04edae966c
Correct 'reset' handling in 'IfEvent'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12.4
2018-04-13 09:51:55 -07:00
6033fcb40a
Be sure that mutex is released when exiting
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
# Conflicts:
# Shorewall/lib.cli-std
5.1.12.3
2018-03-01 08:47:48 -08:00
4a5a6ee008
Correct typo - synparms -> synparams
...
- Causes SYN limiting to be omitted in rare cases.
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12.2
2018-02-21 11:53:39 -08:00
48241d62d5
Correct "Invalid Policy Action" error message
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-19 10:30:41 -08:00
1621251d04
Correct typo in add_common_rules()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-14 12:01:29 -08:00
27f3ad5ee5
Convert ';' to ';;' in INLINE and IP6?TABLES rules
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-10 13:25:45 -08:00
f816f9b3b2
More INLINE_MATCHES changes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-10 10:38:45 -08:00
b8196a932f
Add another INLINE_MATCHES warning for INLINE and IP[6]TABLES
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-10 09:04:06 -08:00
422911f06b
Update config file basics doc to discourage INLINE_MATCHES=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-09 17:09:11 -08:00
2a12e0950a
Allow pairs in braces to appear with ';;'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12.1
2018-02-09 12:58:18 -08:00
9869dd25d7
Correct capitalization of IPsec
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-09 11:20:22 -08:00
e47b57fd4a
Replace macro.SSDPServer with corrected macro.SSDPserver
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-09 08:45:03 -08:00
3cbe0e7a1c
Describe IPSEC via SNAT
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-08 14:33:54 -08:00
221753c3c0
INLINE_MATCHES=No in sample configs
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12-base
2018-02-08 12:53:20 -08:00
b14924bd64
New macros - Tuomo Soini
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-08 12:29:56 -08:00
c0a608ef84
Updated IPMI Macro (Tuomo Soini)
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-08 11:59:55 -08:00
c518e85215
Clarify warning message regarding INLINE_MATCHES
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-08 11:21:38 -08:00
34fd10df41
Fix typo
2018-02-08 10:49:14 -08:00
e7004da47c
Fix typo
2018-02-08 10:49:06 -08:00
91c76f7559
Add INLINE_MATCHES=Yes to deprecated option list
...
- Issue a warning for each line requiring change.
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-07 19:08:28 -08:00
2e4af68b98
Always report IPSET_MATCH in 'show capabilities' output.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12-RC1
2018-02-06 13:41:28 -08:00
de9f29d7d4
Update Actions article
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-05 17:11:30 -08:00
99ddb17c9e
Update the Macros article
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-05 17:11:05 -08:00
8ea9d0bbef
Mention capabilities file to speed up 'start'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-02 10:45:21 -08:00
ebe09a95b8
Lightweight format_rule() for use in digest creation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-02-02 09:27:19 -08:00
f32b304eb6
Describe disabling shorewall under systemd in the FAQs
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-31 14:59:15 -08:00
7bdd69d151
Optimization category 8 tweaks
...
- Document cost of the category in shorewall.conf(5)
- Omit DONT_DELETE chains from consideration right off the bat
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-31 14:58:01 -08:00
a08f0cfe10
Avoid awkward blank lines
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12-Beta2
2018-01-30 19:15:10 -08:00
09a81ae574
Omit trailing black space from the generated script
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-30 14:31:54 -08:00
7042d586b2
Clarify BLACKLIST_DISPOSITION in shorewall.conf(5)
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-30 13:54:03 -08:00
e17c4ac8af
Reorganize code around wait/Interface-variable fix
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-30 11:25:37 -08:00
37101a2031
Merge branch '5.1.11' into 5.1.12
2018-01-28 13:15:42 -08:00
40bcfd15e5
Revert "Correct order of optional interface and address variable handling"
...
This reverts commit f4cae55c1e
.
2018-01-28 13:15:13 -08:00
230ab06e5d
Reverse order of required-interface and address variable processing
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.11.2
2018-01-28 13:10:44 -08:00
09cda21dd4
Revert "Correct order of optional interface and address variable handling"
...
This reverts commit 9253f90ac5
.
2018-01-28 12:29:38 -08:00
9253f90ac5
Correct order of optional interface and address variable handling
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-28 11:39:06 -08:00
f4cae55c1e
Correct order of optional interface and address variable handling
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-28 10:54:03 -08:00
070a67d665
Deimplement OPTIMIZE_USE_FIRST
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-24 11:56:20 -08:00
9796c58eb2
Add OPTIMIZE_MASK constant
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-23 13:15:44 -08:00
cabc20957f
Delete an unnecessary variable
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-23 09:45:50 -08:00
a9a379c5a5
Implement INPUT SNAT
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.1.12-Beta1
2018-01-22 16:37:38 -08:00
3bf5066f82
Document multiple DEST interfaces in the snat file
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-22 11:12:28 -08:00
b2c33a0f9a
Add snat to the list of manpages
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-22 10:48:58 -08:00
64f704a964
Improve quoting in the route-balancing logic
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-21 14:46:51 -08:00
416224ee05
Correct typos and anachronisms in Chains.pm comments
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-21 11:53:58 -08:00
92ce1beddc
Move read_yesno_with_timeout() to lib.cli-std
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-20 14:26:13 -08:00
4d6bf8564e
Avoid unnecessary variable expansion
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-20 14:25:42 -08:00
fb4b362724
Eliminate unnecessary local array
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-20 13:26:10 -08:00
97de2be778
Change a fatal_error() call with an assertion in add_policy_rules()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-19 13:39:51 -08:00
85cae3c7f8
Add parens to improve readability
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2018-01-19 12:47:17 -08:00