Tom Eastep
|
6c8761c7dd
|
Add a "matches" argument to process_rule1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-27 08:21:30 -08:00 |
|
Tom Eastep
|
9194165e89
|
Handle explicit CONTINUE value for UNTRACKED_DISPOSITION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-27 08:17:09 -08:00 |
|
Tom Eastep
|
5db317b6f7
|
Clean up fix for optimize 8 performance issue
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-27 07:55:55 -08:00 |
|
Tom Eastep
|
380d427a5d
|
Dramatically reduce the CPU cost of optimize 8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-26 17:46:31 -08:00 |
|
Tom Eastep
|
6ce392b08e
|
Correct handling of handle_first_entry() to avoid runaway recursion.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-26 12:18:17 -08:00 |
|
Tom Eastep
|
69b660ba56
|
Add Related and Untracked actions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-26 09:45:16 -08:00 |
|
Tom Eastep
|
5fa01728ad
|
Pass UNTRACKED packets through the blacklist chain when BLACKLISTNEWONLY=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-26 09:18:20 -08:00 |
|
Tom Eastep
|
7bc66da663
|
Call handle_first_entry in the warning/error-message generators.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-26 07:30:50 -08:00 |
|
Tom Eastep
|
b8cc9c5a6a
|
Drop chain-ending rules whose target is 'RETURN'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-25 14:03:04 -08:00 |
|
Tom Eastep
|
b7273d6999
|
Favor low-numbered less complex synonym chains in optimization 8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-25 13:55:04 -08:00 |
|
Tom Eastep
|
c958329d14
|
More manpage updates for RELATED and UNTRACKED rules sections.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 19:24:01 -08:00 |
|
Tom Eastep
|
e12b919dc1
|
Prefer shorter action chain names in optimize level 8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 17:25:11 -08:00 |
|
Tom Eastep
|
18c0956374
|
Fix two bugs in the UNTRACKED section implementation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 16:41:18 -08:00 |
|
Tom Eastep
|
575673a8f5
|
Correct broken links in the .conf manpages.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 15:42:20 -08:00 |
|
Tom Eastep
|
6403f4959d
|
Implement UNTRACKED SECTION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 15:42:01 -08:00 |
|
Tom Eastep
|
0ca93c1ac9
|
Unify handling of the RELATED and INVALID sections within finish_chain_section()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 14:38:02 -08:00 |
|
Tom Eastep
|
a40c74ddec
|
Eliminate forward declaration of finish_chain_section()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 09:04:50 -08:00 |
|
Tom Eastep
|
c2bc74cdfe
|
Add INVALID section to the rules file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-24 08:33:59 -08:00 |
|
Tom Eastep
|
a03e793907
|
Added OUT-BANDWIDTH to the tcinterfaces column
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-22 16:33:57 -08:00 |
|
Tom Eastep
|
7fe2027229
|
Eliminate superfluous ESTABLISHED,RELATED rule
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-22 16:17:19 -08:00 |
|
Tom Eastep
|
8fe36422b5
|
Delete stale comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-22 10:44:12 -08:00 |
|
Tom Eastep
|
17eae4adee
|
Update the description of BLACKLISTNEWONLY to match the implementation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-22 09:11:15 -08:00 |
|
Tom Eastep
|
f61f5a8183
|
Don't copy a chain that has a single RETURN rule.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-22 09:07:07 -08:00 |
|
Tom Eastep
|
4ed5c5fdfe
|
Sort the chain list in optimize_level8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 16:00:32 -08:00 |
|
Tom Eastep
|
25d6164f21
|
Try to avoid ~combN chains when dealing with action chains.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 11:51:33 -08:00 |
|
Tom Eastep
|
32c475193f
|
Another fix for RELATED_DISPOSITION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 11:50:46 -08:00 |
|
Tom Eastep
|
982fabc96f
|
Delete $caller argument from process_default_action()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 09:45:54 -08:00 |
|
Tom Eastep
|
5beae475f5
|
Make optimize 8 a multi-pass operation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 09:12:42 -08:00 |
|
Tom Eastep
|
c820c54f41
|
Correctly handle audited RELATED_DISPOSITION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 09:03:27 -08:00 |
|
Tom Eastep
|
4a354ba5a2
|
Avoid internal error during standard chain completion
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 08:02:50 -08:00 |
|
Tom Eastep
|
e23876b582
|
Rename '$inline' to '$action' in policy_rules()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-21 07:36:50 -08:00 |
|
Tom Eastep
|
64e76599e0
|
Correct handling of default actions that set Shorewall variables.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-20 16:15:04 -08:00 |
|
Tom Eastep
|
b5cb27e84e
|
Correct .service files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-20 15:15:46 -08:00 |
|
Tom Eastep
|
c4a2f3d386
|
Set caller when possible in policy chains.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-20 14:51:16 -08:00 |
|
Tom Eastep
|
bc882af6c5
|
Allow RESET of Shorewall variables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-20 07:32:34 -08:00 |
|
Tom Eastep
|
d31221b03c
|
Fix variable assignment.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-20 07:26:10 -08:00 |
|
Tom Eastep
|
56919703ef
|
Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code
|
2013-01-19 16:55:15 -08:00 |
|
Tom Eastep
|
f403420926
|
Allow setting chain variables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-19 10:52:11 -08:00 |
|
Tom Eastep
|
b31c76cc50
|
Proper job of fixing DEFER_DNS_RESOLUTION=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-18 17:18:29 -08:00 |
|
Tom Eastep
|
1307770178
|
Allow setting action parameters
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-18 15:05:14 -08:00 |
|
Tom Eastep
|
95aab78c0d
|
Add infrastructure to delete the %usedactions entry for an action chain if
the chain parameters are modified.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-18 14:54:57 -08:00 |
|
Tom Eastep
|
4587430e4a
|
Move get_action_logging() to the Config Module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-18 13:06:55 -08:00 |
|
Tom Eastep
|
8ccd1ab52b
|
Handle exclusion correctly when DEFER_DNS_RESOLUTION=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-18 12:09:54 -08:00 |
|
Tom Eastep
|
e76c0c8187
|
Correct IPV6 document
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-17 15:58:52 -08:00 |
|
Tom Eastep
|
ea0325a1f5
|
Clarify IPv6 again.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-17 11:29:36 -08:00 |
|
Tom Eastep
|
c303f14def
|
Merge branch '4.5.12'
|
2013-01-17 10:49:56 -08:00 |
|
Tom Eastep
|
bb5151733c
|
Add Eric Teeter's macro.ActiveDir
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-17 10:40:16 -08:00 |
|
Tom Eastep
|
066c159b4d
|
Provide instructions for changing DISABLE_IPV6 from Yes to No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-17 10:21:08 -08:00 |
|
Tom Eastep
|
724115bcbf
|
Add macro.ActiveDir
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-15 13:21:37 -08:00 |
|
Tom Eastep
|
f0e580347d
|
Merge branch '4.5.12'
Conflicts:
Shorewall/manpages/shorewall.conf.xml
Shorewall6/manpages/shorewall6.conf.xml
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-01-15 10:42:10 -08:00 |
|