Tom Eastep
|
c1bfe7d5b8
|
More tweaks to saving/restoring dynamic chains
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-07 13:55:27 -07:00 |
|
Tom Eastep
|
486bb73c02
|
Merge major changes from 4.4.11
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-07 13:21:59 -07:00 |
|
Tom Eastep
|
afbb93ca8a
|
More changes having to do with with dynamic chains
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-07 13:16:25 -07:00 |
|
Tom Eastep
|
b591110fef
|
Much cleaner implementation of save_dynamic_chains()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-07 13:15:52 -07:00 |
|
Tom Eastep
|
a77abaf694
|
Make dynamic chain saving work with IPv6
Also, use hidden files to save the chain contents.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-07 13:13:25 -07:00 |
|
Tom Eastep
|
0d101799ec
|
Purge saved dynamic blacklist if the chain doesn't exist
|
2010-06-07 13:13:04 -07:00 |
|
Tom Eastep
|
4a2f08edef
|
Retain UPnP and dynamic blacklist over 'restart'
|
2010-06-07 13:12:49 -07:00 |
|
Tom Eastep
|
fdc3b698a9
|
Version to 4.4.10 (again)
|
2010-06-05 15:58:23 -07:00 |
|
Tom Eastep
|
d388b29d70
|
Let Zones.pm export chain_base rather than Chains.pm
|
2010-06-05 08:40:00 -07:00 |
|
Tom Eastep
|
0e995d65ac
|
Version to 4.4.10-RC2
|
2010-06-04 16:19:15 -07:00 |
|
Tom Eastep
|
742a3b2eef
|
Make wait and required work on wildcard interfaces
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-04 10:35:45 -07:00 |
|
Tom Eastep
|
82a74d7534
|
Resolve Optional/Required interfaces with wildcard names
Optional is allowed
Required is not
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-04 08:46:29 -07:00 |
|
Tom Eastep
|
165535cd8b
|
Disallow wildcard optional/required interfaces
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-04 07:18:55 -07:00 |
|
Tom Eastep
|
7625b4069b
|
Delete references to prenet subsystem locks.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-06-03 12:31:39 -07:00 |
|
Tom Eastep
|
43afd03b9b
|
Bump version to 4.4.10
|
2010-06-03 11:18:02 -07:00 |
|
Tom Eastep
|
226eb6ca3e
|
Cleanup of optimization fix
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-29 09:56:14 -07:00 |
|
Tom Eastep
|
50ce5bab68
|
Fix Optimization Bug
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-29 08:58:16 -07:00 |
|
Tom Eastep
|
d58480943a
|
Bump version to 4.4.10 RC 1
|
2010-05-27 17:21:11 -07:00 |
|
Tom Eastep
|
e627e0ea76
|
Bump version to 4.4.10-Beta4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-26 16:47:49 -07:00 |
|
Tom Eastep
|
cdcb42ce9c
|
Increment version to 4.4.10-Beta3.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-25 07:17:57 -07:00 |
|
Tom Eastep
|
9c0564831a
|
Fix syntax error in generated shell script
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-24 06:23:45 -07:00 |
|
Tom Eastep
|
4264524448
|
Bump Version to 4.4.10-Beta2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-20 14:13:38 -07:00 |
|
Tom Eastep
|
50dc02da07
|
Implement the 'REQUIRE_INTERFACE' option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-19 07:32:02 -07:00 |
|
Tom Eastep
|
4690075ed8
|
Start firewall on up event for optional interface.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-18 20:29:03 -07:00 |
|
Tom Eastep
|
0c9a0150d2
|
Document Shorewall-init; delete old auto-stop code
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-18 14:42:39 -07:00 |
|
Tom Eastep
|
f9d187c288
|
Correct issues found in Fedora Testing
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-18 10:27:12 -07:00 |
|
Tom Eastep
|
499b0cddaa
|
Log the text from startup errors.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-17 07:02:30 -07:00 |
|
Tom Eastep
|
a534bca914
|
Fix an existing bug in Shorewall6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-16 19:28:49 -07:00 |
|
Tom Eastep
|
a501222194
|
Fix some bugs in the Shorewall-init implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-16 17:41:09 -07:00 |
|
Tom Eastep
|
4f428d8135
|
De-implement 'close'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-16 15:31:41 -07:00 |
|
Tom Eastep
|
749d6be64e
|
Add 'optional' interfaces to updown processing.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-15 17:06:00 -07:00 |
|
Tom Eastep
|
a3589dc6e9
|
Implement the 'up' and 'down' script commands
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-15 12:48:04 -07:00 |
|
Tom Eastep
|
88188202cc
|
Add 'wait' interface option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-15 09:52:46 -07:00 |
|
Tom Eastep
|
16e451a7d8
|
Add 'required' interface option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-15 09:04:32 -07:00 |
|
Tom Eastep
|
a2758421ed
|
Bump version to 4.4.10-Beta1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-13 17:03:14 -07:00 |
|
Tom Eastep
|
529f9a07b4
|
Update Rules.pm version to 4.4.10
|
2010-05-13 16:39:52 -07:00 |
|
Tom Eastep
|
1d0b8b1cec
|
Correct syntax error in generated code
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-13 16:32:42 -07:00 |
|
Tom Eastep
|
449ca038ba
|
Implement 'close' command
|
2010-05-13 16:29:25 -07:00 |
|
Tom Eastep
|
65a5d34276
|
Update Module Versions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-03 12:46:29 -07:00 |
|
Tom Eastep
|
96bef5bd49
|
Assume 'routeback' in routestopped based on interface config.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-03 12:31:11 -07:00 |
|
Tom Eastep
|
fca404eeaf
|
Update version to 4.4.9
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-03 10:02:02 -07:00 |
|
Tom Eastep
|
c7848be266
|
Back out the rest of the original change for dup / -[psiod]
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-03 09:59:25 -07:00 |
|
Tom Eastep
|
70c6a2cdf3
|
Update version to 4.4.9-RC2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-02 07:25:50 -07:00 |
|
Tom Eastep
|
639b3ea57d
|
Simplify checking for /! -[piosd] /
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 09:13:16 -07:00 |
|
Tom Eastep
|
311372013d
|
More fixes to optimization
Only disallow / ! -[piosd] / if the target is a chain
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 08:58:41 -07:00 |
|
Tom Eastep
|
518416ec2e
|
Add a comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 08:08:39 -07:00 |
|
Tom Eastep
|
94c6b37e8e
|
Avoid leaving an orphan '!' behind.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 07:51:24 -07:00 |
|
Tom Eastep
|
219b2e0761
|
A more comprehensive solution to multiple -[piosd] matches.
- eliminate duplicate -[piosd] matches in merged rules
- avoid tracing !* unconditionally
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 07:26:25 -07:00 |
|
Tom Eastep
|
16161d9cfc
|
Add new trace types.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-05-01 06:43:09 -07:00 |
|
Tom Eastep
|
1173518d78
|
More minor cleanup of first code
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-30 07:22:09 -07:00 |
|