Tom Eastep
|
0fa027802f
|
Don't allow accounting or manual changes to have the name of a builtin target
|
2011-02-14 10:50:04 -08:00 |
|
Tom Eastep
|
3b7232a5fa
|
Fix a bug in the optimizer
|
2011-02-14 10:00:28 -08:00 |
|
Tom Eastep
|
59e361e93e
|
Split the 'restriction' member into two members
|
2011-02-14 09:22:27 -08:00 |
|
Tom Eastep
|
e64070f9e1
|
Restore loop detection in sectioned accounting rules
|
2011-02-13 16:38:01 -08:00 |
|
Tom Eastep
|
dd81eedb42
|
Fix another accounting sectioning bug
|
2011-02-13 14:32:11 -08:00 |
|
Tom Eastep
|
46a99a7cd9
|
Correct Config.pm version again
|
2011-02-13 11:46:56 -08:00 |
|
Tom Eastep
|
567824b7e2
|
Correct Config.pm version
|
2011-02-13 11:45:46 -08:00 |
|
Tom Eastep
|
95f8100696
|
Cosmetic change
|
2011-02-13 11:34:53 -08:00 |
|
Tom Eastep
|
b1abb3f554
|
Don't do unref/loop detection when accounting file is sectioned
|
2011-02-13 11:13:43 -08:00 |
|
Tom Eastep
|
a1eefea224
|
Fix FORWARD chain jumps with sectioning
|
2011-02-13 08:23:48 -08:00 |
|
Tom Eastep
|
1438332bbe
|
Remove hard-coded 0.0.0.0/0 from Providers.pm
|
2011-02-13 08:13:22 -08:00 |
|
Tom Eastep
|
5c0b592934
|
Section the accounting file
|
2011-02-12 12:47:15 -08:00 |
|
Tom Eastep
|
195903444d
|
Insist that SECTION headers have exactly two columns
|
2011-02-12 07:54:20 -08:00 |
|
Tom Eastep
|
677bd08d5d
|
Add more targets
|
2011-02-11 17:13:48 -08:00 |
|
Tom Eastep
|
4acdc5314a
|
Add 'NG' value for ACCOUNTING
|
2011-02-11 17:01:10 -08:00 |
|
Tom Eastep
|
9e921beb49
|
Fix a tri-value bug
|
2011-02-11 16:53:49 -08:00 |
|
Tom Eastep
|
af363888ab
|
Alphabetize the builtin target list
|
2011-02-10 16:55:04 -08:00 |
|
Tom Eastep
|
64614b7464
|
Add CLASSIFY to the builtin targets
|
2011-02-10 16:46:44 -08:00 |
|
Tom Eastep
|
2885081d86
|
Add more keywords to %builtin_targets
|
2011-02-10 13:11:58 -08:00 |
|
Tom Eastep
|
a3232516bb
|
Detect loops in accounting chain jumps
|
2011-02-09 15:43:19 -08:00 |
|
Tom Eastep
|
88244dc132
|
Don't allow MAC addresses in the accounting file
|
2011-02-07 17:12:43 -08:00 |
|
Tom Eastep
|
b4b59119ef
|
Don't allow non-accounting chain in the CHAIN accounting column
|
2011-02-07 16:32:38 -08:00 |
|
Tom Eastep
|
6e66736d28
|
Make IPv6 logic safer; cosmetic improvements in the generated script
|
2011-02-06 08:57:48 -08:00 |
|
Tom Eastep
|
2c2fdab0fe
|
Rename USE_LOCAL_MODULES to EXPORTMODULES
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:42:35 -08:00 |
|
Tom Eastep
|
2b8579c090
|
Tweak USE_LOCAL_MODULES change
Make the "Other than /usr/share" test dependent on export
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:28:10 -08:00 |
|
Tom Eastep
|
106f23634c
|
Make use of USE_LOCAL_MODULES independent of export
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:15:16 -08:00 |
|
Tom Eastep
|
88bce4100a
|
Initiate 4.4.18
|
2011-02-05 16:41:34 -08:00 |
|
Tom Eastep
|
c557ec3740
|
Bump version of Tc module
|
2011-02-04 07:46:35 -08:00 |
|
Tom Eastep
|
ea2c72d1b1
|
Prepare for 4.4.17
|
2011-02-04 06:44:02 -08:00 |
|
Tom Eastep
|
838c7ac57b
|
Change a comment
|
2011-02-03 17:22:04 -08:00 |
|
Tom Eastep
|
23eef3b215
|
Normalize IPv6 addresses in decompose_net
|
2011-02-03 09:57:47 -08:00 |
|
Tom Eastep
|
4ed4443abb
|
Do a fancier job of comparing networks
|
2011-02-03 09:44:46 -08:00 |
|
Tom Eastep
|
27684908c4
|
Catch mis-matched nets in per-IP accounting rules
|
2011-02-03 09:25:13 -08:00 |
|
Tom Eastep
|
d68d40ee1c
|
Correct an optimization bug involving empty/unreferenced chains
|
2011-02-03 09:12:50 -08:00 |
|
Tom Eastep
|
98ad7e15b0
|
Don't optimize the accounting chain
|
2011-02-03 08:45:54 -08:00 |
|
Tom Eastep
|
953c0b48de
|
Fix several issues with IPv6 tcfilters
|
2011-02-03 08:28:00 -08:00 |
|
Tom Eastep
|
207db033b8
|
Disallow '.' in accounting and manual chain names
|
2011-02-01 12:58:05 -08:00 |
|
Tom Eastep
|
4e7f656a5b
|
Better ACCOUNT(...) parsing
|
2011-01-31 20:17:56 -08:00 |
|
Tom Eastep
|
f8e6c80ca0
|
Tighen up editing of ACCOUNT(...)
|
2011-01-31 10:14:10 -08:00 |
|
Tom Eastep
|
fbdd4b5ede
|
Ensure that accounting and manual chains aren't too long
|
2011-01-31 06:56:38 -08:00 |
|
Tom Eastep
|
5f76de3bda
|
Fix Config version
|
2011-01-30 12:35:31 -08:00 |
|
Tom Eastep
|
303afe8c7e
|
Some accounting fixes (code and docs)
|
2011-01-30 09:39:14 -08:00 |
|
Tom Eastep
|
b1f6895a1f
|
Correct a couple of versions
|
2011-01-30 08:41:33 -08:00 |
|
Tom Eastep
|
70fc8bdfb6
|
Add support for per-IP accounting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-30 07:20:05 -08:00 |
|
Tom Eastep
|
4cc8e5422d
|
Add ACCOUNT target detection
|
2011-01-30 07:14:08 -08:00 |
|
Tom Eastep
|
1c48a9dbd3
|
Fix a couple of defects in module loading
|
2011-01-29 12:42:22 -08:00 |
|
Tom Eastep
|
7555a0953d
|
Add conditional logic for optional run-time address variables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-29 12:15:34 -08:00 |
|
Tom Eastep
|
1b87405d96
|
Fix silly bug in expand_rule()
|
2011-01-29 08:45:20 -08:00 |
|
Tom Eastep
|
7421a679ba
|
Bump version of the Nat module
|
2011-01-28 16:46:36 -08:00 |
|
Tom Eastep
|
f3aedcf805
|
Allow runtime address variables in the ADDRESS column of the masq file
|
2011-01-28 16:32:53 -08:00 |
|
Tom Eastep
|
156b04c380
|
Implement Run-time Address Variables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-26 09:08:48 -08:00 |
|
Tom Eastep
|
82913abeca
|
Specify 'mpu' when creating TBF
|
2011-01-23 09:23:17 -08:00 |
|
Tom Eastep
|
a2b440b093
|
Add USE_LOCAL_MODULES option
|
2011-01-22 08:13:17 -08:00 |
|
Tom Eastep
|
c0d5a32d11
|
Fix typo in alignment patch
|
2011-01-21 06:56:30 -08:00 |
|
Tom Eastep
|
3a5d664305
|
Fix 'check -r' output when OPTIMIZE=8 or OPTIMIZE=9
|
2011-01-21 06:52:58 -08:00 |
|
Tom Eastep
|
20cd9848f6
|
Align some assignments in the Config Module
|
2011-01-21 06:51:35 -08:00 |
|
Tom Eastep
|
24412c9498
|
Fix empty variable handling when /bin/sh is bash
|
2011-01-20 08:19:42 -08:00 |
|
Tom Eastep
|
9d06125129
|
Bump Version to Beta 2
|
2011-01-19 15:38:51 -08:00 |
|
Tom Eastep
|
d5f3b31032
|
Handle lines containing only 'INCLUDE'
|
2011-01-18 14:58:56 -08:00 |
|
Tom Eastep
|
eaa08ab76f
|
Fix typo that broke ULOG
|
2011-01-16 09:45:49 -08:00 |
|
Tom Eastep
|
3074d3009f
|
Tom being anal
|
2011-01-15 20:59:59 -08:00 |
|
Tom Eastep
|
4ea02a5e72
|
Eliminate silly duplication
|
2011-01-15 19:20:24 -08:00 |
|
Tom Eastep
|
370cd04408
|
Remove unneeded line of code in export_params()
|
2011-01-15 15:56:37 -08:00 |
|
Tom Eastep
|
265ca85d02
|
Allow INCLUDE in extension scripts
|
2011-01-15 15:43:45 -08:00 |
|
Tom Eastep
|
5c4da0b581
|
Use open_file()/close_file() in copy1
|
2011-01-15 14:33:16 -08:00 |
|
Tom Eastep
|
978e8e3849
|
Only issue 'done.' progress message on success
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-14 11:46:38 -08:00 |
|
Tom Eastep
|
12eaf81dcc
|
Add some comments
|
2011-01-13 19:59:17 -08:00 |
|
Tom Eastep
|
8da9f4183a
|
Tweaks to 4.4.17
|
2011-01-10 19:35:45 -08:00 |
|
Tom Eastep
|
2be63c9406
|
Delete unneeded exports
|
2011-01-10 19:30:38 -08:00 |
|
Tom Eastep
|
10ae1c7dde
|
Don't export read_a_line1()
|
2011-01-10 19:14:10 -08:00 |
|
Tom Eastep
|
a04e854f21
|
Simplify exception processing in process_rules1()
|
2011-01-10 17:02:12 -08:00 |
|
Tom Eastep
|
fd6afa7742
|
Minor fixes to comments
|
2011-01-09 15:56:01 -08:00 |
|
Tom Eastep
|
3392312cef
|
Automate the maintenance of the hash of compiler-defined entries in %params
|
2011-01-09 13:12:36 -08:00 |
|
Tom Eastep
|
0dc4cd7937
|
Don't quote param values unnecessarily; add a comment to the emitted params
|
2011-01-09 12:14:48 -08:00 |
|
Tom Eastep
|
3bb67423c3
|
Tweak release notes
|
2011-01-09 11:31:38 -08:00 |
|
Tom Eastep
|
08f09d7de0
|
Deprecate EXPORTPARAMS
|
2011-01-09 10:12:36 -08:00 |
|
Tom Eastep
|
14c4bd99aa
|
Don't lookup standard target if target is an action, macro, or chain
|
2011-01-09 10:10:27 -08:00 |
|
Tom Eastep
|
97bba29c07
|
Add lookup hash for standard targets
|
2011-01-08 15:29:10 -08:00 |
|
Tom Eastep
|
8dc60e788f
|
Avoid early return in process_action()
|
2011-01-08 14:05:27 -08:00 |
|
Tom Eastep
|
6143c7ddbd
|
Improve readability of logging logic in expand_rule()
|
2011-01-08 09:07:32 -08:00 |
|
Tom Eastep
|
bdbc9ab29d
|
Initiate 4.4.17
|
2011-01-08 08:00:56 -08:00 |
|
Tom Eastep
|
ad57272c7f
|
Fix tag handling in Limit()
|
2011-01-05 17:21:50 -08:00 |
|
Tom Eastep
|
974aeb9e39
|
Reword a comment
|
2011-01-03 18:48:09 -08:00 |
|
Tom Eastep
|
e3c16b8233
|
Different way to catch empty parameter lists
|
2011-01-03 17:56:07 -08:00 |
|
Tom Eastep
|
014d0eb607
|
Don't recognize an empty param list
|
2011-01-03 17:06:54 -08:00 |
|
Tom Eastep
|
b7a9a48508
|
Handle COUNT:<level> correctly
|
2011-01-03 14:29:10 -08:00 |
|
Tom Eastep
|
8400a2ab31
|
Handle ':' in a param
|
2011-01-03 12:18:04 -08:00 |
|
Tom Eastep
|
33b54e4ebe
|
Version to 4.4.16
|
2011-01-03 09:00:39 -08:00 |
|
Tom Eastep
|
fe86964fd6
|
Move and reword an error message
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-02 08:42:09 -08:00 |
|
Tom Eastep
|
f6228ca31b
|
Two error messages:
- Disallow server port in ACTION rule.
- Add server IP address in message re: REDIRECT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-01-02 08:20:28 -08:00 |
|
Tom Eastep
|
b3598f3766
|
Validate action names
|
2011-01-02 07:09:42 -08:00 |
|
Tom Eastep
|
cb372cf2cd
|
Change a couple of comments
|
2011-01-01 16:13:38 -08:00 |
|
Tom Eastep
|
d64edf3470
|
Clone a small function
|
2011-01-01 11:19:53 -08:00 |
|
Tom Eastep
|
8f0d0ac5a7
|
Use external representation in recursive call message
|
2011-01-01 09:18:10 -08:00 |
|
Tom Eastep
|
d71c11791f
|
Report normalized action names in recursive call message
|
2011-01-01 09:06:11 -08:00 |
|
Tom Eastep
|
4da682365d
|
Restore ability to detect recursive action invocations
|
2011-01-01 08:58:00 -08:00 |
|
Tom Eastep
|
ed3b336a81
|
Correct prototype
|
2011-01-01 06:55:10 -08:00 |
|
Tom Eastep
|
fc2d76aa7a
|
Move a function; don't export %policy_actions
|
2010-12-31 16:58:06 -08:00 |
|
Tom Eastep
|
e1b4e345fb
|
Add Eclipse files to project
|
2010-12-31 15:19:56 -08:00 |
|
Tom Eastep
|
8e6fdceeb5
|
Back out useless change
|
2010-12-31 14:30:31 -08:00 |
|
Tom Eastep
|
b36ad0d065
|
Change several more compiler progress messages
|
2010-12-31 14:19:31 -08:00 |
|
Tom Eastep
|
f8e04b4110
|
Change a couple of compiler progress messages
|
2010-12-31 14:12:57 -08:00 |
|
Tom Eastep
|
e0d2eb997d
|
Restore the name 'process_rule1'
|
2010-12-31 12:41:01 -08:00 |
|
Tom Eastep
|
1bdaf862d3
|
Populate %targets out of new_action()
|
2010-12-31 10:36:07 -08:00 |
|
Tom Eastep
|
6c14c76ab5
|
Another comment
|
2010-12-31 08:37:56 -08:00 |
|
Tom Eastep
|
aa6754cb40
|
Add a comment
|
2010-12-31 07:51:15 -08:00 |
|
Tom Eastep
|
d4d1bb7b41
|
Bump version of the Zones module
|
2010-12-30 13:14:07 -08:00 |
|
Tom Eastep
|
33ff6db6bc
|
Whitespace changes
|
2010-12-30 12:25:22 -08:00 |
|
Tom Eastep
|
cd7f94dbdb
|
Merge branch 'master' into 4.4.16
|
2010-12-30 10:37:15 -08:00 |
|
Tom Eastep
|
746c2a5163
|
Correct comment about the action member of the chain structure
|
2010-12-30 10:36:03 -08:00 |
|
Tom Eastep
|
cb751bd225
|
Remove extraneous change log entries
|
2010-12-30 10:02:39 -08:00 |
|
Tom Eastep
|
91227b6d13
|
Don't log jumps to NAT actions
|
2010-12-30 09:56:44 -08:00 |
|
Tom Eastep
|
d8541e4a58
|
Update problems corrected
|
2010-12-30 08:05:04 -08:00 |
|
Tom Eastep
|
e3d1032ab3
|
Set version to Beta 8
|
2010-12-30 07:32:30 -08:00 |
|
Tom Eastep
|
3c4cddeeeb
|
Eliminate process_action3()
|
2010-12-30 06:56:21 -08:00 |
|
Tom Eastep
|
d767d9fea3
|
Better Editing of BLACKLIST_DISPOSITION
|
2010-12-29 18:43:14 -08:00 |
|
Tom Eastep
|
1c55143524
|
Allow parameterized Limit to use log tags
|
2010-12-29 12:20:18 -08:00 |
|
Tom Eastep
|
230d284980
|
Correct a couple of comments
|
2010-12-29 11:36:59 -08:00 |
|
Tom Eastep
|
b7d936dd8e
|
Merge levels in process_action2()
|
2010-12-29 08:23:44 -08:00 |
|
Tom Eastep
|
a4bf11c7d5
|
Some cosmetic cleanup
|
2010-12-28 17:18:43 -08:00 |
|
Tom Eastep
|
d90d56161c
|
Improve readability
|
2010-12-28 16:42:28 -08:00 |
|
Tom Eastep
|
7d41e4b38c
|
Restore level merge behavior with nested actions
|
2010-12-28 16:04:55 -08:00 |
|
Tom Eastep
|
17ed14a895
|
Update comments in the Rules module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-28 16:02:10 -08:00 |
|
Tom Eastep
|
17a3ca62d5
|
Eliminate the Actions module
|
2010-12-28 13:51:45 -08:00 |
|
Tom Eastep
|
3d4aaad0eb
|
Remove a couple of superfluous tests
|
2010-12-28 12:53:16 -08:00 |
|
Tom Eastep
|
4a8f724f9b
|
Handle duplicate chain name for action chain
|
2010-12-28 12:18:42 -08:00 |
|
Tom Eastep
|
50a3b76e40
|
Rename a variable; reformat an error message
|
2010-12-28 07:49:35 -08:00 |
|
Tom Eastep
|
cc30fc4dbb
|
Eliminate max nest level on actions
|
2010-12-27 17:16:34 -08:00 |
|
Tom Eastep
|
0c3ed598ca
|
Improve diagnostic
|
2010-12-27 17:02:06 -08:00 |
|
Tom Eastep
|
297df02047
|
Catch loops in action invocation graph
|
2010-12-27 16:41:53 -08:00 |
|
Tom Eastep
|
6a1487d628
|
Correct existing optimization issue
|
2010-12-27 12:31:34 -08:00 |
|
Tom Eastep
|
215c05d12b
|
Add some comments -- fix logging with NAT actions
|
2010-12-27 09:05:44 -08:00 |
|
Tom Eastep
|
d5ac12a8ff
|
Bump version to RC 1
|
2010-12-27 07:49:52 -08:00 |
|
Tom Eastep
|
311797e0bf
|
Create nat chain during pre-processing of nat action
|
2010-12-27 07:47:16 -08:00 |
|
Tom Eastep
|
79cbfd0126
|
Allow '--' to specify '-' as an action parameter
|
2010-12-26 17:03:05 -08:00 |
|
Tom Eastep
|
4111432a52
|
Implement optional action parameters
|
2010-12-26 16:13:53 -08:00 |
|
Tom Eastep
|
d8bcbffb88
|
Dead code removal
|
2010-12-26 12:08:10 -08:00 |
|
Tom Eastep
|
d1d9518c42
|
Move process_action2()
|
2010-12-26 11:44:15 -08:00 |
|
Tom Eastep
|
088480e5d9
|
Fix a couple of bugs
|
2010-12-26 11:34:58 -08:00 |
|
Tom Eastep
|
8f9d5a967b
|
Simplify variable substitution
|
2010-12-26 11:07:00 -08:00 |
|
Tom Eastep
|
d4d285af39
|
Revert version to Beta 7
|
2010-12-26 09:01:15 -08:00 |
|
Tom Eastep
|
4fdec73808
|
Fix target of <action(params)>
|
2010-12-26 07:58:20 -08:00 |
|
Tom Eastep
|
758a50fa84
|
Extantiate params during module processing
|
2010-12-25 14:48:14 -08:00 |
|
Tom Eastep
|
bdc3ca16a4
|
Finish revision of action processing
|
2010-12-25 14:28:57 -08:00 |
|
Tom Eastep
|
8218cb3444
|
Pass normalized action name to process_rule_common()
|
2010-12-25 10:15:08 -08:00 |
|
Tom Eastep
|
39f4f03b60
|
Segregate process_action1() from process_actions1()
|
2010-12-25 08:21:32 -08:00 |
|
Tom Eastep
|
1285b73d52
|
Simplify detection of action self-invocation
|
2010-12-25 08:10:23 -08:00 |
|
Tom Eastep
|
6240d41754
|
Add new progress message
|
2010-12-25 07:41:18 -08:00 |
|
Tom Eastep
|
ce8f33b623
|
Add a comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-23 15:38:47 -08:00 |
|
Tom Eastep
|
5e642a1406
|
Update a comment
|
2010-12-23 15:34:07 -08:00 |
|
Tom Eastep
|
b100991cfa
|
Add a couple of comments; move a declaration; simplify a statement
|
2010-12-23 14:17:22 -08:00 |
|
Tom Eastep
|
8ad7300165
|
Fix NONAT and NATONLY rules in an action
|
2010-12-23 07:49:20 -08:00 |
|
Tom Eastep
|
37a383ea4d
|
Used normalized names in requires list
|
2010-12-22 16:57:59 -08:00 |
|
Tom Eastep
|
a51eac91b0
|
Add documentation for parameterized actions
|
2010-12-22 15:09:54 -08:00 |
|
Tom Eastep
|
c6e35be8bc
|
Update version to RC 1
|
2010-12-22 14:37:10 -08:00 |
|
Tom Eastep
|
350f20fc7e
|
Add a comment
|
2010-12-22 14:35:19 -08:00 |
|
Tom Eastep
|
e8de4ce563
|
Add an <action> member to the chain table
|
2010-12-22 10:59:02 -08:00 |
|
Tom Eastep
|
e52feb7da7
|
Fix another bug
|
2010-12-21 17:50:35 -08:00 |
|
Tom Eastep
|
f3abf56cac
|
Restore proper NAT in action handling
|
2010-12-21 15:20:19 -08:00 |
|
Tom Eastep
|
b8d5e09b58
|
Put a couple of routines back in the Rules module
|
2010-12-21 14:57:46 -08:00 |
|
Tom Eastep
|
7052738cd0
|
Remove param manipulation routines for now
|
2010-12-21 13:38:10 -08:00 |
|
Tom Eastep
|
ffbcd1b1fe
|
Catch an action that invokes itself
|
2010-12-21 13:20:44 -08:00 |
|
Tom Eastep
|
ac42fddbce
|
Finish (unpublished) parameterized actions
|
2010-12-21 12:29:52 -08:00 |
|
Tom Eastep
|
6263689c3e
|
Allow Limit to accept parameters
|
2010-12-21 11:38:54 -08:00 |
|
Tom Eastep
|
7989f5094e
|
Implement a better solution to down shared gateways
|
2010-12-21 11:15:41 -08:00 |
|
Tom Eastep
|
25e93b4df3
|
Change dummy MAC address.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-21 09:22:58 -08:00 |
|
Tom Eastep
|
242a9f5a98
|
Remove trailing whitespace
|
2010-12-20 15:16:20 -08:00 |
|
Tom Eastep
|
ef9caf3588
|
Update module versions
|
2010-12-20 15:10:23 -08:00 |
|
Tom Eastep
|
7b8522f756
|
Supply dummy MAC for unreachable gateway
|
2010-12-20 15:07:53 -08:00 |
|
Tom Eastep
|
c63bb70585
|
Bump version to Beta 6
|
2010-12-20 13:17:35 -08:00 |
|
Tom Eastep
|
708e7672a3
|
More wildcard optimization
|
2010-12-20 13:00:48 -08:00 |
|
Tom Eastep
|
7061997324
|
Optimize wildcard resolution.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-20 12:22:26 -08:00 |
|
Tom Eastep
|
ebbf381e27
|
Rename %logactionchains -> %usedactions
|
2010-12-20 10:32:04 -08:00 |
|
Tom Eastep
|
8c8e4d1654
|
Unconditionally cache interface lookup results
|
2010-12-20 10:31:14 -08:00 |
|
Tom Eastep
|
7a1a303265
|
Unconditionally cache the result of wildcard lookups
|
2010-12-20 10:07:19 -08:00 |
|
Tom Eastep
|
433b3fbd87
|
Add some insurance against wildcard interfaces
|
2010-12-20 08:45:10 -08:00 |
|
Tom Eastep
|
b56b81ef74
|
Elmininate export of %usedactions
|
2010-12-19 18:18:37 -08:00 |
|
Tom Eastep
|
262b4044f8
|
Fix more physical name issues
|
2010-12-19 16:38:24 -08:00 |
|
Tom Eastep
|
44f001388a
|
Only call normalized_action_name() when needed
|
2010-12-19 13:32:08 -08:00 |
|
Tom Eastep
|
7be3ed33d5
|
Fix undef access out of notrack file
|
2010-12-19 13:30:02 -08:00 |
|
Tom Eastep
|
c302e82233
|
Disallow wildcard interfaces in additional contexts
|
2010-12-19 10:46:35 -08:00 |
|
Tom Eastep
|
54c57e3bc7
|
Disallow wildcard interfaces in additional contexts
|
2010-12-19 10:43:03 -08:00 |
|
Tom Eastep
|
55452c6e59
|
Disallow wildcards in the proxyarp file
|
2010-12-19 08:55:03 -08:00 |
|
Tom Eastep
|
8526dafc5d
|
Don't allow interface that is identical to the root of a wildcard
|
2010-12-19 08:10:41 -08:00 |
|
Tom Eastep
|
45faba0b7c
|
Enable parameters for actions
|
2010-12-18 16:29:29 -08:00 |
|
Tom Eastep
|
4b22bbd90d
|
Add logic for parameterized actions
|
2010-12-18 16:16:29 -08:00 |
|
Tom Eastep
|
4573b5ba8e
|
Generate normalized name in process_rule_common()
|
2010-12-18 13:32:53 -08:00 |
|
Tom Eastep
|
21166e07f3
|
Add action normalization routines
|
2010-12-18 12:31:37 -08:00 |
|
Tom Eastep
|
c659f05491
|
Make generate_matrix locals more obvious
|
2010-12-17 20:16:09 -08:00 |
|
Tom Eastep
|
b9a086c7f2
|
Fix fly-speck in prog.header
|
2010-12-16 09:55:31 -08:00 |
|
Tom Eastep
|
9d0bff62fa
|
Finish code re-org
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-15 12:57:55 -08:00 |
|
Tom Eastep
|
92894a7482
|
Step 1 of module re-org
|
2010-12-15 11:57:51 -08:00 |
|
Tom Eastep
|
880a94e42f
|
Update documentation regarding Hack removal
|
2010-12-14 11:19:17 -08:00 |
|
Tom Eastep
|
999ef7105b
|
Eliminate process_macro1() and process_action1()
They are replaced with process_macro() and process_rule_common() respectively.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-14 08:55:30 -08:00 |
|
Tom Eastep
|
94faafd662
|
Reorg export list
|
2010-12-13 21:05:21 -08:00 |
|
Tom Eastep
|
9e684a80c1
|
Move more code from Rules.pm to Actions.pm
|
2010-12-13 17:54:53 -08:00 |
|
Tom Eastep
|
5b0d8922e7
|
Consolidate definitions of rule exception command handling
|
2010-12-13 17:29:22 -08:00 |
|
Tom Eastep
|
0ec68c7407
|
Prune the Actions.pm export list
|
2010-12-13 16:55:00 -08:00 |
|
Tom Eastep
|
09bb5bb9b3
|
Use $macro_commands when splitting action file records
|
2010-12-13 16:46:40 -08:00 |
|
Tom Eastep
|
c18154cedc
|
NAT in Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-13 08:26:24 -08:00 |
|
Tom Eastep
|
ff402dcf09
|
Add a comment to the params for process_rule_common()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 13:02:27 -08:00 |
|
Tom Eastep
|
2e7dd0de97
|
Use process_rule_common() to process entries in action files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:55:32 -08:00 |
|
Tom Eastep
|
444a38ae2e
|
Add a chain reference argument to process_rule_common()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:22:12 -08:00 |
|
Tom Eastep
|
dfa47cc300
|
Implement format-2 Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:09:48 -08:00 |
|
Tom Eastep
|
1bbe95ead8
|
Allow wide macros in actions
|
2010-12-12 10:14:47 -08:00 |
|
Tom Eastep
|
acbbdc1690
|
Bump version in the Proxyarp module
|
2010-12-12 08:56:12 -08:00 |
|
Tom Eastep
|
13c4d21762
|
Replace a couple of lists of scalars with arrays; document move of process_rules1()
|
2010-12-12 07:29:46 -08:00 |
|
Tom Eastep
|
138e49276d
|
Rename process_rule1() to process_rule_common()
|
2010-12-11 17:19:43 -08:00 |
|
Tom Eastep
|
7b86c699b6
|
Move process_rule1() from Rules.pm to Actions.pm
|
2010-12-11 17:16:50 -08:00 |
|
Tom Eastep
|
48b00d719e
|
Complete Proxy NDP implementation
|
2010-12-11 10:04:07 -08:00 |
|
Tom Eastep
|
147e4da223
|
Ensure that interfaces listed in the tcinterfaces file are known
|
2010-12-11 07:39:16 -08:00 |
|
Tom Eastep
|
0344cdb294
|
Correct handling of proxyndp
|
2010-12-11 07:10:50 -08:00 |
|
Tom Eastep
|
1f4b218cde
|
Ensure that interfaces listed in the proxyarp (proxyndp) file are known
|
2010-12-11 07:10:23 -08:00 |
|
Tom Eastep
|
caa4a54e38
|
Implement IPv6 proxyndp
|
2010-12-10 19:06:44 -08:00 |
|
Tom Eastep
|
0a4e098c69
|
Fix broken logical naming in Proxy ARP
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-10 07:52:54 -08:00 |
|
Tom Eastep
|
fc6dbb3d56
|
Bump version to Beta 4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-10 06:53:36 -08:00 |
|
Tom Eastep
|
b9ee064284
|
Update version to Beta 4
|
2010-12-04 11:40:34 -08:00 |
|
Tom Eastep
|
19f40ab721
|
Bump version to Beta 3
|
2010-12-03 13:43:46 -08:00 |
|
Tom Eastep
|
2e35ad0a1b
|
Fix params parsing on older distros
|
2010-12-03 13:40:11 -08:00 |
|
Tom Eastep
|
5458d9367f
|
Bump version and document bug catcher
|
2010-12-03 09:17:26 -08:00 |
|
Tom Eastep
|
8ce1755f8e
|
Add bug-catcher to get_params()
|
2010-12-03 08:05:11 -08:00 |
|
Tom Eastep
|
04537b8f2d
|
Add some comments
|
2010-12-02 16:10:35 -08:00 |
|
Tom Eastep
|
4cd77bf9aa
|
Correct handling of params file opens.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-02 10:14:45 -08:00 |
|
Tom Eastep
|
ec75c8aa86
|
Redirect params output to stderr
|
2010-12-01 15:04:33 -08:00 |
|
Tom Eastep
|
f68bfde86f
|
Continue to fine-tune params processing
|
2010-12-01 13:57:16 -08:00 |
|
Tom Eastep
|
d33491d6c6
|
Continue to enhance params procesing
|
2010-12-01 13:18:10 -08:00 |
|
Tom Eastep
|
49cdc5d9eb
|
Make new get_params work with bash
|
2010-12-01 10:41:49 -08:00 |
|
Tom Eastep
|
22580c5be0
|
More parameter processing improvements
|
2010-12-01 10:11:02 -08:00 |
|
Tom Eastep
|
b224eb80d5
|
Omit warning message
|
2010-12-01 09:21:23 -08:00 |
|
Tom Eastep
|
cdb75bfd96
|
Better solution to multi-line exported symbols issue
|
2010-12-01 09:14:09 -08:00 |
|
Tom Eastep
|
5761bfd7d1
|
Document change to params processing
|
2010-12-01 08:16:41 -08:00 |
|
Tom Eastep
|
cae5ddc7e0
|
Initiate 4.4.16
|
2010-11-30 17:30:11 -08:00 |
|
Tom Eastep
|
6dc65e2811
|
Update Rules.pm version
|
2010-11-28 19:21:31 -08:00 |
|
Tom Eastep
|
81cc39049c
|
Cosmetic change
|
2010-11-28 09:22:03 -08:00 |
|
Tom Eastep
|
f45af8ff0a
|
Localize $current_params
|
2010-11-28 09:14:52 -08:00 |
|
Tom Eastep
|
ecb71f7791
|
Eliminate @param_stack
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-11-28 08:06:58 -08:00 |
|
Tom Eastep
|
4db68697b2
|
Fix root cause of macro.JAP failure
|
2010-11-28 07:42:12 -08:00 |
|
Tom Eastep
|
3a8634934a
|
Correct macro.JAP
|
2010-11-28 07:05:18 -08:00 |
|
Tom Eastep
|
b771ce2925
|
Clarify 'switch' in the Fool's firewall article
|
2010-11-27 10:28:44 -08:00 |
|
Tom Eastep
|
1ae9a3185a
|
Disallow standard providers in the routes file
|
2010-11-26 16:41:30 -08:00 |
|
Tom Eastep
|
053da3a2c0
|
Fix undefined value on HEADER_MATCH
|
2010-11-26 16:41:07 -08:00 |
|
Tom Eastep
|
d5fc0150d0
|
Set version to 4.4.15
|
2010-11-26 09:49:40 -08:00 |
|
Tom Eastep
|
2702d7f208
|
Implement header matching
|
2010-11-24 10:46:06 -08:00 |
|
Tom Eastep
|
70453f2648
|
Avoid regression in fixing syn flood chain names
|
2010-11-22 14:34:58 -08:00 |
|
Tom Eastep
|
f2f2ef713d
|
Update version of a couple of Perl Modules
|
2010-11-22 13:23:15 -08:00 |
|
Tom Eastep
|
9427510e8f
|
Update version to RC 1
|
2010-11-22 13:01:12 -08:00 |
|
Tom Eastep
|
93f9e8914c
|
Add another SNAT virtual alias example
|
2010-11-22 11:59:59 -08:00 |
|
Tom Eastep
|
2e4da207de
|
Update version to Beta 3
|
2010-11-21 09:52:34 -08:00 |
|
Tom Eastep
|
3ca3d64efe
|
Generate correct name for synflood chains
|
2010-11-18 20:32:20 -08:00 |
|
Tom Eastep
|
407b92829f
|
Another Perl 5.12 issue
|
2010-11-18 20:12:13 -08:00 |
|