 Demi Marie Obenour
|
44b3c12d94
Keep shellcheck from complaining
|
%!s(int64=3) %!d(string=hai) anos |
|
Demi Marie Obenour
|
d960f7af85
Stop disabling checksum offload
|
%!s(int64=3) %!d(string=hai) anos |
|
Demi Marie Obenour
|
70253edeab
Remove spurious line continuation; add quotes.
|
%!s(int64=3) %!d(string=hai) anos |
|
Demi Marie Obenour
|
9840953f5f
vif-route-qubes: Check that the -e flag is set
|
%!s(int64=3) %!d(string=hai) anos |
|
Demi Marie Obenour
|
a8588c4e9c
Purge stale connection tracking entries
|
%!s(int64=3) %!d(string=hai) anos |
|
Demi Marie Obenour
|
6517cca2a4
NAT network namespaces need neighbor entries
|
%!s(int64=4) %!d(string=hai) anos |
|
Demi Marie Obenour
|
791b08c2ec
vif-route-qubes: better input validation
|
%!s(int64=4) %!d(string=hai) anos |
|
Demi Marie Obenour
|
9646acb18e
Don’t use onlink flag for nexthop
|
%!s(int64=4) %!d(string=hai) anos |
|
Demi Marie Obenour
|
377add43d1
Don’t hardcode MAC addresses
|
%!s(int64=4) %!d(string=hai) anos |
|
Demi Marie Obenour
|
aa71677cbd
Add permanent neighbor entries
|
%!s(int64=4) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
74f5fb5ac7
network: prevent IP spoofing on upstream (eth0) interface
|
%!s(int64=4) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
68b61c2c6d
network: setup anti-spoofing firewall rules before enabling the interface
|
%!s(int64=4) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
34921cd9c0
network: don't fail the whole vif setup if IPv6 is disabled
|
%!s(int64=5) %!d(string=hai) anos |
|
Frédéric Pierret (fepitre)
|
e2a33e69e3
Handle empty ip and vif_type
|
%!s(int64=5) %!d(string=hai) anos |
|
Frédéric Pierret (fepitre)
|
73ed5e85fc
Handle network hooks located in /rw/config/network-hooks.d
|
%!s(int64=5) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
e3db225aab
vif-route-qubes: \n -> \\n
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
336754426b
Fix iptables-restore race condition in vif-route-qubes
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
c281d6454f
network: do not assume IPv6 gateway is a link-local address
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
44f8cceb38
network: configure IPv6 when enabled
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
bb220ce2eb
network: fix issues found by shellcheck
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
ce70887a57
Merge branch 'core3-devel'
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
c8213ea55a
network: properly handle DNS addresses in vif-qubes-nat.sh
|
%!s(int64=8) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
1c42a06238
network: integrate vif-route-qubes-nat into vif-route-qubes
|
%!s(int64=8) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
696a0918d5
Revert "network: disable proxy_arp"
|
%!s(int64=8) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
fa8b05a83c
network: disable proxy_arp
|
%!s(int64=9) %!d(string=hai) anos |
|
Patrick Schleizer
|
2eb0ed2be1
removed trailing spaces
|
%!s(int64=9) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
4e44008607
network: disable tx csum offload on vif interfaces
|
%!s(int64=9) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
13c078ddbd
network: guard iptables call with manual lock
|
%!s(int64=9) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
2bfc6edddc
network: use iptables-restore instead of iptables --wait
|
%!s(int64=9) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
7adbc3fd59
Use iptables --wait only when it is supported
|
%!s(int64=9) %!d(string=hai) anos |
