Tom Eastep
83ae6d6eba
Document fix for 'SAME'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-09-11 09:04:42 -07:00
Tom Eastep
05b6947aac
Document fix for ipset invocation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-09-11 08:55:35 -07:00
Tom Eastep
f3255cd83a
Rework blacklisting
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-09-06 15:29:20 -07:00
Tom Eastep
b139ff7e90
Update docs and implementation of SECMARK
2010-09-04 16:08:29 -07:00
Tom Eastep
28ff3548ff
Bump version to 4.4.13-Beta4
2010-09-04 15:30:02 -07:00
Tom Eastep
15d8d6d8b7
Add SECMARK and CONNSECMARK support
2010-09-04 15:12:08 -07:00
Tom Eastep
add76ed14e
Bump version to 4.4.13 Beta 3
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-30 12:33:10 -07:00
Tom Eastep
57c54af6ed
Re-implement optional interface handling
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-29 12:32:44 -07:00
Tom Eastep
c2558af9c8
Document and correct implementation of EXCLUSION_MASK
...
1. Require KLUDGEFREE if existing rule uses mark match
2. Pretty up the code
3. Use MASK_BITS rather than TC_BITS when calculating the offset of EXCLUSION_MASK
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-28 08:29:47 -07:00
Tom Eastep
c98cf8aea6
Re-implement exclusion in CONTINUE/NONAT/ACCEPT+ rules
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-27 10:09:42 -07:00
Tom Eastep
dc74b88445
Fix typo in release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-26 07:16:28 -07:00
Tom Eastep
75e12148ac
Bump version to Beta 2
2010-08-25 09:58:07 -07:00
Tom Eastep
8f94240e8f
Fix a couple of optimization bugs
2010-08-23 16:00:40 -07:00
Tom Eastep
ec09b92c4c
Correct Release Notes
2010-08-23 12:38:58 -07:00
Tom Eastep
647f4bf6eb
Update release notes
2010-08-22 14:35:01 -07:00
Tom Eastep
e70d9c82d8
Revise and document IPSEC Accounting
...
- Place accounting rules in accipsecin and accipsecout
- Add warning when rule inserted into unreferenced accounting chain
- Add warning when an accounting chain has no references
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-20 08:24:45 -07:00
Tom Eastep
4322d7b2af
Zone exclusion
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-18 16:10:58 -07:00
Tom Eastep
4460b49842
Complete Zone list Support
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-18 14:38:53 -07:00
Tom Eastep
66d4379962
Reorder sections of the Release Notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-18 12:22:42 -07:00
Tom Eastep
255cd6cf9c
Implement zone lists in rules file entries
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-18 12:18:58 -07:00
Tom Eastep
633eba6c90
Set version to 4.4.12
2010-08-15 08:50:45 -07:00
Tom Eastep
42362ea318
Document fix for AUTOMAKE
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-14 07:55:45 -07:00
Tom Eastep
b7f638ddb3
Document status command change
2010-08-12 19:46:57 -07:00
Tom Eastep
7168257152
Document port range editing fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-12 11:52:43 -07:00
Tom Eastep
92eed0d23c
Document fix for any bug
2010-08-12 07:35:45 -07:00
Tom Eastep
aa00acc310
Correct typo in release notes
2010-08-11 16:09:12 -07:00
Tom Eastep
0234564a1b
Add destination IP blacklisting
2010-08-10 17:33:50 -07:00
Tom Eastep
d9cbbea36a
Delete extra item in enhancement list
2010-08-07 14:06:20 -07:00
Tom Eastep
1a4d84d502
Document fix to install.sh
2010-08-07 09:34:19 -07:00
Tom Eastep
59829565f5
Add COMPLETE to release notes
2010-08-06 19:30:33 -07:00
Tom Eastep
364ad41cf5
Add support for new ipset match syntax
2010-08-03 21:06:17 -07:00
Tom Eastep
2774ee1bd6
Make 'icmp' a synonym for 'ipv6-icmp' in IPv6 compilations
2010-08-02 08:04:55 -07:00
Tom Eastep
3ce8ff5741
Bump version to Beta 4
2010-08-01 16:10:32 -07:00
Tom Eastep
967629569b
Taylor Universal config to work with Shorewall-init and streamline ruleset
...
- Make interface 'all' optional and set REQUIRE_INTERFACE=Yes
- Add COMPLETE option
- Set FASTACCEPT in Universal samples
- Reset SUBSYSLOCK in Universal samples
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-08-01 08:36:56 -07:00
Tom Eastep
2f08ec4dd6
Update version in release notes
2010-07-31 14:06:49 -07:00
Tom Eastep
4e02031985
Document Universal Configuration
2010-07-31 11:59:25 -07:00
Tom Eastep
0b8ddeeed4
Correct typo in release notes
2010-07-29 12:49:26 -07:00
Tom Eastep
a639b75e36
Bump version to RC1
2010-07-29 11:40:15 -07:00
Tom Eastep
e00517f075
Add Vserver support as a release highlight
2010-07-29 11:38:43 -07:00
Tom Eastep
8f27a2461d
Fix syntax diagram
2010-07-25 13:08:15 -07:00
Tom Eastep
bd5facda30
Implement per-IP log rate limiting
2010-07-25 12:42:39 -07:00
Tom Eastep
9bf06caa35
Bump version to Beta 2
2010-07-25 08:11:49 -07:00
Tom Eastep
55b596ddb2
Update release notes version and document Shorewall-init fixes
2010-07-23 11:09:05 -07:00
Tom Eastep
055f92c3d2
Document fix for :random with REDIRECT
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-22 07:28:43 -07:00
Tom Eastep
cbb524b067
Implement ADD/DEL commands
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-18 08:46:38 -07:00
Tom Eastep
47961f3fd5
Update release notes to mention link local network error
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-16 10:19:29 -07:00
Tom Eastep
27937f32e3
Document IPv6 multicast network fix
2010-07-16 09:37:38 -07:00
Tom Eastep
e0ae48f4c4
Document fix for IPv6 shorecap program
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-15 13:32:10 -07:00
Tom Eastep
4792d1e5f1
Fix nets= in Shorewall6
2010-07-11 19:52:18 -07:00
Tom Eastep
5a5546ef1b
Set version to 4.4.11
2010-07-09 09:01:08 -07:00
Tom Eastep
02fab09a14
Add PERL= option to shorewall.conf and shorewall6.conf
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-05 13:11:52 -07:00
Tom Eastep
4547067da9
Document fix for missing closing quote
2010-07-05 11:43:37 -07:00
Tom Eastep
aa6bb6e911
Improve wording of FORWARD_CLEAR_MARK description
2010-07-05 07:53:31 -07:00
Tom Eastep
898c3a045f
Bump version to RC1
2010-07-05 07:08:06 -07:00
Tom Eastep
312624cef5
Fix NET3 bug (netmap)
2010-07-04 15:58:37 -07:00
Tom Eastep
7689831cd7
Minor cleanup of 4.4.11 Beta 3.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-04 09:29:16 -07:00
Tom Eastep
2ee4fd8f5a
Add FWMARK_RT_MASK capability.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-04 09:08:04 -07:00
Tom Eastep
d3e30b5fe4
Add FORWARD_CLEAR_MARK option
2010-07-03 17:03:42 -07:00
Tom Eastep
5d1e19364a
Bump version to Beta 3
2010-07-03 10:54:39 -07:00
Tom Eastep
364cddf99b
Update release documents for find_hosts_by_option() fix
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-02 07:40:30 -07:00
Tom Eastep
e4afc15370
Finish Vserver Implementation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-30 20:35:46 -07:00
Tom Eastep
9e37fe1ffa
Deimplement flawed rate limiting with simple TC
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-26 07:42:08 -07:00
Tom Eastep
fe27554fd0
Document undefined value issue
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-24 14:18:48 -07:00
Tom Eastep
cc376ab72e
Update release documents for REQUIRE_INTERFACE
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-23 13:00:00 -07:00
Tom Eastep
d5aaa97d4e
Update release documents for changes ported from the 4.4.10 branch
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-22 08:40:07 -07:00
Tom Eastep
efa4cfa921
Update release documents for 4.4.11 Beta 1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-18 12:09:43 -07:00
Tom Eastep
503b1cf795
Update release note version banner
2010-06-16 16:46:56 -07:00
Tom Eastep
625f254d02
Add tcfilters to manpage index
2010-06-10 06:15:15 -07:00
Tom Eastep
0978f3d41a
More periodic removal of trailing white space
2010-06-07 09:16:56 -07:00
Tom Eastep
b741ff2a81
Document first 4.4.11 features
2010-06-06 20:40:39 -07:00
Tom Eastep
b3370dfd78
Initiate 4.4.11
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-06 13:36:45 -07:00
Tom Eastep
742a3b2eef
Make wait and required work on wildcard interfaces
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-04 10:35:45 -07:00
Tom Eastep
82a74d7534
Resolve Optional/Required interfaces with wildcard names
...
Optional is allowed
Required is not
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-04 08:46:29 -07:00
Tom Eastep
165535cd8b
Disallow wildcard optional/required interfaces
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-04 07:18:55 -07:00
Tom Eastep
43afd03b9b
Bump version to 4.4.10
2010-06-03 11:18:02 -07:00
Tom Eastep
c52d0c4d9f
Update release notes for 'version -a'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-31 08:05:33 -07:00
Tom Eastep
47c4cbd85a
Remove extra step in DSL modem access
2010-05-30 11:31:41 -07:00
Tom Eastep
5bd1bac70d
Document fix for optimization bug
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-29 09:13:52 -07:00
Tom Eastep
e29d6d080d
Restore -a functionality to the version command
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-29 08:59:45 -07:00
Tom Eastep
3125a4d0d3
Restore RPM RedHat compatibility
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-27 06:49:49 -07:00
Tom Eastep
cc269d5d19
Make RPM SuSE-only
2010-05-26 18:49:33 -07:00
Tom Eastep
3db31f2f65
Add SAFESTOP setting to /etc/default/shorewall*.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-25 07:16:02 -07:00
Tom Eastep
eaad566978
Update documents for Shorewall-lite
2010-05-20 17:06:53 -07:00
Tom Eastep
182f433772
Add note about supported distributions to release notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-20 06:32:34 -07:00
Tom Eastep
50dc02da07
Implement the 'REQUIRE_INTERFACE' option.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-19 07:32:02 -07:00
Tom Eastep
4e748f9255
Add Shorewall-init manpage and update release notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-18 20:40:03 -07:00
Tom Eastep
4690075ed8
Start firewall on up event for optional interface.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-18 20:29:03 -07:00
Tom Eastep
1eb5e5b081
Fail the install on unknown distros.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-18 15:30:53 -07:00
Tom Eastep
9c5fb89b4c
Improve documentation in the release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-18 14:55:16 -07:00
Tom Eastep
0c9a0150d2
Document Shorewall-init; delete old auto-stop code
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-18 14:42:39 -07:00
Tom Eastep
679ad6cf04
Allow OS X to be an Administrative System
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-06 09:07:16 -07:00
Tom Eastep
96bef5bd49
Assume 'routeback' in routestopped based on interface config.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-03 12:31:11 -07:00
Tom Eastep
fca404eeaf
Update version to 4.4.9
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-03 10:02:02 -07:00
Tom Eastep
70c6a2cdf3
Update version to 4.4.9-RC2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-02 07:25:50 -07:00
Tom Eastep
16161d9cfc
Add new trace types.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-05-01 06:43:09 -07:00
Tom Eastep
2864841a9e
Correct release notes
...
update version to RC1
correct typo
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-29 11:21:31 -07:00
Tom Eastep
a997d6507d
Update release notes with more common example of failure.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-28 08:09:10 -07:00
Tom Eastep
039668b333
Update release notes to reflect reality.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-28 06:57:45 -07:00
Tom Eastep
2c1cede54e
Revise addressless bridge change
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-27 15:23:38 -07:00
Tom Eastep
d8b0f496df
Allow simple configuration of a bridge with no IP address
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-27 12:26:58 -07:00
Tom Eastep
f49848bd5b
Document rare optimization fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-26 16:32:53 -07:00
Tom Eastep
fb2ddcee7b
Bump Version to 4.4.9 Beta 5
2010-04-24 21:53:12 -07:00
Tom Eastep
2cb3bac946
Document fix for find_first_interface_address()
2010-04-23 12:18:51 -07:00
Tom Eastep
64bf772594
Set OUTPUT policy to ACCEPT when optimize_chain deletes all of its rules
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-22 13:38:38 -07:00
Tom Eastep
b0b39cfc39
Document optimization level 2 fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-22 11:55:13 -07:00
Tom Eastep
a0abb11f67
Extend 'show log <ipaddr>' to search for a regular expression.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-19 13:02:21 -07:00
Tom Eastep
8c09f21e5d
Implement 'show log <token>'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-19 10:20:28 -07:00
Tom Eastep
938cfd7ba4
Don't create fw-><bport> chains and rules.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-16 12:29:51 -07:00
Tom Eastep
8e1284f74c
Document OPTIMIZE=15
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-16 09:17:12 -07:00
Tom Eastep
21b44ac42b
Change version to 4.4.9-Beta4
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-16 07:25:53 -07:00
Tom Eastep
dde540c42d
Update release notes for optimize 4 problems.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-15 12:44:37 -07:00
Tom Eastep
9ad5ee1818
Add correct release id.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-15 07:25:35 -07:00
Tom Eastep
aeb90969f7
Optimize 8 Documentation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-14 17:12:25 -07:00
Tom Eastep
91a711b34f
Document startup log fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-10 11:54:54 -07:00
Tom Eastep
1e078b8c8d
Use splice() to delete rules from chains
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-09 09:38:03 -07:00
Tom Eastep
2f3f591af1
Document removal of fallback scripts.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-09 07:43:36 -07:00
Tom Eastep
56bc28a182
Prepare 4.4.9 Beta 3
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-09 07:32:21 -07:00
Tom Eastep
ab1a27ca2a
Update version to 4.4.9 Beta 2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-08 13:14:51 -07:00
Tom Eastep
359c221783
Keep rules arrays compressed throughout the compilation process
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-08 12:53:30 -07:00
Tom Eastep
c668707aac
Update release docs with optimize 4 fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-07 20:18:56 -07:00
Tom Eastep
9d7d7e06d8
Update release documents
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-07 14:43:50 -07:00
Tom Eastep
3b317afb2f
Add mDNS macro from Vincent Smeets.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-03 15:57:50 -07:00
Tom Eastep
c57ee7d68d
Update release notes with additional trace information.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-30 07:23:17 -07:00
Tom Eastep
dc7d4bdb09
Document CS->GS trace change.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-29 09:50:42 -07:00
Tom Eastep
db2bed06d8
Add 'T' to the documented netfilter trace types.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-29 08:31:12 -07:00
Tom Eastep
b261a5b2ec
Document netfilter trace types.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-29 07:23:17 -07:00
Tom Eastep
1fd656b8c9
Tweak trace facility
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-28 15:31:05 -07:00
Tom Eastep
3b07053d3b
Document new 'trace' facility
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-28 14:37:22 -07:00
Tom Eastep
5a36606167
Document fix of EXTERNAL handling in proxyarp.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-25 12:13:52 -07:00
Tom Eastep
a0a5c55a63
Add omitted defect to 4.4.8 problems corrected
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-25 10:14:39 -07:00
Tom Eastep
05752dcf0b
Auto-detection of bridges -- release documents.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-23 08:58:44 -07:00
Tom Eastep
914d829a49
Don't optimize the 'blacklst' chain
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-22 06:47:39 -07:00
Tom Eastep
6fc347b9be
Prepare 4.4.9-Beta1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-20 07:06:47 -07:00
Tom Eastep
fae29bcf6f
Change version to 4.4.8
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-19 10:17:32 -07:00
Tom Eastep
91bc3b3293
Mark a restored configuration as 'Restored' rather than 'Started'.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-17 10:10:56 -07:00
Tom Eastep
1177540fd8
Update version to RC2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-16 12:39:35 -07:00
Tom Eastep
a01fa345b7
Add support for UDP Lite
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-16 09:42:50 -07:00
Tom Eastep
fb4f7ebd67
Update release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-08 08:18:10 -08:00
Tom Eastep
ce8d1cbc59
Change port range in release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-07 08:39:09 -08:00
Tom Eastep
f246f728e7
Flag '-' used as a port range separator
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-07 08:36:26 -08:00
Tom Eastep
49c1350aa0
Documentation for final cleanup of variable names
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-03 10:28:09 -08:00
Tom Eastep
8cfcacc862
Update release document with fix for multiple policy matches
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-01 08:40:20 -08:00
Tom Eastep
53c73bc8e9
Eliminate VERBOSE
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-28 17:58:01 -08:00
Tom Eastep
d2992c21f4
Update version to Beta 2
2010-02-28 09:04:37 -08:00
Tom Eastep
c9c957c5b8
HKP Macro
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-28 07:37:16 -08:00
Tom Eastep
3c4b41fbe0
Implement -s option in the major installers
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-27 11:48:39 -08:00
Tom Eastep
061d850c16
Rename RESTOREPATH to g_restorepath
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-26 08:35:50 -08:00
Tom Eastep
c1ac19a81e
Correct a couple of typos
2010-02-25 16:35:19 -08:00
Tom Eastep
8aaddf368b
More reserved variable names documented
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-25 12:37:22 -08:00
Tom Eastep
e66b8759d6
Document variable name changes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-25 12:18:41 -08:00
Tom Eastep
7fe7ebc891
Fix Handling of NFQUEUE(queue-num) in policies
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-25 08:44:28 -08:00
Tom Eastep
4415050fd2
Eliminate another reserved variable name
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-23 17:00:26 -08:00
Tom Eastep
5696742ef3
Update release Document with 4.4.7.5 changes and Debian Init Script Fix
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-20 08:34:47 -08:00
Tom Eastep
4e0225a4c3
Update Documentation for per-IP rate limiting fixes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-18 07:12:36 -08:00
Tom Eastep
ea8a6c837f
Document per-IP rate change
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-17 15:41:12 -08:00
Tom Eastep
115ce7b87d
Update release documents for bug fixes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-17 06:49:13 -08:00
Tom Eastep
ec95e5b32c
Document fix for rate limiting of NAT rules
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-13 09:11:14 -08:00
Tom Eastep
5a96771e07
Start 4.4.8 Beta 1
2010-02-11 15:46:57 -08:00
Tom Eastep
757fea7467
Update documentation regarding FLOW_FILTER
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-11 14:35:12 -08:00
Tom Eastep
21d4c8ba21
Document workaround for lack of 'flow'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-08 10:03:10 -08:00
Tom Eastep
11a2ec9f7c
Update version to 4.4.7
2010-02-05 16:40:48 -08:00
Tom Eastep
f4e175f149
Fix IPv6 'nosmurfs'. Make 'nosmurfs' logging more efficient.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-03 15:03:15 -08:00
Tom Eastep
753eb97667
Update version to 4.4.7 RC2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-02 10:30:53 -08:00
Tom Eastep
ede17e2da0
Set ADD_IP_ALIASES=No in all shorewall.conf files.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-02 08:16:41 -08:00
Tom Eastep
dd60f04a9f
Work around lack of MARK Target support
2010-02-01 16:22:57 -08:00
Tom Eastep
f2709dd525
Correct release notes to match implementation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-30 20:31:39 -08:00
Tom Eastep
103a1660bc
Update release notes for RC 1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 12:57:47 -08:00
Tom Eastep
9408a114c6
Don't load unused modules when LOAD_HELPERS_ONLY=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-25 10:50:49 -08:00
Tom Eastep
0d63182ab4
Fix ambiguous syntax in Config.pm
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-22 16:44:45 -08:00
Tom Eastep
199a50e1c7
Update version to 4.4.7 Beta 2
...
Add problems corrected to the release notes.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-22 10:35:27 -08:00
Tom Eastep
8def4d03c3
Document LOAD_HELPERS_ONLY=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 20:17:25 -08:00
Tom Eastep
146a738e4c
Document TPROXY
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 08:20:15 -08:00
Tom Eastep
fddb85189e
Update release documents for functionality backported from 4.5.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 11:32:50 -08:00
Tom Eastep
d5cc302ad9
Start 4.4.7
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 08:11:13 -08:00
Tom Eastep
45d975cb45
Final editing of release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-14 08:25:32 -08:00
Tom Eastep
6e998edd48
Correct typo -- TC_EXPORT -> TC_EXPERT
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-14 07:48:19 -08:00
Tom Eastep
ebf1e55609
Version to 4.4.6
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 15:38:19 -08:00
Tom Eastep
1f1812b786
Document mDNS change in the release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 13:24:24 -08:00
Tom Eastep
890cbfbd5d
Document TRACK_PROVIDERS change in the release notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 10:59:34 -08:00
Tom Eastep
55e41483de
Update Release Documents
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 20:12:31 -08:00
Tom Eastep
4420eed8d7
Allow users to preview the generated ruleset.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 15:32:50 -08:00
Tom Eastep
818dfb6295
Document 'show macro' in the release docs.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 13:46:14 -08:00
Tom Eastep
4464094773
Update release documents for DHCPfwd
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 07:51:20 -08:00
Tom Eastep
5b4e9eb8e6
Revert change with migration issue
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 15:30:33 -08:00
Tom Eastep
fc8bfdcbf9
Update release documents
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:49:45 -08:00
Tom Eastep
54b21365c2
Update release documents for [...] change
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-08 13:58:15 -08:00
Tom Eastep
db819b1d3f
Update release notes to qualify when ipsets are restored by 'restore'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-06 07:57:02 -08:00
Tom Eastep
84051ca19a
Update the release notes regarding SAVE_IPSETS and save/restore
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 12:49:58 -08:00
Tom Eastep
e3c75dcfcc
Document the restoration of SAVE_IPSETS=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 11:54:59 -08:00
Tom Eastep
b491eae3c0
Document Lenny/xtables-addons hack
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 10:20:40 -08:00
Tom Eastep
d87d0893d2
Fix typos in the release notes
2009-12-20 12:05:35 -08:00
Tom Eastep
8eb6d136ae
Fix typo in release notes
2009-12-19 18:25:48 -08:00
Tom Eastep
d45dd5387a
Fix type on release notes
2009-12-19 18:23:15 -08:00
Tom Eastep
436169f0b2
Update documentation for rp_filter change
2009-12-19 16:09:20 -08:00
Tom Eastep
9cf75a4253
Revert "this is crap"
...
This reverts commit 7be7ef6685
.
2009-12-19 16:05:28 -08:00
Tom Eastep
7be7ef6685
this is crap
2009-12-19 16:05:13 -08:00
Tom Eastep
508e1123bb
Revert change that allowed out of order policies
2009-12-19 07:24:17 -08:00
Tom Eastep
43c45a064c
Add current and limit to conntrack table display
2009-12-12 09:10:24 -08:00
Tom Eastep
f938e9789e
More release notes editing
2009-12-11 13:45:24 -08:00
Tom Eastep
beb7634ca6
Correct numerous typos in the release notes
2009-12-11 13:41:24 -08:00
Tom Eastep
79ce532b69
Document fix for 'reload -c'
2009-12-08 08:30:37 -08:00
Tom Eastep
4076a6bca7
Fix ENHANCED_REJECT and MODULE_SUFFIX
2009-12-07 13:55:49 -08:00
Tom Eastep
c8616d4c67
Fix Shorewall6 capability detection
2009-12-05 21:35:05 -08:00
Tom Eastep
01ed97ad94
Describe checking for cls_flow support
2009-12-05 09:05:16 -08:00
Tom Eastep
e18238c665
Update 'flow=' description in the release notes
2009-12-05 08:05:20 -08:00
Tom Eastep
12279e57ed
Add information about 'flow' to the release notes
2009-12-04 15:04:59 -08:00
Tom Eastep
ee2195e745
Allow LOGFILE=/dev/null
2009-12-03 16:30:06 -08:00
Tom Eastep
a188fec942
Auto-load cls_flow and search .../sched for modules
2009-12-03 12:20:58 -08:00
Tom Eastep
768da64869
Remove incorrect migration consideration
2009-12-03 07:05:36 -08:00
Tom Eastep
8b2c6853f3
Remove description of reverted change from the release notes
2009-11-28 08:06:01 -08:00
Tom Eastep
e5106f10bc
Revert 8ff4d004c0
2009-11-28 07:23:23 -08:00
Tom Eastep
4e8d753682
Revert "Finish Virtual Zones"
...
This reverts commit 222c8cf88f
.
2009-11-28 07:20:52 -08:00
Tom Eastep
0b1621027b
Revert "Make 'virtual' a zone type rather than an option"
...
This reverts commit 18eedf7e34
.
2009-11-28 07:19:10 -08:00
Tom Eastep
f5378e7652
Revert "More doc updates for virtual zones"
...
This reverts commit a37e56d823
.
2009-11-28 07:18:46 -08:00
Tom Eastep
a37e56d823
More doc updates for virtual zones
2009-11-27 08:49:00 -08:00
Tom Eastep
18eedf7e34
Make 'virtual' a zone type rather than an option
2009-11-27 08:17:18 -08:00
Tom Eastep
222c8cf88f
Finish Virtual Zones
2009-11-26 12:14:58 -08:00
Tom Eastep
8ff4d004c0
Better virtual zone implementation
2009-11-25 18:14:14 -08:00
Tom Eastep
8263ea1312
Limit providers to 15
2009-11-25 12:18:08 -08:00
Tom Eastep
d189c08533
Revert "Add 'virtual' zone support"
...
This reverts commit a2cd4bd1f4
.
2009-11-25 11:51:13 -08:00
Tom Eastep
a2cd4bd1f4
Add 'virtual' zone support
2009-11-25 09:42:28 -08:00
Tom Eastep
d3d21d4d18
Fix 'show policies' in Shorewall6[-lite]
2009-11-23 13:50:41 -08:00
Tom Eastep
f186c436d4
Improve wording of Problem Corrected #3
2009-11-23 11:48:08 -08:00
Tom Eastep
cc809eaf78
Complete merge of 4.4 branch into master
2009-11-23 11:15:33 -08:00
Tom Eastep
c17ac8f23f
commit crap for now
2009-11-23 11:13:57 -08:00
Tom Eastep
532105ec39
Allow specific policy to supersede a wildcard policy
2009-11-23 10:02:04 -08:00
Tom Eastep
b30cae89e3
Allow <zone>::<serverport> in the rules file DEST column
2009-11-23 09:56:15 -08:00
Tom Eastep
99a35c1bf0
Allow <zone>::<serverport> in the rules file DEST column
2009-11-23 09:33:16 -08:00
Tom Eastep
bd9c0ac285
Generate error on port == 0
2009-11-22 08:39:03 -08:00
Tom Eastep
c8209f4ce2
Apply bridge fix to 4.4
2009-11-22 08:18:23 -08:00
Tom Eastep
4aeee6fd8b
Make 'expanded' apply to all wildcard policies
2009-11-21 14:18:01 -08:00
Tom Eastep
c7de19cf39
Allow specific policy to supersede an expanded one
2009-11-21 13:56:40 -08:00
Tom Eastep
cbe944c354
Open the 4.5.0 Thread
2009-11-21 11:41:10 -08:00
Tom Eastep
ecf6a0ec4a
Open 4.4.5
2009-11-21 11:08:50 -08:00
Tom Eastep
bce4d51a18
Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes
2009-11-21 07:54:42 -08:00
Tom Eastep
c5bb493b29
Fix class number assignment when WIDE_TC_MARKS=Yes
2009-11-20 12:25:15 -08:00
Tom Eastep
5f70b261b6
Update version of Shorewall::Compiler
2009-11-16 20:21:59 -08:00
Tom Eastep
c4bfab29a5
Clean up release notes
2009-11-16 15:21:11 -08:00
Tom Eastep
9d5dd2ad3a
Implement an '-l' option to the 'show' command
2009-11-16 15:14:24 -08:00
Tom Eastep
31f01fe765
Document fixing route rule addition code
2009-11-16 11:20:02 -08:00
Tom Eastep
dd543a2934
Tweak policies display
2009-11-16 09:30:37 -08:00
Tom Eastep
f5a019becc
Implement 'show policies' command
2009-11-15 09:24:56 -08:00
Tom Eastep
e748341afd
Correct mis-statement in the release notes
2009-11-11 16:35:06 -08:00
Tom Eastep
a4eb581d44
Document full logical interface implementation
2009-11-11 10:45:01 -08:00
Tom Eastep
893a847c87
Suppress extra COMMENT warnings
2009-11-10 17:17:55 -08:00
Tom Eastep
bd9c651961
Clarify physical naming rules and '+'
2009-11-10 15:25:25 -08:00
Tom Eastep
bf8c38e054
Add ZONE2ZONE option to shorewall.conf
2009-11-10 14:12:55 -08:00
Tom Eastep
89bdcf9a3d
Implement 'physical' option
2009-11-06 07:27:44 -08:00
Tom Eastep
28b660c853
Avoid reporting bogus duplicate interface with two bridges and wildcard ports
2009-11-05 11:04:14 -08:00
Tom Eastep
4548db58da
Relax port list limitation in /etc/shorewall/routestopped
2009-11-03 11:36:32 -08:00
Tom Eastep
4f5c602d5f
Fix .spec error and document logrotate files
2009-11-03 10:12:38 -08:00
Tom Eastep
11ddfa92e9
Eliminate Perl run-time errors out of move_rules()
2009-11-01 17:14:42 -08:00
Tom Eastep
f0b4b1f42e
Add limit option to tcclasses
2009-10-26 12:23:32 -07:00
Tom Eastep
cc0adc218f
Update comments and release documentation
2009-10-26 10:03:51 -07:00
Tom Eastep
b3571261dd
Fix optional providers
2009-10-24 12:05:44 -07:00
Tom Eastep
c922afaf23
Tweak release notes
2009-10-24 12:01:15 -07:00
Tom Eastep
3e2cf982a3
Correct messages issued when a provider is not added
2009-10-24 08:50:15 -07:00
Tom Eastep
86df82a29a
Fix IPv6 address validation error
2009-10-23 13:41:51 -07:00
Tom Eastep
d0cda6b6ea
Add TRACK_PROVIDERS option
2009-10-20 13:24:17 -07:00
Tom Eastep
49f361124e
Make 'track' the default
2009-10-20 12:24:28 -07:00
Tom Eastep
f3043f1453
Document nested zone fix
2009-10-17 11:06:36 -07:00
Tom Eastep
b38841798e
Fix initialization
2009-10-15 13:43:46 -07:00
Tom Eastep
990a9f0fdc
Fix RETAIN_ALIASES
2009-10-13 14:36:47 -07:00
Tom Eastep
1b0a3e4417
Correct typos in release notes
2009-10-13 08:13:34 -07:00
Tom Eastep
ab4e7cffcf
Document fix to routestopped
2009-10-03 10:53:53 -07:00
Tom Eastep
beac09e45f
STARTUP_LOG changes
2009-10-02 16:10:14 -07:00
Tom Eastep
964cba79a9
Initialize 4.4.3
2009-10-02 11:31:08 -07:00
Tom Eastep
a8cc7d2a7e
More clarification of masq file changes
2009-10-01 12:34:34 -07:00
Tom Eastep
5e49be219b
Fix result from bad pull
2009-10-01 07:49:43 -07:00
Tom Eastep
d323c5b9c5
Delete shorewall-perl and shorewall-shell during upgrade
2009-10-01 07:37:30 -07:00
Tom Eastep
393673a884
Allow MARK in action body -- take 2
2009-09-25 16:15:56 -04:00
Tom Eastep
d84458518e
Add capability to detect old hashlimit syntax
2009-09-23 16:56:31 -04:00
Tom Eastep
428c3d1e4e
Hack to make new LIMIT stuff work on ancient iptables releases
2009-09-20 09:12:35 -04:00
Tom Eastep
120aade417
Allow Extension Scripts for Accounting Chains
2009-09-15 12:22:51 -07:00
Tom Eastep
a5f3a05341
Fix typo in the Introduction
2009-09-14 13:43:32 -07:00
Tom Eastep
8fdebf0c38
Add new columns to macros
2009-09-13 08:09:40 -07:00
Tom Eastep
8c2a228a7d
Apply Jesse Shrieve's SNAT patch
2009-09-11 07:47:31 -07:00
Tom Eastep
7c1dd35a00
Update release documents
2009-09-09 12:18:31 -07:00
Tom Eastep
b03d502bbb
Allow comments on continued lines
2009-09-06 16:17:22 -07:00
Tom Eastep
03821dc22c
Process routestopped file during 'check'
2009-09-03 19:27:25 -07:00
Tom Eastep
4a809e14ab
Documentation cleanup
2009-09-03 15:24:19 -07:00
Tom Eastep
f3455b107d
4.4.2 release doc initialization and update
2009-09-03 14:58:46 -07:00
Tom Eastep
fbfa4b4e49
Update release documents and make minor change to faq
2009-08-31 14:19:15 -07:00
Tom Eastep
2bb92a79f3
Fix silly hole in zones file parsing
2009-08-30 08:05:10 -07:00
Tom Eastep
d31721a066
Fix rule generated by MULTICAST=Yes -- release documents
2009-08-29 09:34:16 -07:00
Tom Eastep
b7915991ba
Add MULTICAST=Yes corrected problem description to release notes
2009-08-29 09:24:51 -07:00
Tom Eastep
a0a9e087de
Fix typo in release notes
2009-08-29 09:07:27 -07:00
Tom Eastep
1ef00c547b
Disallow 'nets=' in a multi-zone interface definition
2009-08-29 07:41:27 -07:00
Tom Eastep
f2c3d9cd79
Correct typo
2009-08-29 07:20:40 -07:00
Tom Eastep
4809314fc1
Allow extending a zone defined with nets=
2009-08-29 07:20:16 -07:00
Tom Eastep
acfdc7e481
nets= allows multicast
2009-08-28 15:17:10 -07:00
Tom Eastep
a62d86aca7
Update interfaces manpage
2009-08-28 13:45:00 -07:00
Tom Eastep
5db7e77462
Turn off IP forwarding in the standalone example -- update release docs
2009-08-28 08:31:48 -07:00
Tom Eastep
383f3e8bcf
Fix nested IPSEC zones
2009-08-26 12:44:10 -07:00
Tom Eastep
1b26c65cbc
Fix logging in rules at the end of INPUT and OUTPUT
2009-08-25 09:22:26 -07:00
Tom Eastep
088e164f18
Redefine 'full' when used in a sub-class definition
2009-08-24 11:56:16 -07:00
Tom Eastep
e24dbb9aea
Add 'clean' target to Makefiles
2009-08-23 10:43:01 -07:00
Tom Eastep
6d2809f154
Note the inadaquacy of the Busybox version of the iproute2 utilities
2009-08-17 07:17:33 -07:00
Tom Eastep
cbc9fa6e4c
Update README.txt
2009-08-15 17:43:26 -07:00
Tom Eastep
201145eed9
More Persistent SNAT tweaks
2009-08-15 08:56:05 -07:00