Tom Eastep
|
e84ee76c7d
|
Add helpers to macros
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-09 10:32:34 -07:00 |
|
Tom Eastep
|
2ab50e65d7
|
Make conditional directives case insensitive
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-09 10:30:02 -07:00 |
|
Tom Eastep
|
2690243e3c
|
Add helpers in the macros
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-09 07:36:04 -07:00 |
|
Tom Eastep
|
8f71797a48
|
Update upgrade doc to mention both SHA and SHA1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-08 10:51:06 -07:00 |
|
Tom Eastep
|
4d3fbd1dfa
|
Allow '?IF 0'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-08 07:24:17 -07:00 |
|
Tom Eastep
|
e8a4728981
|
Allow '?IF 0'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-08 07:23:43 -07:00 |
|
Tom Eastep
|
ee28638604
|
Add HELPERS to rules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-08 07:23:20 -07:00 |
|
Tom Eastep
|
a8495626b0
|
Merge branch '4.5.6' into 4.5.7
|
2012-08-07 15:10:15 -07:00 |
|
Tom Eastep
|
c6186571e5
|
Handle raw table zones from VSERVERS
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-07 15:09:40 -07:00 |
|
Tom Eastep
|
ccf517307e
|
Handle raw table zones from VSERVERS
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-07 14:51:58 -07:00 |
|
Tom Eastep
|
88dabde9c9
|
Update upgrade-issues doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-07 09:10:21 -07:00 |
|
Tom Eastep
|
e00616a1fe
|
Don't release blacklist files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-07 07:56:16 -07:00 |
|
Tom Eastep
|
c007f847a0
|
Handle disabled helpers in pre-3.5 kernels.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-06 15:54:45 -07:00 |
|
Tom Eastep
|
4b4e30d4e1
|
Handle disabled helpers in pre-3.5 kernels.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-06 13:10:15 -07:00 |
|
Tom Eastep
|
56caf3687f
|
Factor out the ?IF __CT_TARGET tests in the conntrack files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-06 09:26:14 -07:00 |
|
Tom Eastep
|
b4c812b676
|
Correct helper parsing in the Raw module.
- Require (...) around multiple ctevents
- Detect invalid options
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-05 08:09:17 -07:00 |
|
Tom Eastep
|
9a0d53194a
|
Correct Helper detection in the compiler.
Use CT_MATCH when available.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-05 08:08:20 -07:00 |
|
Tom Eastep
|
49fb2799e9
|
Correct detection of 'netbios-ns' in the CLIs.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-05 08:07:19 -07:00 |
|
Tom Eastep
|
6c97e13107
|
Use -j CT for helper detection, when available
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-04 11:36:03 -07:00 |
|
Tom Eastep
|
cfe2f36320
|
Delete duplicate entry in the Shorewall[6] install.sh
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-04 08:23:08 -07:00 |
|
Tom Eastep
|
6fbb578ce6
|
Add Helpers Document
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-04 07:28:13 -07:00 |
|
Tom Eastep
|
093985dd93
|
Use HELPERS to enable/disable helper association.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-03 19:26:02 -07:00 |
|
Tom Eastep
|
72307df6d2
|
Replace the AUTOHELPERS option with the HELPERS option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-03 10:53:20 -07:00 |
|
Tom Eastep
|
7689b1e84b
|
Remove the 'zone' helper option for now.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-03 06:39:58 -07:00 |
|
Tom Eastep
|
9ceff3c213
|
Display KERNELVERSION and CAPVERSION in 'show capabilities'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 17:38:41 -07:00 |
|
Tom Eastep
|
82c057d1ed
|
Fix *VERSION handling.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 16:44:02 -07:00 |
|
Tom Eastep
|
21770a89d6
|
Detect which matches are available.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 15:38:23 -07:00 |
|
Tom Eastep
|
223ed5b3a3
|
More additions to the helper table and to the conntrack files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 13:25:44 -07:00 |
|
Tom Eastep
|
2ae59bb3cd
|
Add COMMENT directives to conntrack file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:58:00 -07:00 |
|
Tom Eastep
|
c2cd031285
|
Mention the conntrack file in the config basics doc.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:31:25 -07:00 |
|
Tom Eastep
|
9ba0c07956
|
Redesign the CT:helper feature.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:10:08 -07:00 |
|
Tom Eastep
|
7d32258e6e
|
Correct Helpers Module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:09:34 -07:00 |
|
Tom Eastep
|
07e56d129a
|
Add AUTOHELPERS option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:09:18 -07:00 |
|
Tom Eastep
|
62d6d2558e
|
Rename AUTO_COMMENT to AUTOCOMMENT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:06:41 -07:00 |
|
Tom Eastep
|
833e54c9c3
|
Rename the notrack file to conntrack
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-02 11:02:17 -07:00 |
|
Tom Eastep
|
f2dd43855e
|
Correct typo in warning message
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-01 13:13:18 -07:00 |
|
Tom Eastep
|
eaf238fa66
|
Merge branch '4.5.6'
|
2012-08-01 10:37:45 -07:00 |
|
Tom Eastep
|
542f279544
|
Don't allow a source interface in a DNAT/REDIRECT rule with source == firewall
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-08-01 10:01:08 -07:00 |
|
Tom Eastep
|
917e2980a4
|
Correct error message generation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-30 09:22:43 -07:00 |
|
Tom Eastep
|
c8ea03bf8c
|
Update help text
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-30 07:23:53 -07:00 |
|
Tom Eastep
|
ac6e67e371
|
Correct typo in rules manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-30 07:23:40 -07:00 |
|
Tom Eastep
|
735b7c2cf5
|
Add support for nfacct
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-28 11:21:16 -07:00 |
|
Tom Eastep
|
87c0f934aa
|
Add NFacct Match capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-28 08:19:05 -07:00 |
|
Tom Eastep
|
55519bd9ac
|
Revise instructions for disabling iptables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-17 16:48:15 -07:00 |
|
Tom Eastep
|
c0e4d4093c
|
Clarify TOS value
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-16 15:53:22 -07:00 |
|
Tom Eastep
|
55b527d065
|
Eliminate a local variable.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-15 20:22:19 -07:00 |
|
Tom Eastep
|
620d8f1cd0
|
Add an Anti-spoofing document
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-15 11:26:16 -07:00 |
|
Tom Eastep
|
e1e7ab42c1
|
Make 'routefilter' and 'sfilter' mutually exclusive
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-15 10:37:56 -07:00 |
|
Tom Eastep
|
65b16a1acf
|
Compensate for bugs in the latest CPerl emacs extension
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-15 10:07:06 -07:00 |
|
Tom Eastep
|
1db79a91eb
|
'rpfilter' option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2012-07-15 10:05:32 -07:00 |
|