Commit Graph

528 Commits

Author SHA1 Message Date
teastep
5b8a9c2dbf First step toward support of wildcard ports
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3188 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-21 04:05:27 +00:00
teastep
f91f118c2a Fix typo in last patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3187 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-20 19:24:53 +00:00
teastep
803720a8cc Fix restore script generation with RETAIN_ALIASES=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3185 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-20 19:14:36 +00:00
teastep
d2c9149223 Remove interface port list -- no longer needed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3183 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-20 00:39:55 +00:00
teastep
28e3a4a7ed Fix security hole in bridge handling; fix bug in NONE intra-zone policy handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3182 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-19 23:37:40 +00:00
teastep
e99e0bd05b Correct IPv6 fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3180 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-19 20:52:08 +00:00
teastep
0273709c6f Enable loopback traffic under DISABLE_IPV6
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-17 01:55:02 +00:00
teastep
6f4dfe64db Fix stupid typo that produced a bug in tcrules processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3153 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-12 18:52:40 +00:00
teastep
7f39d760b7 Add 'ipdecimal' command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-02 23:58:57 +00:00
teastep
25480f2187 Allow '-' in the ADDRESS/SUBNET column of the blacklist file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3099 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-12-01 18:05:13 +00:00
teastep
06dc3cf91e Make Shorewall tolerate prehistoric kernels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3046 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-22 02:27:00 +00:00
teastep
8bdf97d821 Fix typo in 'firewall' script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3025 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-18 17:25:09 +00:00
teastep
fd834a4f64 Clean up policy setup for nat, mangle and raw tables -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3023 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-18 17:02:12 +00:00
teastep
e34d046490 Clean up policy setup for nat, mangle and raw tables
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3022 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-18 16:56:38 +00:00
teastep
86a7be6c24 Fix inadvertent change to firewall script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3018 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-17 19:10:13 +00:00
teastep
0fcc67230c Correct interaction between FASTACCEPT and CLAMPMSS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3013 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-17 18:23:19 +00:00
teastep
1f0165e8bc Remove flyspeck from firewall file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3001 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-15 18:48:30 +00:00
teastep
93210fa3a5 Fix Makefile and make macro substitution smarter
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3000 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-15 18:44:02 +00:00
teastep
2fc06059db Restore ACCEPT policies to nat, mangle and raw tables during start/stop
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2996 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-13 16:00:17 +00:00
teastep
d678421c08 Fix MACLIST_TABLE=mangle and DHCP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2947 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-02 17:44:10 +00:00
teastep
981323b7d6 Fix MACLIST_TABLE=mangle and DHCP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2946 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-11-02 15:32:33 +00:00
teastep
53ae3fc6e0 Suppress 'ambiguous redirect' errors
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-28 03:18:49 +00:00
teastep
4b97c4584c Add samples to base package
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2907 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-20 22:10:10 +00:00
teastep
629d7c87d2 Fix cut-and-paste error in arp_ignore processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2906 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-19 14:30:13 +00:00
teastep
cf7e66aab4 Make Openvpn TCP support a little more robust
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2904 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-18 17:05:12 +00:00
teastep
b20a7b3067 Fix tcp openvpn support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2901 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-18 15:20:12 +00:00
teastep
057e4aeb71 Add TC_ENABLED=Internal -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-09 16:21:15 +00:00
teastep
1af4d541a0 Add TC_ENABLED=Internal
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-09 15:47:47 +00:00
teastep
41178852fb Avoid extra $COMMAND tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2835 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-09 02:36:30 +00:00
teastep
1a8f760491 Fix default tc class bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2834 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-08 14:57:10 +00:00
teastep
d680528283 Replace TC_ENABLED with TC_SCRIPT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2829 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-07 22:16:03 +00:00
teastep
2b6d22c40d Suppress 'save' operations during refresh
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-07 15:46:38 +00:00
teastep
b403a8c200 Remove some incompatibilities
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2822 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-07 15:30:33 +00:00
teastep
cc6caadf41 Make tc class IDs unique across devices
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2819 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 22:46:17 +00:00
teastep
748375d12d Finish MACLIST_TABLE implementation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2816 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 20:10:40 +00:00
teastep
a510a70124 Incomplete implementation of MACLIST_TABLE
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2815 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 20:01:51 +00:00
teastep
1f23f6a9a4 Introduce 'classid' into discussion of classification in tcrules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2814 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 16:35:20 +00:00
teastep
26628652cd More cleanup of traffic shaping integration
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2813 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 14:21:04 +00:00
teastep
51d44fcb40 clean up tc4shorewall progress message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2810 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 00:41:24 +00:00
teastep
21a6f90554 Use CLASSIFY target when it is available
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2809 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-06 00:07:06 +00:00
teastep
3a775a1316 Bring tc4shorewall code into the firewall script -- Take 2 (fix syntax error and verify tc config in 'check')
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2807 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-05 22:59:38 +00:00
teastep
7870f16cb7 Bring tc4shorewall code into the firewall script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2806 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-05 22:51:29 +00:00
teastep
a66d94d609 Fixes for IPP2P -- fix 'shorewall flush' and multi-ISP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2801 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-05 16:45:50 +00:00
teastep
79fead0fae Add IPP2P UDP support -- Take 3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2795 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 18:46:35 +00:00
teastep
8fe0a32fd3 Add IPP2P UDP support -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2794 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 18:20:28 +00:00
teastep
7277150a46 Add IPP2P UDP support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2793 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 18:00:55 +00:00
teastep
340053a6bc Require MARK_IN_FORWARD_CHAIN=Yes for multi-ISP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2792 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 17:40:09 +00:00
teastep
116f96b47e Flush all mangle chains in refresh
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2788 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 17:04:19 +00:00
teastep
400088ff09 Better diagnostics when IPP2P match is missing - Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2785 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 16:32:27 +00:00
teastep
47a34926f4 Better diagnostics when IPP2P match is missing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-10-04 16:20:30 +00:00