extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-03 04:53:10 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,651 Commits 104 Branches 736 Tags 55 MiB
5a66c1d9d6
Commit Graph

586 Commits

Author SHA1 Message Date
Tom Eastep
f989c2f5f6
Document 'persistent' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-30 11:34:57 -07:00
Tom Eastep
792b3b696c
Add ZERO_MARKS option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-26 16:04:26 -07:00
Tom Eastep
3f8ddb11ab
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2016-09-25 08:00:43 -07:00
Tom Eastep
ef4b1c2030
Add a TIME Columns section to the config file basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-22 15:45:18 -07:00
Tom Eastep
8065e62f12
Support for the 'contiguous' option in TIME columns 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-22 14:22:11 -07:00
Tom Eastep
e81a4788c6
Implement DEFAULT_PAGER in shorewallrc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-21 10:20:48 -07:00
Tom Eastep
d854185c56
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2016-09-20 08:47:07 -07:00
Tom Eastep
8bb7c2363b
Support '+' after a zone list in the policy files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-10 10:06:38 -07:00
Tom Eastep
7e32a10176
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2016-09-10 08:48:48 -07:00
Tom Eastep
2c90a8bfb5
Allow zone lists in the SOURCE and DEST columns of the policy files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-10 08:47:48 -07:00
Tom Eastep
5ea91f21f4
Correct the mangle manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-09-05 19:20:25 -07:00
Tom Eastep
a05b957498
Corrections in the shorewall[6].conf manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-08-15 10:24:23 -07:00
Tom Eastep
0b9cd93769
Default DSCP rules to the POSTROUTING chain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-07-27 13:59:15 -07:00
Tom Eastep
4a6338d857
Correct/complete Scott Sumate's LOGFILE enhancement 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-07-15 14:25:02 -07:00
Tom Eastep
e71fb3249a
Add 'dbl' interface option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-06-15 16:35:41 -07:00
Tom Eastep
4869f61a25
'allow' now works with ipset-based dynamic blacklisting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-06-09 08:44:25 -07:00
Tom Eastep
590243a787 Add NFLOG as a supported mangle action 
- Also document nflog-parameters
- Correct range of nflog groups

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-05-03 11:27:34 -07:00
Tom Eastep
b7de785396 Correct typo in manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-30 08:34:43 -07:00
Tom Eastep
24d40f4cc2 Add VERBOSE_MESSAGES option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-30 08:00:56 -07:00
Tom Eastep
71bd7a4647 Update the STARTUP_LOG description in shorewall[6].conf 
- Update list of commands

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-19 07:49:37 -07:00
Tom Eastep
2b7ef0fe32 Update the tcclasses manpage to discuss fw mark filter priority 
- Also correct default priorities for tos= and tcp-ack

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-18 09:18:48 -07:00
Tom Eastep
32f888a7d4 Add an ENVIRONMENT section to the CLI manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-15 15:41:55 -07:00
Tom Eastep
dbd42e1d5d More ipset fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-12 16:29:13 -07:00
Tom Eastep
deaaecdf1c Add 'nodbl' interface option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-10 16:09:39 -07:00
Tom Eastep
05e4049174 Ipset-based blacklisting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-10 16:07:56 -07:00
Tom Eastep
ef10515a42 Correct FASTACCEPT description 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-10 07:20:45 -07:00
Tom Eastep
be58d530c4 Document 'logjump' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-08 09:09:59 -07:00
Tom Eastep
e9467326f3 Allow allow REJECT to take a parameter 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-05 11:20:44 -07:00
Tom Eastep
3cbfdadb32 Merge branch '5.0.7' 2016-04-01 09:46:53 -07:00
Tom Eastep
81d76e3817 Document + in the MODULESDIR setting. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-01 09:43:06 -07:00
Tom Eastep
df1b1f6768 Add MINIUPNPD option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-01 08:57:08 -07:00
Roberto C. Sánchez
899a317c95 Fix typos 2016-03-26 22:25:30 -04:00
Tom Eastep
273c89a753 Implement MARK and CONNMARK in the rules file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-18 11:42:58 -07:00
Tom Eastep
eed7692952 Document the state action option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-14 15:15:32 -07:00
Tom Eastep
95da427ea8 Update manpages for 'audit' actions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-13 15:53:31 -07:00
Tom Eastep
ec9148637f Inline mangle actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-09 10:28:02 -08:00
Tom Eastep
1add0487f6 Document Mangle Actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-07 14:56:20 -08:00
Tom Eastep
d4e2508a90 Clarify USE_DEFAULT_RT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-04 14:26:42 -08:00
Tom Eastep
90d254f0c3 Add PAGER option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-03-02 08:32:49 -08:00
Tom Eastep
71d64ab380 Add DOCKER network support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-02-27 13:36:47 -08:00
Tom Eastep
6c88eb6916 Add an ECN action to shorewall-mangle(8) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-02-26 09:33:16 -08:00
Tom Eastep
e66d9f6547 Add DOCKER option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-02-19 17:42:54 -08:00
Tom Eastep
94cfe54f92 Allow routing tables with no default route 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-02-17 11:49:09 -08:00
Tom Eastep
9b3b4579a2 Change TRACK_RULES setting from Internal to File 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-24 16:15:36 -08:00
Tom Eastep
3e404b765f Make .ip[6]tables-restore-input comments conditional 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-23 17:04:52 -08:00
Tom Eastep
12513e24a3 Revert "Implement dynamic actions" 
This reverts commit 8075ba719a.
 2016-01-13 11:04:41 -08:00
Tom Eastep
8075ba719a Implement dynamic actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-13 09:33:38 -08:00
Tom Eastep
3828eb856b Rename HADIVERT to DIVERTHA 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-08 15:36:10 -08:00
Tom Eastep
e29e2d117d Documentation updates 
- update LSM section of the Multi-ISP article
- Correct formatting of HAPROXY examples

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-08 08:33:42 -08:00
Tom Eastep
ad2f20b824 Finish HAProxy support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-06 09:12:33 -08:00
Tom Eastep
c9f57ad9c9 Update manpages for ADD timeout 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-12-24 09:20:42 -08:00
Tom Eastep
8e7f001f7e Update manpages for column renaming 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-12-04 14:53:26 -08:00
Tom Eastep
b087cee7f0 Redefine MODULESDIR 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-11-28 08:36:12 -08:00
Tom Eastep
7fb00e0dfe Remove the routestopped files and their manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-11-09 07:28:46 -08:00
Tom Eastep
3973cdf0da Merge branch '5.0.1' 2015-10-28 14:35:27 -07:00
Tom Eastep
35b90c2709 Update documentation for 'remote-' vs. 'remote_' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-27 08:16:06 -07:00
Tom Eastep
69dd7ce0b9 Add 'persistent' provider option - Phase II 
- Also allow the creation of 'persistent' routing rules and routes

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-25 16:45:11 -07:00
Tom Eastep
0dbe756e93 Manpage and Shorewall-5 changes for RESTART 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-12 13:49:24 -07:00
Tom Eastep
1db3bfb53e Manpage updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-10 13:19:41 -07:00
Tom Eastep
1b571f3d86 Correct the reset command 
- Also allow chain names to be specified a la the refresh command

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-09-11 14:16:16 -07:00
Tom Eastep
7be4190e4c Man page updates for the PROBABILITY column in the masq files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-09-08 18:00:53 -07:00
Tom Eastep
17d1caf8c5 Allow tags in global LOG_LEVELs 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-09-06 16:08:59 -07:00
Tom Eastep
07976556ed More inline match documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-09-03 09:45:39 -07:00
Tom Eastep
ba3dba78ff Correct more Mangle examples 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-09-02 13:07:20 -07:00
Tom Eastep
ed90360b4c Remove all of the update-specific options from the update command 
Leave -i and -A

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-31 14:21:41 -07:00
Tom Eastep
60e08322c5 Update man pages for 'minute' and 'second' in LOGLIMIT specifications 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-31 11:14:37 -07:00
Tom Eastep
f9ae28aeea The -t option also converts the 'tos' file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-24 14:56:24 -07:00
Tom Eastep
2451c14d8c Some rules manpage updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-22 08:27:52 -07:00
Tom Eastep
a30fdb356d Update man pages for required '?' in COMMENT, SECTION and FORMAT lines 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-22 08:00:38 -07:00
Tom Eastep
f4776bf388 Eliminate WIDE_TC_MARKS, HIGH_ROUTE_MARKS and BLACKLISTNEWONLY 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-21 12:42:19 -07:00
Tom Eastep
26fca41e27 Eliminate discontinued files and manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-20 15:17:48 -07:00
Tom Eastep
5a08f8bf4e Correct shorewall-mangle(5) examples 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-20 11:09:42 -07:00
Tom Eastep
c59cb1351c Update manpages for new update options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-20 11:08:10 -07:00
Tom Eastep
fb2d261cdb More Fixes for update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-08 12:42:32 -07:00
Tom Eastep
2162d79b5f Manual Page Uptates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-03 15:09:16 -07:00
Tom Eastep
0f61bd34e6 Drop support for the 'blacklist' zone option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-03 14:45:52 -07:00
Tom Eastep
d8d1e96e0d Delete manpages for files no longer supported 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-03 14:37:15 -07:00
Tom Eastep
8bed5c9d65 Drop support for the IPSECFILE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-03 10:11:52 -07:00
Tom Eastep
037e92a60e Eliminate some config options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-01 14:28:12 -07:00
Tom Eastep
2165f746e6 Update .conf documents for 'reload' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-01 12:58:08 -07:00
Tom Eastep
85648bded1 Deimplement several .conf options 
- LOGRATE/LOGBURST
- EXPORTPARAMS
- LEGACY_FASTSTART
 2015-08-01 11:11:35 -07:00
Tom Eastep
fa7248c58c Add the LEGACY_RESTART option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-27 09:19:52 -07:00
Tom Eastep
0a7c65ae0d Allow connlimit by destination 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-26 14:26:58 -07:00
Tom Eastep
34f58bd6ac Correct formatting in the rules file man pages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-26 11:36:14 -07:00
Tom Eastep
f9ec0c6930 New 'reload' and 'restart' semantics 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-26 09:59:49 -07:00
Tom Eastep
df817b6d2c Correct formatting in the interfaces man pages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-13 13:06:53 -07:00
Tom Eastep
0414166d6d 'show connections' enhancement 
- Allow tayloring of the entries displayed by specifying conntrack
  -L options.
 2015-06-29 14:55:47 -07:00
Tom Eastep
7153146759 Don't ask for script version when WORKAROUNDS=No 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-06-28 09:18:47 -07:00
Tom Eastep
7c9155a6e8 Update man pages and .conf files for WORKAROUNDS 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-06-06 07:56:14 -07:00
Tom Eastep
f227250959 Fix NFQUEUE parsing and documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-29 18:19:35 -07:00
Tom Eastep
425094de18 Mention load= warning (sum not 1.000000) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-25 10:31:08 -07:00
Tom Eastep
bbdbdf7c47 Clean up 'call' description in the manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-25 07:06:17 -07:00
Tom Eastep
df4d6f1f92 Document load= in the providers manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-22 16:31:21 -07:00
Tom Eastep
ba7afcaeae Make 'call' a supported command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-21 10:38:35 -07:00
Tom Eastep
267637f139 NFQUEUE enhancements 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-20 10:55:21 -07:00
Tom Eastep
acd921cd08 Don't require a helper for ctevents and expevents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-16 13:40:40 -07:00
Tom Eastep
9329e7c36c Don't require a helper in the CT action. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-16 09:08:32 -07:00
Tom Eastep
2cea78e6df Add the 'reenable' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-28 13:02:12 -07:00
Tom Eastep
6cb3004a39 Clarify helper module loading 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-17 09:51:25 -07:00
Tom Eastep
f5aa0373cb Correct interfaces example 4 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-12 08:38:55 -07:00
Tom Eastep
16e3cb1b43 More manpage updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-07 10:14:42 -07:00
Tom Eastep
27c1ffc5fb Include full syntax in lists of CLI commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-07 09:23:58 -07:00
Tom Eastep
0e54a86e82 Add descriptions of 'list' and 'ls' to the CLI manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-06 09:39:41 -07:00
Tom Eastep
b00a7af619 Allow a comma-separated list in the rtrules file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-18 15:16:25 -07:00
Tom Eastep
0c11870e46 Implement the 'savesets' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-17 10:03:12 -07:00
Tom Eastep
c5ef3fd905 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2015-03-14 08:55:40 -07:00
Tom Eastep
86d6d6900e Improve 'close' and 'show opens' commands 
- close accepts a rule number
- list opens displays rule numbers

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-14 08:54:30 -07:00
Tom Eastep
9a5cc5e51c Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2015-03-07 07:57:26 -08:00
Tom Eastep
d7a1ca41f9 Another attempt to correct the formatting of the manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-07 07:56:34 -08:00
Tom Eastep
d3552346b0 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2015-03-06 15:38:48 -08:00
Tom Eastep
1e6c266b51 Formatting fix (I hope) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 15:37:56 -08:00
Tom Eastep
d6f8cda2d5 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2015-03-06 14:10:13 -08:00
Tom Eastep
4cc866cd81 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2015-03-06 14:09:11 -08:00
Tom Eastep
095e523c9f Add 'show opens' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 13:10:23 -08:00
Tom Eastep
2817060edb Improvements to the 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 08:13:44 -08:00
Tom Eastep
30e750608b Fix broken links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-05 16:23:49 -08:00
Tom Eastep
a85fdc45ac Implement 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-05 16:20:54 -08:00
Roberto C. Sánchez
e9bb447537 Fix typo 2015-03-02 09:58:09 -05:00
Tom Eastep
cdc2d52208 Implement ADD and DEL in the mangle file. 
- Also document the parameter to SAME

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-18 12:04:01 -08:00
Tom Eastep
b14e7c54f9 Merge branch '4.6.6' 2015-02-07 08:29:44 -08:00
Orion Poplawski
9ad0b297e2 Supporting xz compressed kernel modules 
- I've attached a patch that adds xz support to the default MODULE_SUFFIX.
- I'm wondering it wouldn't be better to not have MODULE_SUFFX=ko in various
sample configs so that the default value is used instead:

./Shorewall/configfiles/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/Universal/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/three-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/two-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/one-interface/shorewall.conf:MODULE_SUFFIX=ko
./docs/MultiISP.xml:MODULE_SUFFIX=ko
./docs/MyNetwork.xml:MODULE_SUFFIX=ko
./Shorewall6/configfiles/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/Universal/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/three-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/two-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/one-interface/shorewall6.conf:MODULE_SUFFIX=ko

- Is:

MODULE_SUFFIX=

sufficient to use the default value or does it need to be commented out?

Thanks,

  Orion

--
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion@nwra.com
Boulder, CO 80301                   http://www.nwra.com

>From f13edf8fc07c7b62825408b8665b10d6014d368d Mon Sep 17 00:00:00 2001
From: Orion Poplawski <orion@cora.nwra.com>
Date: Mon, 26 Jan 2015 09:48:48 -0700
Subject: [PATCH] Support xz compressed modules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-06 12:51:00 -08:00
Tom Eastep
5d110616a5 Merge branch '4.6.6' 2015-01-24 18:16:47 -08:00
Tom Eastep
a2b8069ee3 Clarify Zone exclusion 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-24 18:15:10 -08:00
Tom Eastep
50a0103e89 Merge branch '4.6.6' 2015-01-20 08:11:07 -08:00
Tom Eastep
6f2308e0fa Correct syntax of the SAVE and RESTORE actions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-20 08:09:55 -08:00
Tom Eastep
28ac76bde4 Add tinc tunnel support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-13 13:28:37 -08:00
Tom Eastep
07c21b8968 Add 'primary' provider option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-06 09:06:27 -08:00
Tom Eastep
7dd9ccd06b Add the 'loopback' interface option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-03 09:22:40 -08:00
Tom Eastep
551a16d18f Document TARPIT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-01 09:14:00 -08:00
Tom Eastep
93285e2798 Cleanup of preceding fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 14:05:43 -08:00
Tom Eastep
2430796495 Document the -c option of 'show routing' 
Correct choice in show commands to 'req'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 12:15:28 -08:00
Tom Eastep
06ef7596cd Document the -c 'dump' option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 11:57:24 -08:00
Tom Eastep
fdf513fba6 Correct font in mangle manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-19 14:26:20 -08:00
Thomas D
a5b2886ae9 Patches for shorewall manpage 
Hi,

I corrected some errors in the manpages. I started with "shorewall".

Tom, please tell me if you like this format and the patches at all.
If you like them, I can send you a similar patch set for shorewall6, too.

-Thomas

From 2aaeaa4f2da7aae92177ced0530f1deff86f44a9 Mon Sep 17 00:00:00 2001
From: Thomas D <whissi@whissi.de>
Date: Sun, 9 Nov 2014 15:45:29 +0100
Subject: [PATCH 11/14] The "-i" option from the "reload" command wasn't marked
 as an option.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-09 07:40:59 -08:00
Tom Eastep
2f545012a6 More documentation updates for -C 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 09:25:58 -08:00
Tom Eastep
4493b2ab6b Correct typo in 'rules' manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 06:50:40 -08:00
Tom Eastep
8fb73026c8 Replace SAVE_COUNTERS with the -C command option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-01 09:37:57 -07:00
Tom Eastep
b7ab82dba4 Implement -f option in the -lite products' start command 
- Remove 'recover' command

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 10:42:39 -07:00
Tom Eastep
3454e10525 Add SAVE_COUNTERS option. 
- Also implement recover command

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 08:57:56 -07:00
Tom Eastep
055fceb82f Update policy manpages for duel limits 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-22 12:27:27 -07:00
Tom Eastep
f5bdc9e7f4 Allow two limits in the RATE LIMIT columns 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-22 11:21:43 -07:00
Tom Eastep
2a463e06aa More documentation changes regarding SAVE_IPSETS. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-28 17:10:45 -07:00
Tom Eastep
3e2c903a41 Revert "Only save ipsets of the proper family" 
This reverts commit b053cab630.
 2014-09-28 13:32:32 -07:00
Tom Eastep
b053cab630 Only save ipsets of the proper family 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-28 12:58:52 -07:00
Tom Eastep
3858683e94 Allow saving a specified list of ipsets 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-28 11:19:41 -07:00
Tom Eastep
10df9d31c4 Correct typo in the actions manpages (4.6.5 s/b 4.6.4). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-25 14:47:27 -07:00
Tom Eastep
976a1f3deb Merge branch '4.6.3' 
Conflicts:
	Shorewall/Perl/Shorewall/Misc.pm
 2014-09-25 08:06:16 -07:00
Tom Eastep
ea40068c10 Fix ADMINISABSENTMINDED=No used with stoppedrules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-25 08:03:35 -07:00
Tom Eastep
580e00dabd Implement LOG_BACKEND option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-24 15:26:13 -07:00
Tom Eastep
a7b57ad32c Clarify iptrace logging. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-24 09:14:38 -07:00
Tom Eastep
ba7f88c912 Re-apply 'terminating' changes to the actions manpages. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-23 09:33:57 -07:00
Tom Eastep
7481514a97 Implement the 'terminating' action option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-23 09:29:13 -07:00
Tom Eastep
20c68dddf2 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2014-09-23 09:24:44 -07:00
Tom Eastep
35e60aa10c Fix actions manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-23 09:24:32 -07:00
Tom Eastep
1f5439257a Revert "Implement the 'terminating' action option" 
This reverts commit 6851744cb7.
 2014-09-23 07:39:25 -07:00
Tom Eastep
771e487b02 Merge branch '4.6.3' 2014-09-01 09:10:55 -07:00
Tom Eastep
0b66c475a7 Make <command> replacable in the run synopsis 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-01 09:10:03 -07:00
Tom Eastep
8727a6f1d8 Correct 'run' command synopsis in the shorewall[6] manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-01 08:52:09 -07:00
Tom Eastep
f9a62e1650 Correct builtin example in the actions manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-01 08:29:29 -07:00
Tom Eastep
6851744cb7 Implement the 'terminating' action option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-01 08:16:42 -07:00
Tom Eastep
4bacfced82 Another attempt to fix formatting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-24 11:59:51 -07:00
Tom Eastep
7c1bbd4dc7 Fix formatting in shorewall[6]-rules(5) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-24 11:29:44 -07:00
Tom Eastep
4347190f82 Clarify REJECT handling in IP[6]TABLE rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-24 09:10:10 -07:00
Tom Eastep
e49832f4b5 Run the 'init' script in the 'run' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-30 10:25:00 -07:00
Tom Eastep
31e5aeeaea Refine the 'run' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-29 10:30:07 -07:00
Tom Eastep
eb5026d3b7 Merge branch '4.6.2' 2014-07-28 14:47:23 -07:00
Tom Eastep
a799d74901 Correct typo and link in the shorewall-mangle manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-28 08:39:07 -07:00
Tom Eastep
a7b18ca875 Implement 'run' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-28 07:04:56 -07:00
Tom Eastep
848078873d Update tcfilters manpages to mention BASIC_FILTERS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-22 07:19:10 -07:00
Tom Eastep
29e6bc9379 Merge branch '4.6.2' of ssh://server.shorewall.net/home/teastep/shorewall/code into 4.6.2 2014-07-18 15:15:33 -07:00
Tom Eastep
4b3196b959 Add refmiscinfo to the shorewall-tcrules manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-18 13:49:30 -07:00
Tom Eastep
a97e2fd3d9 Update manpages regarding 'status -i' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-12 19:37:05 -07:00
Tom Eastep
2ed523101c Allow specification of the MAC address of a gateway 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-06 09:54:53 -07:00
Tom Eastep
8bfff55ed2 Add a TIME column to the mangle file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-04 08:01:14 -07:00
Tom Eastep
b1a6ec7f03 Merge branch '4.6.1' 2014-07-02 21:41:27 -07:00
Tom Eastep
7fdc398a5e Revert "Revert "Revert "Add a TIME column to the mangle file""" 
This reverts commit 1165b2689c.
 2014-06-27 08:23:04 -07:00
Tom Eastep
1165b2689c Revert "Revert "Add a TIME column to the mangle file"" 
This reverts commit 9c7fcd09fd.
 2014-06-27 08:14:28 -07:00
Tom Eastep
9c7fcd09fd Revert "Add a TIME column to the mangle file" 
This reverts commit 824b14b714.
 2014-06-25 07:33:42 -07:00
Tom Eastep
80c09c4747 Merge branch '4.6.1' 2014-06-25 07:31:36 -07:00
Tom Eastep
824b14b714 Add a TIME column to the mangle file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-25 07:05:12 -07:00
Tom Eastep
6ad9b95351 Implement 'show bl' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-18 13:27:25 -07:00
Tom Eastep
ac4bf15606 Implement 'status -i' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-18 11:07:37 -07:00
Tom Eastep
4e5d24fd9b Currect masq manpages 
Describe the SOURCE column as optional

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-16 07:27:05 -07:00
Tom Eastep
24721e01b6 Document nat vs. subzone restriction. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-25 10:07:07 -07:00
Tom Eastep
89c5d5080b A couple more tweaks to the masq manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-22 11:14:46 -07:00
Tom Eastep
66b3d9aeb5 Correct the heading of the SOURCE masq column 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-22 09:07:00 -07:00
Tom Eastep
eb70234c52 Correct some typos in the .conf manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-12 14:50:15 -07:00
Tom Eastep
20b10582b4 Moew deprecation of USE_DEFAULT_RT=No 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-10 08:24:12 -07:00
Tom Eastep
cea237620a Change USE_DEFAULT_RT default to 'Yes'. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-09 07:42:22 -07:00
Tom Eastep
c9d7370fb4 Merge branch '4.5.21' 
Conflicts:
	Shorewall/manpages/shorewall.conf.xml
	Shorewall6/manpages/shorewall6.conf.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-05 09:00:34 -08:00
Tom Eastep
8b4d8bfa16 Finish ADMINISABSENDMINDED change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-05 08:57:03 -08:00
Tom Eastep
caa72fb7d2 Correct routestopped files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-02 10:39:12 -08:00
Tom Eastep
3e87efc82b Document -t option 
- Also copy compiler directives to the mangle file.
 2014-02-17 12:50:59 -08:00
Tom Eastep
69fe94ef08 Document the -t option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-16 09:25:58 -08:00
Tom Eastep
2dbcd36a9c Implement BASIC_FILTERS 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-04 16:34:03 -08:00
Tom Eastep
7ddc65133e Support ipset lists in the tcfilters file. 
- Also document the fact that ipset match options are not available in
  the tcfilters file.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-04 12:16:35 -08:00
Tom Eastep
c08655e0bc Document ipset use in tcfilters 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-01 09:40:39 -08:00
Tom Eastep
44e0d48fc5 Add <refmiscinfo>...</refmiscinfo> to remaining manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-01-16 08:32:57 -08:00
Tom Eastep
5a649dc205 Add <refmiscinfo>...</refmiscinfo> 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-01-16 07:44:23 -08:00
Tom Eastep
89fd5ced15 Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code 2014-01-12 14:05:48 -08:00