Tom Eastep
|
33eb47a48a
|
Reorder parameters and change identifiers in set_policy_chain()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-26 15:47:50 -08:00 |
|
Tom Eastep
|
6a15cead52
|
Cosmetic/commentary changes to the Config Module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-23 15:25:20 -08:00 |
|
Tom Eastep
|
f925358872
|
Minor Compiler Reorganization
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-23 12:27:37 -08:00 |
|
Tom Eastep
|
35fc7b34b8
|
Minor code tweak
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-20 15:09:21 -08:00 |
|
Tom Eastep
|
79430673b8
|
Correct handling of duplicate states in the mangle file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-16 19:08:25 -08:00 |
|
Tom Eastep
|
695db284c0
|
Improve Mark Range Implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-15 11:19:23 -08:00 |
|
Tom Eastep
|
807b9ca627
|
Revert "Improve handling of mark ranges"
This reverts commit 62f480897e .
|
2014-12-15 09:39:24 -08:00 |
|
Tom Eastep
|
62f480897e
|
Improve handling of mark ranges
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-14 09:13:41 -08:00 |
|
Tom Eastep
|
2d7025dcc3
|
Correct mark range handling
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-12-13 08:31:31 -08:00 |
|
Tom Eastep
|
a833815b31
|
Correct IPv6 handling of LOG_BACKEND=LOG
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-15 08:56:42 -08:00 |
|
Tom Eastep
|
9241552c52
|
Make emacs sh-mode work better with lib.core
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-14 16:28:44 -08:00 |
|
Tom Eastep
|
16c1809ef2
|
Apply Alan Barrett's dhclient patch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-14 13:39:23 -08:00 |
|
Tom Eastep
|
9a6047b3c4
|
Correct reversed naming of SHA chains
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-06 08:18:52 -08:00 |
|
Tom Eastep
|
5b4e3bc07c
|
Accomodate new module names for LOG_BACKEND
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-05 12:51:24 -08:00 |
|
Tom Eastep
|
dc3f163e71
|
Change the names of the sha1 chains for uniqueness
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-04 17:54:38 -08:00 |
|
Tom Eastep
|
8c0c1bd1e0
|
Omit the 'shorewall' chain from .ip[6]tables-restore-input
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-02 08:16:47 -08:00 |
|
Tom Eastep
|
8b825c4c4c
|
Avoid failure of ip[6]tables-restore.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-02 07:56:05 -08:00 |
|
Tom Eastep
|
9598ac6fad
|
Correct a couple of problems with -C
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-01 10:09:04 -07:00 |
|
Tom Eastep
|
8fb73026c8
|
Replace SAVE_COUNTERS with the -C command option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-11-01 09:37:57 -07:00 |
|
Tom Eastep
|
4546cbaff7
|
Use chains with names derived from a digest to identify ruleset
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-31 11:36:53 -07:00 |
|
Tom Eastep
|
a83c146636
|
Cleanup
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-30 20:27:06 -07:00 |
|
Tom Eastep
|
2ffc97867c
|
Correct syntax error in the generated script
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-30 19:59:20 -07:00 |
|
Tom Eastep
|
f08803e293
|
Preserve counts on 'restart' without compilation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-30 18:38:45 -07:00 |
|
Tom Eastep
|
3454e10525
|
Add SAVE_COUNTERS option.
- Also implement recover command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-30 08:57:56 -07:00 |
|
Tom Eastep
|
edc30fcc8d
|
Process the params file with SHOREWALL_SHELL
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-29 12:22:00 -07:00 |
|
Tom Eastep
|
85e5669fc7
|
Rename function interface_up() to interface_enabled()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-27 18:38:22 -07:00 |
|
Tom Eastep
|
f5bdc9e7f4
|
Allow two limits in the RATE LIMIT columns
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-22 11:21:43 -07:00 |
|
Tom Eastep
|
3bae6e61cf
|
Eliminate syntax errors in the generated script
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-07 07:53:26 -07:00 |
|
Tom Eastep
|
5204cbc95f
|
Suppress 'No ipsets were saved' warning when SAVE_IPSETS=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-07 07:50:12 -07:00 |
|
Tom Eastep
|
ea1b8ac63a
|
Correct handling of empty LOG_BACKEND
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-10-07 07:34:55 -07:00 |
|
Tom Eastep
|
820c769499
|
Correct silly bug in last change
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-29 07:08:39 -07:00 |
|
Tom Eastep
|
e6b0666ac9
|
Save ipsets during normal stop (duh)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 18:43:11 -07:00 |
|
Tom Eastep
|
3174454300
|
Correct SAVE_IPSETS logic in Config.pm
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 14:38:01 -07:00 |
|
Tom Eastep
|
ce1c367d1d
|
Re-commit the fix that saves only the appropriate family
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 14:09:20 -07:00 |
|
Tom Eastep
|
3e2c903a41
|
Revert "Only save ipsets of the proper family"
This reverts commit b053cab630 .
|
2014-09-28 13:32:32 -07:00 |
|
Tom Eastep
|
b053cab630
|
Only save ipsets of the proper family
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 12:58:52 -07:00 |
|
Tom Eastep
|
6f7d063921
|
Remove the target file before saving ipsets in the savesets command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 11:53:52 -07:00 |
|
Tom Eastep
|
3858683e94
|
Allow saving a specified list of ipsets
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-28 11:19:41 -07:00 |
|
Tom Eastep
|
38a18ac9ac
|
Allow indefinite alternative to 'yes' and 'no'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-27 15:06:18 -07:00 |
|
Tom Eastep
|
a09484356c
|
Support 'yes', 'no, <other> values for simple config options
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-27 07:57:46 -07:00 |
|
Tom Eastep
|
bc8588a68e
|
Fix rule numbers in trace output
- Don't increment $number needlessly when not tracing
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-27 07:57:09 -07:00 |
|
Tom Eastep
|
4989f694cd
|
Correct trace output
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-25 14:47:00 -07:00 |
|
Tom Eastep
|
053df2a5fb
|
Go back to original insert_irule() fix.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-25 09:21:20 -07:00 |
|
Tom Eastep
|
976a1f3deb
|
Merge branch '4.6.3'
Conflicts:
Shorewall/Perl/Shorewall/Misc.pm
|
2014-09-25 08:06:16 -07:00 |
|
Tom Eastep
|
ea40068c10
|
Fix ADMINISABSENTMINDED=No used with stoppedrules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-25 08:03:35 -07:00 |
|
Tom Eastep
|
56649e2183
|
Don't compile routestopped during check if there is stoppedrules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-24 19:24:13 -07:00 |
|
Tom Eastep
|
520d21c056
|
Another tweak to LOG_BACKEND
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-24 17:12:05 -07:00 |
|
Tom Eastep
|
540eff24aa
|
Correctons to LOG_BACKEND implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-24 16:35:41 -07:00 |
|
Tom Eastep
|
580e00dabd
|
Implement LOG_BACKEND option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-24 15:26:13 -07:00 |
|
Tom Eastep
|
4815f7eba3
|
Correct warning message in stoppedrules processing.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2014-09-24 11:05:15 -07:00 |
|