qubes-mirage-firewall

Git-Mirrors/qubes-mirage-firewall

Fork 0

mirror of https://github.com/mirage/qubes-mirage-firewall.git synced 2025-02-18 14:04:20 -05:00

Commit Graph

Select branches

Hide Pull Requests

main

#10

#100

#101

#102

#103

#109

#110

#112

#116

#117

#118

#12

#121

#122

#129

#13

#135

#136

#137

#14

#140

#141

#142

#144

#145

#147

#149

#15

#150

#151

#152

#154

#159

#160

#161

#162

#163

#164

#167

#169

#169

#17

#175

#176

#178

#179

#180

#181

#185

#189

#19

#190

#191

#192

#193

#194

#197

#199

#201

#202

#203

#204

#205

#207

#209

#211

#213

#214

#22

#26

#26

#27

#28

#28

#33

#36

#37

#38

#39

#42

#43

#44

#45

#46

#47

#48

#49

#51

#52

#54

#55

#58

#6

#6

#60

#61

#64

#66

#67

#68

#69

#71

#72

#74

#75

#76

#77

#79

#80

#81

#82

#83

#85

#88

#89

#90

#91

#95

#96

#98

#99

0.1

0.7.1

flambda-test

v0.2

v0.3

v0.4

v0.5

v0.6

v0.7

v0.8.0

v0.8.1

v0.8.2

v0.8.3

v0.8.4

v0.8.5

v0.8.6

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

5321a046a8 explain how to build on Debian stretch too Holger Levsen 2017-12-02 16:13:18 +00:00
aca156f21b Update to released shared-memory-ring Thomas Leonard 2017-11-14 12:35:33 +00:00
6fafa2f65a

Merge pull request #17 from talex5/fix-netback Thomas Leonard 2017-11-09 18:06:21 +00:00
f4a978b13c Update Travis to test with Docker Thomas Leonard 2017-11-09 17:31:02 +00:00
b114e569f2 Use Git master for shared-memory-ring and netchannel Thomas Leonard 2017-11-09 15:20:55 +00:00
ef0eb56fb8 Merge pull request #15 from talex5/nat Thomas Leonard 2017-10-19 21:01:52 +01:00
997d538a93 Use released mirage-nat 1.0 Thomas Leonard 2017-10-15 14:35:03 +01:00
42fcbdf1ad Merge pull request #14 from talex5/bitrot Thomas Leonard 2017-09-12 18:36:25 +01:00
d61c2312c1 Fix Travis Thomas Leonard 2017-09-12 18:05:55 +01:00
794ca35d23 Update Dockerfile to use newer Debian base image Thomas Leonard 2017-09-12 16:57:01 +01:00
e55c304160 Drop frames if the xmit queue gets too long Thomas Leonard 2017-04-29 11:42:31 +01:00
445b1711cb Show the packet when failing to add a NAT rule Thomas Leonard 2017-04-08 13:12:38 +01:00
d8eb7ff387 Merge pull request #13 from talex5/update-readme Thomas Leonard 2017-04-07 17:05:51 +01:00
f4df389713 Add more detailed installation instructions Thomas Leonard 2017-04-07 13:07:07 +01:00
78f25ea2c5 Fix build instructions Thomas Leonard 2017-03-27 13:45:06 +01:00
583366b22b Remove non-Docker build instructions v0.3 Thomas Leonard 2017-03-18 17:59:06 +00:00
5158853c30 Update README Thomas Leonard 2017-03-18 11:29:55 +00:00
55972cca30 Update to Mirage 3 and latest mirage-nat Thomas Leonard 2017-03-18 11:26:59 +00:00
630304500f Update build for Mirage 3 Thomas Leonard 2017-03-18 10:20:26 +00:00
e72b3abb61 Depend on tcpip 3.1.0 for parsing fixes Thomas Leonard 2017-03-18 10:20:26 +00:00
75dd8503c5 Use LRU cache to prevent out-of-memory errors Thomas Leonard 2017-03-15 08:56:24 +00:00
0ef60ae767 Update to new mirage-nat API Thomas Leonard 2017-03-10 16:09:36 +00:00
6f8d83f828 Use new Nat.reset function to clear the table Thomas Leonard 2017-03-07 16:06:18 +00:00
ac711f4eee Add ICMP ping support Thomas Leonard 2017-03-07 10:02:54 +00:00
15fb063137 Pin tcpip Thomas Leonard 2017-03-06 14:31:26 +00:00
e070044fef Add extra logging Thomas Leonard 2017-03-06 14:30:41 +00:00
b4079ac861 Update to new mirage-nat API Thomas Leonard 2017-03-05 16:31:04 +00:00
bb78a726e4 Mirage 3 support Thomas Leonard 2017-03-02 14:52:55 +00:00
150208fc72 Pin Docker base image to a specific hash Thomas Leonard 2017-01-31 09:26:57 +00:00
036d92b0ff Update README: you need "sudo docker" by default v0.2 Thomas Leonard 2017-01-28 15:19:05 +00:00
07ff3d6147 Fix opam-repository commit for reproducible builds Thomas Leonard 2017-01-28 13:44:21 +00:00
d6074f2271 Add option to build with Docker Thomas Leonard 2017-01-09 16:45:16 +00:00
312627e078 Monitor set of client interfaces, not client domains Thomas Leonard 2016-10-01 14:42:27 +01:00
79092e1463 Avoid using Lwt.join on listening threads Thomas Leonard 2016-10-01 10:47:19 +01:00
9c33da3bfd Handle errors writing to client Thomas Leonard 2016-09-25 15:25:51 +01:00
63cbb4bed0 Ensure that old client has quit before adding new one Thomas Leonard 2016-09-25 15:14:16 +01:00
a7001a70d2 Allow clients to have any IP address Thomas Leonard 2016-09-25 14:38:17 +01:00
c11f245d64 Cope with writing a frame failing Thomas Leonard 2016-06-26 12:04:47 +01:00
0230cfaf1e Updates for mirage 2.9.0 flambda-test Thomas Leonard 2016-04-30 13:35:24 +01:00
1134b64f5e Remove tcpip pin Thomas Leonard 2016-03-23 14:53:01 +00:00
74ae5b6078 Remove mirage-xen pin Thomas Leonard 2016-03-19 20:10:37 +00:00
fe82619031 Merge 9f7c25f3eb3011cac0b6b47d171cec5a70b397a5 into 368d6e96c5627a71896dc56371cdb92c1a0234a8 C For C's Sake 2016-03-12 12:09:43 +00:00
9f7c25f3eb readme: fix tabs -> spaces, make install faster root 2016-03-12 12:41:27 +01:00
368d6e96c5 Add ncurses-dev to required yum packages Thomas Leonard 2016-03-05 11:50:33 +00:00
08bc6e2b00 Add work-around for Qubes passing Linux kernel arguments Thomas Leonard 2016-03-01 09:41:43 +00:00
0826f046d2 Improve OOM handling when adding a NAT forward entry Thomas Leonard 2016-02-27 12:48:32 +00:00
cd917bab7f Fix travis Thomas Leonard 2016-02-23 11:48:13 +00:00
70d7fe5d1b Remove mirage-logs pin Thomas Leonard 2016-02-19 09:47:15 +00:00
606afb53ea Reduce logging verbosity Thomas Leonard 2016-02-10 08:34:17 +00:00
62aec06be9 Try to avoid running out of memory on NAT reset Thomas Leonard 2016-01-31 21:01:52 +00:00
26adeee1da Remove mirage-qubes pin Thomas Leonard 2016-01-20 12:02:36 +00:00
221c797241 Survive death of GUId connection Thomas Leonard 2016-01-17 13:19:40 +00:00
3409a19792 Keep track of transmit queue lengths Thomas Leonard 2016-01-07 11:24:35 +00:00
6fd7b01c65 Remove XenStore debug code Thomas Leonard 2016-01-16 20:12:58 +00:00
987834f6a6 Use mirage-logs library for log reporter Thomas Leonard 2016-01-11 12:21:47 +00:00
4ddb80cd9d Remove mirage-net-xen pin Thomas Leonard 2016-01-11 12:00:57 +00:00
e05a92da50 Update to new Logs API Thomas Leonard 2016-01-08 11:31:27 +00:00
54ad568612 Remove pin for mirage-clock-xen Thomas Leonard 2016-01-05 18:37:32 +00:00
03aca6b8b9 Respond to WaitForSession commands Thomas Leonard 2016-01-05 16:50:14 +00:00
13138dc636 Fix OOM check when adding NAT entries Thomas Leonard 2016-01-05 16:43:07 +00:00
7e68eebbc8 Remove mirage-qubes pin; it's released now Thomas Leonard 2016-01-05 13:49:16 +00:00
d4775a1fcd Log SetDateTime messages from dom0 Thomas Leonard 2016-01-05 13:41:23 +00:00
ea7c10ce58 Handle Out_of_memory adding NAT entries Thomas Leonard 2016-01-03 17:08:33 +00:00
491dbd9323 Calculate checksums even for Accept action Thomas Leonard 2016-01-03 14:14:00 +00:00
96bc12c591 Log correct destination for redirected packets Thomas Leonard 2016-01-02 20:38:38 +00:00
0e8e142337 If we can't find a free port, reset the NAT table Thomas Leonard 2016-01-02 16:50:16 +00:00
f1ed6ffdd8 Report current memory use to XenStore Thomas Leonard 2016-01-02 15:59:59 +00:00
425ba26286 Reset NAT table if memory gets low Thomas Leonard 2016-01-02 15:50:05 +00:00
1779f0fdbe Removed unused function Thomas Leonard 2016-01-02 15:27:25 +00:00
61c4c730d4 Link to blog post Thomas Leonard 2016-01-02 08:34:39 +00:00
7e76123a37 Build also requires patch Thomas Leonard 2016-01-02 08:30:29 +00:00
a801e538f2 Add 'make tar' build target 0.1 Thomas Leonard 2016-01-01 15:21:28 +00:00
aee124338a Minor cleanup Thomas Leonard 2016-01-01 12:57:38 +00:00
1da8775814 Provide same actions to client and NetVM rules Thomas Leonard 2016-01-01 12:54:44 +00:00
d0f4189df8 Turn off XenStore debug logging Thomas Leonard 2016-01-01 12:37:39 +00:00
2002126b8b Rationalised firewall rules syntax Thomas Leonard 2016-01-01 11:32:57 +00:00
4032a5d776 Simplify code slightly Thomas Leonard 2016-01-01 10:55:34 +00:00
86b31f7f4b Process all client frames Thomas Leonard 2015-12-31 15:56:56 +00:00
0d864d6cde Minor cleanup Thomas Leonard 2015-12-31 14:56:24 +00:00
ac0444f1c1 Log packet details when dropping Thomas Leonard 2015-12-31 09:56:58 +00:00
cd69ce5a86 Move NAT code to router and add DNS redirects Thomas Leonard 2015-12-30 16:07:16 +00:00
5a2f6f7ce8 Minor cleanups Thomas Leonard 2015-12-30 14:28:28 +00:00
11e18c0b83 Moved uplink code to its own module Thomas Leonard 2015-12-30 13:59:13 +00:00
9dc7d01896 Moved client networking to its own module Thomas Leonard 2015-12-30 13:48:13 +00:00
f3332ed4da Split database access into its own module Thomas Leonard 2015-12-30 11:59:32 +00:00
914b6bbbf6 Initial import Thomas Leonard 2015-12-30 09:52:24 +00:00