Tom Eastep
|
08c5ce0f95
|
Add a known problem
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-22 08:10:25 -07:00 |
|
Tom Eastep
|
1fd4c32f21
|
Avoid multiple policy matches with OPTIMIZE=7 and not KLUDGEFREE
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-08 07:41:09 -08:00 |
|
Tom Eastep
|
bb5dcb56fb
|
Update Known Problems
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-08 07:36:51 -08:00 |
|
Tom Eastep
|
b69e61a510
|
Bring CORRECT RE to 4.4.7 Branch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-01 13:39:51 -08:00 |
|
Tom Eastep
|
479e4e323a
|
Bring change to RE in add_jump() to 4.4.7 Branch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-01 13:38:54 -08:00 |
|
Tom Eastep
|
f8b4246cef
|
Add fwlogwatch info
|
2010-03-01 12:16:36 -08:00 |
|
Tom Eastep
|
81902a6fa5
|
Update release documents for fix for multiple policy matches
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-01 08:38:43 -08:00 |
|
Tom Eastep
|
47e0ef4816
|
Avoid multiple policy matches with OPTIMIZE=7 and not KLUDGEFREE
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-01 08:33:30 -08:00 |
|
Tom Eastep
|
09b6fca867
|
Correct handling of NFQUEUE(queue-num) in policies
|
2010-02-25 08:51:16 -08:00 |
|
Tom Eastep
|
db39402e75
|
Correct handling of NFQUEUE(queue-num) in a policy
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-25 08:46:20 -08:00 |
|
Tom Eastep
|
141f93f4c5
|
Update release documents for NFQUEUE issue.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-25 07:57:55 -08:00 |
|
Tom Eastep
|
223e1e434a
|
Correct handling of NFQUEUE(queue-num) as a policy.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-25 07:51:40 -08:00 |
|
Tom Eastep
|
99ec099c98
|
Apply debian init script change to the other packages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-21 16:35:21 -08:00 |
|
Tom Eastep
|
422dbaa902
|
Bump the version to 4.4.7.6.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-20 08:19:21 -08:00 |
|
Tom Eastep
|
181c757614
|
Return failure status when a supported command fails.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-20 08:10:13 -08:00 |
|
Tom Eastep
|
cc5c312421
|
Correct release notes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-19 16:36:36 -08:00 |
|
Tom Eastep
|
5cafb22c15
|
Add ACCEPT+ to problems corrected and Known Problems.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-19 14:13:12 -08:00 |
|
Tom Eastep
|
8eb3de7db2
|
Don't apply rate limiting twice in ACCEPT+ rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-19 13:57:45 -08:00 |
|
Tom Eastep
|
5b77f378e5
|
Use Hex representation of device numbers > 9 in simple TC.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-18 12:50:56 -08:00 |
|
Tom Eastep
|
b3ae035302
|
Update Known Problems
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-18 10:10:38 -08:00 |
|
Tom Eastep
|
7eddb8310a
|
Clean up rate limiting fixes (documentation)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-18 07:09:22 -08:00 |
|
Tom Eastep
|
6db2c5fbe3
|
Document change to hashlimit
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 15:38:38 -08:00 |
|
Tom Eastep
|
579f4d4698
|
Create a unique hashtable for each instance of a per-IP rate limit
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 15:34:14 -08:00 |
|
Tom Eastep
|
b8fc1a9b22
|
Fix Typo
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 09:23:11 -08:00 |
|
Tom Eastep
|
f5c954295d
|
Final (hopefully) fix for SFQ handle assignment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 09:20:33 -08:00 |
|
Tom Eastep
|
4299e6db3b
|
Another tweak to SFQ handle assignment.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 08:01:24 -08:00 |
|
Tom Eastep
|
37720d7f25
|
Improve assignment of class ID for SFQ classses
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 07:46:43 -08:00 |
|
Tom Eastep
|
69d0bb69b8
|
Avoid duplicate SFQ class numbers.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-17 06:42:30 -08:00 |
|
Tom Eastep
|
9d7bd3f651
|
Avoid duplicate SFQ class numbers
|
2010-02-17 06:38:06 -08:00 |
|
Tom Eastep
|
af2fb42cf8
|
Add --hashlimit-htable-expire if the units are minutes or larger
|
2010-02-16 22:54:59 -08:00 |
|
Tom Eastep
|
c3842aeeab
|
Prepare for 4.4.7.5.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:48:40 -08:00 |
|
Tom Eastep
|
e8807f3e7e
|
Correction to logging rule fix
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:41:01 -08:00 |
|
Tom Eastep
|
eb8d96135e
|
Don't create log chain for 'RETURN' rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:25:40 -08:00 |
|
Tom Eastep
|
16bf45fce4
|
Add $remote_fs to Required-start and Required-stop for Debian
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 07:05:47 -08:00 |
|
Tom Eastep
|
d72855e8f9
|
Prepare 4.4.7.3
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 12:11:11 -08:00 |
|
Tom Eastep
|
a6ba499cca
|
Fix FLOW_FILTER detection with LOAD_HELPERS_ONLY=Yes
|
2010-02-14 12:03:54 -08:00 |
|
Tom Eastep
|
53902b058e
|
Explain RATE and BURST in the basics doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 08:53:58 -08:00 |
|
Tom Eastep
|
da4b2049c7
|
Fix typo in known problems
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 08:53:31 -08:00 |
|
Tom Eastep
|
11b86e99e6
|
Fix detection of FLOW_FILTER when LOAD_HELPERS_ONLY=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 07:55:41 -08:00 |
|
Tom Eastep
|
09f8011a49
|
Create 4.4.7.2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 07:28:52 -08:00 |
|
Tom Eastep
|
a88be42a73
|
Fix for OLD_HL_MATCH.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 07:23:46 -08:00 |
|
Tom Eastep
|
b5859d63c9
|
Delete redundant change log entry
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 09:17:25 -08:00 |
|
Tom Eastep
|
602dcd1bab
|
Set version to 4.4.7.1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 07:28:22 -08:00 |
|
Tom Eastep
|
b8453c4bda
|
Document per-IP rate limiting bug.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 07:26:49 -08:00 |
|
Tom Eastep
|
53069ebf27
|
Don't apply rate limiting twice in NAT rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 07:22:06 -08:00 |
|
Tom Eastep
|
8224a2971e
|
Prepare 4.4.7.1 in case it is needed
|
2010-02-11 15:25:46 -08:00 |
|
Tom Eastep
|
757fea7467
|
Update documentation regarding FLOW_FILTER
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-11 14:35:12 -08:00 |
|
Tom Eastep
|
b35f20b403
|
Avoid CAPVERSION bump to implement FLOW_FILTER detection
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-11 07:29:41 -08:00 |
|
Tom Eastep
|
b8c195f570
|
Accurately detect 'flow' availability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-10 14:50:26 -08:00 |
|
Tom Eastep
|
b1c64913b4
|
Reformat column header in tcinterfaces
|
2010-02-10 12:00:17 -08:00 |
|