-
Notifications
You must be signed in to change notification settings - Fork 6
/
changelog.upstream
4501 lines (2988 loc) · 131 KB
/
changelog.upstream
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
commit 9a61709b8cebb9023d6a005e8855ee8be482e7bd
Author: Patrick Schleizer <[email protected]>
Date: Tue Jun 18 12:11:14 2024 -0400
apparmor
commit d0d2e0890a16ef46258d8e14ebd272392cb62455
Author: Patrick Schleizer <[email protected]>
Date: Tue Jun 11 12:57:24 2024 +0000
bumped changelog version
commit 9f83b6578bd69ed12975c97c7c2f6fef896e95e3
Merge: 00fa198 cbbed03
Author: Patrick Schleizer <[email protected]>
Date: Tue Jun 11 08:56:34 2024 -0400
Merge remote-tracking branch 'ben/info-trim'
commit cbbed0367ac891b74edb38c08529ae8c2979c9be
Author: Ben Grande <[email protected]>
Date: Tue Jun 11 14:08:18 2024 +0200
Do not delete chains
NFTables syntax check fails, it needs to be skipped if editing policy of
existing chain.
commit 905db632b9bfe1fc203f5d54ac3ffa51db63baa1
Author: Ben Grande <[email protected]>
Date: Mon Jun 10 10:37:14 2024 +0200
Fix dry-run mode and policy of existing chain
If adding a policy to an existing chain, it fails on dry-run mode with
the message that the "File exists", which means that the chain already
exists.
commit d8eca530f348473597c7502426a68dc9ce9436b6
Author: Ben Grande <[email protected]>
Date: Mon Jun 10 10:23:21 2024 +0200
Add missing functions to host firewall
commit d425035fff503d324dafa2c1fb4d4cf646da3742
Author: Ben Grande <[email protected]>
Date: Mon Jun 10 10:22:05 2024 +0200
Add dry-run to test firewall on non-Whonix
Workstation firewall works, Gateway and Host doesn't.
commit c4b1357667e77530e3318130cc7c1ba0abc07edc
Author: Ben Grande <[email protected]>
Date: Mon Jun 10 09:36:10 2024 +0200
Prettify informational output
commit 00fa198d780daabcd8894369e61a5d49a6096fa8
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 9 13:56:32 2024 -0400
towards IPv6 support
commit bbf2c07260a1a98389ee74992a14af84524c4eda
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 9 13:23:41 2024 -0400
towards IPv6 support
commit d8efd478a235e8d4ed998a69dd2e6dbe1df2c213
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 9 12:40:07 2024 -0400
towards IPv6
commit ca8e4e9fccc4d8470f682ca74b90d6d778dcf76b
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 9 16:00:41 2024 +0000
bumped changelog version
commit f179db6b20891bb32412a0934ff61ccd029d9bf8
Merge: 97978d4 c952984
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 9 11:49:26 2024 -0400
Merge remote-tracking branch 'ben/descomplicate'
commit c95298419e6eab537db29f4248b8bb2317e29166
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 17:15:02 2024 +0200
Move duplicated functions to libexec
Some variables were reordered for clarity.
commit edaf04b8bf53511cf9ee0928c4d4877cca775dd9
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 12:21:20 2024 +0200
Simplify sequential ports to open
Maintain comments with port number for easy grepping.
commit d16db2b5434e6b9336373668488972ae086167c9
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 12:02:02 2024 +0200
Canonical way to detect Qubes VM
https://www.qubes-os.org/faq/#what-is-the-canonical-way-to-detect-qubes-vm
commit 777428faaa9f97878b1f7d60cfec372621e6b8f3
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 11:58:22 2024 +0200
Move shared variables to libexec
commit 5e4e248e4cb7dfc3a8412458ae2f3929f743987a
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 10:59:19 2024 +0200
Styling
commit 4db7a564d992942d7f5c67e03dfdb44d86749d6e
Author: Ben Grande <[email protected]>
Date: Wed Jun 5 10:53:16 2024 +0200
Translate host firewall to nftables
commit 5c012f89991e67951587d25a6baf1176156a6a49
Author: Ben Grande <[email protected]>
Date: Tue Jun 4 21:56:44 2024 +0200
Remove unnecessary lines
commit 076ea2cefefc0d6facd9747895aa4d30c0ccba6a
Author: Ben Grande <[email protected]>
Date: Tue Jun 4 21:49:54 2024 +0200
Deal with shell option errexit
Use if statements else if the test result is false, it can fail the
whole script.
commit d0de0a9f46a6dd19f24b8355f63e3692d26fffc2
Author: Ben Grande <[email protected]>
Date: Tue Jun 4 21:47:23 2024 +0200
Move duplicated function to libexec
commit 7d705f9c84506c662ee1f93603dd0c28b01eb0b8
Author: Ben Grande <[email protected]>
Date: Tue Jun 4 21:37:23 2024 +0200
Print used variables
At least the ones I could identify.
commit 0eb6317197e51e2544c8a10d53c3297aa3b1d8a4
Author: Ben Grande <[email protected]>
Date: Tue Jun 4 21:08:38 2024 +0200
Deal with shell option nounset
commit 1f5392ab98875261864640f0de08f6705edfac97
Author: Ben Grande <[email protected]>
Date: Mon Jun 3 16:56:42 2024 +0200
Move more duplicated functions to libexec
commit 0ae20686bbaeb6fc6f26e6a8e3d455675446b04f
Author: Ben Grande <[email protected]>
Date: Mon Jun 3 16:33:41 2024 +0200
Shellcheck firewall
commit fe698d73df60fec969f63d980bdaff9d55b12e3e
Author: Ben Grande <[email protected]>
Date: Mon Jun 3 16:18:47 2024 +0200
Move duplicated functions to libexec
commit 97978d4006581babfad316c9ba1ec7ad048099bc
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 17:05:33 2024 +0000
bumped changelog version
commit 5bf203b69f626c2ec3f35300b99825093922be2c
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 13:02:45 2024 -0400
- fix nftables for Non-Qubes-Whonix
- localize loop variables
- refactoring
commit 50f0e2e3ee3ff327002ea029c7cff5408377f038
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 12:26:23 2024 +0000
bumped changelog version
commit 2bf57895090b6b9a18bf89db723b1d2f7a0994c7
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 08:25:00 2024 -0400
aa-logprof
https://forums.whonix.org/t/consider-nftables-berkeley-packet-filter-bpf-as-a-replacement-for-iptables/18896
commit 5a09deb1d7a9a4e110b14b84a66652f4ec83c2b8
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 12:07:49 2024 +0000
bumped changelog version
commit 779b1a47e09bdef2a6c60b8983c5365f973f3b17
Author: Patrick Schleizer <[email protected]>
Date: Sun Jun 2 08:06:58 2024 -0400
cleanup
commit 1e9a9b6537817d9fa5e8227af0ae0a33ac0d1f76
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 20:26:45 2024 +0000
bumped changelog version
commit d95e6bc2a5b38ec901b0eb39905a767a642d8840
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 16:25:59 2024 -0400
cleanup
commit fd16b7bea95e3ba6e94b5332dfd1e612ba281bb4
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 16:24:17 2024 -0400
cleanup
commit 874eb93d3b10f68b5221522ad7239f7f533aa0df
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 16:21:31 2024 -0400
firewall rules simplification: sys-whonix use Qubes UpdatesProxy tinyproxy with socks instead of transparent torification
https://github.com/QubesOS/qubes-issues/issues/8398
commit dcde7447aa11763d13966512cdf89885682679b6
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 17:36:08 2024 +0000
bumped changelog version
commit e58fe0fddcd54486787c9f5eb5a005e52e0e356e
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 1 13:31:23 2024 -0400
switch dependency from iptables to nftables
https://forums.whonix.org/t/consider-nftables-berkeley-packet-filter-bpf-as-a-replacement-for-iptables/18896
commit 9169557a9fba5ff1c4aa6ea264b38698ec1ea68f
Author: Patrick Schleizer <[email protected]>
Date: Tue May 28 18:45:39 2024 +0000
bumped changelog version
commit 6020ae8fc2506d8dd778a98e738c19244d289a6d
Author: Patrick Schleizer <[email protected]>
Date: Tue May 28 14:32:03 2024 -0400
remove iptables equivalent commands comments
commit d580765ea15844a988973b35fa537ba7d6b2b944
Author: Patrick Schleizer <[email protected]>
Date: Tue May 28 14:25:44 2024 -0400
towards IPv6 support
commit a87527b68a6db2bd3ddbc255076ad4a12fd8636d
Author: Patrick Schleizer <[email protected]>
Date: Tue May 28 13:34:02 2024 +0000
bumped changelog version
commit b99f06a1167ae88e25464b3db26fa36686ec14c0
Author: Patrick Schleizer <[email protected]>
Date: Tue May 28 09:33:37 2024 -0400
port to nftables
https://forums.whonix.org/t/consider-nftables-berkeley-packet-filter-bpf-as-a-replacement-for-iptables/18896
commit f54cc18a489e7a385bc513369c31016b85cd3f7d
Author: Patrick Schleizer <[email protected]>
Date: Mon May 6 12:51:54 2024 +0000
bumped changelog version
commit 3f7357472f40778898643ea3c2d123c289292558
Merge: aa0fa45 fbe9b77
Author: Patrick Schleizer <[email protected]>
Date: Mon May 6 08:51:36 2024 -0400
Merge remote-tracking branch 'github-whonix/master'
commit fbe9b77c9c8b3b62ee10cc89ce4fa176df8eae77
Merge: aa0fa45 73165d1
Author: Patrick Schleizer <[email protected]>
Date: Mon May 6 08:50:34 2024 -0400
Merge pull request #7 from DanWin/qubes-nftables
Fix nftables firewall version for Qubes
commit 73165d1ed758c9fe9f1b617799138c03d7b06453
Author: Daniel Winzen <[email protected]>
Date: Mon May 6 11:21:08 2024 +0200
Add nftables version of enable-firewall
commit 5415522a5f3babb10b1ddeda61157a1f922dc977
Author: Daniel Winzen <[email protected]>
Date: Mon May 6 11:20:32 2024 +0200
Flush tables individually and fix table already exists error
commit aa0fa450280cfc282f5d2f081649f91277f6bdd5
Author: Patrick Schleizer <[email protected]>
Date: Fri Feb 2 12:47:21 2024 +0000
bumped changelog version
commit 975e90bbf5a83fac35e2e31fd8248b2acf2674eb
Author: Patrick Schleizer <[email protected]>
Date: Fri Feb 2 07:33:07 2024 -0500
usrmerge debhelper systemd Debian package maintainer scripts fix
commit b16f8322a30991ae18283beacc8d761eb20ae754
Author: Patrick Schleizer <[email protected]>
Date: Mon Jan 22 13:26:41 2024 +0000
bumped changelog version
commit 8dae402570dcdcbf7a47527e968f5ae1c6435422
Author: Patrick Schleizer <[email protected]>
Date: Mon Jan 22 06:54:34 2024 -0500
usrmerge
commit 51eb656ecf94a49308634a352dfadf682033d9aa
Author: Patrick Schleizer <[email protected]>
Date: Sat Nov 11 20:31:42 2023 +0000
bumped changelog version
commit bdb35859987b63c5e5d0aab7f4abf07001d330ab
Author: Patrick Schleizer <[email protected]>
Date: Sat Nov 11 13:41:25 2023 -0500
change license to AGPL-3+
https://forums.whonix.org/t/license-change-to-agplv3/17455
commit fc300780d0631be0d742d1dae5cee76c207a2d11
Author: Patrick Schleizer <[email protected]>
Date: Fri Nov 3 08:53:26 2023 -0400
bumped changelog version
commit fc1bcd65ce2d9ec999d5f7cec45ff84d0900e6a4
Merge: 937660e 462571d
Author: Patrick Schleizer <[email protected]>
Date: Thu Nov 2 12:58:24 2023 -0400
Merge remote-tracking branch 'github-whonix/master'
commit 462571d1882f8e48edc70fdc77e649c6446f9572
Merge: 937660e c170d36
Author: Patrick Schleizer <[email protected]>
Date: Thu Nov 2 12:57:18 2023 -0400
Merge pull request #6 from 1cho1ce/firewall-accept-HTTPTunnelPort
Allow input connections to HTTPTunnelPort
commit c170d364c20c4582928fee7be6cfbafbfd3b8bec
Author: 1cho1ce <[email protected]>
Date: Thu Nov 2 06:44:53 2023 +0000
Allow input connections to HTTPTunnelPort https://github.com/Whonix/anon-gw-anonymizer-config/commit/68daef8443eb4845ba07dc33b983df3592d5bccd
commit 937660e60fe6e9f39901e99883fbf41cd5a1032b
Author: Patrick Schleizer <[email protected]>
Date: Sun Oct 8 06:32:49 2023 -0400
bumped changelog version
commit 8ffea53ada36c05bd5c61fd5f309301b8f02131a
Author: Patrick Schleizer <[email protected]>
Date: Sun Oct 8 04:38:16 2023 -0400
wayland
commit 30b8b761649ed618befd7ce78b8a8ae4f1abf0b2
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 06:11:34 2023 -0400
bumped changelog version
commit 712e175b5d8816e9773d63be1b5ce1152819548f
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 05:26:57 2023 -0400
towards IPv6 support
commit 786ddc742713e54995cd98a38968fa262cb13f85
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 05:22:10 2023 -0400
towards IPv6 support
commit da33a0f2b6d704b4f45efc75e39c6627e6fd53f6
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 05:11:46 2023 -0400
minor
commit 9d90442dc97d169a48cf0273a6cec8e490fd7771
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 05:11:09 2023 -0400
comment
commit 66f438653ea3d910ecdb6bddfb7c21ba0584d32a
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 04:57:04 2023 -0400
towards IPv6 support
commit 75b352b1ded47aaa3d48b255bd573bce434d4ff8
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 04:40:10 2023 -0400
towards IPv6 support
commit 72218e51d8c30e97a8ad4a9aa92520e0b04fdd8b
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 03:59:18 2023 -0400
bumped changelog version
commit fa5a98ecda65ed5619ca16c8e04fc100359dd036
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 03:58:29 2023 -0400
fix, source config folder first before setting built-in default variables
commit 4699890a7911a44798d3d7120e8d5a11cfcc5361
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 03:22:12 2023 -0400
bumped changelog version
commit 518475aee6cc2683fde138eb29f9714b759cadfa
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 03:11:58 2023 -0400
nftabels
commit 62c5acb23e74c8c11c180c5d2f05952605f2af08
Author: Patrick Schleizer <[email protected]>
Date: Tue Oct 3 03:00:27 2023 -0400
nftabels
commit b392610ed125cf127d4ebc8ffb7b8cda4d98d767
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 23:50:41 2023 -0400
nftabels
commit 8be1049a93e6902e66fa1d9efcf9fa645c26b961
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 21:33:26 2023 -0400
bumped changelog version
commit 61a58da8d96984255f4d0e9e02348cc472b6a020
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 21:29:58 2023 -0400
minor
commit 7438dd4e9d95a9e81b887489e09b34461741b1d1
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 20:59:19 2023 -0400
nftables
commit df73ae2792acf125d2adebd3dbf1b534910c1023
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 20:55:09 2023 -0400
fix
commit b803243b43da8318f1121c25c7d4673f70e64b98
Author: Patrick Schleizer <[email protected]>
Date: Mon Oct 2 19:36:13 2023 -0400
.
commit f87840dde4bd0734ef58ca1e6b2ab5397f7cd410
Author: Patrick Schleizer <[email protected]>
Date: Tue Aug 29 08:30:32 2023 -0400
bumped changelog version
commit 5f1e0ef0fce2dfc991547a16a5b23637bb27f57c
Author: Patrick Schleizer <[email protected]>
Date: Tue Aug 29 08:26:21 2023 -0400
Fix MTU problem by allowing RELATED fragmentation-needed ICMP by
enabling `GATEWAY_ALLOW_INCOMING_ICMP_FRAG_NEEDED=1` by default.
Run
`iptables -A INPUT -p icmp --icmp-type fragmentation-needed -m state --state RELATED -j ACCEPT`
on Whonix-Gateway.
commit 8e3b045fc2b93012e0d4a60017a870b7676d8a1a
Author: Patrick Schleizer <[email protected]>
Date: Sun Jul 9 06:33:49 2023 -0400
bumped changelog version
commit 0467e3a1430eefc57b8fbd84e7d704de6ec7e8fb
Author: Patrick Schleizer <[email protected]>
Date: Sun Jul 9 06:15:12 2023 -0400
readme
commit efbffb87420f4083ac7590e2204cf6d991e2e57e
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 23 08:18:55 2023 +0000
bumped changelog version
commit 4ed72a14948d050715178f9197e4df52d8154050
Author: Patrick Schleizer <[email protected]>
Date: Thu Jun 22 16:17:17 2023 +0000
comment
commit 3b286f17c29524091d9a2ebb3d8bbfc6ea6ad772
Author: Patrick Schleizer <[email protected]>
Date: Wed Jun 21 09:44:48 2023 +0000
bumped changelog version
commit 871c01c6bdb159a6a657f1c333e37c426f65ff53
Author: Patrick Schleizer <[email protected]>
Date: Wed Jun 21 09:11:35 2023 +0000
bookworm
commit e2b1acddd5f6b924d441e94915373984bd2310fe
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 17 13:51:30 2023 +0000
bumped changelog version
commit b575a208b8cc590b03dc47de39ab808fa0fdec52
Author: Patrick Schleizer <[email protected]>
Date: Sat Jun 17 13:50:57 2023 +0000
bookworm aa-logprof
commit 3fe3f3a3fbcb5bfa6556e1dc7a92ac39bab283fb
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 16 11:29:58 2023 +0000
bumped changelog version
commit 02279651937be5d4d19fb328987904df432a75d0
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 16 10:49:09 2023 +0000
readme
commit 5ec9c02135a42bc7535ae60a0176ecb035decbef
Author: Patrick Schleizer <[email protected]>
Date: Thu Jun 15 17:09:35 2023 +0000
bumped changelog version
commit 2a34fac3bb40af42ce50c11de543dffe787f540d
Author: Patrick Schleizer <[email protected]>
Date: Wed Jun 14 13:14:50 2023 +0000
copyright
commit 5aafd9183187fa7528e958ebb5577621f28774d9
Author: Patrick Schleizer <[email protected]>
Date: Wed Jun 14 10:09:56 2023 +0000
bumped changelog version
commit 064dfe7d675f19c63bcfd046ffaab40cfd66f795
Author: Patrick Schleizer <[email protected]>
Date: Wed Jun 14 09:41:48 2023 +0000
bookworm
commit 65eb03a7e2a2ee8f601cbc52af226f285f94e933
Author: Patrick Schleizer <[email protected]>
Date: Mon Jun 12 18:18:22 2023 +0000
bumped changelog version
commit 0e4eed789c1cebadaed659a5dee776e82c94eb34
Author: Patrick Schleizer <[email protected]>
Date: Mon Jun 12 16:22:36 2023 +0000
Standards-Version: 4.6.1.0
commit 482bb1fda752d407ce4d54ef46df1133989a902e
Author: Patrick Schleizer <[email protected]>
Date: Mon Jun 12 15:39:30 2023 +0000
bumped changelog version
commit 6e37ce0bfd96aa20da4a5f129901da8f91de7628
Author: Patrick Schleizer <[email protected]>
Date: Mon Jun 12 14:52:05 2023 +0000
update copyright year
commit 57cb4ca939ebe05c146efafa703aa49ca239a437
Author: Patrick Schleizer <[email protected]>
Date: Mon Jun 12 14:48:04 2023 +0000
abolish /rw/config parsing
(Does not influence Qubes specific /rw/config parsing.)
commit d1822092578006e3a1948def8abeadddcd6299dd
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 2 13:36:53 2023 +0000
bumped changelog version
commit d42542555519ea3a39fc905ba1900e4843eaae2c
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 2 11:17:47 2023 +0000
remove trailing spaces
commit b1d5824da11ca61354f7fd639bf90ecf1454bde2
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 2 11:16:27 2023 +0000
comment
commit 462775d480ae9bb0d79442a7c77e00d736368b8d
Merge: 6ff9edb cf99266
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 2 11:15:34 2023 +0000
Merge remote-tracking branch 'github-whonix/master'
commit cf99266c64c447b86a1af87da5f6f5c813ba348a
Merge: 6ff9edb bf26fc7
Author: Patrick Schleizer <[email protected]>
Date: Fri Jun 2 11:13:16 2023 +0000
Merge pull request #5 from 1cho1ce/allow-icmp-frag-needed
Fix MTU problem by allowing RELATED fragmentation-needed ICMP
commit bf26fc743af48d68e0b1bd97484ba46228e1591b
Author: 1cho1ce <[email protected]>
Date: Thu May 25 18:13:36 2023 +0000
Fix MTU problem by allowing RELATED fragmentation-needed ICMP
commit 6ff9edb04d746d59e3d669fc98c2f9507d36b1f6
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 13:28:28 2023 +0000
bumped changelog version
commit 3b4d13cebc68467d7d0824055d3d4d23cb382b29
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 13:28:17 2023 +0000
nftables WIP
commit ba6e974b91eb275232fb83fd3b604f83e2efa44c
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 13:05:08 2023 +0000
nftables WIP
commit f5a1131d7466cd9017a908bb64804ecbe181ef06
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:55:15 2023 +0000
nftables WIP
commit 341b6ebabcbd41362e7c5de16b1e3a65918456b0
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:51:30 2023 +0000
nftables WIP
commit 6f6f8a3b3189b4ea6a630ae3e74365be15d403ba
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:31:55 2023 +0000
chmod +x
commit a893e7fd1a5cb66d92dee5919ef895240f9ad9a0
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:30:50 2023 +0000
nftables WIP
commit cc61b7f6d092093918c51fa578c5cfa526e8e46d
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:13:19 2023 +0000
bumped changelog version
commit a0f016e6777473fc01d7c0f6e3f9e5c3d398e3e0
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:09:55 2023 +0000
nftables WIP
commit 2dfc3986aff1fb9936eedfbd3d8d2737efa4c77e
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:09:02 2023 +0000
nftables WIP
commit f38123c26fcee9b9c4903011daf528210e5fee78
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 12:00:27 2023 +0000
bumped changelog version
commit 65ead9f90c13cb74f6790ed1e3ee008d9e83cc66
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 11:58:39 2023 +0000
nftables WIP
commit 0fa97fc0315b3a68611c001732da8799ce94cd4f
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 11:52:54 2023 +0000
nftables WIP
commit 8b35e09f4ab7fb60021834222485dae36f267eb1
Author: Patrick Schleizer <[email protected]>
Date: Tue May 16 11:16:12 2023 +0000
nftables WIP
commit 54da617d8ebcabca71032ffcda6cfef0468b27de
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 18:26:30 2023 +0000
nftables WIP
commit 340d9189b3ad722dde4a6a15aafa22d101e2d3b3
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:57:49 2023 +0000
nftables WIP
commit 6c4d424e6f65d18f09105cae5c5a9b162fa2d6a0
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:55:01 2023 +0000
nftables WIP
commit 393e45f631ee7a26cb26434470203fdc4c53ed89
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:52:30 2023 +0000
nftables WIP
commit 76692d0b005d1bfea8834aa777e10ba2414ab7bf
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:50:37 2023 +0000
nftables WIP
commit 9037cd9b516ad1ae6727e671ab3e45b7be9460a9
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:49:17 2023 +0000
nftables WIP
commit 0413ccd9cb838c7794f2995e27301c2e3c8b1993
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:32:13 2023 +0000
bumped changelog version
commit 6b5b04c4b69c0804e0f95339dd06a0f6217775da
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:12:43 2023 +0000
add nftabels-save-deterministic-old-vpn
commit ff78a2ff4e75208d15f0931ee0d4d7f9d6252dd7
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:09:48 2023 +0000
add nftabels-save-deterministic-old-normal
commit 374f6ca8c06ebbf08112cbdf060c22f11026099a
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:02:23 2023 +0000
rename
commit f6b70301e18f9b5a2fdf0a9ea5c4497de6c97876
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 17:01:34 2023 +0000
add doc nftabels-save-deterministic-old-normal
commit c70d09cc72db49899cf0e9a069586b8abbb7ff46
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 16:59:57 2023 +0000
move
commit 6103187ae1b0757348e366f23a52946630ece193
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 16:55:14 2023 +0000
nftables WIP
commit 1229576ea8536a9763780c0b41fbde546e8ca2b2
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 16:45:50 2023 +0000
nftables WIP
commit cc6eadebd8945c90f84005783b052ed74daaa58f
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 16:44:19 2023 +0000
nftables WIP
commit 06f550ec5d87981302a1281099a896370bf4ec6e
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 15:33:33 2023 +0000
nftables WIP
commit f4e2ccd5d91f529d168eba2fd72547e0582d7164
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 15:29:06 2023 +0000
nftables WIP
commit 7e584e268ca9334ac6603d036b1326095971b24d
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 15:27:51 2023 +0000
add `translate-remove-iptables-comments`
commit c621fd2841f20eb72cf680aaf54b0b20684d8277
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 15:09:12 2023 +0000
nftables WIP
commit 3fd2f34307b7750c98d390f5658b9368f7e1ce1f
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 15:08:30 2023 +0000
nftables WIP
commit 7853ad1c2427028d3904a50587b3ce9d16f6b6f6
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:32:52 2023 +0000
nftables WIP
commit d990036cab16ccc9538a1f790617817136473888
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:29:31 2023 +0000
nftables WIP
commit afbea6d5656996bba04b1e7df1f0d21ee48696ed
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:28:18 2023 +0000
nftables WIP
commit 781f4df096e8438273fd1b90a4e2d0f908bb8d64
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:26:47 2023 +0000
nftables WIP
commit 5ab59728ba3ab89de2066c8593210081974136d9
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:23:45 2023 +0000
nftables WIP
commit bfda76f7509206281163a5ab46457d9429771d45
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:21:52 2023 +0000
nftables WIP
commit 228e2c2a4eae61cf3dac1ff7ed42e76d2e9dad81
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:18:27 2023 +0000
port to `nftables` work in progress:
- `whonix-gateway-firewall.nftables`
- `whonix-workstation-firewall.nftables`
translated using `translate-iptables-to-nftables`
(Which uses `iptables-translate`.)
commit a35e3bfdd7cf55747e3931aa5f518d9c9b2dccf2
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 14:15:55 2023 +0000
add translate-iptables-to-nftables
commit 99874541b2d131019f724f662cfed1dbd8a39397
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 13:20:03 2023 +0000
make firewall scripts easier to translate to nftables
commit 2f8bac88817940adb5143739bc099c1c37fcb0b9
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 13:12:31 2023 +0000
make firewall scripts easier to translate to nftables
commit ad68f98c74a43bb8102bac1c552622496dc337e7
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 11:56:45 2023 +0000
bumped changelog version
commit 59c45277be8c88a1e261cbc32d9771e8bbf436bf
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 11:56:20 2023 +0000
remove unicode
commit 6fc473dd989a6ca7cca4861cd40c610a93ca378e
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 11:53:10 2023 +0000
comment
commit 69833fc1612da1beb096a681397798e1263856a1
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 11:52:09 2023 +0000
support new setting `GATEWAY_ALLOW_INCOMING_RELATED_STATE=1`
disabled by default
if enabled:
Allow ESTABLISHED,RELATED instead of only ESTABLISHED.
Reported to be required sometimes for Whonix KVM.
https://forums.whonix.org/t/tor-is-not-yet-fully-bootstrapped-30-done/8792/3
https://forums.whonix.org/t/have-firewall-accept-icmp-fragmentation-needed/10233
https://phabricator.whonix.org/T28
commit 33bf8ac8c599dc744fcf005e52c8b4c3e82c655e
Merge: b2ff0e3 810b740
Author: Patrick Schleizer <[email protected]>
Date: Mon May 15 11:38:35 2023 +0000