Tuomo Soini
|
393cd5043d
|
AllowICMPs: router-advertisment source must be fe80::/10
Signed-off-by: Tuomo Soini <tis@foobar.fi>
|
2024-03-19 11:21:03 +02:00 |
|
Tuomo Soini
|
0de5e88018
|
AllowICMPs: allowing redirects is a security issue and not required
Also redirect source must be fe80::/10
Signed-off-by: Tuomo Soini <tis@foobar.fi>
|
2024-03-19 11:21:03 +02:00 |
|
Tuomo Soini
|
be924ff765
|
Fix http links to point to current project website
Also removes deprecated Shorewall6/configfiles/masq
Signed-off-by: Tuomo Soini <tis@foobar.fi>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2020-03-27 14:24:37 -07:00 |
|
Tom Eastep
|
fa1aa4b481
|
Merge branch '5.2.3'
# Conflicts:
# docs/Introduction.xml
|
2020-03-06 13:04:18 -08:00 |
|
Tom Eastep
|
646f01a3a4
|
Eliminate spurious 'Resetting...' message from the compiler
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2020-03-02 11:05:21 -08:00 |
|
Matt Darfeuille
|
53495ec0a8
|
Point exclusively to shorewall.org
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2019-03-25 11:35:00 -07:00 |
|
Tom Eastep
|
66edd76b10
|
Correct typo in patch merged from 5.1.12
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2018-04-15 08:46:05 -07:00 |
|
Tom Eastep
|
98d5bf8f55
|
Correct 'reset' handling in 'IfEvent'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2018-04-13 09:22:29 -07:00 |
|
Tom Eastep
|
cf8a48f110
|
Delete deprecated actions and macros
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2018-02-12 19:08:18 -08:00 |
|
Tom Eastep
|
1bc90beb01
|
Update copyrights
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2018-01-07 15:01:46 -08:00 |
|
Tom Eastep
|
4ab8e1f0a2
|
Remove PSH from the FIN action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-12-05 15:25:54 -08:00 |
|
Tom Eastep
|
6ba1d5413b
|
Allow a protocol to be associated with an action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-12-02 11:24:08 -08:00 |
|
Tom Eastep
|
4fc572f664
|
Exit the IPv6 AllowICMPs chain if packet isn't ipv6-icmp
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-12-01 14:50:17 -08:00 |
|
Tom Eastep
|
6b4905c2c0
|
Replace 'tcp' with '6' in action.TCPFlags
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-10-20 12:33:36 -07:00 |
|
Tom Eastep
|
41ea3bdeda
|
Modify the Event actions to handle NAT rules
- Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-09-08 09:47:12 -07:00 |
|
Tom Eastep
|
61b6898782
|
Add dropBcasts action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-06-25 18:36:54 -07:00 |
|
Tom Eastep
|
4a262c0e1b
|
Add FIN action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-05-31 08:28:27 -07:00 |
|
Tom Eastep
|
a79dc194a4
|
Re-factor the directive message change
- results in much more compact code
- Document change in the config basics doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-18 11:42:53 -07:00 |
|
Tom Eastep
|
158f6305b1
|
Correct install fix
- Also remove extra logic from action.Broadcast
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-14 14:39:25 -07:00 |
|
Tom Eastep
|
6407520a35
|
Add warning messages to the deprecated actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-14 14:32:28 -07:00 |
|
Tom Eastep
|
fe29adbd66
|
Correct use of $family in combined actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-13 16:52:16 -07:00 |
|
Tom Eastep
|
4dc6be6b3b
|
Deprecate A_AllowICMPs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-13 15:09:07 -07:00 |
|
Tom Eastep
|
6ebc8f4266
|
Merge branch '5.1.3'
|
2017-03-13 14:55:23 -07:00 |
|
Tom Eastep
|
c5c4211081
|
Unify actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-13 14:54:25 -07:00 |
|
Tom Eastep
|
4010f9bce4
|
Add multicast to the Deprecated A_Drop and A_Reject actions
- Move A_Drop to deprecated/ directory
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-13 14:18:23 -07:00 |
|
Tom Eastep
|
046998ed84
|
Tabification of new actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-13 11:19:35 -07:00 |
|
Tom Eastep
|
fe4aaee1b4
|
Fix typos in action.dropNotSyn
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-07 14:37:08 -08:00 |
|
Tom Eastep
|
dbcd4d9d16
|
Correct typo in action.AllowICMPs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-07 13:57:05 -08:00 |
|
Tom Eastep
|
6019adaae5
|
Change macro.ICMPs to an inline action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
Conflicts:
Shorewall/actions.std
|
2017-03-07 13:54:52 -08:00 |
|
Tom Eastep
|
e3c2874b21
|
Modify dropNotSyn to use {proto=6:!syn}
- also make the same change in the rejNotSyn audited case
|
2017-03-07 11:00:39 -08:00 |
|
Tom Eastep
|
a4768776f7
|
Modify rejNotSyn to use new/corrected features
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-07 10:34:15 -08:00 |
|
Tom Eastep
|
cd103bb715
|
Correct rejNotSyn
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-06 16:01:31 -08:00 |
|
Tom Eastep
|
137d4bcc90
|
Alter logging behavior of Limit
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-05 13:03:57 -08:00 |
|
Tom Eastep
|
80d93235b5
|
Eliminate builtin actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-05 12:09:33 -08:00 |
|
Tom Eastep
|
a7d45e9566
|
Restore logging to the BLACKLIST action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-03 10:14:30 -08:00 |
|
Tom Eastep
|
61f5e3531c
|
Rename action.allowUPnP to action.allowinUPnP
- Allows 'show action allowinUPnP' to work correctly.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-02 10:05:31 -08:00 |
|
Tom Eastep
|
6966270822
|
Allow 'show action' on buitin actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-19 13:43:23 -08:00 |
|
Tom Eastep
|
944888c04f
|
Handle broadcast and muticast separately
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-15 10:16:20 -08:00 |
|
Tom Eastep
|
8bc70674f3
|
Make DropDNSrep an inline action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-06 11:21:56 -08:00 |
|
Tom Eastep
|
cecb8a1950
|
Deprecate the Drop and Reject actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-06 10:52:31 -08:00 |
|
Tom Eastep
|
70a395892f
|
Make BLACKLIST work correctly in the blrules file
- Add the 'section' action option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-23 15:03:02 -08:00 |
|
Tom Eastep
|
b985654600
|
Correct typo in heading of Reject and Drop actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-23 11:54:40 -08:00 |
|
Tom Eastep
|
634c8debda
|
Use ?REQUIRE in several actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-22 14:59:37 -08:00 |
|
Tom Eastep
|
6b408869d2
|
Correct the synopsis in two action files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-22 11:47:12 -08:00 |
|
Tom Eastep
|
9c3a82f628
|
Add BLACKLIST action
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-19 14:08:15 -08:00 |
|
Tom Eastep
|
c9f45277b8
|
Move the action files to their own directory
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-23 09:05:37 -08:00 |
|