Commit Graph

36 Commits

Author SHA1 Message Date
Ilia Ross
afd6fad51e Add Cloudmin virtualization host firewall profile 2026-10-06 23:06:08 +02:00
Ilia Ross
a06590c17e Fix to change nftables migration to prefix and validate tables 2026-09-13 01:34:46 +02:00
Ilia Ross
3291429123 Add follow up fixes for nftables config parsing, rewriting and apply 2026-09-12 22:57:21 +02:00
Joe Cooper
cf9c101e99 Update note about import 2026-09-06 01:45:09 -05:00
Joe Cooper
3e91407f81 Fix start/stop buttons 2026-09-05 23:24:33 -05:00
Joe Cooper
e0b8113348 Handle included files correctly and labeled as such 2026-09-05 18:26:24 -05:00
Joe Cooper
515879dcc8 Cleanup meta-confg layer 2026-09-05 17:35:03 -05:00
KafamaG
e2ac10387a Add Turkish translations for the grub2 and nftables modules
Translates all strings in grub2 (346) and nftables (400) into Turkish.
Neither module had a translation of any kind.

Names that appear in configuration files or commands are left in English:
GRUB tooling and values (grub-install, grubby, grubenv, kernelopts,
theme.txt, modinfo.sh, grub.pbkdf2, PBKDF2, BLS, Secure Boot, UEFI) and
nftables concepts (hook, DNAT, ICMP, ipv4_addr, ipv6_addr, inet_service)
together with service names such as SSH, HTTP, IMAPS and mDNS.
2026-08-30 02:00:58 +03:00
Ilia Ross
d0f6a7672f Fix placeholder
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
2026-05-16 20:09:59 +02:00
Ilia Ross
065ce627a0 Add quick service and port forward controls
* Note: Add lightweight quick controls for allowed ports, services, and port forwards, with service autocomplete, ACLs, and structured NAT redirect/DNAT editing.
2026-05-16 15:55:28 +02:00
Ilia Ross
159cc14dfc Add a warning message if any foreign firewall modules are detected 2026-05-03 21:39:28 +02:00
Ilia Ross
aa84044375 Add boot-time apply support for nftables rules
* Note: The boot action applies saved module-managed nftables tables, creates the needed wrapper, fixes executable permissions, and removes generated boot files when disabled.
2026-05-03 20:23:48 +02:00
Ilia Ross
9987b2d493 Update labels (again) 2026-05-03 18:52:31 +02:00
Ilia Ross
a6e6b1d21c Fix to normalize text keys to work properly with iconed buttons 2026-05-03 18:34:32 +02:00
Ilia Ross
2bcf00b50d Fix nftables and firewall modules title for consistency and clarity
* Note: Rename legacy iptables firewalls and make nftables the Linux Firewall
2026-05-03 17:57:48 +02:00
Ilia Ross
5101871760 Add manual editing for nftables configuration files 2026-05-03 17:12:35 +02:00
Ilia Ross
0c8f74597b Add proper ACLs to nftables module
[no-build]
2026-05-03 16:44:26 +02:00
Ilia Ross
5c66e544b1 Add ability to flush all clearable tables at once 2026-05-03 15:03:36 +02:00
Ilia Ross
12eff54277 Add nftables apply-needed header action
* Note: Track saved nftables configuration changes with Apache-style config/apply timestamp flags, expose the standard restart.cgi header action for themes, and use it as the single apply endpoint. The button expands to “Apply Changes” when saved rules need applying, while the existing Apply Configuration action now routes through restart.cgi and clears the pending state after a successful apply.
2026-05-03 13:59:58 +02:00
Ilia Ross
6c1de362e3 Fix locked profile 2026-05-03 13:14:23 +02:00
Ilia Ross
1d2e1983bf Fix wording 2026-05-03 13:07:46 +02:00
Ilia Ross
91f7d5b5c5 Add a quick allow and quick block UI feature 2026-05-03 13:05:31 +02:00
Ilia Ross
9d7f4f9d05 Fix profiles
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
[no-build]
2026-05-03 00:44:56 +02:00
Ilia Ross
a0fb85c152 Fix language when importing a table 2026-05-03 00:44:55 +02:00
Ilia Ross
599caa1cd8 Fix to simplify language sting 2026-05-03 00:44:55 +02:00
Ilia Ross
1d5b426043 Add active nftables table clear action 2026-05-03 00:44:55 +02:00
Ilia Ross
0cdcb932b1 Drop showing unnecessary label when empty 2026-05-03 00:44:54 +02:00
Ilia Ross
2fe57dd456 Fix to validate nftables set usage in rules
* Note: Prevent incompatible nftables sets from being used in rule fields. The rule editor now only offers address sets for address matches and port/service sets for port matches, while save and apply paths validate existing set references before writing or loading rules. This avoids nft datatype mismatch errors such as using inet_proto sets with tcp dport.
2026-05-03 00:44:54 +02:00
Ilia Ross
c8bcccd9b9 Fix sets textarea take whole row 2026-05-03 00:44:54 +02:00
Ilia Ross
272a8715f7 Add profiles support 2026-05-03 00:44:54 +02:00
Ilia Ross
3c9d53109b Fix to rework nftables management around saved tables
Rework the nftables module so Webmin manages its saved nftables configuration as the source of truth instead of directly editing the live ruleset. Add an active ruleset view for inspecting live tables and importing copies into Webmin-managed config if needed, track managed and imported tables with metadata, and prevent externally managed tables from being overwritten during apply.

Co-authored-by: Copilot <copilot@github.com>
2026-05-02 19:02:37 +02:00
Ilia Ross
6825dc11d6 Fix to delete chains and sets immediately 2026-05-02 17:30:59 +02:00
Ilia Ross
4220d18072 Fix to improve table, chain and set management UI
Rework the nftables index page to make table, chain, and set management clearer. Move table actions next to the table selector, split chains and sets into tabs, use checked tables with standard select/invert controls for bulk deletes, move Add Rule into the Actions column, and replace nested rule tables with tag-based row layout.
2026-05-02 17:11:29 +02:00
Ilia Ross
7f2b4b00aa Fix to scope direct-mode changes to selected tables
Fix nftables direct-mode operations so create, edit, delete, and move actions apply only the selected table instead of rewriting or applying the full ruleset. This avoids copying firewalld-owned rules, or any other externally managed rules, into Webmin’s save file and prevents operations from failing against externally managed tables. Also remove previously added unsafe full-ruleset flush action and keep Apply Configuration out of direct mode (will be further reworked).
2026-05-02 17:08:35 +02:00
Ilia Ross
6fb304e384 Add a separate button for flushing active rulesets
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
[rebuild-all-modules]
2026-05-02 02:00:11 +02:00
Ilia Ross
4f3e993ae6 Merge swelljoe/nftables as new nftables module
Import https://github.com/swelljoe/nftables into the Webmin tree under nftables/ while preserving upstream history.
2026-04-17 15:19:20 +02:00