Commit Graph

925 Commits

Author SHA1 Message Date
teastep
bbc8577a30 Yet another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8364 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 16:16:56 +00:00
teastep
5288b1d64d Another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8362 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:56:50 +00:00
teastep
c0dd4f3911 Better fix for policy parsing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8361 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:36:23 +00:00
teastep
b2d2ee253a Fix policy parsing problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:15:34 +00:00
teastep
eadad9a363 Fix priority mingling in tc filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8356 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-25 15:45:26 +00:00
teastep
a59c0db7f0 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8353 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:50:40 +00:00
teastep
b2e603c3c8 Add MANGLE_ENABLED option -- sample configs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8352 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:49:53 +00:00
teastep
2a6b894bd4 Add MANGLE_ENABLED option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8351 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:36:48 +00:00
teastep
a91bca8e9e Fix perl run-time error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8347 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 17:35:52 +00:00
teastep
507d58ea0c Add 'avgpkt' to CONNBYTES code (it was already documented)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8346 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 14:56:37 +00:00
teastep
3d55331074 Finish CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8345 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 22:23:12 +00:00
teastep
148415f23a Avoid unnecessary calls to getprotobynumber()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8344 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 20:56:29 +00:00
teastep
5986d4db32 Default gateway detection in /etc/shorewall/init
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8342 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 16:08:34 +00:00
teastep
680788433d Rename a variable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8341 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 15:18:32 +00:00
teastep
5ea18e3624 Fix number of columns detection -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8340 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:41:12 +00:00
teastep
bd5f8195e9 Fix number of columns detection
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8339 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:35:46 +00:00
teastep
942d6bf6f5 Fix service validation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8332 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 14:54:10 +00:00
teastep
3bf59ff03a Add error when ICMP specifies SOURCE PORT(S) in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8331 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 03:01:01 +00:00
teastep
6c0d7d055d More tinkering with expand_port_range()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8330 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 21:03:46 +00:00
teastep
a672e03a82 Clean up range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8325 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:42:15 +00:00
teastep
d33f6583ad Fix bug in range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:32:22 +00:00
teastep
9b048e836e Allow port ranges in /etc/shorewall/tcfilters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8323 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:08:55 +00:00
teastep
dc17a6976d Support port lists in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8321 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 14:59:14 +00:00
teastep
0dce5fd379 Last change was a bit too optimized (omitted certain rules)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8319 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 22:18:35 +00:00
teastep
63e7eb6147 Combine u32 tables for same protocol
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8318 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 21:54:27 +00:00
teastep
c3df5ed89e Remove BROKEN_ROUTING option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:59:46 +00:00
teastep
e4878466f7 Add Tuomo's patch for adding 'src' to default route
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8315 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:54:40 +00:00
teastep
4756d4ef13 Eliminate vlsm_to_mask table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8311 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:40:03 +00:00
teastep
88b3d01914 Start u32 table numbers at 1 rather than 64
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8310 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:25:41 +00:00
teastep
93d87dd01b More u32 tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8307 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:32:08 +00:00
teastep
f7e5b3124b Clean up of u32 filter code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:15:03 +00:00
teastep
affa4684b8 First truly working u32 filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8305 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:02:16 +00:00
teastep
2daa5705d9 More tcfilters pretty-up
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8304 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 23:54:41 +00:00
teastep
3bc1c7f188 Fix bug with < 3 zones, one or more of them complex
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8303 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 22:49:43 +00:00
teastep
aead0c60e5 Add BROKEN_NEXTHDR configuration option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8302 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 22:10:11 +00:00
teastep
d3e94d44c3 Add some progress messages; suppress output from 'tc add....mirred'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8301 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 16:46:30 +00:00
teastep
c0836b8df2 Fix for new Macro syntax when macro name contains non-word characters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8299 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 15:44:15 +00:00
teastep
a6354f9748 More IFB changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8297 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 23:57:58 +00:00
teastep
693dc4ae37 More IFB stuff
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8296 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 20:31:50 +00:00
teastep
6e3469ee89 Initial working version of IFB support with tc filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8295 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 16:51:53 +00:00
teastep
1fd17db3ca Finish phase 1 support for IFBs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8294 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 19:26:09 +00:00
teastep
da18254d2a Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8290 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 02:18:59 +00:00
teastep
b0a5c577f4 Support for IFB (but don't document it yet)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8288 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-13 23:27:29 +00:00
teastep
9f37f6a4ca Improve behavior of 'norfc1918' in the absense of CONNTRACK_MATCH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8287 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-13 02:11:18 +00:00
teastep
10e2cb3751 Fix rule generation for '- <interface>' entries in /etc/shorewall/interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8282 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-12 22:34:21 +00:00
teastep
846f251825 Avoid generating 'non-existant variable' errors on the SCP and RSH commands in shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8280 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-11 23:04:11 +00:00
teastep
fcea8abc60 Add L2TP Tunnel support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8273 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-08 20:49:41 +00:00
teastep
1e7c0d0947 Bring 4.0 changes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8271 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-07 00:36:16 +00:00
teastep
77be234a24 Add experimental support for IFBs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8267 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-05 16:16:04 +00:00
teastep
392b6eb8d1 Handle empty action properly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-02 17:14:03 +00:00
teastep
4c5f9378fb Add KLUDGEFREE fix to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8260 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-02 17:13:39 +00:00
teastep
aec4134aa1 Fix bug reported by Steven Springl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-24 17:05:27 +00:00
teastep
131acd8e1f Remove warning but keep new default value
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8230 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-24 16:48:49 +00:00
teastep
e0a9add260 Deprecate IMPLICIT_CONTINUE=Yes with warning message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8229 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-24 16:33:46 +00:00
teastep
a81ce26230 Add AUTO_COMMENT option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8214 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-23 01:46:50 +00:00
teastep
d39cb6c1c1 Make macros auto-commenting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8213 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-22 23:15:39 +00:00
teastep
bcb7c8e9fa Add BROKEN_ROUTING hack
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8211 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-22 19:58:54 +00:00
teastep
4e67f4206e Some tunnel changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8207 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-19 23:30:26 +00:00
teastep
d1c9d21074 Fix 'Yes' in 'ALL INTERFACES' nat column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8204 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-18 18:26:35 +00:00
teastep
433e4a6f51 Generate error on a MAC address in the OUTPUT or POSTROUTING chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8203 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-18 17:38:25 +00:00
teastep
dd56d6c85c Fix designator table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8196 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-15 17:53:08 +00:00
teastep
c0be049f3d Add restriction handling to tcrules processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8194 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-14 17:40:38 +00:00
teastep
1c8a0e0eb0 Change default value of LOG_MARTIANS to 'On'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-13 20:05:18 +00:00
teastep
667e76f8bf Documentation update
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8185 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-13 19:11:02 +00:00
teastep
7067a3d53d Improve check for shared-interface provider
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8183 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-11 18:52:49 +00:00
teastep
5c922eb2af Don't allow non-shared provider in masq file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8182 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-11 18:40:58 +00:00
teastep
00a72b0dec Add 'src=' and 'mtu=' OPTIONS in providers file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8181 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-11 18:30:45 +00:00
teastep
dec8b5d308 Eliminate dummy interface names for built-in providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-09 23:51:28 +00:00
teastep
a4a400eba1 Use a more sensible variable name for keeping track of optional interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-09 22:39:23 +00:00
teastep
a40697d21e Don't generate 'track' mark rules for absent providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8170 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-09 20:59:42 +00:00
teastep
60080486ec Fix handling of zone exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-09 17:36:33 +00:00
teastep
3574d2b099 Use function rather than generating name manually
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8167 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-08 19:34:28 +00:00
teastep
94c4b5bd81 Finish optimization changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8166 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 23:47:02 +00:00
teastep
44c9717a67 Add back 'complex' zone attribute but don't use it yet
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8165 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 22:34:27 +00:00
teastep
f229aaf5dc Trivial optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 20:47:14 +00:00
teastep
c819e1fea7 Beef up check in do_user()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8162 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 19:16:25 +00:00
teastep
6d421fc49e Move fix for !user to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8161 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 19:05:45 +00:00
teastep
736f4f17bb Make gunk patch a bit safer (allow non-ASCII characters in COMMENT lines)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8152 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-06 18:01:24 +00:00
teastep
7a82ff8bba Catch unprintable junk in config files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8150 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-06 17:45:03 +00:00
teastep
52f29cad4b Correct some module versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8149 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 23:50:00 +00:00
teastep
bed37c1965 Update versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8148 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 23:35:53 +00:00
teastep
0edd543098 Only import what's needed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8147 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 16:45:33 +00:00
teastep
5aeef8b231 Move prototol/port validation to the IPAddrs module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8146 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 16:43:11 +00:00
teastep
5e8f0c120a Update trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8142 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-03 18:52:06 +00:00
teastep
8225910d63 Remove superfluous call from generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-03 18:47:33 +00:00
teastep
9ce89bd6f0 Fix typo in macro processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8137 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-03 16:00:02 +00:00
teastep
8a6e2f1712 A little optimization in macro handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8136 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-03 00:07:58 +00:00
teastep
d0fd40ae0b More cleanup of validate_interface_file()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8135 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-02 16:59:59 +00:00
teastep
2d6e206a5f Long overdue cleanup of validate_interface_file()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-02 01:27:39 +00:00
teastep
82e525d0f5 Disallow move_rules() calls when source chain has embedded commands
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-01 22:53:05 +00:00
teastep
cf99cd78bd Fix typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8127 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-31 21:17:24 +00:00
teastep
2cd7e2b2fb More sorting by interface number
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8126 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-31 02:33:16 +00:00
teastep
06d3269f7e Order interfaces within zone when generating top-level rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8125 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 21:57:39 +00:00
teastep
8ef198b3a6 More optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8124 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 18:47:27 +00:00
teastep
b81ae53477 Correct handling of IPSEC; re-order rules slightly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8123 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 16:39:40 +00:00
teastep
2a2a7530c2 Add optimizations in basic chain handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8122 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 00:03:25 +00:00
teastep
e75be13ff4 Fix exclusion in zone definition
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 21:38:18 +00:00
teastep
ed709b56c7 Place zone name in error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 20:29:27 +00:00
teastep
4be347d1cc Move 'dynamic' jumps to the INPUT and FORWARD chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 19:41:23 +00:00
teastep
3cad33ea20 More defense against silly lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 22:15:07 +00:00
teastep
7b4abdba94 Validate comma-separated lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 01:07:57 +00:00
teastep
f960345b51 Catch invalid lists in nat/masq entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-25 23:52:33 +00:00
teastep
65df4d9f73 Ruleset optimization -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8100 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-24 16:22:03 +00:00
teastep
746a00994d Create 'sourceonly' hosts option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8093 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:48:03 +00:00
teastep
03091be09a Allow loose interface matching in more places
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:21:44 +00:00
teastep
e2e827cdbc Allow loose match for interfaces names in masq, nat and netmap
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8079 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-19 23:36:27 +00:00
teastep
3f4d773489 Allow DNS names in DEST column of a DNAT rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-17 19:02:40 +00:00
teastep
99a5eba368 Remove delayed insertion of RETURN rules in dnat chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-16 23:24:41 +00:00
teastep
6b564e0eb3 Factor out invariant parts of a loop
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8071 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-15 19:02:00 +00:00
teastep
545dd7dbc3 Interface lists in masq and nat files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8068 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-15 02:39:21 +00:00
teastep
2f96bc5181 More work on DNAT/REDIRECT mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8065 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-14 16:34:26 +00:00
teastep
318b4f002d Consult policies when constructing dnat chains; warning when zone specified on NAT-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 18:47:06 +00:00
teastep
55a25721e6 More tweaks to DNAT/REDIRECT thingy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8052 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 00:41:10 +00:00
teastep
88a74e40f3 Another look at DNAT/REDIRECT and nested zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8051 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 21:11:39 +00:00
teastep
755983b38c Make DNAT/MASQ short-circuit dependent on z->fw policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8050 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 17:39:14 +00:00
teastep
3d84cec3a3 Fix for DNAT/REDIRECT nested-zone mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8048 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 01:32:18 +00:00
teastep
2583fc3f93 Fix initialization problem in Rules module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8047 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 00:35:07 +00:00
teastep
8a22a4e05a Simplify fix to accounting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8040 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 21:07:07 +00:00
teastep
e68ab78eda Fix a couple of minor problems in Accounting.pm
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8038 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 20:55:27 +00:00
teastep
384e88df43 First step in adding structure to NAT table ruleset
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 19:56:44 +00:00
teastep
f959d54cea Fix mangled date in firewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8020 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 23:20:09 +00:00
teastep
f36c1ccd18 Revert fix for broken 'tc'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8016 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 18:50:33 +00:00
teastep
687c9c1a88 Update version to 4.1.4
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8015 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 17:51:45 +00:00
teastep
6a2f313246 tweak a comment
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8005 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-03 22:18:24 +00:00
teastep
0588e9f576 Final fix for police fiasco
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7991 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-02 04:25:47 +00:00
teastep
1e6140a59c Work around the 'flowid' vs 'classid' fiasco in 'tc'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7990 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-02 02:54:26 +00:00
teastep
2fa119b30a More do_test() tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7988 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 21:53:29 +00:00
teastep
36096dfff7 Express mark test mask in Hex
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 17:47:58 +00:00
teastep
1a24a6fe78 Final fix for wrong mask in mark tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7981 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 00:27:52 +00:00
teastep
d5073f0b3f Move do_test() fixes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7966 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-29 16:31:49 +00:00
teastep
44545e71fe Release document update; cosmetic change to Shorewall::Tc
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7936 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 22:56:36 +00:00
teastep
d8a0db63bd Always use filters for classifying marked packets
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 19:14:53 +00:00
teastep
17e75e230f Fix problem with optional interfaces and DETECT_IP_ADDRS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7933 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 19:14:27 +00:00
teastep
c58f3c7eca Generate error if no ipv4 zones or no interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7931 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-18 23:55:20 +00:00
teastep
b030624c68 Fix typo in ADMINISABSENTMINDED=No code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7925 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-18 00:00:59 +00:00
teastep
0e6472a272 Eliminate mark_referenced()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-17 20:53:27 +00:00
teastep
4c81d94097 Undo damage done by RPM expermintation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7910 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:43:42 +00:00
teastep
7d6e67ace9 More rpm expermentation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:23:46 +00:00
teastep
0dd64cab77 Experiment with RPM versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7906 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:08:11 +00:00
teastep
587ca5148f Fix rpm versioning
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7899 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 00:25:51 +00:00
teastep
954c1f00ba Documentation and error message tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7894 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-10 22:53:20 +00:00
teastep
8889d86d75 Fix spurios add of alias in nat file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7862 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-08 17:37:04 +00:00
teastep
8b29aa06a6 Implement regression testing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7859 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-08 00:04:43 +00:00
teastep
8e9d2067d6 New version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7858 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 21:17:14 +00:00
teastep
74868063b9 Make error messages about invalid option value consistent
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7857 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 20:58:19 +00:00
teastep
f9bda7d0a0 Eliminate one version of numeric_value()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7856 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 19:06:01 +00:00
teastep
898a20a43a Fix LOG_VERBOSE=2 without STARTUP_LOG
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7853 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 16:32:01 +00:00
teastep
f4183c8d5b Fix NFLOG/ULOG fiasco
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7843 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 05:36:51 +00:00
teastep
1d534e1d9c Update the version of a couple of Perl Modules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 00:01:06 +00:00
teastep
832ef83da9 Allow COMMENT in macro bodies
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7839 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-06 23:49:21 +00:00
teastep
cf4b54e762 Remove some crudeness from the traffic shaping code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7838 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-06 19:26:12 +00:00
teastep
9f7cfc8489 Add OPTIONS to tcdevices
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-06 17:26:37 +00:00
teastep
927ecdb085 Reverse 'tracked' tweak
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-05 20:08:09 +00:00
teastep
6bb6ff5e14 Tweak 'tracked' interface handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-05 18:52:38 +00:00
teastep
8a41739be1 Update comment at top of compiler()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-05 03:28:44 +00:00
teastep
20bedd04d7 Named arguments to Shorewall::Compiler::compiler()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-05 00:14:30 +00:00
teastep
07f9b2a846 Tighten up HIGH_ROUTE_MARKS and OUTPUT chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-04 00:02:35 +00:00
teastep
2be90a9672 Fix date formatting in log
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7813 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-01 18:23:00 +00:00
teastep
b7c130b10b Update version in module headers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7812 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-01 17:45:43 +00:00
teastep
9ee254bd07 Pretty up 'show macros' display with long macro names
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7809 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-01 17:14:08 +00:00
teastep
960c77ebde Optimization of 'localtime' calls
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7805 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-01 01:53:37 +00:00
teastep
2534c13104 Version bump
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7776 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-27 18:11:01 +00:00
teastep
dd0d55cac8 Apply recent exit status changes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7775 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-27 17:12:31 +00:00
teastep
ff82e98c78 Back out verbose fix for undefined value on missing file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-27 15:50:20 +00:00
teastep
196e5a2067 More exit status 4 tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7771 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-27 15:26:37 +00:00
teastep
43b00fbe35 Retry return status 4 from iptables
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7765 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-26 22:34:36 +00:00
teastep
c300f63de7 Fix undefined return from open_file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-25 17:21:22 +00:00
teastep
6e6da40039 Apply missing config file fix to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-24 02:28:18 +00:00
teastep
9d5e2f7941 Timestamp error messages; log fatal errors
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-23 22:15:22 +00:00
teastep
4016d69b8d Enhanced operational logging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7729 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-23 21:33:36 +00:00
teastep
a07b0277e3 Remove silly tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7714 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-22 16:53:49 +00:00
teastep
3e7b4a41b3 Change error messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7712 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 21:30:21 +00:00
teastep
1d3eca5541 Eliminate 'shared' option -- use :address to signal shared interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7711 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 19:39:20 +00:00
teastep
954db796bd Update version to 4.1.1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7710 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 18:48:23 +00:00
teastep
636629a063 Allow IP address of interface to be specified in /etc/shorewall/providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7709 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 16:28:36 +00:00
teastep
616f3e0016 Simplify a couple of tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7708 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 00:07:47 +00:00
teastep
4cd8450ce8 Improve NFQUEUE handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7705 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-20 20:47:19 +00:00
teastep
a7f089a939 Fix a couple of bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7701 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-20 16:01:27 +00:00
teastep
50e0ce027a Open 4.1.0 thread
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7696 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-19 21:15:36 +00:00
teastep
fbd4d3638d Drop some cruft
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7695 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-19 20:02:21 +00:00
teastep
e101e6d0dd Finish implementing alternate parameter syntax
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-19 18:58:49 +00:00
teastep
1c293a8386 Unify handling of ULOG/NFLOG
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7691 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 20:56:40 +00:00
teastep
6e12f5ab06 Remove useless test
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 18:09:18 +00:00
teastep
8cae1a45d0 Add support for NFLOG
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7689 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 18:05:08 +00:00
teastep
8f368139f6 Remove crap
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7686 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 03:11:46 +00:00
teastep
d5f04ec0a1 Fix 'refresh'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7685 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 01:49:50 +00:00
teastep
6367cc6f45 Cosmetic changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7684 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 01:48:54 +00:00
teastep
8673ac70dd Verify that interfaces in the providers file are known; unify 'optional' settings
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7680 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-17 16:48:25 +00:00
teastep
43bde8c079 More corrections to 'shared' providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7679 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-17 00:14:41 +00:00
teastep
72fb0f1ab0 Remove unused global hash
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7677 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-16 20:29:45 +00:00
teastep
81bd913a08 Cleanup of 'shared' providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7675 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-16 16:44:02 +00:00
teastep
00e7f156a7 Add USER/GROUP processing to tcrules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7672 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-16 15:56:42 +00:00
teastep
f6e0d7cf5a Finish 'shared' providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7671 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-16 01:21:33 +00:00
teastep
e9d2f2f915 'shared' providers -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7669 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-16 00:14:43 +00:00
teastep
4db0dc2667 Bring trunk up to date with branch/4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7668 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-15 23:24:54 +00:00
teastep
2246e54d28 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7483 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-10-19 19:43:14 +00:00
teastep
63705c0b64 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-28 22:26:29 +00:00
teastep
2bf7abc7b7 Update trunk with latest branches/4.0/ patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7389 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-26 00:01:39 +00:00
teastep
d9e2c5b973 Update trunk with Macro REDIRECT fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7387 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-25 20:02:55 +00:00
teastep
900a40b9d1 Apply 4.0.4-pre fixes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7384 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-23 15:21:18 +00:00
teastep
157053de0b Remove silly double setting of /proc entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7379 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-21 17:51:26 +00:00
teastep
808b7fc0a1 Remove support for 'detectnets' from Shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7377 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-21 17:24:57 +00:00
teastep
7a96b07e81 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7376 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-21 16:55:28 +00:00
teastep
bbcf8fdcf8 Erradicate IPv6 experimentation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7329 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-12 15:03:47 +00:00
teastep
9b079d57e9 Change IP version enumeration
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7326 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 21:04:36 +00:00
teastep
a9708f1baa More tweaking
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7325 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:56:35 +00:00
teastep
63f74768e2 Add IP version arg to more functions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:45:53 +00:00
teastep
0075879b4c Add an argument to ensure_filter_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7323 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:34:42 +00:00
teastep
8a9b9c2714 Add an argument to new_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7322 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:27:45 +00:00
teastep
12d19c8ec3 Add an argument to new_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7321 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:21:51 +00:00
teastep
5c5f2b3a06 Add level to chain table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7320 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:12:13 +00:00
teastep
c5210b923b Back out chain table partitioning -- take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7318 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 17:31:41 +00:00
teastep
5fabfc4ba4 Back out chain table partitioning
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7317 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 17:29:41 +00:00
teastep
3ef4b5efae Make interface zone dependent on zone type
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 00:41:55 +00:00
teastep
597c8fecc0 Partition chain table for iptables/ip6tables
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7315 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 23:30:55 +00:00
teastep
a2c145418c More rational zone type enumeration
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7314 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 22:47:55 +00:00
teastep
5819589cb0 First timid step toward IPv6 support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7313 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 22:28:06 +00:00
teastep
6141995184 Bring trunk up to date with branches/4.0/
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7312 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 15:52:57 +00:00
el_cubano
d9b400b313 Update outdated weblinks to GPL and update FSF mailing address.
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7296 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-08 16:09:51 +00:00
teastep
5f6596a728 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7228 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-26 15:12:04 +00:00
teastep
7e236b256b Bring Shorewall-perl up to 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7127 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-13 20:10:13 +00:00
teastep
71c45e607a More optional provider changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-10 20:55:54 +00:00
teastep
aa523ea52c Bring trunk up to date with branch/4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7113 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-10 17:37:02 +00:00
teastep
8472d60c28 Bring trunk up to date with branch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7095 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-09 15:16:08 +00:00
teastep
7c1c859eae Allow TC configuration on a bridge port
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7041 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-03 18:48:56 +00:00
teastep
d857725333 Cosmetic change to generated script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7040 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-03 18:47:58 +00:00
teastep
ddbbb6c0b6 Eliminate a couple of local variables
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7035 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-03 14:26:19 +00:00
teastep
d480e79c9c Bring dev path up to stable path
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7034 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-03 14:08:40 +00:00
teastep
4bc07eb658 Finish port-range/XMULTIPORT change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7022 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-01 15:45:22 +00:00
teastep
686655304d Detect port-range in a port-list without XMULTIPORT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7020 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-01 14:58:26 +00:00
teastep
02fb1dd86c Fix indentation in stop_firewall()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7015 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-31 21:52:59 +00:00
teastep
70c99a336d Make state match detection quiet
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7013 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-31 21:41:00 +00:00
teastep
7da375634a Fix ECN in shorewall-perl (again)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7010 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-31 14:13:10 +00:00
teastep
a419469814 Detect the lack of state match
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7001 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 21:30:22 +00:00
teastep
0d6d0c1c0f Allow 'sec' as a valid unit of time in rate-limit specifications
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6998 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 18:09:00 +00:00
teastep
283f489063 Convert direct increment of cmdcount (which was misspelled) with a call to push_cmd_mode
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6997 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 16:18:43 +00:00
teastep
ff2c261c4b Fix backout of chain change -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6996 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 15:36:56 +00:00
teastep
523f48d253 Fix backout of chain change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6995 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 15:27:08 +00:00
teastep
bb923492a3 Back out chain name fix (broke dynamic zones)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6994 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 15:03:29 +00:00
teastep
e464a8102a Get rid of some of the 'chain_base' mapping
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6991 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-29 00:03:34 +00:00
teastep
67899bc2b2 Minor Chains.pm tweak
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6990 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 19:39:01 +00:00
teastep
d621ca52fa Simplify add_rule()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6989 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 19:17:00 +00:00
teastep
fcbac7b242 Assert zero cmdmode for all chains before emitting rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6988 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 17:34:21 +00:00
teastep
18dba96379 Rename cmdcount->cmdmode and allow expand_rule() to be called on a chain with non-zero cmdmode
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6987 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 17:31:31 +00:00
teastep
967aaef9f6 Eliminate the 'loopcount' field from chain table entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6986 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 17:23:03 +00:00
teastep
65d3bc6e19 Earlier validation of log level used in action invocation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6985 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 16:37:14 +00:00
teastep
995412ff59 Another action logging fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 16:09:38 +00:00
teastep
ae62d5cd20 More log level editing; and fix odd cut/paste of macro module into actions module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6979 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 14:56:39 +00:00
teastep
29030e1dc1 log_rule_limit now adds a trailing ' ' to non-empty $predicates
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6978 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-28 01:44:52 +00:00
teastep
d13c794a7d Fix builtin action logging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6975 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-07-27 22:34:53 +00:00