 22:26:59 +08:00
ssongliu
5b0fccd19a
fix: Fix the issue of license status refresh after import ( #10934 )
2025-11-12 18:29:10 +08:00
KOMATA
afd62e8539
fix: Fix bug in iptables firewall module ( #10927 )
2025-11-12 11:49:24 +08:00
ssongliu
102f7c316d
fix: display iptables default allowed ports ( #10922 )
2025-11-11 14:22:42 +00:00
KOMATA
ffc81ea85a
fix: enhance ping status and update logic in firewall service ( #10920 )
...
* fix: Update ping status check method
* fix: Enhance ping status update logic and support for alternative sysctl configuration path
2025-11-11 22:20:09 +08:00
ssongliu
6db79f4b7b
feat: support iptables firewall control ( #10903 )
2025-11-10 21:17:53 +08:00
ssongliu
c06ba18023
feat: compatible with openrc and sysvinit ( #10723 )
2025-10-22 18:32:42 +08:00
双向极端
d0bb9165bf
feat: Add inbound interface restriction option for ufw forward rules ( #10345 ) ( #10549 )
...
* 修复https防窜站关闭时修改默认站点报错的问题
* feat: Add inbound interface restriction option for ufw forward rules (#10345 )
---------
Co-authored-by: live <Anxys@outlook.com >
2025-10-02 20:33:20 +08:00
ssongliu
ea25b800d2
fix: Add Docker restart option to firewall operations ( #10253 )
...
Refs #10247
2025-09-03 09:29:30 +00:00
蘭
d68a0b076b
feat: transfer some code ( #9124 )
...
refs #9067
2025-06-17 03:56:53 +00:00
