mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-23 06:38:53 +01:00
parent
465e729288
commit
ce8df2f66c
@ -23,7 +23,7 @@
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
#
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,6 +1,6 @@
|
||||
%define name shorewall-init
|
||||
%define version 4.4.20
|
||||
%define release 0Beta3
|
||||
%define release 0Beta2
|
||||
|
||||
Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall).
|
||||
Name: %{name}
|
||||
@ -120,8 +120,6 @@ fi
|
||||
|
||||
%changelog
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta3
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta2
|
||||
* Sat Apr 16 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.19-1
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
#
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,6 +1,6 @@
|
||||
%define name shorewall-lite
|
||||
%define version 4.4.20
|
||||
%define release 0Beta3
|
||||
%define release 0Beta2
|
||||
|
||||
Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems.
|
||||
Name: %{name}
|
||||
@ -104,8 +104,6 @@ fi
|
||||
|
||||
%changelog
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta3
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta2
|
||||
* Sat Apr 16 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta1
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -262,7 +262,6 @@ my %capdesc = ( NAT_ENABLED => 'NAT',
|
||||
MARK_ANYWHERE => 'Mark in any table',
|
||||
HEADER_MATCH => 'Header Match',
|
||||
ACCOUNT_TARGET => 'ACCOUNT Target',
|
||||
AUDIT_TARGET => 'AUDIT Target',
|
||||
CAPVERSION => 'Capability Version',
|
||||
KERNELVERSION => 'Kernel Version',
|
||||
);
|
||||
@ -413,8 +412,8 @@ sub initialize( $ ) {
|
||||
EXPORT => 0,
|
||||
STATEMATCH => '-m state --state',
|
||||
UNTRACKED => 0,
|
||||
VERSION => "4.4.20-Beta3",
|
||||
CAPVERSION => 40420,
|
||||
VERSION => "4.4.20-Beta2",
|
||||
CAPVERSION => 40417 ,
|
||||
);
|
||||
#
|
||||
# From shorewall.conf file
|
||||
@ -562,8 +561,7 @@ sub initialize( $ ) {
|
||||
PANIC => 0,
|
||||
NONE => '',
|
||||
NFLOG => 'NFLOG',
|
||||
LOGMARK => 'LOGMARK',
|
||||
AUDIT => 'AUDIT' );
|
||||
LOGMARK => 'LOGMARK' );
|
||||
|
||||
#
|
||||
# From parsing the capabilities file or capabilities detection
|
||||
@ -621,7 +619,6 @@ sub initialize( $ ) {
|
||||
MARK_ANYWHERE => undef,
|
||||
HEADER_MATCH => undef,
|
||||
ACCOUNT_TARGET => undef,
|
||||
AUDIT_TARGET => undef,
|
||||
CAPVERSION => undef,
|
||||
KERNELVERSION => undef,
|
||||
);
|
||||
@ -2056,12 +2053,6 @@ sub validate_level( $ ) {
|
||||
return 'LOGMARK';
|
||||
}
|
||||
|
||||
if ( $level =~ /^AUDIT\(.+\)$/ ) {
|
||||
require_capability( 'AUDIT_TARGET', 'AUDIT', 's' );
|
||||
fatal_error "Invalid AUDIT type ($2)" unless $2 =~ /^(?:DROP|REJECT|ACCEPT)$/;
|
||||
return "AUDIT --type $2";
|
||||
}
|
||||
|
||||
level_error( $rawlevel );
|
||||
}
|
||||
|
||||
@ -2534,14 +2525,9 @@ sub Account_Target() {
|
||||
}
|
||||
}
|
||||
|
||||
sub Audit_Target() {
|
||||
qt1( "$iptables -A $sillyname -j AUDIT --type DROP" );
|
||||
}
|
||||
|
||||
our %detect_capability =
|
||||
( ACCOUNT_TARGET =>\&Account_Target,
|
||||
ADDRTYPE => \&Addrtype,
|
||||
AUDIT_TARGET => \&Audit_Target,
|
||||
CLASSIFY_TARGET => \&Classify_Target,
|
||||
COMMENTS => \&Comments,
|
||||
CONNLIMIT_MATCH => \&Connlimit_Match,
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
#
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -29,7 +29,7 @@
|
||||
#
|
||||
|
||||
SHOREWALL_LIBVERSION=40407
|
||||
SHOREWALL_CAPVERSION=40420
|
||||
SHOREWALL_CAPVERSION=40417
|
||||
|
||||
[ -n "${VARDIR:=/var/lib/shorewall}" ]
|
||||
[ -n "${SHAREDIR:=/usr/share/shorewall}" ]
|
||||
|
@ -1707,7 +1707,6 @@ determine_capabilities() {
|
||||
MARK_ANYWHERE=
|
||||
HEADER_MATCH=
|
||||
ACCOUNT_TARGET=
|
||||
AUDIT_TARGET=
|
||||
|
||||
chain=fooX$$
|
||||
|
||||
@ -1847,7 +1846,6 @@ determine_capabilities() {
|
||||
qt $IPTABLES -A $chain -j LOG || LOG_TARGET=
|
||||
qt $IPTABLES -A $chain -j MARK --set-mark 5 && MARK_ANYWHERE=Yes
|
||||
qt $IPTABLES -A $chain -j ACCOUNT --addr 192.168.1.0/29 --tname $chain && ACCOUNT_TARGET=Yes
|
||||
qt $IPTABLES -A $chain -j AUDIT --type DROP && ACCOUNT_TARGET=Yes
|
||||
|
||||
qt $IPTABLES -F $chain
|
||||
qt $IPTABLES -X $chain
|
||||
@ -1930,7 +1928,6 @@ report_capabilities() {
|
||||
report_capability "Mark in any table" $MARK_ANYWHERE
|
||||
report_capability "Header Match" $HEADER_MATCH
|
||||
report_capability "ACCOUNT Target" $ACCOUNT_TARGET
|
||||
report_capability "AUDIT Target" $AUDIT_TARGET
|
||||
fi
|
||||
|
||||
[ -n "$PKTTYPE" ] || USEPKTTYPE=
|
||||
@ -1998,7 +1995,6 @@ report_capabilities1() {
|
||||
report_capability1 MARK_ANYWHERE
|
||||
report_capability1 HEADER_MATCH
|
||||
report_capability1 ACCOUNT_TARGET
|
||||
report_capability1 AUDIT_TARGET
|
||||
|
||||
echo CAPVERSION=$SHOREWALL_CAPVERSION
|
||||
echo KERNELVERSION=$KERNELVERSION
|
||||
|
@ -1,6 +1,6 @@
|
||||
%define name shorewall
|
||||
%define version 4.4.20
|
||||
%define release 0Beta3
|
||||
%define release 0Beta2
|
||||
|
||||
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
|
||||
Name: %{name}
|
||||
@ -110,8 +110,6 @@ fi
|
||||
|
||||
%changelog
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta3
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta2
|
||||
* Fri Apr 15 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta1
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
#
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,6 +1,6 @@
|
||||
%define name shorewall6-lite
|
||||
%define version 4.4.20
|
||||
%define release 0Beta3
|
||||
%define release 0Beta2
|
||||
|
||||
Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems.
|
||||
Name: %{name}
|
||||
@ -95,8 +95,6 @@ fi
|
||||
|
||||
%changelog
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta3
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta2
|
||||
* Sat Apr 16 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta1
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||
#
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -33,7 +33,7 @@
|
||||
#
|
||||
|
||||
SHOREWALL_LIBVERSION=40407
|
||||
SHOREWALL_CAPVERSION=40420
|
||||
SHOREWALL_CAPVERSION=40417
|
||||
|
||||
[ -n "${VARDIR:=/var/lib/shorewall6}" ]
|
||||
[ -n "${SHAREDIR:=/usr/share/shorewall6}" ]
|
||||
|
@ -1568,7 +1568,6 @@ report_capabilities() {
|
||||
report_capability "Mark in any table" $MARK_ANYWHERE
|
||||
report_capability "Header Match" $HEADER_MATCH
|
||||
report_capability "ACCOUNT Match" $ACCOUNT_TARGET
|
||||
report_capability "AUDIT Match" $AUDIT_TARGET
|
||||
fi
|
||||
|
||||
[ -n "$PKTTYPE" ] || USEPKTTYPE=
|
||||
@ -1633,7 +1632,6 @@ report_capabilities1() {
|
||||
report_capability1 MARK_ANYWHERE
|
||||
report_capability1 HEADER_MATCH
|
||||
report_capability1 ACCOUNT_TARGET
|
||||
report_capability1 AUDIT_TARGET
|
||||
|
||||
echo CAPVERSION=$SHOREWALL_CAPVERSION
|
||||
echo KERNELVERSION=$KERNELVERSION
|
||||
|
@ -1,6 +1,6 @@
|
||||
%define name shorewall6
|
||||
%define version 4.4.20
|
||||
%define release 0Beta3
|
||||
%define release 0Beta2
|
||||
|
||||
Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems.
|
||||
Name: %{name}
|
||||
@ -99,8 +99,6 @@ fi
|
||||
|
||||
%changelog
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta3
|
||||
* Wed May 18 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta2
|
||||
* Sat Apr 16 2011 Tom Eastep tom@shorewall.net
|
||||
- Updated to 4.4.20-0Beta1
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=4.4.20-Beta3
|
||||
VERSION=4.4.20-Beta2
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
Loading…
Reference in New Issue
Block a user