extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-25 00:53:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,466 Commits 104 Branches 736 Tags 55 MiB
0adb9c8f87
Commit Graph

7882 Commits

Author SHA1 Message Date
Tom Eastep
381d55760b
Don't install ifupdown script in /etc/network/if-down.d on Debian 
- Network Manager sets PHASE=post-down when calling our updown script
  so we must process down commands in that phase.

- Modify the generated script to eliminate PHASE checks.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-18 11:42:32 -07:00
Tom Eastep
15ca726c49
Add target files 5.2.4.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-17 17:56:06 -07:00
Tom Eastep
4e83d0788e
Rename valuesort() to sortchainsiftest() and remove keysort() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-11 13:42:41 -07:00
Tom Eastep
a49a9f9f9d
Sort specific hash keys and values if -t 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-07 11:12:16 -07:00
Tom Eastep
6dc99e77ae
Revert "Sort specific hash keys and values if -e" 
This reverts commit 5e648a9379.
 2020-04-07 11:09:27 -07:00
Tom Eastep
92b25d88b0
Revert "Add conditional sorts to find[_zone]_hosts_by_option()" 
This reverts commit 42a505c99d.
 2020-04-07 11:08:46 -07:00
Tom Eastep
42a505c99d
Add conditional sorts to find[_zone]_hosts_by_option() 
- Another case of different behavior by different Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 13:48:45 -07:00
Tom Eastep
5e648a9379
Sort specific hash keys and values if -e 
- Makes testing output consistent across Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 10:57:35 -07:00
Tom Eastep
e49f31fb42
Don't compute sha1 hash when testing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-02 10:11:21 -07:00
Tom Eastep
3f0e4959a1
Revert "When exporting or testing, set all variables defined in the params file" 
This reverts commit f9003fab43.
 2020-04-01 12:55:41 -07:00
Tom Eastep
112c4dc38a
Revert "Temporarily disable fix for exported variables" 
This reverts commit 137cc48779.
 2020-04-01 12:55:14 -07:00
Tom Eastep
137cc48779
Temporarily disable fix for exported variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-31 16:43:30 -07:00
Tom Eastep
f9003fab43
When exporting or testing, set all variables defined in the params file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-31 15:55:09 -07:00
Tom Eastep
78da975989
Fix a couple of issues with product name 
- Use $Product rather that addressfamily-dependent logic
- Revert unneeded change from 5.2.3.7

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-28 14:24:32 -07:00
Tuomo Soini
be924ff765
Fix http links to point to current project website 
Also removes deprecated Shorewall6/configfiles/masq

Signed-off-by: Tuomo Soini <tis@foobar.fi>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-27 14:24:37 -07:00
Tom Eastep
e82307f61e
Add empty target files 5.2.4-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-10 11:03:02 -07:00
Tom Eastep
2604378646
Add 'help' to the generated script's help text 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-08 13:20:27 -07:00
Tom Eastep
b52a330f41
Replace trace, debug and nolock with options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-07 17:48:10 -08:00
Tom Eastep
d3de75dd12
Add DOCKER_BRIDGE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-07 11:34:23 -08:00
Tom Eastep
639dc86e1b
Merge branch 'master' into 5.2.4 
# Conflicts:
#	Shorewall/Perl/Shorewall/Config.pm

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-06 13:07:00 -08:00
Tom Eastep
fa1aa4b481
Merge branch '5.2.3' 
# Conflicts:
#	docs/Introduction.xml
 2020-03-06 13:04:18 -08:00
Tom Eastep
95d3486788
Add empty target files 5.2.3.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-06 09:19:25 -08:00
Tom Eastep
9f3534dc1f
Correct Docker-related typos in Compiler.pm 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-04 14:55:52 -08:00
Tom Eastep
f63f0bb2f1
Correct DOCKER code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-03 14:38:36 -08:00
Tom Eastep
646f01a3a4
Eliminate spurious 'Resetting...' message from the compiler 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-02 11:05:21 -08:00
Tom Eastep
65e101f306
Refine handling of MANGLE_ENABLED=No 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-02 08:21:34 -08:00
Tom Eastep
000f120c61
Improve checking when MANGLE_ENABLED=No in shorewall[6].conf 
- Fatal error when a feature is used that requires the mangle table

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 15:38:28 -08:00
Tom Eastep
f221ca290f
Improve checking when MANGLE_ENABLED=No in shorewall[6].conf 
- Fatal error when a feature is used that requires the mangle table

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 15:07:17 -08:00
Tom Eastep
8b99f8caac
Merge branch 'master' into 5.2.4 
# Conflicts:
#	docs/SharedConfig.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 13:50:05 -08:00
Tom Eastep
8b2c79e5ce
Merge branch '5.2.3' into 5.2.4 
# Conflicts:
#	docs/Introduction.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 13:48:45 -08:00
Tom Eastep
dcde2bfa4a
Correct logic that decides if a reload is necessary during enable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-26 15:22:17 -08:00
Tom Eastep
387b861759
Correct handling of ORIGDEST with OLD_CONNTRACK_MATCH 
- Also correct detection of OLD_CONNTRACK_MATCH in shorewall6

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-25 13:08:58 -08:00
Tom Eastep
6798c2f2b0
Accomodate both DOCKER-ISOLATION and DOCKER-ISOLATION-STAGE-* 
Previously, the code assumed that either DOCKER-ISOLATION or
DOCKER-ISOLATION-STAGE-* would exist but not both. That has been corrected
 2020-02-24 15:35:50 -08:00
Tom Eastep
e8f49bc9c7
Merge branch '5.2.3' 2020-02-18 11:11:53 -08:00
Tom Eastep
31b558b7f9
Filter out LIBVIRT rules when saving Docker Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-16 10:36:16 -08:00
Tom Eastep
367a5f7d97
Filter out LIBVIRT rules when saving Docker Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-16 10:33:18 -08:00
Tom Eastep
4efac2fda1
Handle essential IPv6-ICMP types when firewall is stopped 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-06 15:21:51 -08:00
Tom Eastep
5f50b70618
Merge branch '5.2.3' into 5.2.4 
# Conflicts:
#	docs/SharedConfig.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-06 14:08:33 -08:00
Tom Eastep
b437f609e5
Merge branch '5.2.3' 2020-02-01 11:01:59 -08:00
Tom Eastep
f05bd969af Revert "Add targetname files" 
This reverts commit c9eb443574.
 2020-02-01 09:46:05 -08:00
Tom Eastep
7aaa04149e Merge branch '5.2.3' 
# Conflicts:
#	Shorewall/manpages/shorewall-files.xml
#	docs/SharedConfig.xml
 2020-02-01 09:45:33 -08:00
Tom Eastep
c9eb443574 Add targetname files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-01-29 10:41:55 -08:00
Tom Eastep
08da235896
Correct IPv6 Address Range parsing 
Previously, such ranges were required to be of the form [<addr1>-<addr2>]
rather than the more standard form [<addr1>]-[<addr2>]. In the snat file
(and in nat actions), the latter form was actually flagged as an error
while in other contexts, it resulted in a less obvious error being raised.

With this change, both forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-23 10:02:48 -08:00
Tom Eastep
77cad81ba7
Clean up comments 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-23 09:59:29 -08:00
Tom Eastep
9213d7e707
Clean up Shorewall6[-lite] manpage links 
- there were many links pointing to /manpages6/shorewall6... that should
  have been updated to point to /manpages/shorewall...

- this commit corrects those links

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-11-27 15:46:57 -08:00
Tom Eastep
157abcbd37
Allow NFQUEUE 'bypass' in the policy file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-21 14:41:02 -07:00
Tom Eastep
2b7a37e42a
Minor cleanup of the Chains module 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-16 11:44:02 -07:00
Tom Eastep
51b9589c48
Merge branch 'more-bitcoin-ports' of ssh://teastep@git.code.sf.net/u/talkless/shorewall 2019-09-10 08:10:53 -07:00
Vincas Dargis
762df5e18c Add macros for Bitcoin's Testnet and Regtest 
Add additional macros for Bitcoin daemon running in Testnet and Regtest
modes.
 2019-09-07 16:36:42 +03:00
Tom Eastep
cb56991fee
Merge branch '5.2.3' 2019-09-03 07:45:57 -07:00