A firewall daemon with D-BUS interface providing a dynamic firewall
Go to file
Eric Garver 8bacaf70bd fix(policy): support timeouts
Resolves: RHEL-129918
2026-07-14 14:30:53 -04:00
.fmf Enable firewalld gating 2024-08-15 11:42:53 +02:00
plans ci: migrate to tmt 2026-07-14 14:30:53 -04:00
.gitignore rebase to v1.3.4 2023-10-26 10:21:46 -04:00
0001-RHEL-only-Add-cockpit-by-default-to-some-zones.patch rebase to v1.3.4 2023-10-26 10:21:46 -04:00
0002-v1.4.0-test-atlocal-pass-EBTABLES-to-testsuite.patch rebase to v1.3.4 2023-10-26 10:21:46 -04:00
0003-v1.4.0-feat-direct-avoid-iptables-flush-if-using-nft.patch rebase to v1.3.4 2023-10-26 10:21:46 -04:00
0004-v1.4.0-test-direct-avoid-iptables-flush-if-using-nft.patch rebase to v1.3.4 2023-10-26 10:21:46 -04:00
0005-v2.0.0-feat-service-add-OpenTelemetry-OTLP-service.patch feat(service): add OpenTelemetry (OTLP) service 2024-07-01 11:11:12 -04:00
0006-v2.1.0-feat-icmp-add-ICMPv6-Multicast-Listener-Disco.patch feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types 2024-07-01 11:11:12 -04:00
0007-v2.1.0-fix-rich-validate-service-name-of-rich-rule.patch fix(rich): validate service name of rich rule 2024-07-01 11:11:12 -04:00
0008-v2.1.0-improvement-nftables-do-not-track-rule-handle.patch feat(fw): add ReloadPolicy option in firewalld.conf 2024-07-01 11:11:12 -04:00
0009-v2.1.0-improvement-fw-make-set_policy-DROP-more-flex.patch feat(fw): add ReloadPolicy option in firewalld.conf 2024-07-01 11:11:12 -04:00
0010-v2.1.0-feat-fw-add-ReloadPolicy-option-in-firewalld..patch feat(fw): add ReloadPolicy option in firewalld.conf 2024-07-01 11:11:12 -04:00
0011-v2.2.0-test-functions-add-macro-CHECK_NFTABLES_FIB.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0012-v2.2.0-test-functions-add-macro-CHECK_NFTABLES_FIB_I.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0013-v2.2.0-test-rpfilter-use-CHECK-macros.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0014-v2.2.0-test-IPv6_rpfilter-verify-valid-values.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0015-v2.2.0-chore-IPv6_rpfilter-prepare-for-new-config-va.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0016-v2.2.0-feat-IPv6_rpfilter-support-loose-rpfilter.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0017-v2.2.0-feat-IPv6_rpfilter-support-loose-forward-rpfi.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0018-v2.2.0-feat-IPv6_rpfilter-support-strict-forward-rpf.patch feat(IPv6_rpfilter): support strict-forward rpfilter 2024-07-01 11:11:12 -04:00
0019-v2.2.0-test-functions-start-firewalld-with-file-logg.patch feat(nftables): table ownership 2024-07-01 11:11:12 -04:00
0020-v2.2.0-feat-nftables-table-ownership.patch feat(nftables): table ownership 2024-07-01 11:11:12 -04:00
0021-v2.2.0-test-nftables-table-ownership.patch feat(nftables): table ownership 2024-07-01 11:11:12 -04:00
0022-v2.2.0-chore-service-remove-Conflicts-with-nftables.patch feat(nftables): table ownership 2024-07-01 11:11:12 -04:00
0023-v2.2.0-fix-service-update-highest-port-number-for-ce.patch fix(service): update highest port number for ceph 2024-11-06 17:57:19 -05:00
0024-v2.2.0-feat-service-x-rootd-file-server.patch feat(service): (x)rootd file server 2024-11-06 17:59:47 -05:00
0025-v2.3.0-test-functions-fix-iptables-normalization-for.patch test(functions): fix iptables normalization for opt field 2025-05-19 16:12:14 -04:00
0026-v2.4.0-test-add-scale-keyword-to-scale-tests.patch test: add scale keyword to scale tests 2025-05-19 16:13:29 -04:00
0027-v2.4.0-fix-systemd-verify-firewalld-is-responsive-to.patch fix(systemd): verify firewalld is responsive to dbus 2025-05-19 16:16:52 -04:00
0028-v2.4.0-fix-systemd-remove-unnecessary-comment.patch fix(systemd): verify firewalld is responsive to dbus 2025-05-19 16:16:52 -04:00
0029-v2.4.0-test-nftables-table-owner-use-grep-instead-of.patch fix(fw): start: remove ipset probe 2025-05-19 16:18:25 -04:00
0030-v2.4.0-chore-ipset-remove-set_supported_types.patch fix(fw): start: remove ipset probe 2025-05-19 16:18:25 -04:00
0031-v2.4.0-fix-fw-start-remove-ipset-probe.patch fix(fw): start: remove ipset probe 2025-05-19 16:18:25 -04:00
0032-v2.4.0-fix-systemd-allow-start-code-251-RUNNING_BUT_FAILED.patch fix: rename patch 0032 2025-06-17 15:24:45 -04:00
0033-v2.4.0-fix-policy-rich-verify-ipset-exists.patch fix(policy): rich: verify ipset exists 2025-06-17 15:24:48 -04:00
0034-v2.4.0-test-rich-rule-reference-invalid-ipset.patch fix(policy): rich: verify ipset exists 2025-06-17 15:24:48 -04:00
0035-v2.2.0-feat-add-iperf-2-3-services.patch feat: add iperf{2,3} services 2025-12-02 16:17:52 -05:00
0036-v2.4.0-test-functions-add-macro-WAIT_UNTIL.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0037-v2.4.0-fix-server-load-firewall-rules-before-claimin.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0038-v2.4.0-Revert-fix-systemd-allow-start-code-251-RUNNI.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0039-v2.4.0-Revert-fix-systemd-verify-firewalld-is-respon.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0040-v2.4.0-fix-nftables-ipset-add-entries-from-GLib-loop.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0041-v2.4.0-test-ipset-scale-verify-all-the-entries-were-.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0042-v2.4.0-fix-systemd-Requires-dbus.patch fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
0043-v2.4.0-chore-icmp-add-all-icmptypes-to-ICMP_TYPES-di.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0044-v2.4.0-chore-icmp-convert-type-code-map-to-tuple.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0045-v2.4.0-chore-nftables-simplify-icmp-match-fragments.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0046-v2.4.0-chore-nftables-move-_icmp_types_fragments-ins.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0047-v2.4.0-chore-ipXtables-simplify-icmp-match-fragments.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0048-v2.4.0-fix-policy-allow-host-ipv6-allow-MLD-packets.patch fix(policy): allow-host-ipv6: allow MLD packets 2025-12-02 16:29:18 -05:00
0049-v2.3.0-fix-policy-timeout-argument-for-rich-rules.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0050-v2.5.0-test-functions-fix-macro-CHECK_NFT_CT_HELPER.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0051-v2.5.0-chore-fw_policy-add-utility-functions-to-supp.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0052-v2.5.0-chore-zone-service-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0053-v2.5.0-chore-zone-port-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0054-v2.5.0-chore-zone-source_port-move-timeouts-to-polic.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0055-v2.5.0-chore-zone-forward_port-move-timeouts-to-poli.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0056-v2.5.0-chore-zone-icmp_block-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0057-v2.5.0-chore-zone-masquerade-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0058-v2.5.0-chore-zone-protocol-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0059-v2.5.0-chore-zone-rule-move-timeouts-to-policy.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0060-v2.5.0-chore-zone-remove-daemon-level-timeout-code.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0061-v2.5.0-chore-fw_zone-add-utility-functions-to-suppor.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0062-v2.5.0-chore-fw_zone-support-timeouts-via-dict-API.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0063-v2.5.0-fix-zone-forward-support-timeout.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0064-v2.5.0-test-zone-forward-move-test-to-features.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0065-v2.5.0-test-zone-verify-timeout-works.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0066-v2.5.0-chore-fw_policy-support-timeouts.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0067-v2.5.0-fix-policy-support-timeouts.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0068-v2.5.0-fix-cli-policy-allow-timeout-with-ingress-zon.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
0069-v2.5.0-test-policy-verify-timeout-works.patch fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
ci.fmf Enable firewalld gating 2024-08-15 11:42:53 +02:00
firewalld.service fix(systemd): Requires dbus 2025-12-02 16:29:18 -05:00
firewalld.spec fix(policy): support timeouts 2026-07-14 14:30:53 -04:00
gating.yaml ci: migrate to tmt 2026-07-14 14:30:53 -04:00
sources rebase to v1.3.4 2023-10-26 10:21:46 -04:00