Commit Graph

186 Commits

Author SHA1 Message Date
teastep
a0c7b4af79 Some tweaks to the MASQ proto/port change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1302 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-05-01 17:26:02 +00:00
teastep
e40e0345f5 Allow SNAT by protocol/port
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1301 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-05-01 16:07:55 +00:00
teastep
a3557759b0 More save fixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1299 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-05-01 02:20:58 +00:00
teastep
d97b771632 More save fixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1297 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-30 03:06:38 +00:00
teastep
fecc7529c5 Use modprobe if available; more save fixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1296 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-30 02:13:23 +00:00
teastep
126bfc23c4 Avoid ipv6 warnings
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1294 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 18:13:47 +00:00
teastep
38ead4778b Don't make the restore-base executable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1291 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 16:47:24 +00:00
teastep
d58ef6d813 Make 'shorewall save' repeatable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1290 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 16:01:00 +00:00
teastep
0ec2b0210c Include iptables-save output in /var/lib/shorewall/restore
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1289 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 15:47:07 +00:00
teastep
e11652b86a Bug fixes for iptables-save/-restore code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1288 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 14:09:41 +00:00
teastep
53fb6f1b4c Integrate iptables-save/iptables-restore
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1286 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-29 03:27:47 +00:00
teastep
6e51b83380 A little code cleanup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1285 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-23 02:53:27 +00:00
teastep
c446fb3735 Clean up -q implementation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1284 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-22 20:57:36 +00:00
teastep
d5a3e8ebeb Implement -q
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1283 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-21 21:44:22 +00:00
teastep
f683f9a7fc Tidy up log tag code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1277 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-21 20:11:54 +00:00
teastep
5fbe4e2c81 Add log rate limiting text to shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-21 00:03:35 +00:00
teastep
942693a8e7 Fix log tag rule counting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1275 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-20 22:00:39 +00:00
teastep
49fe71f71c Fix log tag rule counting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1274 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-20 21:59:38 +00:00
teastep
a29ff62fbe Implement Log Tags
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1272 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-20 21:47:49 +00:00
teastep
bdf056643e Make the ALL INTERFACES and LOCAL independent; add ko.gz to module suffixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1269 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-20 02:20:43 +00:00
teastep
c9a8c2b923 Make the ALL INTERFACES and LOCAL columns in the nat file independent
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1268 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-19 20:39:51 +00:00
teastep
68151a767f Fix ensure_config_path call
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1264 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-16 17:12:02 +00:00
teastep
e765bc1cef Add /usr/share/shorewall/configpath file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1263 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-15 13:51:55 +00:00
teastep
91337c3dcb Allow CONFIG_PATH to be inherited
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-13 17:15:15 +00:00
teastep
7763011f16 Restore logic to make find_file() check for SHOREWALL_DIR
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1259 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-10 16:46:20 +00:00
teastep
e0e00293fe Apply Stijn Jonker's Fix for CONFIG_PATH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1258 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-10 14:28:29 +00:00
teastep
c0a85ba5f6 Brain Cramp
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1256 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-10 02:50:14 +00:00
teastep
abe8a51101 CONFIG_PATH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1255 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-10 02:49:31 +00:00
teastep
a1efb12b48 CONFIG_PATH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1254 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-10 02:47:04 +00:00
teastep
15eafac63c Reimplement dynamic zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1252 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-07 02:19:29 +00:00
teastep
429b6924de Reformat the code in define_firewall()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1251 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-06 22:11:11 +00:00
teastep
afa37f6713 The bugs just keep on coming...
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1238 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-01 22:34:51 +00:00
teastep
b0523d5dd2 Fix 'routeback'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1236 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-04-01 16:34:24 +00:00
teastep
6ce4d51fff Shorewall-2.0.1-rc3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1235 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-31 20:40:49 +00:00
teastep
1596f5362b Fix option handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1228 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-25 15:28:16 +00:00
teastep
058de7b9b1 Improve undefined interface checking
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1225 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-25 01:00:54 +00:00
teastep
9ddf679cf6 Several small fixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1224 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-23 23:24:07 +00:00
teastep
d95f629b62 Replace 'subnet' with 'network' in the code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1221 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-22 23:20:45 +00:00
teastep
c789d7ac7a Add new options to /etc/shorewall/hosts
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1220 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-22 21:15:54 +00:00
teastep
f857af963e Tighten zone-definition checking
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1219 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-20 17:21:15 +00:00
teastep
f37f1d4243 Fix longstanding Proxy ARP/IPSEC bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-20 15:36:25 +00:00
teastep
a3d8eb9d5b Fix yet another <zone>_frwd problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1213 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 22:15:22 +00:00
teastep
ee3bab0642 Shorewall 2.0.1 Beta 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1211 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 18:32:08 +00:00
teastep
8b0801b76d Fix typo in error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1209 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 14:44:45 +00:00
teastep
6714113fe5 Rethink how SNAT netmap works
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1208 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 14:43:03 +00:00
teastep
46692547bc Ready to test NETMAP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1207 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 02:49:10 +00:00
teastep
f300c9b31d Make NETMAP acutally work
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1206 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-19 01:10:52 +00:00
teastep
8d260b7da0 Add NETMAP support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1205 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-18 21:36:27 +00:00
teastep
302cae411e Reverse logprefix patches
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1203 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-18 15:13:04 +00:00
teastep
da393cf2ea set routeback on bridge ports
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1200 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-17 22:42:11 +00:00
teastep
e3584b67ed Log prefix; set routeback on brige ports
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1199 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-17 21:37:58 +00:00
teastep
bf30706982 Add nobogons interface option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1197 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-17 19:06:54 +00:00
teastep
1a3c0cef13 Roll over release notes and change log; optomize fix for rule/policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1195 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-16 23:31:22 +00:00
teastep
74219e2e3a Bridging Changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1194 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-15 18:55:13 +00:00
teastep
2e929e1083 Eliminate warning about policy as rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1190 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-15 18:40:17 +00:00
teastep
699a4cf567 Make CONTINUE work again
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-12 22:58:41 +00:00
teastep
b79ad25c7e Issue a clearer diagnostic when ip6tables is missing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1183 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-06 17:32:28 +00:00
teastep
a469d0d317 Fix multiple excluded zones problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1182 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-04 15:42:44 +00:00
teastep
e2978f336a Fixes to RC1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1180 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-03 23:52:26 +00:00
teastep
2597d71b4a Allow for routeback of stopped interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1179 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-03-02 00:04:55 +00:00
teastep
bf9e1ef4ed 2.0.0 RC1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1177 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-29 15:51:08 +00:00
teastep
a96129e9fc update release dates
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1176 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-21 21:21:06 +00:00
teastep
c31cb73f8c Remove one-subnet restriction on 'detect' in the interfaces file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-21 20:32:32 +00:00
teastep
485d9b8780 clean up the firewall file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-21 16:54:45 +00:00
teastep
09bcf7c1ab Restore correct REJECT behavior
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1157 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-20 21:50:33 +00:00
teastep
f99779a27f Avoid superfluous --state NEW tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1156 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-20 20:26:37 +00:00
teastep
321488cc24 Make detectnets and routeback play nice together
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1155 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-19 23:05:17 +00:00
teastep
080bdfa9e2 Restore version 1.4 of the rules file -- allow removing common action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1154 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-17 22:56:04 +00:00
teastep
b1a544a107 Shorewall 2.0.0 Beta3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1153 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-17 22:34:48 +00:00
teastep
36fb7fa62b Fix bug with tcrules; Move rfc1918 to /usr/share/shorewall; Update version to Beta 3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1152 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-16 21:05:28 +00:00
teastep
73667a8f85 Add CONTINUE to allowed targets in an action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1151 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-15 18:03:23 +00:00
teastep
588270621f Allow rate limiting on CONTINUE and REJECT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1150 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-15 17:57:00 +00:00
teastep
052194cb9b Combo of Beta2 and IPV6 disable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1149 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-15 17:52:27 +00:00
teastep
d1caa706a5 Action and rules file cleanup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-13 23:31:03 +00:00
teastep
e5c431bbad Correct error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1140 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-13 22:59:14 +00:00
teastep
543b6b959f Only create action chains that are needed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1139 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-13 22:58:11 +00:00
teastep
c3b2e30934 Add the 'noah' option to IPSEC tunnels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1137 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-12 17:45:24 +00:00
teastep
485a4d06ae Make 'trace' a synonym for 'debug'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1136 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-10 23:30:20 +00:00
teastep
5f2b0ad901 Shorewall 2.0.0 Beta2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-09 23:52:01 +00:00
teastep
a16f7f40c0 Fix for startup problem in masq processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1125 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-07 22:36:07 +00:00
teastep
a4fc4c2ea0 Make a couple of the user-defined actions builtins
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-04 22:23:45 +00:00
teastep
7316f20d8e Add action.AllowSNMP and move some code around
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1120 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-02 23:37:09 +00:00
teastep
63dd6bafe3 Replace '' with '' for readability
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1119 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-02 20:15:44 +00:00
teastep
23fc4400b5 Get the attention of 'logunclean' and 'dropunclean' users
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-02 18:39:18 +00:00
teastep
427808d8c2 Restore 'haveroute' and add 'persistent' to proxyarp
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1113 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-02-01 18:39:39 +00:00
teastep
aa7e0cdbeb Initial revision
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1103 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2004-01-31 16:11:22 +00:00