extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 14:48:51 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,530 Commits 104 Branches 736 Tags 55 MiB
3ed1cdec94
Commit Graph

7918 Commits

Author SHA1 Message Date
Tom Eastep
3ed1cdec94
Rename the snat PORT column to DPORT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-26 14:44:00 -07:00
Tom Eastep
5cc626fa1d
Add target file(s) 5.2.5.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-21 11:42:30 -07:00
Tom Eastep
4c50f3b9bf
Correct typo in shorewall-providers(5). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-16 15:50:14 -07:00
Tom Eastep
117e9ba5bd
Change kern.err to daemon.err in logger params 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-13 14:29:48 -07:00
Tom Eastep
3ce04a8ef3
Add "zone name too long" error 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-12 12:57:31 -07:00
Tom Eastep
220e89755e
Omit STATE-orientated rules in wildcard policy chains 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-07 20:57:55 -07:00
Tom Eastep
fb14b0aafc
Update targetname files for 5.2.5-Beta2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 12:54:01 -07:00
Tom Eastep
54ab7cdeb5
Update blacklisting documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 12:23:32 -07:00
Tom Eastep
aa47554604
Add 'noupdate' DYNAMIC_BLACKLIST option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:14:32 -07:00
Tom Eastep
07160c5ed1
Add 'blacklist!' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:13:46 -07:00
Tom Eastep
527533ecb6
Add 'log' option to DYNAMIC_BLACKLIST 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 14:28:08 -07:00
Tom Eastep
4ac64a545c
Change log facility to 'daemon' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 13:49:10 -07:00
Tom Eastep
6612ea6b8c
Store the exported configuration paramaters in a named array 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 11:50:27 -07:00
Tom Eastep
ffb6ac178e
Shorten the disposition in ADD/DEL log messages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-01 09:36:00 -07:00
Tom Eastep
5af7dce96b
Merge branch 'master' of ssh://gitlab.com/shorewall/code 2020-05-31 14:03:23 -07:00
Tom Eastep
eb5bc3d8a4
Create DBL ipset with 'timeout 0' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-31 12:37:42 -07:00
Tom Eastep
67b421dc00
Correct a comment in the optimize level 8 code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-21 11:37:04 -07:00
Tom Eastep
5493a7e4a6
Merge branch '5.2.4' 2020-05-17 13:20:46 -07:00
Tom Eastep
1093f1ac32
Add target files 5.2.4.5 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-14 09:43:10 -07:00
Tom Eastep
7882c87afe
Allow AUTOMAKE to work with symbolic links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-14 09:22:44 -07:00
Tom Eastep
7343b19abc
Clarify the 'optional' interface option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-13 12:30:12 -07:00
Tom Eastep
f27ab4704c
Merge branch '5.2.4' 2020-04-30 11:18:18 -07:00
Tom Eastep
e5e8e6fbc0
Correct logic for deleting ipsets 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 13:07:04 -07:00
Tom Eastep
c11b647b1b
Fix defect which prevented dynamic blacklist ipsets from being created 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 12:34:41 -07:00
Tom Eastep
5706c5a860
Avoid hang during 'shorewall[6] start' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 12:33:50 -07:00
Tom Eastep
2bf9048057
Another Debian if_pre-down fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-24 16:47:42 -07:00
Tom Eastep
d618fd5812
Remove extraneous whitespace 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-23 20:31:07 -07:00
Tom Eastep
dddde56454
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 
# Conflicts:
#	Shorewall-init/install.sh
#	Shorewall/Perl/Shorewall/Providers.pm

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-23 18:35:11 -07:00
Tom Eastep
0a9d2d9a33
Don't install script in if_down.d on Debian 
- Eliminates need for Debian-specific code in generated script

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-22 13:47:09 -07:00
Tom Eastep
39de88563f
Cleanup of Optimize 16 change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-21 13:02:56 -07:00
Tom Eastep
e14798b4a2
Make OPTIMIZE=16 an order of magnitude faster 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-21 13:02:34 -07:00
Tom Eastep
086f7a0e6d
Only destroy ipsets that will be restored 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-20 09:11:03 -07:00
Tom Eastep
057a2dec70
Correct typo with bad consequences 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 18:44:19 -07:00
Tom Eastep
cabadd4846
Honor 'wait=<seconds> when enabling an interface. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 14:31:12 -07:00
Tom Eastep
3c06be28be
Delete unnecessary check if IPv6 interface_is_usable() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 12:28:16 -07:00
Tom Eastep
381d55760b
Don't install ifupdown script in /etc/network/if-down.d on Debian 
- Network Manager sets PHASE=post-down when calling our updown script
  so we must process down commands in that phase.

- Modify the generated script to eliminate PHASE checks.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-18 11:42:32 -07:00
Tom Eastep
88a799b860
Allow IFUPDOWN=1 to work on Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-18 11:27:15 -07:00
Tom Eastep
15ca726c49
Add target files 5.2.4.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-17 17:56:06 -07:00
Tom Eastep
4e83d0788e
Rename valuesort() to sortchainsiftest() and remove keysort() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-11 13:42:41 -07:00
Tom Eastep
a49a9f9f9d
Sort specific hash keys and values if -t 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-07 11:12:16 -07:00
Tom Eastep
6dc99e77ae
Revert "Sort specific hash keys and values if -e" 
This reverts commit 5e648a9379.
 2020-04-07 11:09:27 -07:00
Tom Eastep
92b25d88b0
Revert "Add conditional sorts to find[_zone]_hosts_by_option()" 
This reverts commit 42a505c99d.
 2020-04-07 11:08:46 -07:00
Tom Eastep
42a505c99d
Add conditional sorts to find[_zone]_hosts_by_option() 
- Another case of different behavior by different Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 13:48:45 -07:00
Tom Eastep
5e648a9379
Sort specific hash keys and values if -e 
- Makes testing output consistent across Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 10:57:35 -07:00
Tom Eastep
e49f31fb42
Don't compute sha1 hash when testing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-02 10:11:21 -07:00
Tom Eastep
3f0e4959a1
Revert "When exporting or testing, set all variables defined in the params file" 
This reverts commit f9003fab43.
 2020-04-01 12:55:41 -07:00
Tom Eastep
112c4dc38a
Revert "Temporarily disable fix for exported variables" 
This reverts commit 137cc48779.
 2020-04-01 12:55:14 -07:00
Tom Eastep
137cc48779
Temporarily disable fix for exported variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-31 16:43:30 -07:00
Tom Eastep
f9003fab43
When exporting or testing, set all variables defined in the params file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-31 15:55:09 -07:00
Tom Eastep
78da975989
Fix a couple of issues with product name 
- Use $Product rather that addressfamily-dependent logic
- Revert unneeded change from 5.2.3.7

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-28 14:24:32 -07:00