Tom Eastep
|
b5e7e41708
|
Correct NFQUEUE! manpage description
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-07 05:50:24 -07:00 |
|
Tom Eastep
|
14e8568d9e
|
Add the FIREWALL .conf option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-05 15:03:54 -07:00 |
|
Tom Eastep
|
ca7ca4bdfe
|
Add a 'timeout' option to DYNAMIC_BLACKLIST
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-05 12:56:47 -07:00 |
|
Tom Eastep
|
8d731c81e4
|
Add 'disconnect' option to ipset-based dynamic blacklisting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-04 09:09:45 -07:00 |
|
Tom Eastep
|
6ad7d47eb6
|
Correct DYNAMIC_BLACKLISTING documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-03 08:19:19 -07:00 |
|
Tom Eastep
|
97186e5402
|
Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code
|
2016-10-02 14:04:02 -07:00 |
|
Roberto C. Sánchez
|
64ab43f14f
|
Fix typos
|
2016-10-02 17:01:46 -04:00 |
|
Tom Eastep
|
f989c2f5f6
|
Document 'persistent'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-30 11:34:57 -07:00 |
|
Tom Eastep
|
792b3b696c
|
Add ZERO_MARKS option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-26 16:04:26 -07:00 |
|
Tom Eastep
|
ef4b1c2030
|
Add a TIME Columns section to the config file basics doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-22 15:45:18 -07:00 |
|
Tom Eastep
|
8065e62f12
|
Support for the 'contiguous' option in TIME columns
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-22 14:22:11 -07:00 |
|
Tom Eastep
|
e81a4788c6
|
Implement DEFAULT_PAGER in shorewallrc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-21 10:20:48 -07:00 |
|
Tom Eastep
|
8bb7c2363b
|
Support '+' after a zone list in the policy files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-10 10:06:38 -07:00 |
|
Tom Eastep
|
2c90a8bfb5
|
Allow zone lists in the SOURCE and DEST columns of the policy files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-09-10 08:47:48 -07:00 |
|
Tom Eastep
|
a05b957498
|
Corrections in the shorewall[6].conf manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-08-15 10:24:23 -07:00 |
|
Tom Eastep
|
0b9cd93769
|
Default DSCP rules to the POSTROUTING chain
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-07-27 13:59:15 -07:00 |
|
Tom Eastep
|
4a6338d857
|
Correct/complete Scott Sumate's LOGFILE enhancement
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-07-15 14:25:02 -07:00 |
|
Tom Eastep
|
e71fb3249a
|
Add 'dbl' interface option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-06-15 16:35:41 -07:00 |
|
Tom Eastep
|
4869f61a25
|
'allow' now works with ipset-based dynamic blacklisting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-06-09 08:44:25 -07:00 |
|
Tom Eastep
|
9b7088158b
|
Correct ipv6-route header number
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-05-10 07:12:01 -07:00 |
|
Tom Eastep
|
590243a787
|
Add NFLOG as a supported mangle action
- Also document nflog-parameters
- Correct range of nflog groups
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-05-03 11:27:34 -07:00 |
|
Tom Eastep
|
b7de785396
|
Correct typo in manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-30 08:34:43 -07:00 |
|
Tom Eastep
|
24d40f4cc2
|
Add VERBOSE_MESSAGES option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-30 08:00:56 -07:00 |
|
Tom Eastep
|
71bd7a4647
|
Update the STARTUP_LOG description in shorewall[6].conf
- Update list of commands
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-19 07:49:37 -07:00 |
|
Tom Eastep
|
2b7ef0fe32
|
Update the tcclasses manpage to discuss fw mark filter priority
- Also correct default priorities for tos= and tcp-ack
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-18 09:18:48 -07:00 |
|
Tom Eastep
|
32f888a7d4
|
Add an ENVIRONMENT section to the CLI manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-15 15:41:55 -07:00 |
|
Tom Eastep
|
dbd42e1d5d
|
More ipset fixes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-12 16:29:13 -07:00 |
|
Tom Eastep
|
deaaecdf1c
|
Add 'nodbl' interface option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-10 16:09:39 -07:00 |
|
Tom Eastep
|
05e4049174
|
Ipset-based blacklisting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-10 16:07:56 -07:00 |
|
Tom Eastep
|
ef10515a42
|
Correct FASTACCEPT description
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-10 07:20:45 -07:00 |
|
Tom Eastep
|
e9467326f3
|
Allow allow REJECT to take a parameter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-05 11:20:44 -07:00 |
|
Tom Eastep
|
81d76e3817
|
Document + in the MODULESDIR setting.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-04-01 09:43:06 -07:00 |
|
Roberto C. Sánchez
|
899a317c95
|
Fix typos
|
2016-03-26 22:25:30 -04:00 |
|
Tom Eastep
|
273c89a753
|
Implement MARK and CONNMARK in the rules file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-18 11:42:58 -07:00 |
|
Tom Eastep
|
eed7692952
|
Document the state action option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-14 15:15:32 -07:00 |
|
Tom Eastep
|
95da427ea8
|
Update manpages for 'audit' actions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-13 15:53:31 -07:00 |
|
Tom Eastep
|
ec9148637f
|
Inline mangle actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-09 10:28:02 -08:00 |
|
Tom Eastep
|
1add0487f6
|
Document Mangle Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-07 14:56:20 -08:00 |
|
Tom Eastep
|
d4e2508a90
|
Clarify USE_DEFAULT_RT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-04 14:26:42 -08:00 |
|
Tom Eastep
|
90d254f0c3
|
Add PAGER option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-03-02 08:32:49 -08:00 |
|
Tom Eastep
|
7a9e9ad945
|
Decommit DOCKER=Yes in IPv6.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-02-21 12:03:41 -08:00 |
|
Tom Eastep
|
e66d9f6547
|
Add DOCKER option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-02-19 17:42:54 -08:00 |
|
Tom Eastep
|
94cfe54f92
|
Allow routing tables with no default route
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-02-17 11:49:09 -08:00 |
|
Tom Eastep
|
9b3b4579a2
|
Change TRACK_RULES setting from Internal to File
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-24 16:15:36 -08:00 |
|
Tom Eastep
|
3e404b765f
|
Make .ip[6]tables-restore-input comments conditional
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-23 17:04:52 -08:00 |
|
Tom Eastep
|
12513e24a3
|
Revert "Implement dynamic actions"
This reverts commit 8075ba719a .
|
2016-01-13 11:04:41 -08:00 |
|
Tom Eastep
|
8075ba719a
|
Implement dynamic actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-13 09:33:38 -08:00 |
|
Tom Eastep
|
3828eb856b
|
Rename HADIVERT to DIVERTHA
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-08 15:36:10 -08:00 |
|
Tom Eastep
|
e29e2d117d
|
Documentation updates
- update LSM section of the Multi-ISP article
- Correct formatting of HAPROXY examples
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-08 08:33:42 -08:00 |
|
Tom Eastep
|
ad2f20b824
|
Finish HAProxy support
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-01-06 09:12:33 -08:00 |
|
Tom Eastep
|
c9f57ad9c9
|
Update manpages for ADD timeout
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-12-24 09:20:42 -08:00 |
|
Tom Eastep
|
8e7f001f7e
|
Update manpages for column renaming
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-12-04 14:53:26 -08:00 |
|
Tom Eastep
|
b087cee7f0
|
Redefine MODULESDIR
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-11-28 08:36:12 -08:00 |
|
Tom Eastep
|
7fb00e0dfe
|
Remove the routestopped files and their manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-11-09 07:28:46 -08:00 |
|
Tom Eastep
|
3973cdf0da
|
Merge branch '5.0.1'
|
2015-10-28 14:35:27 -07:00 |
|
Tom Eastep
|
35b90c2709
|
Update documentation for 'remote-' vs. 'remote_'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-10-27 08:16:06 -07:00 |
|
Tom Eastep
|
69dd7ce0b9
|
Add 'persistent' provider option - Phase II
- Also allow the creation of 'persistent' routing rules and routes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-10-25 16:45:11 -07:00 |
|
Tom Eastep
|
0dbe756e93
|
Manpage and Shorewall-5 changes for RESTART
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-10-12 13:49:24 -07:00 |
|
Tom Eastep
|
1db3bfb53e
|
Manpage updates
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-10-10 13:19:41 -07:00 |
|
Tom Eastep
|
1b571f3d86
|
Correct the reset command
- Also allow chain names to be specified a la the refresh command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-11 14:16:16 -07:00 |
|
Tom Eastep
|
7be4190e4c
|
Man page updates for the PROBABILITY column in the masq files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-08 18:00:53 -07:00 |
|
Tom Eastep
|
0db233bf7c
|
Correct shorewall6 mangle man page
- Replace 'TTL' by 'HL'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-08 12:26:29 -07:00 |
|
Tom Eastep
|
17d1caf8c5
|
Allow tags in global LOG_LEVELs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-06 16:08:59 -07:00 |
|
Tom Eastep
|
07976556ed
|
More inline match documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-03 09:45:39 -07:00 |
|
Tom Eastep
|
ba3dba78ff
|
Correct more Mangle examples
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-09-02 13:07:20 -07:00 |
|
Tom Eastep
|
ed90360b4c
|
Remove all of the update-specific options from the update command
Leave -i and -A
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-31 14:21:41 -07:00 |
|
Tom Eastep
|
60e08322c5
|
Update man pages for 'minute' and 'second' in LOGLIMIT specifications
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-31 11:14:37 -07:00 |
|
Tom Eastep
|
b2b3300ebf
|
Correct the shorewall6-hosts man page
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-26 12:30:08 -07:00 |
|
Tom Eastep
|
f9ae28aeea
|
The -t option also converts the 'tos' file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-24 14:56:24 -07:00 |
|
Tom Eastep
|
2451c14d8c
|
Some rules manpage updates
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-22 08:27:52 -07:00 |
|
Tom Eastep
|
a30fdb356d
|
Update man pages for required '?' in COMMENT, SECTION and FORMAT lines
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-22 08:00:38 -07:00 |
|
Tom Eastep
|
f4776bf388
|
Eliminate WIDE_TC_MARKS, HIGH_ROUTE_MARKS and BLACKLISTNEWONLY
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-21 12:42:19 -07:00 |
|
Tom Eastep
|
c59cb1351c
|
Update manpages for new update options
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-20 11:08:10 -07:00 |
|
Tom Eastep
|
2162d79b5f
|
Manual Page Uptates
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-03 15:09:16 -07:00 |
|
Tom Eastep
|
037e92a60e
|
Eliminate some config options
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-01 14:28:12 -07:00 |
|
Tom Eastep
|
2165f746e6
|
Update .conf documents for 'reload'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-08-01 12:58:08 -07:00 |
|
Tom Eastep
|
85648bded1
|
Deimplement several .conf options
- LOGRATE/LOGBURST
- EXPORTPARAMS
- LEGACY_FASTSTART
|
2015-08-01 11:11:35 -07:00 |
|
Tom Eastep
|
fa7248c58c
|
Add the LEGACY_RESTART option.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-07-27 09:19:52 -07:00 |
|
Tom Eastep
|
0a7c65ae0d
|
Allow connlimit by destination
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-07-26 14:26:58 -07:00 |
|
Tom Eastep
|
34f58bd6ac
|
Correct formatting in the rules file man pages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-07-26 11:36:14 -07:00 |
|
Tom Eastep
|
f9ec0c6930
|
New 'reload' and 'restart' semantics
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-07-26 09:59:49 -07:00 |
|
Tom Eastep
|
df817b6d2c
|
Correct formatting in the interfaces man pages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-07-13 13:06:53 -07:00 |
|
Tom Eastep
|
0414166d6d
|
'show connections' enhancement
- Allow tayloring of the entries displayed by specifying conntrack
-L options.
|
2015-06-29 14:55:47 -07:00 |
|
Tom Eastep
|
7153146759
|
Don't ask for script version when WORKAROUNDS=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-06-28 09:18:47 -07:00 |
|
Tom Eastep
|
7c9155a6e8
|
Update man pages and .conf files for WORKAROUNDS
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-06-06 07:56:14 -07:00 |
|
Tom Eastep
|
f227250959
|
Fix NFQUEUE parsing and documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-29 18:19:35 -07:00 |
|
Tom Eastep
|
425094de18
|
Mention load= warning (sum not 1.000000)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-25 10:31:08 -07:00 |
|
Tom Eastep
|
bbdbdf7c47
|
Clean up 'call' description in the manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-25 07:06:17 -07:00 |
|
Tom Eastep
|
df4d6f1f92
|
Document load= in the providers manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-22 16:31:21 -07:00 |
|
Tom Eastep
|
ba7afcaeae
|
Make 'call' a supported command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-21 10:38:35 -07:00 |
|
Tom Eastep
|
267637f139
|
NFQUEUE enhancements
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-20 10:55:21 -07:00 |
|
Tom Eastep
|
acd921cd08
|
Don't require a helper for ctevents and expevents
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-16 13:40:40 -07:00 |
|
Tom Eastep
|
9329e7c36c
|
Don't require a helper in the CT action.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-05-16 09:08:32 -07:00 |
|
Tom Eastep
|
2cea78e6df
|
Add the 'reenable' command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-28 13:02:12 -07:00 |
|
Tom Eastep
|
6cb3004a39
|
Clarify helper module loading
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-17 09:51:25 -07:00 |
|
Tom Eastep
|
f5aa0373cb
|
Correct interfaces example 4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-12 08:38:55 -07:00 |
|
Tom Eastep
|
16e3cb1b43
|
More manpage updates
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-07 10:14:42 -07:00 |
|
Tom Eastep
|
27c1ffc5fb
|
Include full syntax in lists of CLI commands
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-07 09:23:58 -07:00 |
|
Tom Eastep
|
0e54a86e82
|
Add descriptions of 'list' and 'ls' to the CLI manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-04-06 09:39:41 -07:00 |
|
Tom Eastep
|
b00a7af619
|
Allow a comma-separated list in the rtrules file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2015-03-18 15:16:25 -07:00 |
|