22 commits

Author	SHA1	Message	Date
Léo Le Bouter	42f3ff6b00	firewall: force source port for UPnP. ... miniupnpc uses a random source port by default, the issue is that the firewall rule to allow destination port 1900 incoming is unused because the UPnP server will use the random source port as destination port in the reply which iptables will block. Forcing the source port to be 1900 will ensure the UPnP server also uses that as destination port in the reply and pass the firewall. python-miniupnpc 2.0 or later is required for this change to have any effect, it is otherwise silently ignored. A debian package upgrade is in the works for official Yunohost repos.	2020-12-21 00:21:50 +01:00
Alexandre Aubin	fa19c9480c	Cleanup unused imports / misc 'fatal' flake8 errors	2020-09-03 17:01:24 +02:00
Alexandre Aubin	834b767000	[fix] Explicitly create home using mkhomedir_helper instead of obscure pam rule that doesn't work anymore	2020-07-27 19:20:36 +02:00
Josue-T	e1ccab212a	Reload fail2ban instead of restart	2019-02-13 22:33:58 +01:00
Alexandre Aubin	4935aebb16	Revert "[enh] Improve upnp support (#542)" ... This reverts commit 640bc494cb.	2019-01-08 16:25:43 +01:00
Alexandre Aubin	115b557b67	autopep8 + a few manual tweaks	2018-12-13 18:52:26 +00:00
Alexandre Aubin	2dd1d8ccfe	Unused errno + remaining unecessary m18n.n	2018-12-12 19:01:28 +00:00
Irina LAMBLA	4ba309a221	modif MoulinetteError to YunohostError	2018-12-12 19:01:28 +00:00
Irina LAMBLA	f2e184d8b2	moulinette MoulinetteError oneline	2018-12-12 18:56:26 +00:00
ljf (zamentur)	640bc494cb	[enh] Improve upnp support (#542)	2018-12-02 02:43:39 +01:00
Alexandre Aubin	91483f3896	Reflag some messages as info or debug	2018-06-01 21:52:19 +00:00
Laurent Peuch	baf0d098f5	[mod] explicitely import previously globals magic variables	2017-07-25 21:32:20 +02:00
Alexandre Aubin	84153f6390	[mod] Microdecision to go with Moulinette#141	2017-07-21 13:23:32 -04:00
Laurent Peuch	f6c7702dfa	[mod] rename all global variables to uppercase	2017-02-12 03:34:15 +01:00
Laurent Peuch	aad3740933	[mod] autopep8 on all files that aren't concerned by a PR	2016-12-18 02:01:17 +01:00
Jérôme Lebleu	bca32c881e	[enh] Call iptables/ip6tables with --wait option (close #325)	2016-05-28 22:01:01 +02:00
opi	4cabb2f7f9	[enh] Use named arguments with m18n.	2016-03-27 15:56:41 +02:00
Jérôme Lebleu	4978e48c9d	[enh] Make use of new logging facilities with the cli in the firewall	2015-11-12 22:39:09 +01:00
kload	c3d379be5b	Revert 95cbff27a9	2015-10-31 21:43:25 +01:00
Jérôme Lebleu	4e72595aaa	[fix] Open port 1900 when enabling UPnP (fixes #30)	2015-10-31 21:11:45 +01:00
kload	95cbff27a9	[fix] Allow yunohost firewall service to be run even if YunoHost is unconfigured	2015-10-31 13:58:02 +01:00
Jérôme Lebleu	908d77f234	[ref] Rename lib folder to src	2015-10-08 15:47:24 +02:00

Renamed from lib/yunohost/firewall.py (Browse further)