Tom Eastep
072f4752fc
Get rid of minimum column requirement
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-10-01 09:56:25 -07:00
Tom Eastep
9a4dfc4394
Implement an alternate way of specifying column contents.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-09-25 17:08:53 -07:00
Tom Eastep
12b5aa687b
More conversion to new rule interface
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-07-19 11:58:10 -07:00
Tom Eastep
d1b8d7b953
Make perl modules version-neutral
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-07-10 15:10:27 -07:00
Tom Eastep
a998476d00
Correct Accounting module version
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-07-09 07:08:47 -07:00
Tom Eastep
c264aaae6b
Update module versions
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-19 07:41:26 -07:00
Tom Eastep
9ab901927f
Use supplied() where appropriate
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-11 16:14:31 -07:00
Tom Eastep
e4d667ca6a
Add routeback protection
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-05-24 17:07:31 -07:00
Tom Eastep
15e9e3182d
Update copyrights
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-05-23 10:06:56 -07:00
Tom Eastep
495aa9b9ac
Implement NFLOG accounting action.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-05-17 13:42:13 -07:00
Tom Eastep
fd70e73d34
Add ACCOUNTING_TABLE option
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-05-17 12:51:33 -07:00
Tom Eastep
05e385a748
Only use 'our' when required
2011-05-14 13:21:31 -07:00
Tom Eastep
cf60752988
Move section processing to the Rules module where it belongs
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-02-20 15:35:58 -08:00
Tom Eastep
685de1c588
Cosmetic changes to the Accounting module"
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-02-19 15:50:18 -08:00
Tom Eastep
9173b22b58
Disallow USER/GROUP anywhere but in the OUTPUT section
2011-02-19 08:00:00 -08:00
Tom Eastep
b4946dcf65
Enforce a couple of accounting restrictions
2011-02-18 16:47:12 -08:00
Tom Eastep
e47cb61c33
Introduce 'accountfwd' chain for forwarded accounting in sectioned configuration
2011-02-18 15:44:55 -08:00
Tom Eastep
5634b08e22
Don't clear dont_optimize flag in accounting in sectioned configuration
2011-02-17 10:47:57 -08:00
Tom Eastep
fa8c8f5850
Dont optimize chains with RETURN
2011-02-16 13:15:29 -08:00
Tom Eastep
4ad9a83996
Centralize handling of MACs in the Chains module
2011-02-14 15:34:11 -08:00
Tom Eastep
59e361e93e
Split the 'restriction' member into two members
2011-02-14 09:22:27 -08:00
Tom Eastep
e64070f9e1
Restore loop detection in sectioned accounting rules
2011-02-13 16:38:01 -08:00
Tom Eastep
dd81eedb42
Fix another accounting sectioning bug
2011-02-13 14:32:11 -08:00
Tom Eastep
95f8100696
Cosmetic change
2011-02-13 11:34:53 -08:00
Tom Eastep
b1abb3f554
Don't do unref/loop detection when accounting file is sectioned
2011-02-13 11:13:43 -08:00
Tom Eastep
a1eefea224
Fix FORWARD chain jumps with sectioning
2011-02-13 08:23:48 -08:00
Tom Eastep
5c0b592934
Section the accounting file
2011-02-12 12:47:15 -08:00
Tom Eastep
a3232516bb
Detect loops in accounting chain jumps
2011-02-09 15:43:19 -08:00
Tom Eastep
88244dc132
Don't allow MAC addresses in the accounting file
2011-02-07 17:12:43 -08:00
Tom Eastep
b4b59119ef
Don't allow non-accounting chain in the CHAIN accounting column
2011-02-07 16:32:38 -08:00
Tom Eastep
4ed4443abb
Do a fancier job of comparing networks
2011-02-03 09:44:46 -08:00
Tom Eastep
27684908c4
Catch mis-matched nets in per-IP accounting rules
2011-02-03 09:25:13 -08:00
Tom Eastep
4e7f656a5b
Better ACCOUNT(...) parsing
2011-01-31 20:17:56 -08:00
Tom Eastep
f8e6c80ca0
Tighen up editing of ACCOUNT(...)
2011-01-31 10:14:10 -08:00
Tom Eastep
b1f6895a1f
Correct a couple of versions
2011-01-30 08:41:33 -08:00
Tom Eastep
70fc8bdfb6
Add support for per-IP accounting
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-01-30 07:20:05 -08:00
Tom Eastep
2702d7f208
Implement header matching
2010-11-24 10:46:06 -08:00
Tom Eastep
68f537ac5b
Bypass processing logic when an optional config file is absent.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-09-28 10:48:44 -07:00
Tom Eastep
f7eb3c3d8c
Periodic elimination of trailing white space
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-09-27 11:16:18 -07:00
Tom Eastep
12f48e1b97
Don't pass '-j' in target arg to expand_rule()
...
- use the target to locate chain for reference tracking
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-26 10:37:07 -07:00
Tom Eastep
335ac8cdca
Improve IPSEC accounting.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-20 10:07:19 -07:00
Tom Eastep
e70d9c82d8
Revise and document IPSEC Accounting
...
- Place accounting rules in accipsecin and accipsecout
- Add warning when rule inserted into unreferenced accounting chain
- Add warning when an accounting chain has no references
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-20 08:24:45 -07:00
Tom Eastep
33ee9b1481
Add IPSEC Accounting (again)
2010-08-20 06:53:31 -07:00
Tom Eastep
af77eb08bc
Back out IPSEC accounting rules
2010-08-19 15:13:01 -07:00
Tom Eastep
d997ef1653
First cut at IPSEC support in the accounting file.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-19 11:46:26 -07:00
Tom Eastep
4bf0b8e1dd
Add new configuration options and optimization changes from 4.5
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 09:53:53 -08:00
Tom Eastep
10c5630786
A few more instances of TC_MASK
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 10:50:14 -08:00
Tom Eastep
5dd41249c6
Remove trailing whitespace
2009-08-20 14:32:15 -07:00
Tom Eastep
8c16ac1d46
Update Module versions
2009-08-20 08:53:57 -07:00
Tom Eastep
787a1867a0
Another tiny performance enhancement
2009-08-17 12:58:50 -07:00