Commit Graph

7424 Commits

Author SHA1 Message Date
Tom Eastep
01fa627e13 Update web site for 4.2.8 -perl fiasco
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2009-04-18 06:49:14 -07:00
Tom Eastep
c20bc85dcf Another go-around with the macro.template file 2009-04-18 06:49:13 -07:00
Tom Eastep
910c260cb3 Document FORMAT 2 and the ORIGINAL DEST column 2009-04-18 06:49:13 -07:00
Tom Eastep
2e5c5264bb Add 'FORMAT 2' to the macro template file 2009-04-18 06:49:13 -07:00
Tom Eastep
2e516f7518 Update web site for 4.2.8; fix broken link
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2009-04-18 06:49:13 -07:00
paulgear
3d4c87cfd5 Help out the newbies with better log messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9923 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-18 02:02:35 +00:00
paulgear
e9d056796d A little consistency for the sample shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9922 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-18 01:59:53 +00:00
teastep
4bab073494 Fix minor typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 23:05:03 +00:00
teastep
0cc60ea021 Avoid 'Invalid BROADCAST address' errors
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 22:57:59 +00:00
teastep
536025e44e Remove SUBSYSLOCK value from sample configs
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9915 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 18:30:59 +00:00
teastep
5248f59356 Remove extraneous character from sample rules file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9914 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 18:30:30 +00:00
teastep
64cea700da Document Shorewall6 support on kernel 2.6.24
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9913 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 18:27:37 +00:00
teastep
fd7108784f Allow Shorewall6 on kernel 4.2.24
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:04:54 +00:00
teastep
eb87f69ad4 Update web site for 4.2.8 -perl fiasco
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9907 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:04:34 +00:00
teastep
e0d1fff7e1 Update for 4.3.8
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9906 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:04:18 +00:00
teastep
058e03e791 Another go-around with the macro.template file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9905 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:04:04 +00:00
teastep
dcd5038c12 Fix bug in manpage6 generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9904 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:03:48 +00:00
teastep
850fe6e691 Document FORMAT 2 and the ORIGINAL DEST column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9903 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:03:32 +00:00
teastep
5d5b73dafc Add 'FORMAT 2' to the macro template file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9902 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:03:16 +00:00
teastep
bcb6096afd Update web site for 4.2.8; fix broken link
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9901 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:02:59 +00:00
teastep
62b9472711 Clarify the usage of the GATEWAY column when USE_DEFAULT_RT = Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9864 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-14 23:25:53 +00:00
teastep
bd9ea3c47f Make the mss interface option clear
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9863 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-14 23:25:19 +00:00
teastep
905c226f76 Add a connection rate limiting doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9862 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-14 23:24:40 +00:00
el_cubano
c861b34d57 Typo fix.
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9860 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-14 22:38:54 +00:00
teastep
69c99bae2c Add a link in the download page. Improve readability of the LEAF/Bering bullet
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9854 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 17:13:37 +00:00
teastep
665cce0f20 Update download page to include Ben Montgomery's Ubuntu Repository
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9853 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 16:21:08 +00:00
teastep
b5f7d9308d Update the Download page to mention the Git repository
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9852 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 16:20:50 +00:00
teastep
ade958dd51 Add undocumented LOGMARK log level
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9851 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 15:22:19 +00:00
teastep
347090da6e Correct netmask generation in tcfilters
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 15:22:00 +00:00
teastep
97e61965c0 Fix another inversion case
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9846 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-11 21:48:34 +00:00
teastep
de037034a5 Bump version to 4.3.9
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9845 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-11 15:31:25 +00:00
teastep
9bfc7b6d99 Tiny optimization.
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-11 15:28:50 +00:00
teastep
c39fcc4db7 Optimization of log rule code
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9843 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 20:36:22 +00:00
teastep
b734d3af31 Fix subtle bug introduced in last commit
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9842 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 20:36:09 +00:00
teastep
20cfd0033c Fix a 4.3 bug in expand_rule().
Don't repeat matches on target rule when log chain is used.

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9841 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 19:47:39 +00:00
teastep
28e84a6aba Break up long port lists in jump to logging chain
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 16:31:04 +00:00
teastep
e0040f4011 Small optimizations in expand_rule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 16:16:25 +00:00
teastep
ff014f328b Correct usage text
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-10 16:15:36 +00:00
teastep
8278203e03 Remove one argument from expand_rule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9835 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-09 22:21:48 +00:00
teastep
f20013898e Don't use -g when the target might not be terminating
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9834 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-09 20:18:11 +00:00
teastep
ae169f00a7 Implement rules that also log as a separate chain. Preserve original target in logging rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-09 18:45:21 +00:00
teastep
c8b48a9bbd Update man pages to allow interface name in DEST column of notrack file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9832 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-08 22:45:51 +00:00
teastep
7d2b410904 Correct rule generation when an interface is specified as the destination of a PREROUTING rule.
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-08 03:37:15 +00:00
teastep
28b6fd8033 Simplify hashlimit match code
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9830 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 18:15:51 +00:00
teastep
fe16576258 Document the fact that ":<burst>: is optional in LIMIT:BURST
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9829 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 18:15:38 +00:00
teastep
36e0c85f5f Require the Hashlimit Match capability for per-IP rate limiting
Use the current key words in the generated hashlimit match

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9828 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 17:36:23 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 17:35:06 +00:00
teastep
c545e65cea First part of 'hashlimit' implemenation
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 03:23:01 +00:00
teastep
b1e9453c62 The other half of the re-implementation of 'enable/disable_object'
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9825 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 03:22:49 +00:00
teastep
0744df13d6 Reimplement object_enable/disable
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9824 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 03:22:30 +00:00