Tom Eastep
|
f675513383
|
Make 'build' work on a Mac
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 10:57:32 -07:00 |
|
Tom Eastep
|
db8092d71e
|
Update VPN Basics Doc
|
2011-07-30 09:16:26 -07:00 |
|
Tom Eastep
|
512273fa91
|
Avoid undefined reference in Shorewall::rules::save_policies
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 07:04:42 -07:00 |
|
Tom Eastep
|
9e6fd39145
|
Corrections to OPENVPN doc.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 06:57:55 -07:00 |
|
Tom Eastep
|
42ae3ba581
|
Cleaner fix for TCP_FLAGS_DISPOSITION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 06:57:18 -07:00 |
|
Tom Eastep
|
d9fe6e7a42
|
Handle missing TCP_FLAGS_DISPOSITION setting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-28 15:56:34 -07:00 |
|
Tom Eastep
|
6c025d20c9
|
Fix Shorewall6 Kernel Version test
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-28 15:53:35 -07:00 |
|
Tom Eastep
|
a992ec594a
|
Accomodate kernel version 3.0
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-27 17:03:27 -07:00 |
|
Tom Eastep
|
18e3dd40e6
|
Add an IPv6 ipset manpage and clarify +[...]
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-26 13:15:10 -07:00 |
|
Tom Eastep
|
33f7822df9
|
Correct 'action' editing RE in parameterized actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 09:16:22 -07:00 |
|
Tom Eastep
|
a18c502796
|
Correct reference counting in one more place in expand_rule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 07:42:01 -07:00 |
|
Tom Eastep
|
ecd2e2276e
|
Add some comments and remove extra whitespace
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 06:56:05 -07:00 |
|
Tom Eastep
|
215e923562
|
A little cleanup
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 16:17:22 -07:00 |
|
Tom Eastep
|
703bc88bfd
|
Move merge_rules() back to where it was.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 15:06:42 -07:00 |
|
Tom Eastep
|
6300d6cbfc
|
Validate 'action' parameter to the new parameterized actions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 11:46:57 -07:00 |
|
Tom Eastep
|
ac5a6f4471
|
Cleanup of progress messages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 09:13:46 -07:00 |
|
Tom Eastep
|
f2c9647579
|
Set empty target in rules created via add_irule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 08:28:43 -07:00 |
|
Tom Eastep
|
e693665be1
|
Add correct reference counting to merge_rules()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 08:03:45 -07:00 |
|
Tom Eastep
|
ea4b8cdb6f
|
Exempt policy chains from optimization level 8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 16:34:01 -07:00 |
|
Tom Eastep
|
b789d825f8
|
Unify the setting of $targetref and $jump
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 14:47:16 -07:00 |
|
Tom Eastep
|
83e6e2f105
|
Another fix for reference counting.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 13:54:56 -07:00 |
|
Tom Eastep
|
028fc20741
|
Correct reference accounting when long port lists are split
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 07:31:58 -07:00 |
|
Tom Eastep
|
3d616980a6
|
Don't delete the {target} member in clear_rule_target() but instead set it to ''
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 07:30:56 -07:00 |
|
Tom Eastep
|
567993292f
|
Some efficiency changes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 17:48:14 -07:00 |
|
Tom Eastep
|
5764e7899b
|
Rename combined chains created by optimization level 8
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 14:12:03 -07:00 |
|
Tom Eastep
|
22463e451d
|
More efficient method of generating rule strings for comparison
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 11:06:29 -07:00 |
|
Tom Eastep
|
1d24f28c83
|
Rename %special -> %opttype
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 11:06:03 -07:00 |
|
Tom Eastep
|
bfd63dcace
|
Revert LOGLIMIT conversion change
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 07:53:30 -07:00 |
|
Tom Eastep
|
2adf2883d5
|
Revert addition of do_i functions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 07:23:13 -07:00 |
|
Tom Eastep
|
5e190f4e4e
|
Implement '_i' equivalents of all do_ functions.
Also implements handling of long port lists in new-format rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 06:22:52 -07:00 |
|
Tom Eastep
|
0791ea6698
|
Make 'KLUDGEFREE' a global to make it faster to test.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-21 12:57:20 -07:00 |
|
Tom Eastep
|
4eeb233d95
|
A little reorg to prepare for moving long port list remediation to the new chain structure.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-20 18:52:20 -07:00 |
|
Tom Eastep
|
705ffbca49
|
Fix for LOGMARK(<list>)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-20 17:33:31 -07:00 |
|
Tom Eastep
|
a7ab53e135
|
Trap '!' in port columns.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-20 15:55:18 -07:00 |
|
Tom Eastep
|
32a8b254a0
|
Some optimizations in the new rule infrastructure
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-20 15:53:00 -07:00 |
|
Tom Eastep
|
ca655a6f52
|
Use add_ijump for all jump 'irules'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-20 07:30:49 -07:00 |
|
Tom Eastep
|
12b5aa687b
|
More conversion to new rule interface
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-19 11:58:10 -07:00 |
|
Tom Eastep
|
f8be76f471
|
Make LOGMARK work without a parameter.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-19 11:57:12 -07:00 |
|
Tom Eastep
|
8b56e16bf9
|
Fix LOGMARK
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-19 06:54:41 -07:00 |
|
Tom Eastep
|
58de3dd3c1
|
Fix :persistent and :random in /etc/shorewall/masq
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 15:35:07 -07:00 |
|
Tom Eastep
|
346df62cc6
|
Support long-form iptables options.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 13:47:52 -07:00 |
|
Tom Eastep
|
796f3b6668
|
Correct cmdlevel settings in irules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 10:05:39 -07:00 |
|
Tom Eastep
|
1e89074bf8
|
Correct tracing of nested rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 09:46:41 -07:00 |
|
Tom Eastep
|
a80b04bd74
|
Correct formatting of empty arguments to add_commands
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 09:45:59 -07:00 |
|
Tom Eastep
|
bfd69c33c7
|
Correctly format empty arguments to add_commands()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 09:19:52 -07:00 |
|
Tom Eastep
|
043fb8757c
|
Convert Rules.pm infrastructure to use the new rule interface
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 08:29:42 -07:00 |
|
Tom Eastep
|
7aa7cd54c2
|
Convert Providers.pm to use the new rules interface.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 07:43:25 -07:00 |
|
Tom Eastep
|
3c60f107b7
|
Convert generate_matrix() to use the new rules interface
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-18 07:24:21 -07:00 |
|
Tom Eastep
|
2efa2796d3
|
More new rule interface calls in the Misc module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-17 15:12:58 -07:00 |
|
Tom Eastep
|
b2305ca9cf
|
Convert Tunnels file to use irules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-17 11:33:01 -07:00 |
|