Tom Eastep
|
08d29edf1a
|
Include rule priority in delete of generated address route rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-03-10 08:24:38 -07:00 |
|
Tom Eastep
|
093ff580b5
|
Deprecate USE_DEFAULT_RT=No.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-03-09 07:48:05 -07:00 |
|
Tom Eastep
|
cea237620a
|
Change USE_DEFAULT_RT default to 'Yes'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-03-09 07:42:22 -07:00 |
|
Tom Eastep
|
c9d7370fb4
|
Merge branch '4.5.21'
Conflicts:
Shorewall/manpages/shorewall.conf.xml
Shorewall6/manpages/shorewall6.conf.xml
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-03-05 09:00:34 -08:00 |
|
Tom Eastep
|
8b4d8bfa16
|
Finish ADMINISABSENDMINDED change
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-03-05 08:57:03 -08:00 |
|
Tom Eastep
|
4eadec234a
|
Revert "Correct the behavior of ADMINISABSENTMINDED"
This reverts commit ded747a51a .
|
2014-03-02 08:25:05 -08:00 |
|
Tom Eastep
|
2b489993ca
|
Revert "Correct the behavior of ADMINISABSENTMINDED"
This reverts commit df09e0ccc5 .
|
2014-03-02 08:23:23 -08:00 |
|
Tom Eastep
|
ded747a51a
|
Correct the behavior of ADMINISABSENTMINDED
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-28 10:14:33 -08:00 |
|
Tom Eastep
|
df09e0ccc5
|
Correct the behavior of ADMINISABSENTMINDED
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-28 10:14:08 -08:00 |
|
Tom Eastep
|
454e53bcfa
|
Reformat preceding patch and correct syntax errors.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-25 13:21:23 -08:00 |
|
Tom Eastep
|
66fdc9f6a7
|
Call directive_callback for directives without '?'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-25 12:48:25 -08:00 |
|
Tom Eastep
|
c74235a200
|
Correct typos
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-17 14:17:49 -08:00 |
|
Tom Eastep
|
1759fc75b0
|
Correctly handle alternate specification with ';' in 'update -t'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-17 14:10:17 -08:00 |
|
Tom Eastep
|
3e87efc82b
|
Document -t option
- Also copy compiler directives to the mangle file.
|
2014-02-17 12:50:59 -08:00 |
|
Tom Eastep
|
a011ad8efe
|
Add raw matches to the converted mangle file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-16 09:59:13 -08:00 |
|
Tom Eastep
|
0e40a42729
|
Allow SAVE and RESTORE in the postrouting chain
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-16 09:50:43 -08:00 |
|
Tom Eastep
|
669d15e2cf
|
Implement the -t update option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-15 09:36:13 -08:00 |
|
Tom Eastep
|
2dbcd36a9c
|
Implement BASIC_FILTERS
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-04 16:34:03 -08:00 |
|
Tom Eastep
|
0383ca7de6
|
Correct semantics of ipset lists in tcfilters
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-04 12:27:46 -08:00 |
|
Tom Eastep
|
7ddc65133e
|
Support ipset lists in the tcfilters file.
- Also document the fact that ipset match options are not available in
the tcfilters file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-04 12:16:35 -08:00 |
|
Tom Eastep
|
1d4a87a0d0
|
Excape an opening parehthesis.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-04 12:15:35 -08:00 |
|
Tom Eastep
|
3b3608ad65
|
Correct ICMP handling in basic filters.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-04 07:16:41 -08:00 |
|
Tom Eastep
|
081a387f1d
|
Fix some bugs in basic filter generation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-02-03 14:59:27 -08:00 |
|
Tom Eastep
|
50fb8e3f2f
|
Use HEX representation for matching IPv6 addresses in basic filters.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-31 12:49:47 -08:00 |
|
Tom Eastep
|
f029f5b483
|
Correct handling of logging of a non-terminating target
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-29 08:22:31 -08:00 |
|
Tom Eastep
|
86f667afd4
|
Correct handling of logging of a non-terminating target
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-29 08:19:53 -08:00 |
|
Tom Eastep
|
8a63053c13
|
Correct defects found in unit testing
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-21 20:19:56 -08:00 |
|
Tom Eastep
|
62557cb98e
|
Correct defects found during testing of ematch.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-21 12:53:33 -08:00 |
|
Tom Eastep
|
9c4089fc99
|
Initial basic filter implementation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-20 18:40:40 -08:00 |
|
Tom Eastep
|
fd28a12653
|
Allow DROP in the stoppedrules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-07 13:19:49 -08:00 |
|
Tom Eastep
|
7e6fc3229d
|
Correct handling of default chain when a mark range is specified.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-07 13:15:51 -08:00 |
|
Tom Eastep
|
42dd8dfee9
|
Change license to GPLv2+ and update copyrights
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-04 09:48:27 -08:00 |
|
Tom Eastep
|
5a7e458104
|
Backout ematch stuff for now
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-03 12:01:56 -08:00 |
|
Tom Eastep
|
7e1a310929
|
Implement ipset matches in tcfilters
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-03 09:35:34 -08:00 |
|
Tom Eastep
|
78ecf9bdc8
|
Finish up ipset extensions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-03 09:23:14 -08:00 |
|
Tom Eastep
|
1771bb75cf
|
Finish ipset match option implementation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-02 14:43:55 -08:00 |
|
Tom Eastep
|
b4847d6a01
|
New IPSET MATCH extensions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-02 09:36:35 -08:00 |
|
Tom Eastep
|
48ceed9ecb
|
Make tcpflags the default.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 15:10:38 -08:00 |
|
Tom Eastep
|
1083dd8c26
|
Allow ?COMMENT in the mangle file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 08:02:17 -08:00 |
|
Tom Eastep
|
5e7cd855c2
|
Correct typo in Tc.pm
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 07:53:38 -08:00 |
|
Tom Eastep
|
2c2aaf262c
|
Add IP[6]TABLES support for the conntrack file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 07:18:36 -08:00 |
|
Tom Eastep
|
6c990a7253
|
Logically OR builtin definitions from the actions file if the builtin exists
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 07:18:00 -08:00 |
|
Tom Eastep
|
f7bbac6ea8
|
Make tcrules/mangle similar to notrack/conntrack.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-01-01 07:15:56 -08:00 |
|
Tom Eastep
|
4c1b83beef
|
Tweaks to the Tc.pm module.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-31 11:42:38 -08:00 |
|
Tom Eastep
|
ac6a506e35
|
Allow logging from the RAW table
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-31 11:04:43 -08:00 |
|
Tom Eastep
|
11e61ec6e5
|
Add chain information to the builtin_target table.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-31 08:22:58 -08:00 |
|
Tom Eastep
|
5985a6e9b3
|
Implement IP[6]TABLES in the rules files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-29 13:46:58 -08:00 |
|
Tom Eastep
|
66a04e4819
|
Allow inline matches with IP[6]TABLES
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-29 10:13:00 -08:00 |
|
Tom Eastep
|
1634267faa
|
Rename JUMP to IP[6]TABLES.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-29 10:12:33 -08:00 |
|
Tom Eastep
|
c8866ef8bf
|
Correct handling of columns with embedded spaces
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-12-29 08:56:14 -08:00 |
|