shorewall_code

mirror of https://gitlab.com/shorewall/code.git synced 2024-12-21 05:41:07 +01:00

Author	SHA1	Message	Date
Tom Eastep	1fd3a6a522	Detect terminating chains - no RETURN Rules - last rule is terminating Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-08 16:32:24 -08:00
Tom Eastep	011dd2c901	Add a RETURNS flag to optflags indicating that there is RETURN in the chain. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-08 15:25:53 -08:00
Tom Eastep	e54563d9c1	Don't append rules that can't be matched. Also, delete chains whose only rule is a -j RETURN Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-08 13:53:03 -08:00
Tom Eastep	f8c1b02dba	Correct test for optimization in 'check -r' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-08 09:51:32 -08:00
Tom Eastep	dece73f7b6	Another fix for *C actions in arprules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 18:59:24 -08:00
Tom Eastep	5883bc3f50	Correct typo (DNAC -> DNATC) in shorewall-arptables(5) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 18:33:27 -08:00
Tom Eastep	eb3b47ae24	Correctly handle *C actions in arprules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 18:29:41 -08:00
Tom Eastep	c157228f7d	Correct handling of unknown ACTION in arprules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 18:21:58 -08:00
Tom Eastep	a7af052d91	Correct issue with generating ESTABLISHED rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 16:07:24 -08:00
Tom Eastep	414a74d23c	Support protocol lists in most files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 16:06:54 -08:00
Tom Eastep	0526863e66	Make $section numeric Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 13:39:49 -08:00
Tom Eastep	5dbe2aa9ec	Optimize a test in finish_chain_section(). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-07 07:00:15 -08:00
Tom Eastep	ca202ca10b	Flush the arp cache after applying the arprules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-06 17:46:40 -08:00
Tom Eastep	de4e0898b5	Catch protocol lists in contexts that don't allow them. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-06 17:23:14 -08:00
Tom Eastep	edc0a84e5d	Optimize RELATED rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-06 16:48:37 -08:00
Tom Eastep	d4c9885c09	Change interpretation of the log tag when LOGTAGONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-06 13:10:18 -08:00
Tom Eastep	c41b9e596d	Don't add --cstate to dropInvalid rule. Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-06 09:42:55 -08:00
Tom Eastep	9fd7933b5d	Make inline actions work in sections other than NEW. Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-06 09:32:50 -08:00
Tom Eastep	f223e3584c	Make '+' optional in the ADD and DEL statements. Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-06 07:37:11 -08:00
Tom Eastep	3f24416f37	Add a warning for opcode inversion when not arptables_jf. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-05 13:14:32 -08:00
Tom Eastep	38aa7f3857	Correct opcode inversion when not ARPTABLES_JF Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-05 08:26:46 -08:00
Tom Eastep	7f6430a383	Correct address inversion in match_arp_net() Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-05 08:20:51 -08:00
Tom Eastep	4fc0dba26d	Correct two-interface check in process_arprule. Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-05 08:17:53 -08:00
Tom Eastep	0c7e10dbfa	Add a comment to the Zones file - define the {bridge} member.	2013-01-05 08:15:56 -08:00
Tom Eastep	97009bad79	Correct arptables_jf MAC handling. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-04 17:27:16 -08:00
Tom Eastep	af7b7195d2	Fix MAC handling in the ARP module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-04 15:55:52 -08:00
Tom Eastep	a732f6e538	Add some comments to the ARP module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2013-01-04 15:07:51 -08:00
Tom Eastep	38657d9f98	Support for arptables. Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-04 09:17:57 -08:00
Tom Eastep	90e0c8b717	Don't update mtime on shorewall.conf during update that doesn't change the file Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-02 15:03:07 -08:00
Tom Eastep	f955abe18b	Unify IPv4 and IPv6 modules.xtables files - only difference now is xt_ipp2p Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-01 08:44:36 -08:00
Tom Eastep	25b2341ecf	Add sch_fq_codel to modules.tc Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-01 08:29:41 -08:00
Tom Eastep	aca3ce3c21	Delete blank line Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2013-01-01 08:29:02 -08:00
Tom Eastep	34f8125416	Correct a couple of issues with update -D - shorewall.conf.bak is no longer unlinked - The mtime of all unaltered files is no longer updated	2012-12-31 12:43:02 -08:00
Tom Eastep	87715e5f0b	Correct Typo Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2012-12-31 10:36:27 -08:00
Tom Eastep	4590e25052	Correct modules.xtables Signed-off-by: Tom Eastep <teastep@mint14.(none)>	2012-12-31 08:54:32 -08:00
Tom Eastep	5848d7cab7	Correct helper validation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-30 13:20:56 -08:00
Tom Eastep	5dfc27355e	Correct a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-29 11:34:12 -08:00
Tom Eastep	115081dda5	Tweak fq_codel documentation. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-29 11:20:16 -08:00
Tom Eastep	6d9cca1cff	fq_codel Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-29 10:58:11 -08:00
Tom Eastep	51deec115b	Correct handling of wildcard interfaces - chain_base[1] renamed var_base[1] - $chain replaced by $var in renamed functions - replace trailing '+' by '_plus' to provide uniqueness - add sub chain_base() to the Chains module as an identity mapper Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-28 10:39:19 -08:00
Tom Eastep	643f419264	Merge branch '4.5.11' Conflicts: Shorewall/Perl/Shorewall/Rules.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-28 09:02:33 -08:00
Tom Eastep	2009a66bb5	Avoid invalid function name for starting an optional interface Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-28 08:04:06 -08:00
Tom Eastep	ebe4267c49	Rename IGNOREOLDCAPVERSIONS to WARNOLDCAPVERSION Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-27 09:58:45 -08:00
Tom Eastep	8b92a59821	Ignore '-m comment' when detecting duplicate rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-27 09:51:33 -08:00
Tom Eastep	f96bc7cc2d	Cosmetic cleanup of the .conf manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-27 09:01:37 -08:00
Tom Eastep	8bb6f81dc5	Rename IGNOREOLDCAPS to IGNOREOLDCAPVERSIONS Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-27 08:54:22 -08:00
Tom Eastep	01a8ff20d4	Add the xtables modules to modules.xtables Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-26 16:06:54 -08:00
Tom Eastep	ef0102e9f1	Add the 'IGNOREOLDCAPS' option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-26 15:48:08 -08:00
Tom Eastep	14bbda14a2	Add some comments describing Config.pm globals - Also changed $shell from 'my' to 'our'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-26 10:55:13 -08:00
Tom Eastep	62406e261d	Correct typo in shorewall-masq(5) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-26 07:43:06 -08:00
Tom Eastep	bfeea76cf2	Disallow ?FORMAT when $max_format == 1 Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/Perl/Shorewall/Config.pm	2012-12-26 07:37:23 -08:00
Tom Eastep	100e03cf93	Don't set $nocomment in in-line action Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-26 07:06:29 -08:00
Tom Eastep	84cc78c58e	Eliminate @comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-25 17:00:24 -08:00
Tom Eastep	3f28af80d2	Disallow ?FORMAT when $max_format == 1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-25 08:10:48 -08:00
Tom Eastep	6126ae67e6	Don't apply AUTOCOMMENT or comment continuation to inline actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 13:50:26 -08:00
Tom Eastep	575020c851	More comment handling Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 13:35:42 -08:00
Tom Eastep	1c212e878f	Restore SECTION handling in Accounting File Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 13:33:44 -08:00
Tom Eastep	4393a6c603	Eliminate redundant calls to clear_comment. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 12:35:08 -08:00
Tom Eastep	fca5b75c5b	Merge branch '4.5.11'	2012-12-24 10:30:43 -08:00
Tom Eastep	c942a95d3c	Allow ?COMMENT in accounting. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 10:15:23 -08:00
Tom Eastep	89ea37e088	Correct nested comments. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 10:11:53 -08:00
Tom Eastep	14f8947012	Remove old COMMENT/FORMAT handling Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-24 09:31:20 -08:00
Tom Eastep	15817078b8	Use 'our' for globals to aid debugging. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-23 13:16:54 -08:00
Tom Eastep	0acd93a032	Ensure that action and macro files always allow comment directives. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-23 12:19:30 -08:00
Tom Eastep	4d2379f542	Implement update -D Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-23 10:50:31 -08:00
Tom Eastep	c9eccaf3b8	Implement ?COMMENT directive Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-23 10:49:32 -08:00
Tom Eastep	44a4f6d77d	Move COMMENT handling to the Config module. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-22 13:51:24 -08:00
Tom Eastep	e4e61c4193	A more uniform way of handling $max_format Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-22 11:57:25 -08:00
Tom Eastep	0cd0675c98	Always push $file_format and $max_format onto the include stack. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-22 08:15:46 -08:00
Tom Eastep	bc230c00a3	Optimizations in process_compiler_directive() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-22 08:14:46 -08:00
Tom Eastep	96b61ea05c	Update documentation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 16:13:23 -08:00
Tom Eastep	dbd55acba2	Update samples, standard Actions and Macros to use ?FORMAT	2012-12-21 15:51:14 -08:00
Tom Eastep	10108b2d6a	Convert file processors to use ?FORMAT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 15:49:28 -08:00
Tom Eastep	35aeaf340f	Implement ?FORMAT directive Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 15:31:42 -08:00
Tom Eastep	0eb041d2d1	Correct ?SET error message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 15:23:26 -08:00
Tom Eastep	a5debe793f	Add $file_format exported variable and handle in the include stack. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 15:14:23 -08:00
Tom Eastep	eb20283a55	Replace $1-$5 with @1-@5 in the standard actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-21 14:00:05 -08:00
Tom Eastep	df7785f2e9	Implement user-defined address variables. - Also correct handling of ${0} & ${chain} in a SWITCH column. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-18 17:58:20 -08:00
Tom Eastep	2869a9a94d	Rename add_quotes to join_parts Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-15 16:12:03 -08:00
Tom Eastep	3fbe3aad09	Merge branch '4.5.10'	2012-12-14 06:34:45 -08:00
Tom Eastep	7c6fcfccd5	Fix typo on line 21 on the conntrack file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-14 06:33:54 -08:00
Tom Eastep	1cbeaa6a9f	Apply Tuomo Soini's tabs patches for the rules files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-13 09:26:09 -08:00
Tom Eastep	b6e699ca5c	Factor some common code into a function. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-13 06:46:57 -08:00
Tom Eastep	743478614b	Make @0 work correctly again. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-12 13:13:17 -08:00
Tom Eastep	5944b4fc7b	Make @chain (@{chain}) a synonym for @0 (@{0}) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-12 11:55:04 -08:00
Tom Eastep	8a0abab4cc	Rename 'ALLOWUNKNOWNVARIABLES' to 'IGNOREUNKNOWNVARIABLES' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-12 11:51:31 -08:00
Tom Eastep	5da7db3d5f	Implement @-variables. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-12 11:46:38 -08:00
Tom Eastep	14cdaf21fc	Handle nested params in push_action_params() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-09 10:45:29 -08:00
Tom Eastep	88d4814209	Merge branch '4.5.10' Conflicts: Shorewall/Perl/Shorewall/Config.pm	2012-12-08 20:54:33 -08:00
Tom Eastep	4d064d6713	Replace spaces with tabs in rules files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-07 16:48:55 -08:00
Tom Eastep	6ab5cfd63a	Use split_list2 in isolate_basic_target() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-06 19:12:44 -08:00
Tom Eastep	7190cd1265	Handle nested parens when pushing action parameters. - Add an optional argument to split_list1 that causes parens to be retained. Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/Perl/Shorewall/Config.pm	2012-12-06 15:20:10 -08:00
Tom Eastep	61d67a4741	Remove extraneous comment from the rule generated by action.RST Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-06 15:13:46 -08:00
Tom Eastep	5f48e4e531	Handle nested parens when pushing action parameters. - Add an optional argument to split_list1 that causes parens to be retained. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-06 15:13:14 -08:00
Tom Eastep	0a31d9ba41	Remove extraneous comment from the rule generated by action.RST Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-06 15:10:53 -08:00
Tom Eastep	fdadb57e82	Minor readability improvement Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 19:41:18 -08:00
Tom Eastep	56d7b6248b	Begin Action Documentaiton Update Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 19:07:42 -08:00
Tom Eastep	8139f2ad91	Rename process_conditional() to process_compiler_directive() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 14:53:03 -08:00
Tom Eastep	189cd59650	Improve expression evaluation - Only quote values when there is not an odd number of preceding quotes - Make address family test return a numeric value - Unconditionally trace the generated expression if debugging is set. - Convert an empty expression into '' rather than generate an error. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 08:37:50 -08:00
Tom Eastep	4ec47783f1	Detect missing target in merge_levels() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 07:52:07 -08:00
Tom Eastep	2875fbb521	Cosmetic change (add a blank line). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 07:51:41 -08:00
Tom Eastep	25c53f5a60	Detect missing target in merge_levels() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-05 07:51:21 -08:00
Tom Eastep	c61c9ba7eb	Make expression evaluation more deterministic. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 18:10:19 -08:00
Tom Eastep	2fbbc70e83	Only do SET and RESET when we aren't omitting. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 16:27:18 -08:00
Tom Eastep	c18996b6f5	Implement ?set and ?reset directives Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 14:28:03 -08:00
Tom Eastep	02cbd72a91	Merge branch '4.5.10'	2012-12-04 10:56:09 -08:00
Tom Eastep	60012d1208	Add additional space for the OPTIONS column - actions and actions.std problem Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 10:54:32 -08:00
Tom Eastep	903e25a91a	Add ALLOWUNKNOWNVARIABLES to the sample configurations. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 09:04:34 -08:00
Tom Eastep	8f1e8bf475	Add 'ALLOWUNKNOWNVARIABLES' to the manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 08:50:23 -08:00
Tom Eastep	fb2d876683	Rename $loglevel and $logtag to $_loglevel and $_logtag respectively. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 08:49:59 -08:00
Tom Eastep	a25b3c68ee	Rename %symbols to %variables Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-04 08:49:25 -08:00
Tom Eastep	314632f1f4	Unified symbol table for shell variables. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-03 17:18:21 -08:00
Tom Eastep	409f5f2aab	Expand variables from the shorewallrc1 then shorewallrc hashes	2012-12-03 15:33:33 -08:00
Tom Eastep	fb0035bdf3	Add ALLOWUNKNOWNVARIABLES option. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-03 14:43:35 -08:00
Tom Eastep	72aabef0fa	Add $logaction and $logtag as variables usable within actions - Also make action variables usable in ?if and ?elsif expressions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-03 12:31:47 -08:00
Tom Eastep	fc3606a489	Prepare for multiple options in actions files Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-03 08:17:55 -08:00
Tom Eastep	ad4709cb6d	Small effeciency improvement - Don't check for 'bad match' until it is known that the matches are the same. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-03 06:54:44 -08:00
Tom Eastep	c0abdc1fe8	Add some comments in and around delete_duplicates() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 17:31:13 -08:00
Tom Eastep	cd5e9be467	Carefully suppress duplicate rules in all tables Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 12:20:24 -08:00
Tom Eastep	c05c928c6c	Delete adjacent duplicate rules in tables other than 'raw' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 09:21:04 -08:00
Tom Eastep	a33cf5cc91	Fix AUTOCOMMENT=No Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 08:26:54 -08:00
Tom Eastep	9da507ae98	Remove error messages from 6 actions regarding in-line. - The compiler now ignores 'inline' for these actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 07:13:09 -08:00
Tom Eastep	e0e7b2a9f2	Correct action.DropSmurfs Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-02 07:11:58 -08:00
Tom Eastep	65676cb865	Support passing log levels inside parameters. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 15:06:51 -08:00
Tom Eastep	8ebbdee20f	Only look for numerics if a shell variable begins with a number. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 12:52:26 -08:00
Tom Eastep	6c1a5b8051	Be more agressive about detecting action recursion. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 12:10:06 -08:00
Tom Eastep	cc657e571d	Update action templates with new columns. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 10:25:10 -08:00
Tom Eastep	f358a78eca	Revise the description of 'noinline' to match the changed implementation. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 09:33:38 -08:00
Tom Eastep	b9adc2ebec	Remove another vestage of CONDITION_INIT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 09:33:01 -08:00
Tom Eastep	44f00cd0aa	Restore original $actionfile logic in process_actions() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 08:09:20 -08:00
Tom Eastep	ae5680401f	Remove questionable autocreate of an action in createlogactionchain() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 08:04:29 -08:00
Tom Eastep	8cbe26e32c	Ignore 'inline' for certain actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-12-01 07:54:42 -08:00
Tom Eastep	146402d9be	Yet another correction to the same line :-( Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-30 09:55:24 -08:00
Tom Eastep	70f26d8bb2	Correct line in prior commit. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-30 09:30:27 -08:00
Tom Eastep	893d054cb8	Reduce the block levels in define_firewall() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-30 08:46:49 -08:00
Tom Eastep	53fd0e7c8c	Don't require functions called from Shorewall::Compiler::compiler to know the current indentation. Also, add an optional 'times' parameter to push_indent() and pop_indent(). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-30 07:49:42 -08:00
Tom Eastep	6702bb1989	Revert condition initialization patch. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-30 07:31:29 -08:00
Tom Eastep	e60369728a	Only initialize switches that survived optimization - Also use push_indent to make things more readable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 15:25:28 -08:00
Tom Eastep	7d4bc568d8	Include initialization in condition match if supported Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 14:54:09 -08:00
Tom Eastep	11d4e92a29	Correct check for leading zeros in action variables. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 14:39:02 -08:00
Tom Eastep	409c427134	Add support for future condition initial values. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 12:15:15 -08:00
Tom Eastep	7bdce1bc97	Disallow superfluous leading zeros in action parameter numbers. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 08:29:20 -08:00
Tom Eastep	e1524763ad	Also substute the chain name for '@0'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 08:28:52 -08:00
Tom Eastep	15121e0743	Also substitute the chain name for '@0' in SWITCH names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 08:05:49 -08:00
Tom Eastep	9c0d8a2533	Use '@{0}' as the chain name surrogate in SWITCH columns Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-29 07:17:13 -08:00
Tom Eastep	bff91cd325	Allow overriding 'inline' on some standard actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-28 15:03:08 -08:00
Tom Eastep	8006d150f1	Allow switch initialization. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-27 16:17:43 -08:00
Tom Eastep	e44acdc6af	Corrections to in-line actions. - Avoid reference to uninitialized variable. - Remove another vestage of multi-parameter macros. - Correct a typo. - Correct handling of SOURCE and DEST in an in-line action body. - Correct a comment. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-27 12:56:14 -08:00
Tom Eastep	e2297f2582	Remove meaningless type from an error message. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-27 12:53:47 -08:00
Tom Eastep	d7096ae52e	Back out default-action macros and document in-line actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-27 10:53:18 -08:00
Tom Eastep	6bf996d4b8	Implement inline actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-27 10:32:48 -08:00
Tom Eastep	85a46690c0	Improve optimize level 16 fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 15:11:07 -08:00
Tom Eastep	a4dcd1071a	Revert change to macro level merging. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 13:41:12 -08:00
Tom Eastep	78ba8bac50	Replace '@' by the chain name in SWITCH columns. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 13:28:23 -08:00
Tom Eastep	bf75b2b919	$0 expands to the current action chain name. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 13:23:20 -08:00
Tom Eastep	7673b1ac4b	Support multiple parameters in macros. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 11:04:19 -08:00
Tom Eastep	fc87576005	Back out silly change for output interfaces in the conntrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 09:47:42 -08:00
Tom Eastep	3f550622bd	Only use routing table for OUTPUT interface in the raw table. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 07:51:55 -08:00
Tom Eastep	21c2963691	Correct Format-3 syntax for the SOURCE column of the conntrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-26 07:48:43 -08:00
Tom Eastep	e7dee420ee	Allow interfaces in the DEST column of the conntrack file when the chain is OUTPUT. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 18:37:23 -08:00
Tom Eastep	e45fe53705	Correct another optimizer defect. - Don't declare command-mode rules as duplicates. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 18:00:26 -08:00
Tom Eastep	697fc001c3	Return to zone-based handling of 'all'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 16:31:05 -08:00
Tom Eastep	642f192b3d	Disallow destination interface in the OUTPUT chain. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 15:37:53 -08:00
Tom Eastep	7b0578fa84	Fix AUDIT on IPv6. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 12:09:18 -08:00
Tom Eastep	5acf0f60e7	Only apply log level to bare LOG rules in default-action macro. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 10:17:03 -08:00
Tom Eastep	fb3194d96b	Correct handling of default-action macro when specified as "macro.Name" Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 10:16:43 -08:00
Tom Eastep	629717f7cc	Correct policy manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 09:33:46 -08:00
Tom Eastep	8e239c90c1	Update columns in the macro template file. - It was missing SWITCH and HELPER	2012-11-25 08:54:19 -08:00
Tom Eastep	8c2db40783	Correct errors in the conntrack manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 08:52:51 -08:00
Tom Eastep	066a017420	Correct typo in Raw.pm - The OUTPUT chain designator test was using '0' (zero) rather than 'O'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 08:52:33 -08:00
Tom Eastep	1870c281a9	Make AUDIT support params again. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 08:26:44 -08:00
Tom Eastep	dbfc805707	Add 'IU' state in secmarks Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-25 08:10:53 -08:00
Tom Eastep	748d532175	Correct the explaination of ULOG and NFLOG in the manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-24 09:11:28 -08:00
Tom Eastep	b7e2b28562	Transfer tag when merging into an NFLOG/ULOG rule. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-24 09:04:56 -08:00
Tom Eastep	67e1e6cf91	Allow WHITELIST in IPv6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-23 14:19:14 -08:00
Tom Eastep	cd2854cad0	Fix NFLOG/ULOG implementation. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-23 13:49:43 -08:00
Tom Eastep	75c148a2dd	Enable 'debug' on the try, stop and clear commands. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-23 11:46:14 -08:00
Tom Eastep	71bbc632ce	Handle 'fw' correctly in the SOURCE column of the stoppedrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-23 08:35:51 -08:00
Tom Eastep	b6a1a7d538	Make NFLOG and ULOG built-ins. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-23 08:14:24 -08:00
Tom Eastep	30de211bda	Implement format-3 conntrack files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 20:56:56 -08:00
Tom Eastep	3f7425b6a0	Purge %renamed before each table is processed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 17:27:09 -08:00
Tom Eastep	8a744de906	Document semantic change to 'all' handling in the conntrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 09:10:07 -08:00
Tom Eastep	26dee73895	Support the audited targets on IPv6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 08:24:51 -08:00
Tom Eastep	df7ce1a7d1	Add the AUDIT built-in and delete the Audit action. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 08:24:33 -08:00
Tom Eastep	4a05571e7e	Add forward prototype for process_macro() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-22 08:00:15 -08:00
Tom Eastep	b89e05740d	Insure that nested zone exclusions go in the proper place in raw PREROUTING Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 14:49:21 -08:00
Tom Eastep	3040156981	Add SWITCH column to the conntrack file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 14:20:56 -08:00
Tom Eastep	54dadcc546	Ensure that zone-specific rules come before 'all' rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 14:20:30 -08:00
Tom Eastep	952aed225d	Improve handling of 'all' in the conntrack file. - Also added 'all-' to represent all off-firewall zones. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 13:07:01 -08:00
Tom Eastep	7bfbf522bc	Document that parameters are allowed in default actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 11:12:55 -08:00
Tom Eastep	1efd47a7e9	Apply Tuomo Soini's fix for RHEL5 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 10:34:00 -08:00
Tom Eastep	c0a2f19500	Add an Audit action. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 10:24:14 -08:00
Tom Eastep	374489c3cf	Revert "Fix RHEL5 issue with route marking." This reverts commit `77f342b0e0`.	2012-11-21 10:19:24 -08:00
Tom Eastep	77f342b0e0	Fix RHEL5 issue with route marking. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 09:08:15 -08:00
Tom Eastep	8f52c9744e	Correct some issues with default action macros. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-21 08:29:35 -08:00
Tom Eastep	1957af04fd	Don't create a _weight file for an optional non-provider interface. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 16:10:30 -08:00
Tom Eastep	a0faba2a03	Correct interface/provider handling. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 13:27:15 -08:00
Tom Eastep	c798200b20	Another correction to CHECKSUM detection. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 10:09:28 -08:00
Tom Eastep	67ae9df0f8	Correct handling of unknown interfaces in TC. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 08:07:42 -08:00
Tom Eastep	ebb4e1f6e4	Don't generate start/stop functions for wildcard optional interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 07:06:27 -08:00
Tom Eastep	f458e99390	Correct the compiler's CHECKSUM detection Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 06:59:40 -08:00
Tom Eastep	5b049d7e9e	Improve readability in Rules module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-20 06:59:13 -08:00
Tom Eastep	3b20c0db54	Allow Macros to be used as Default Actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 16:52:10 -08:00
Tom Eastep	0d8931e49f	Don't use ':' as a join character in contatenated macro ACTION expansion. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 12:58:29 -08:00
Tom Eastep	47791add99	Fix formatting of a line of code. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 12:30:25 -08:00
Tom Eastep	be587726f4	Merge branch '4.5.9'	2012-11-19 08:22:05 -08:00
Tom Eastep	60a509c926	Add new macros and alphabetize the ACTION list in the rules manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 08:19:12 -08:00
Tom Eastep	b25ece75de	Don't leave temporary chain in the raw table when LOAD_HELPERS_ONLY=No Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 08:18:32 -08:00
Tom Eastep	e9ef03f723	Add a ULOG Macro. - Also remove 'DEFAULT' from NFLOG macro. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-19 07:15:50 -08:00
Tom Eastep	0db7b6c58a	Don't require a parameter with '&' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 15:45:58 -08:00
Tom Eastep	57e913d86e	Merge branch '4.5.9'	2012-11-18 15:02:46 -08:00
Tom Eastep	263f4e57cb	Add an NFLOG Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 14:52:53 -08:00
Tom Eastep	a4294658b6	Add a capability to use log levels as a target. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 14:50:59 -08:00
Tom Eastep	65e1b1c9e7	Allow NFLOG as a target Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 13:15:24 -08:00
Tom Eastep	a07cfb0885	Allow NFLOG as a target Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 13:13:43 -08:00
Tom Eastep	9dac330756	Remove references to USE_ACTIONS Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 13:13:20 -08:00
Tom Eastep	dfd02c932e	Correct typo in shorewall(8) and shorewall6(8). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 13:12:03 -08:00
Tom Eastep	c6ffdd67e2	Add DROP target to the conntrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 11:35:40 -08:00
Tom Eastep	5265cd5bb7	Add UNTRACKED match to the secmarks file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 11:01:49 -08:00
Tom Eastep	ab381ed95e	Expand the description of enable/disable on optional non-provider interfaces. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 09:01:38 -08:00
Tom Eastep	0277d6628e	Correct typo in shorewall(8) and shorewall6(8). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-18 08:30:47 -08:00
Tom Eastep	5712438bcb	Eliminate Shell syntax error when a provider and its interface have the same name. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-16 09:50:36 -08:00
Tom Eastep	a2b14c37ed	Treat optional interfaces as pseudo-providers. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-16 09:48:21 -08:00
Tom Eastep	b1ffcd8628	Apply provider mask in 'routemark' chain. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-14 11:20:30 -08:00
Tom Eastep	34e3e4bf82	Merge branch '4.5.9'	2012-11-14 11:17:18 -08:00
Tom Eastep	06a4994488	Make exclusion work correctly with TPROXY. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-14 11:16:52 -08:00
Tom Eastep	391113dfe3	Apply provider mask in 'routemark' chain. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-13 06:55:59 -08:00
Tom Eastep	3c58d2180d	Improve the efficiency of tcrule processing. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-13 06:55:35 -08:00
Tom Eastep	32c9e4274f	Rename 'mysplit' to 'split_host_list' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-11 08:42:01 -08:00
Tom Eastep	896d874aab	Set VARLIB in the script's initialize() function. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-09 12:29:19 -08:00
Tom Eastep	5fcdfd779c	Don't default IPSET to 'ipset'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-09 08:54:54 -08:00
Tom Eastep	860ee6de27	Eliminate nonsensical warning message. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-06 07:36:36 -08:00
Tom Eastep	4b6fdf8b72	Update masq manpage to expunge exclusion with an interface name in the SOURCE column. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-04 09:11:37 -08:00
Tom Eastep	ec17ea1dee	Remove superfluous check Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-03 08:19:46 -07:00
Tom Eastep	2e211bc2b6	Correct handling of wildcard interfaces in rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-03 07:24:41 -07:00
Tom Eastep	6e4632663b	Correct heading comments in action.TCPFlags. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-11-01 07:20:50 -07:00
Tom Eastep	5f0b85b5b9	Replace a couple of more hard-coded directory names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-30 09:49:53 -07:00
Tom Eastep	86ae74005a	Correct invalid information in shorewall[6]-tcclasses. - Delete part about an interface only appearing once. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-29 12:46:58 -07:00
Tom Eastep	3f1aeb33be	Correct mark range with shifted mask. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-26 12:41:06 -07:00
Tom Eastep	e908473d29	Clean up description of CHECKSUM in the manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-26 11:22:54 -07:00
Tom Eastep	e177916c12	Implement statistical marking in the tcrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-26 07:10:26 -07:00
Tom Eastep	0387b16983	Implement CHECKSUM action in the tcrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-22 15:42:13 -07:00
Tom Eastep	f24e194819	Don't display chains with no matched entries when -b Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-22 14:15:37 -07:00
Paul Gear	59a75512be	Add Teredo macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-21 07:20:29 -07:00
Tom Eastep	5a103e8ec5	Make options consistent (add a '-' before 't') Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-20 07:15:44 -07:00
Paul Gear	cf68379c4c	Document brief option for show command Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-20 07:11:56 -07:00
Paul Gear	6c06302d2a	Make formatting of interface options consistent Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-20 07:11:48 -07:00
Tom Eastep	b00dc658b2	Correct error messages in action.RST Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-15 07:17:17 -07:00
Tom Eastep	6af16e0cda	Allow quotes in parameter to run_iptables() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-14 13:26:08 -07:00
Tom Eastep	ab7975539c	Correct typo in get_params() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-14 09:30:27 -07:00
Tom Eastep	dfd0692176	Omit IPv6-specific code from checkkernelversion() in IPv4 script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-13 07:28:37 -07:00
Tom Eastep	8b650358d6	Don't shout in compiler directives Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-13 07:14:51 -07:00
Paul Gear	78aab70dfb	Add Puppet macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-13 07:04:55 -07:00
Tom Eastep	cc90a06958	Add RESTORE_ROUTEMARKS option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-11 07:34:57 -07:00
Tom Eastep	54e066ec3a	Re-order logic in add_group_to_zone - Need to normalize the address prior to comparing it with ALLIP Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-08 08:54:54 -07:00
Tom Eastep	620f88b339	Merge branch '4.5.8'	2012-10-07 17:41:01 -07:00
Tom Eastep	b7e6b1aa41	Allow IP range in the hosts file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 17:40:42 -07:00
Tom Eastep	c84603cdc6	Merge branch '4.5.8' Conflicts: Shorewall/Perl/Shorewall/Zones.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 17:04:27 -07:00
Tom Eastep	e2b029b0ba	More hosts file corrections. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 17:00:35 -07:00
Tom Eastep	0efc0451c1	Allow IP range in the hosts file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 15:59:30 -07:00
Tom Eastep	9dd66fc6ff	Allow IP range in the hosts file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 15:55:00 -07:00
Tom Eastep	1195661264	Document new Dynamic Zone implementation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 12:20:36 -07:00
Tom Eastep	0c9cc4a233	Change the 'dynamic' zone option to 'dynamic_shared' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-07 09:18:18 -07:00
Tom Eastep	c228668500	Implement logic associated with 'dynamic' zone option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-06 07:52:06 -07:00
Tom Eastep	afaba46aa3	Add 'dynamic' zone option. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-06 07:21:49 -07:00
Tom Eastep	1f38a36acf	Delete extraneous logic Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/Perl/Shorewall/Zones.pm	2012-10-04 09:45:25 -07:00
Tom Eastep	526f72216a	Correct handling of dash characters in interface/ipset names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-04 07:34:41 -07:00
Tom Eastep	642ff1be15	Correct handling of dash characters in interface/ipset names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-02 10:09:23 -07:00
Tom Eastep	92d39dc56d	Expunge the g_perllib variable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-01 06:59:39 -07:00
Tom Eastep	a8e9296473	Expunge the g_sbindir variable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-01 06:55:48 -07:00
Tom Eastep	749e239d15	Expunge the g_libexec variable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-10-01 06:51:36 -07:00
Tom Eastep	30d4ba67cc	Revert "Allow '-' in the interface for dynamic zone." This reverts commit `b68b34b820`.	2012-09-30 16:25:35 -07:00
Tom Eastep	4ef81041be	Delete extraneous logic Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-30 16:09:34 -07:00
Tom Eastep	b68b34b820	Allow '-' in the interface for dynamic zone. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-30 16:04:38 -07:00
Tom Eastep	4311dc5ddf	Merge branch '4.5.8'	2012-09-29 09:03:12 -07:00
Tom Eastep	38faa3e071	Correct handling of new ipv6 net syntax in the hosts file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-29 09:01:17 -07:00
Tom Eastep	81f92546d8	Merge branch '4.5.8'	2012-09-29 08:08:00 -07:00
Tom Eastep	91e2c31a58	Correct handling of new ipv6 net syntax in the hosts file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-27 14:51:28 -07:00
Tom Eastep	9c893a0e21	Restore the original calling sequences of validate_[46]net() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-27 07:22:40 -07:00
Tom Eastep	c8c1585dfc	Merge branch '4.5.8'	2012-09-26 15:48:44 -07:00
Tom Eastep	ffcf262de4	Ensure that the 1:1 NAT chain jumps always come last in PREROUTING. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-26 15:46:52 -07:00
Tom Eastep	ca79147db3	Merge branch '4.5.8'	2012-09-25 11:07:49 -07:00
Tom Eastep	bac0f36818	Yet another fix for TTL/HL Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-24 16:23:15 -07:00
Tom Eastep	a8f324b25c	Ensure that the .service files run the utility in ${SBINDIR} Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-24 14:32:20 -07:00
Tom Eastep	b451e10dd8	More fixes for HL and TTL Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-24 14:25:31 -07:00
Togan Muftuoglu	58e277f48b	Systemd service files usrmove On 09/24/2012 10:19 PM, Tom Eastep wrote: > On 09/24/2012 02:31 AM, Jonathan Underwood wrote: >> Such a change is something I've been meaning to submit a (trivial) patch >> for - from a fedora perspective this would be a welcome change. > > Okay -- if one of you would send me a patch, I'll apply it. 4.5.8 is > about to be released, so I would like the patch ASAP if you want it > included in 4.5.8. Hope not late and it works, see attached Togan >From 3ec45217b6ac93437d002315c56a1b3354160ff2 Mon Sep 17 00:00:00 2001 From: Togan Muftuoglu <toganm@opensuse.org> Date: Sun, 23 Sep 2012 14:26:07 +0200 Subject: [PATCH] Fix sbin The service files need to be executed from /usr/sbin not from /sbin Signed-off-by: Togan Muftuoglu <toganm@opensuse.org> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-24 14:03:55 -07:00
Tom Eastep	6d0142525c	Merge branch '4.5.8'	2012-09-24 08:44:07 -07:00
Tom Eastep	cf130a7e16	Correct handling of {+-}0 in the TTL and HL tcrule actions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-24 07:14:44 -07:00
Tom Eastep	e1309b06b1	Correct PPTP Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-23 12:19:41 -07:00
Tom Eastep	70c76f577c	Permit "[<ipv6 address>]/vlsm" in addition to "[<ipv6 address>/vlsm]" Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-23 12:16:17 -07:00
Tom Eastep	86c35339cd	Merge branch '4.5.8'	2012-09-23 07:07:37 -07:00
Tom Eastep	f23fb1535d	Correct PPTP control port number in conntrack files (1729->1723). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-23 07:04:43 -07:00
Tom Eastep	607c93125c	Don't unconditionally detect helpers when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: docs/Internals.xml	2012-09-23 06:55:00 -07:00
Tom Eastep	2d01af8256	Correct typos (omma -> comma) in the stoppedrules manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-23 06:52:32 -07:00
Tom Eastep	83d3d04afb	Correct typos (omma -> comma) in the stoppedrules manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-23 06:51:56 -07:00
Tom Eastep	88caf5c9df	Correct header in the STOPPEDRULES files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-22 11:51:23 -07:00
Tom Eastep	32f89fa24b	Don't unconditionally detect helpers when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-22 09:27:13 -07:00
Tom Eastep	8bd5ee355c	Merge branch '4.5.8'	2012-09-21 08:56:19 -07:00
Tom Eastep	af5eb575c2	Add tcfilter example with PRIORITY Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-21 07:40:33 -07:00
Tom Eastep	4aeebb0b15	Merge branch '4.5.8'	2012-09-19 10:07:31 -07:00
Tom Eastep	e14f5e5199	Swicth from postincrement to preincrement when bumping 'filterpri'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-17 10:46:31 -07:00
Tom Eastep	483374d356	Continue development of the Internals document Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-17 07:52:18 -07:00
Tom Eastep	fc361afbc3	Disallow ':' as the only contents of the USER/GROUP column Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-16 16:25:41 -07:00
Tom Eastep	124dafbf52	Delete IPAddrs dependency from Compiler.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-16 15:48:06 -07:00
Tom Eastep	78f3255bf0	Correct getparams. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-16 09:06:32 -07:00
Tom Eastep	adc983bccb	Issue progress messages to display the priority of Shorewall-generated filters Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-15 07:25:16 -07:00
Tom Eastep	0400cedc6c	More TC manpage updates Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-14 08:01:08 -07:00
Tom Eastep	a581958042	Document filter priority algorithm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-13 16:31:39 -07:00
Tom Eastep	e0f85edab3	Assign sequential priorities to filters - Also remove a redundant 0x prefix from a table number. Signed-off-by: Tom Eastep <teastep@shorewall.net	2012-09-13 09:30:11 -07:00
Tom Eastep	14073e8943	Change TOS priority offset from 10 to 15 - Make it distinct from tcp-ack Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-13 08:25:05 -07:00
Tom Eastep	e02906e4f9	Add TOS to classification priority enumeration Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-13 07:46:52 -07:00
Tom Eastep	75953a87cb	Optional priority on hfsc classes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-12 13:39:54 -07:00
Tom Eastep	a223245c01	Don't create classic blacklist chains if no blacklist file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-12 07:30:34 -07:00
Tom Eastep	89289f95ba	Allow specification of priority for Shorewall-generated tc filters. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-12 07:22:07 -07:00
Tom Eastep	e431d5ab53	Document changes to filter priorities Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-10 17:12:59 -07:00
Tom Eastep	8c7b8c9390	Correct missing VARLIB handling in the installers. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-10 11:12:43 -07:00
Tom Eastep	f6e3107c00	Redefine tc filter priorities Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-10 10:03:16 -07:00
Tom Eastep	b4098ff5dd	Appease the Fedora 17 version of emacs. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-10 10:02:47 -07:00
Tom Eastep	9d6e0fd9ed	Add a PRIORITY column to the tcfilters file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-09 14:48:32 -07:00
Tom Eastep	0e1e38b035	Adjust VARDIR/VARLIB for old shorewallrc files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-09 13:12:32 -07:00
Tom Eastep	5c62bf297a	Document multiple GID/UIDs in the USER/GROUP column Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-09 08:18:25 -07:00
Tom Eastep	d7354aca14	Add a warning regarding the blacklist option being deprecated. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-05 07:19:48 -07:00
Tom Eastep	ebc4ad2f1e	Add warning message when an OUTPUT stopped rule is ignored due to ADMINISABSENTMINDED Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-05 07:16:40 -07:00
Tom Eastep	6614239b32	Allow multiple USER/GROUPs in a rule. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 17:03:26 -07:00
Tom Eastep	3993abad4e	Revert routestopped changes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 17:03:02 -07:00
Tom Eastep	5e07ad8caa	Allow a directory to be specified with -e. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 14:05:52 -07:00
Tom Eastep	6aaf06c2e8	Add stoppedrules files to the samples Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 09:06:45 -07:00
Tom Eastep	eb854f1dbe	Only process routestopped when stoppedrules does not exist or is empty Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 08:46:04 -07:00
Tom Eastep	2050d566b8	Handle PRODUCT correctly at run-time. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 07:36:47 -07:00
Tom Eastep	188f05e130	Make ./firewall the default file when compile -e Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 07:35:03 -07:00
Tom Eastep	4260e5f6ba	Correctly handle the product name in export shorewallrc. - Also re-arranged the processing of the shorewallrc file to eliminate the kludgy shuffling of hashes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-04 06:59:16 -07:00
Tom Eastep	bdd66e68c9	Have separate hashes for the two shorewallrc files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 20:09:20 -07:00
Tom Eastep	55e3b11a28	Pass both shorewallrc files to the compiler from lib.cli-std Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 15:07:50 -07:00
Tom Eastep	b8e6a812bd	Specify the cwd when compiling or checking for export Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 11:33:58 -07:00
Tom Eastep	09ce6239a7	Install stoppedrules rather than routestopped Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 11:00:22 -07:00
Tom Eastep	afd9875d3a	Update Manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 10:52:22 -07:00
Tom Eastep	5b953cc1dd	Handle different layouts on the admin system and remote firewall(s) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 09:50:07 -07:00
Tom Eastep	8e5bd3637d	Implement stoppedrules file (less manpages) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 08:44:03 -07:00
Tom Eastep	01696e7298	Remove empty paragraph in shorewall-rules(5) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-03 05:52:40 -07:00
Tom Eastep	b922177769	Handle missing VARDIR Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-02 15:51:35 -07:00
Tom Eastep	88ab423b2a	Correct 'postcompile' patch Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-02 14:55:56 -07:00
Tom Eastep	e66d9e3418	Rename VARDIR to VARLIB in shorewallrc - Done so that existing shorewallrc files are still valid. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-02 14:36:11 -07:00
Tom Eastep	7279553be4	Revert "Add GROUP zones" This reverts commit `4f2a4c0c6c`.	2012-09-02 11:08:38 -07:00
Tom Eastep	a6740c6c53	Revert "Assign marks to according to GROUP zones" This reverts commit `3fbfafb6e3`.	2012-09-02 11:06:28 -07:00
Tom Eastep	4f54cb34df	Add a postcompile script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-02 08:28:02 -07:00
Tom Eastep	3fbfafb6e3	Assign marks to according to GROUP zones Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 18:13:49 -07:00
Tom Eastep	34ee00a986	Document the <directory> argument to the 'try' command. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 10:53:35 -07:00
Tom Eastep	353915fc8b	Allow ipsets in the routestopped file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 10:52:37 -07:00
Tom Eastep	02e7d13710	Load iptables_raw in modules.essential Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 08:27:03 -07:00
Tom Eastep	e2c7284529	Correct handling of 'source' with ADMINISABSENTMINDED=No Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 08:26:31 -07:00
Tom Eastep	092c2ef8f7	No longer process the local shorewall.conf when compiling from a directory Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-09-01 08:21:45 -07:00
Tom Eastep	4f2a4c0c6c	Add GROUP zones Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-31 17:37:01 -07:00
Tom Eastep	deea614677	Placate the latest Emacs WRT qw/.../ Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-31 17:36:38 -07:00
Tom Eastep	1119d64b29	Break SNMP Macro into two macros Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-31 06:53:05 -07:00
Tom Eastep	053797a85e	Merge branch '4.5.7'	2012-08-30 14:27:01 -07:00
Tom Eastep	48706695b6	Make the SNMP bi-directional with traps allowed in the reverse direction Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-30 14:25:51 -07:00
Tom Eastep	9b05146a85	New documents (WIP) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-30 10:06:58 -07:00
Tom Eastep	09a6f8bc16	Revert non-fatal error implementation - In the end, I didn't like the way this worked. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-29 11:35:11 -07:00
Tom Eastep	303dc65d13	Merge branch '4.5.7'	2012-08-28 11:46:04 -07:00
Tom Eastep	d838cf41bf	Allow TTL and HL in the PREROUTING chain. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-28 11:45:32 -07:00
Tom Eastep	84e24325de	Merge branch '4.5.7'	2012-08-27 07:30:21 -07:00
Tom Eastep	3aca90811c	Clear the current comment at the end of the blrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-27 07:29:47 -07:00
Tom Eastep	7b12558249	Merge branch '4.5.7'	2012-08-26 09:18:16 -07:00
Tom Eastep	341dec0711	Another fix for the NOTRACK patch - 3 defects in a two-line patch :-(	2012-08-26 09:17:57 -07:00
Tom Eastep	01b58bf66f	Merge branch '4.5.7'	2012-08-26 08:27:39 -07:00
Tom Eastep	dc21d015da	Clean up white-space in Togan's patch Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-26 08:27:24 -07:00
Tom Eastep	9e5d1cc1ce	Merge branch '4.5.7'	2012-08-26 08:11:40 -07:00
Tom Eastep	779243094e	Map NOTRACK to 'CT --notrack' if CT_TARGET is available. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-26 08:08:57 -07:00
Togan Muftuoglu	1a324fa37f	Suse specific patches Hi Tom, I have been patching shorewall packages for the opensuse releases, but I guess it is better to send them to you . the upstream so it gets incorporated into shorewall itself and I do not have to patch it ;) I believe I have incorparted most of my patches in to this one. If you can review them and if appropriate apply them that would be great Thanks Togan >From 6072c08de753e7d1cc31bb758295dee198197e41 Mon Sep 17 00:00:00 2001 From: Togan Muftuoglu <toganm@opensuse.org> Date: Fri, 24 Aug 2012 13:17:12 +0200 Subject: [PATCH] suse-specific Signed-off-by: Togan Muftuoglu <toganm@opensuse.org> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-25 08:45:57 -07:00
Tom Eastep	b45d15eec6	Revert "Apply Togan Muftuoglu's SuSE-specific init patches" This reverts commit `2412998b57`.	2012-08-25 08:45:18 -07:00
Togan Muftuoglu	906795a4d7	Suse specific patches Hi Tom, I have been patching shorewall packages for the opensuse releases, but I guess it is better to send them to you . the upstream so it gets incorporated into shorewall itself and I do not have to patch it ;) I believe I have incorparted most of my patches in to this one. If you can review them and if appropriate apply them that would be great Thanks Togan >From 6072c08de753e7d1cc31bb758295dee198197e41 Mon Sep 17 00:00:00 2001 From: Togan Muftuoglu <toganm@opensuse.org> Date: Fri, 24 Aug 2012 13:17:12 +0200 Subject: [PATCH] suse-specific Signed-off-by: Togan Muftuoglu <toganm@opensuse.org> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-25 08:41:28 -07:00
Tom Eastep	7208464c68	Change "Compilation aborted..." to "Check aborted ..." Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-25 08:10:12 -07:00
Tom Eastep	519e799ef1	Unify the mode of init files Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-24 06:59:11 -07:00
Tom Eastep	e5d63f4212	Merge branch '4.5.7'	2012-08-24 06:56:01 -07:00
Tom Eastep	2412998b57	Apply Togan Muftuoglu's SuSE-specific init patches Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-24 06:32:30 -07:00
Tom Eastep	1067f8a9bb	Use the non-fatal error reporting feature for missing capabilities Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-24 06:25:29 -07:00
Tom Eastep	3006452cea	Unconditionally restore route mark in PREROUTING and OUTPUT. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-23 12:23:29 -07:00
Tom Eastep	e17010018c	Unconditionally restore route mark in PREROUTING and OUTPUT. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-23 12:15:14 -07:00
Tom Eastep	112312f2ee	Add non-fatal error capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-23 05:50:36 -07:00
Tom Eastep	dffd98dff7	Revert change that added CONTINUE as a valid content of the ADDRESSES column Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-21 10:51:01 -07:00
Tom Eastep	64edd30a76	Correct link in shorewall[6].conf manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-21 07:54:51 -07:00
Tom Eastep	c20611b6c0	Add CONTINUE keyword to the masq file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-20 18:09:59 -07:00
Tom Eastep	1fd9e5e95c	Compensate for silly RHEL bug Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-20 07:20:21 -07:00
Tom Eastep	99efb518bd	Add the HELPER column to the rules files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-18 12:05:42 -07:00
Tom Eastep	1b7a7d0fdf	Remove some more hard-coded directory names from the installers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-17 14:24:52 -07:00
Tom Eastep	7ac9e46e1f	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 15:49:33 -07:00
Tom Eastep	0a4f26a318	Correct handling of existing notrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 14:46:48 -07:00
Tom Eastep	8d3cf6428f	Install the conntrack file unconditionally. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 10:50:23 -07:00
Tom Eastep	f6c4650624	Allow a notrack with nothing but FORMAT and COMMENT lines to be removed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 10:49:59 -07:00
Tom Eastep	3c35af9d8c	Merge branch 'master' into 4.5.7	2012-08-16 08:34:54 -07:00
Tom Eastep	1e11109bb2	Don't combine rules with '-m policy' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 08:34:30 -07:00
Tom Eastep	f59612671b	Don't optimize chains with '-m ipsec' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 07:33:01 -07:00
Tom Eastep	da4f7ee524	Handle ppp devices correctly in the 'enable' command. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-16 06:59:35 -07:00
Tom Eastep	b132176dae	Correct reference adjustment in new opt4 code Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-14 13:36:39 -07:00
Tom Eastep	1f59e4f449	Update case in conditionals. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-14 11:42:46 -07:00
Tom Eastep	8487c78a0a	Adjust reference counts when splicing in short chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-14 08:34:51 -07:00
Tom Eastep	fdc45a990d	Arrange for HELPER to match in the RELATED section. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-13 15:44:19 -07:00
Tom Eastep	44a550870c	Add HELPER action. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-13 13:23:38 -07:00
Tom Eastep	bd3295b0e3	Remove temporary hack Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-13 08:55:43 -07:00
Tom Eastep	f1fbb95d48	Update documentation for content merged from the 4.5.8 (master) path Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-13 08:16:36 -07:00
Tom Eastep	45288f5927	Revise notrack/conntrack handling: - Purge empty notrack files. - Process both files.	2012-08-13 07:28:07 -07:00
Tom Eastep	75b830b10e	Merge branch 'master' into 4.5.7	2012-08-13 06:57:54 -07:00
Tom Eastep	4b2d48d621	Hardwire AUTOHELPERS until 4.5.8. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-13 06:48:19 -07:00
Tom Eastep	50362040d7	Enable automatic helper association during 'stop'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-12 08:46:06 -07:00
Tom Eastep	2f1d59366c	Unconditionally disable kernel automatic helper association during start. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-12 08:43:28 -07:00
Tom Eastep	b372163122	Enable automatic helper association during 'stop'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-12 08:42:53 -07:00
Tom Eastep	50bd1d6398	Add AUTOHELPER option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-12 07:25:11 -07:00
Tom Eastep	e6ef32ebc2	Make conditional directives case insensitive Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-11 08:48:35 -07:00
Tom Eastep	a5824dc2d4	Optimize extension - Eliminate short chains with a single reference. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-11 08:47:10 -07:00
Tom Eastep	b5af6f03fb	Create better rules when a HELPER appears in an action Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-11 07:48:03 -07:00
Tom Eastep	50dfffec94	Eliminate duplicate rules in raw-table chains when optimize level 16. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-10 07:09:01 -07:00
Tom Eastep	ad818c071a	Generate omnibus tracking rules when NAT/ACCEPT with helper appears in an action. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-10 06:55:18 -07:00
Tom Eastep	e84ee76c7d	Add helpers to macros Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-09 10:32:34 -07:00
Tom Eastep	2ab50e65d7	Make conditional directives case insensitive Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-09 10:30:02 -07:00
Tom Eastep	2690243e3c	Add helpers in the macros Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-09 07:36:04 -07:00
Tom Eastep	4d3fbd1dfa	Allow '?IF 0' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-08 07:24:17 -07:00
Tom Eastep	e8a4728981	Allow '?IF 0' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-08 07:23:43 -07:00
Tom Eastep	ee28638604	Add HELPERS to rules file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-08 07:23:20 -07:00
Tom Eastep	a8495626b0	Merge branch '4.5.6' into 4.5.7	2012-08-07 15:10:15 -07:00
Tom Eastep	c6186571e5	Handle raw table zones from VSERVERS Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-07 15:09:40 -07:00
Tom Eastep	ccf517307e	Handle raw table zones from VSERVERS Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-07 14:51:58 -07:00
Tom Eastep	e00616a1fe	Don't release blacklist files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-07 07:56:16 -07:00
Tom Eastep	c007f847a0	Handle disabled helpers in pre-3.5 kernels. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-06 15:54:45 -07:00
Tom Eastep	56caf3687f	Factor out the ?IF __CT_TARGET tests in the conntrack files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-06 09:26:14 -07:00
Tom Eastep	b4c812b676	Correct helper parsing in the Raw module. - Require (...) around multiple ctevents - Detect invalid options Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-05 08:09:17 -07:00
Tom Eastep	9a0d53194a	Correct Helper detection in the compiler. Use CT_MATCH when available. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-05 08:08:20 -07:00
Tom Eastep	cfe2f36320	Delete duplicate entry in the Shorewall[6] install.sh Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-04 08:23:08 -07:00
Tom Eastep	093985dd93	Use HELPERS to enable/disable helper association. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-03 19:26:02 -07:00
Tom Eastep	72307df6d2	Replace the AUTOHELPERS option with the HELPERS option. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-03 10:53:20 -07:00
Tom Eastep	7689b1e84b	Remove the 'zone' helper option for now. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-03 06:39:58 -07:00
Tom Eastep	82c057d1ed	Fix *VERSION handling. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 16:44:02 -07:00
Tom Eastep	21770a89d6	Detect which matches are available. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 15:38:23 -07:00
Tom Eastep	223ed5b3a3	More additions to the helper table and to the conntrack files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 13:25:44 -07:00
Tom Eastep	2ae59bb3cd	Add COMMENT directives to conntrack file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:58:00 -07:00
Tom Eastep	9ba0c07956	Redesign the CT:helper feature. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:10:08 -07:00
Tom Eastep	7d32258e6e	Correct Helpers Module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:09:34 -07:00
Tom Eastep	07e56d129a	Add AUTOHELPERS option. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:09:18 -07:00
Tom Eastep	62d6d2558e	Rename AUTO_COMMENT to AUTOCOMMENT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:06:41 -07:00
Tom Eastep	833e54c9c3	Rename the notrack file to conntrack Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-02 11:02:17 -07:00
Tom Eastep	f2dd43855e	Correct typo in warning message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-01 13:13:18 -07:00
Tom Eastep	eaf238fa66	Merge branch '4.5.6'	2012-08-01 10:37:45 -07:00
Tom Eastep	542f279544	Don't allow a source interface in a DNAT/REDIRECT rule with source == firewall Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-08-01 10:01:08 -07:00
Tom Eastep	c8ea03bf8c	Update help text Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-30 07:23:53 -07:00
Tom Eastep	ac6e67e371	Correct typo in rules manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-30 07:23:40 -07:00
Tom Eastep	735b7c2cf5	Add support for nfacct Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-28 11:21:16 -07:00
Tom Eastep	87c0f934aa	Add NFacct Match capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-28 08:19:05 -07:00
Tom Eastep	c0e4d4093c	Clarify TOS value Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-16 15:53:22 -07:00
Tom Eastep	55b527d065	Eliminate a local variable. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-15 20:22:19 -07:00
Tom Eastep	e1e7ab42c1	Make 'routefilter' and 'sfilter' mutually exclusive Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-15 10:37:56 -07:00
Tom Eastep	65b16a1acf	Compensate for bugs in the latest CPerl emacs extension Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-15 10:07:06 -07:00
Tom Eastep	1db79a91eb	'rpfilter' option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-15 10:05:32 -07:00
Tom Eastep	e7cd84a72c	Implement rpfilter match capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-15 07:54:46 -07:00
Tom Eastep	691a9bf793	Correct installation on systems with systemd Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-14 14:38:30 -07:00
Tom Eastep	2cce81cfc1	Revert `83a8c7eda3` Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-09 10:58:15 -07:00
Tom Eastep	9f4ca3ebc5	Additional simplification of evaluate_expression() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-08 07:48:27 -07:00
Tom Eastep	3c2385de06	Merge branch '4.5.6'	2012-07-08 07:36:15 -07:00
Tom Eastep	6ce3d0180e	Ensure a defined value for __IPV[46] Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-07 09:47:10 -07:00
Tom Eastep	83a8c7eda3	When TC_ENABLED=No, require providers to process tcrules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-07 08:02:57 -07:00
Tom Eastep	18f947eb2f	Apply patch from Daniel Meißner - Corrects STARTUP_ENABLED=No error message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-06 07:28:29 -07:00
Tom Eastep	83df8a4e39	Avoid a call to eval() for simple expressions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-06 07:26:54 -07:00
Tom Eastep	e9d8228b6f	Simplify handling of __IPVn in conditional directives. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-06 06:43:15 -07:00
Tom Eastep	65d8341c6c	Correct a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-05 15:43:20 -07:00
Tom Eastep	61a9584433	Only require MANGLE_ENABLED to process the tcrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-04 14:45:24 -07:00
Tom Eastep	000cc6978a	Add missing 'sleep' when waiting for wildcard interface to come up - Also reverse the order of test and sleep when waiting for a regular interface to come up. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-03 08:06:30 -07:00
Tom Eastep	e4d66fb5fc	Back out redundant part of recent patch - setup_traffic_shaping is only called when there are tc devices so the test of @tcdevices in that function is redundant. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-03 06:33:46 -07:00
Tom Eastep	537f6c157c	Allow the compiler version to be tested in ?IF/?ELSIF Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-02 11:53:32 -07:00
Tom Eastep	a5b637b2a7	Use the correct filename in ?IF/?ELSIF exec call. - Also extend a comment in the TC module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-02 11:53:01 -07:00
Tom Eastep	09c00cf425	Don't print phoney progress message - The 'Setting up Traffic Shaping' progress message was being issued when traffic shaping was not enabled. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-07-01 08:27:07 -07:00
Tom Eastep	6ddaa0190e	Improve USER/GROUP validation. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-30 14:46:50 -07:00
Tom Eastep	5c176c64b7	Add an ORIGINAL DEST column to /etc/shorewall/masq Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-29 15:32:01 -07:00
Tom Eastep	b195884b1f	Insure that the correct filename/linenumber are printed in error messages out of process_conditional() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-29 09:01:26 -07:00
Tom Eastep	56d5ae2d41	Ensure that exclusion chains have DONT_MOVE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-27 18:06:38 -07:00
Tom Eastep	41c7c8f923	Make the Invalid Drop rules uniform across sample files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-27 15:16:16 -07:00
Tom Eastep	0bf2753472	Re-implement conditional inclusion - Correct defects - Add ?ELSIF support - Allow Perl-compatible expressions in ?IF	2012-06-27 15:15:44 -07:00
Tom Eastep	c90006ecf8	Correct another logical name bug -- this time in TC Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-27 11:34:19 -07:00
Tom Eastep	17d22fb5b8	Prevent multiple 'tproxy' providers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-23 17:26:18 -07:00
Tom Eastep	af302900c6	Prevent multiple 'tproxy' providers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-23 17:09:46 -07:00
Tom Eastep	9aa78656ec	Add TPROXY_MARK to the output of 'shorewall show marks' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-23 07:57:39 -07:00
Tom Eastep	b9d59bc60c	Document that 'classify' with marks is now allowed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-22 10:17:26 -07:00
Tom Eastep	1b7601cb19	Update all samples to specify OPTIMIZE=31 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-21 11:48:48 -07:00
Tom Eastep	9d3766b77f	Allow fwmarks with 'classify' interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-20 14:04:48 -07:00
Tom Eastep	24ddae6ede	Don't use '--ctmark' when saving marks Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-20 13:30:27 -07:00
Tom Eastep	7b6f329830	Document UID/GID ranges Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-19 14:05:38 -07:00
Tom Eastep	4d336ed8d6	Rewrite handling of the USER/GROUP column - Remove code that handled '+program' as that support was removed from the kernel in 2.6.14.	2012-06-19 08:14:31 -07:00
Tom Eastep	da3e1b720c	Apply user/group Id range patch from Gergely Risko Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-19 06:17:13 -07:00
Tom Eastep	a38f773ab1	Clarify comment in macro.mDNS Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-18 14:20:10 -07:00
Tom Eastep	7b4e5828e0	Clean up handling of RED options. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-18 12:17:22 -07:00
Tom Eastep	a2f6236e82	Add bi-directional mDNS macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-18 09:16:30 -07:00
Tom Eastep	50bd126b11	Reverse change to macro.mDNS and add a comment about $FW being the SOURCE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-18 09:16:11 -07:00
Tom Eastep	4a55705b9a	Update tcclasses manpages titles to include HFSC Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-18 07:54:25 -07:00
Tom Eastep	0a928cb034	Add tc-red(8) as reference to the tcclasses manpages.	2012-06-17 10:03:19 -07:00
Tom Eastep	4c10fcd503	Complain if a RED_NONE option has a value specified. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-16 15:51:20 -07:00
Tom Eastep	2807502836	More tcclasses manpage cleanup. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-16 06:50:23 -07:00
Tom Eastep	5f81ab7b31	make mDNS macro bi-directional Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-15 10:39:11 -07:00
Tom Eastep	780e7014d4	Cleanup of tcclasses manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-15 10:34:09 -07:00
Tom Eastep	5fc295e8cc	Fix handling of stab 'tsize' option. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-14 15:44:15 -07:00
Tom Eastep	c5ba167a3e	Make CEIL optional Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-14 13:10:09 -07:00
Tom Eastep	9159372897	Fix a typo in the tcfilters manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-14 13:08:37 -07:00
Tom Eastep	6c47349689	Support 'red' queuing discipline - Also added 'ls' support for HFSC Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-13 14:29:13 -07:00
Tom Eastep	d2c415c580	Make IFB work with logical interface names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-13 13:48:12 -07:00
Tom Eastep	28ab3749ca	Allow fractional delays in TC Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-13 13:47:31 -07:00
Tom Eastep	a29dbf4ff8	Fix for linklayer Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-12 11:48:12 -07:00
Tom Eastep	cbba5741ce	Correct typos in tcdevices manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-12 09:40:15 -07:00
Tom Eastep	19cace7e8d	Merge branch '4.5.5' Conflicts: Shorewall/Perl/Shorewall/Providers.pm	2012-06-11 17:02:59 -07:00
Tom Eastep	4791a8ca66	Don't delete default routes when 'fallback' is specified. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-11 16:57:49 -07:00
Tom Eastep	844f6c63e4	Add support for TC size tables. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-11 15:45:47 -07:00
Tom Eastep	08db919479	Merge branch '4.5.5'	2012-06-11 13:55:47 -07:00
Tom Eastep	2dd9e6c91f	Don't delete default routes when 'fallback' is specified. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-11 13:53:53 -07:00
Tom Eastep	c57f627a21	Add some comments. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-11 11:25:19 -07:00
Tom Eastep	1d0ab43fbb	Change indentation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-10 15:38:09 -07:00
Tom Eastep	b5bba40344	Merge branch '4.5.5'	2012-06-10 07:35:51 -07:00
Tom Eastep	1f54d19981	Split add_input_jumps() into two functions - Added add_forward_jump() - Added lots of comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-09 17:21:59 -07:00
Tom Eastep	00f7b9d0dd	More useful trace of enable/disable optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-09 15:36:29 -07:00
Tom Eastep	6d3ebd5b56	Improve DIGEST handling. - Compile compiler.pl when DIGEST specified. - Report the digest being used. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-09 09:34:28 -07:00
Tom Eastep	2bf16016c1	Add --digest to configure scripts. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-09 07:24:23 -07:00
Tom Eastep	a2f32f25c5	Add some comments. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-09 06:20:40 -07:00
Tom Eastep	ae66d7d7a5	Eliminate the hideously complex forwarding code in generate_matrix() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-08 08:29:36 -07:00
Tom Eastep	63eb0bee5b	Break up and eliminate handle_pio_jumps() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-08 07:40:26 -07:00
Tom Eastep	8a9427ebff	Merge branch '4.5.4'	2012-06-07 14:12:48 -07:00
Tom Eastep	4a383540be	Merge branch '4.5.4' into 4.5.5	2012-06-07 14:12:10 -07:00
Tom Eastep	db6a7276ec	Don't optimize chains with commands Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-07 14:11:44 -07:00
Tom Eastep	d771c6b2c2	Delete the 'dnat' nat-table chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-07 13:44:03 -07:00
Tom Eastep	fe7d0730d5	Break up generate_matrix() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-07 07:47:33 -07:00
Tom Eastep	38adf3d186	Set 'sourceroute=0' on all sample net interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-06 14:30:00 -07:00
Tom Eastep	a2a9ef0958	Rename OPTIMIZE_MASK1 to OPTIMIZE_MASK2n4 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-06 13:08:45 -07:00
Tom Eastep	21eda5daec	Fix multiple iprange matches without kludgefree. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-06 11:26:52 -07:00
Tom Eastep	6bd81145e9	Fix single-line embedded Perl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-06 11:23:33 -07:00
Tom Eastep	49050e61de	Fix multiple iprange matches without kludgefree. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-06 10:50:16 -07:00
Tom Eastep	225101b802	Rename OPTIMIZE_MASK1 to OPTIMIZE_MASK2n4 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 12:51:52 -07:00
Tom Eastep	fa3164fb1b	Re-enable single-line embedded SHELL and PERL Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 12:51:16 -07:00
Tom Eastep	3294f7c4c3	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 09:02:29 -07:00
Tom Eastep	654f7dd805	Fix single-line embedded Perl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 09:02:12 -07:00
Tom Eastep	ee467a4877	Allow embedded shell/Perl directives to have leading '?' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 07:32:43 -07:00
Tom Eastep	170875c7dd	Convert the 'ignore' interface to be multi-valued -Allows 'ignore=1' to only exempt interface from updown processing Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-05 07:23:23 -07:00
Tom Eastep	c8156cfdb1	Correct typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-04 08:18:57 -07:00
Tom Eastep	57a9feaf2f	Correct typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-04 08:00:07 -07:00
Tom Eastep	92a13ec87c	Merge branch '4.5.4' Conflicts: Shorewall/Perl/Shorewall/Config.pm	2012-06-03 18:51:03 -07:00
Tom Eastep	040f693583	Cosmetic changes in code from when I was still learning Perl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 17:50:34 -07:00
Tom Eastep	69387b9099	Make 'check -r' work like 'compile' WRT optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 15:43:43 -07:00
Tom Eastep	28f0a066da	Make 'check -r' work like 'compile' WRT optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 15:15:11 -07:00
Tom Eastep	621aa3fc6a	Another approach to reporting errors from process_conditional() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 13:47:38 -07:00
Tom Eastep	9869420106	Check for conditional directives prior to continuation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 09:05:09 -07:00
Tom Eastep	39b3a0da65	Check for conditional directives prior to continuation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-03 08:43:48 -07:00
Tom Eastep	121d34aed0	Add constant LOG_OPTIONS capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-02 14:06:31 -07:00
Tom Eastep	4b69216c83	Relocate lib.core in the Source Tree Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-02 12:46:35 -07:00
Tom Eastep	7ff15b0625	Merge branch '4.5.4' Conflicts: Shorewall/Perl/Shorewall/Zones.pm	2012-06-02 11:41:45 -07:00
Tom Eastep	41dcd5826f	Minimize the list of plain interfaces Omit bridge ports and interfaces that match a wildcard. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-02 11:39:16 -07:00
Tom Eastep	26502034ec	Minimize the list of plain interfaces Omit bridge ports and interfaces that match a wildcard. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-02 11:17:10 -07:00
Tom Eastep	baa2c4f5eb	Merge branch '4.5.4'	2012-06-02 09:30:47 -07:00
Tom Eastep	9e9c44d4ac	Handle Debian pre-down/post-down correctly Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-02 09:26:00 -07:00
Tom Eastep	01eb1a580b	Merge branch '4.5.4'	2012-06-02 08:20:40 -07:00
Tom Eastep	b3316d755a	Correct silly typo in Providers.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 17:14:08 -07:00
Tom Eastep	73274b9b0b	Correct progress message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 15:55:22 -07:00
Tom Eastep	c823b0e41e	More Shorewall-init fixes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 14:04:08 -07:00
Tom Eastep	78f9b76dae	Move mutex handling to the main program. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 14:03:47 -07:00
Tom Eastep	402e155148	More Shorewall-init fixes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 14:01:58 -07:00
Tom Eastep	9c4a01bcdd	Move mutex handling to the main program. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 11:47:58 -07:00
Tom Eastep	21b9a194ca	Merge branch '4.5.4'	2012-06-01 11:30:35 -07:00
Tom Eastep	312efe5c7b	Use enable/disable for up and down of provider interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 11:27:57 -07:00
Tom Eastep	f25187adb1	Move compile_updown() from the Zones module to the Providers module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-06-01 08:12:07 -07:00
Tom Eastep	eb03168685	Cleanup of process_rules1() breakup Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-31 15:32:16 -07:00
Tom Eastep	69badac72f	Merge branch '4.5.4' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 14:43:05 -07:00
Tom Eastep	de184b32bc	Fix sectioned IPSEC accounting. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 14:37:29 -07:00
Tom Eastep	ea173ab628	Correct IPSEC accounting manpages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 14:09:41 -07:00
Tom Eastep	303c661409	Eliminate bogus term in an expression. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 12:49:18 -07:00
Tom Eastep	e88c2c8cd3	Move rules file nat handling to the Nat module Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 09:01:24 -07:00
Tom Eastep	67932f2d42	Break up expand_rule() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-30 06:49:00 -07:00
Tom Eastep	eb63745352	Merge branch '4.5.4'	2012-05-29 06:48:04 -07:00
Tom Eastep	32e0f154b5	Correct pptpserver tunnel configuration. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-29 06:46:40 -07:00
Tom Eastep	db50454afc	Complete removal of optimize level 4 when level 4 is set. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 15:42:34 -07:00
Tom Eastep	ed352f60b6	Complete removal of optimize level 4 when level 4 is set. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 15:41:55 -07:00
Tom Eastep	3a5875dc73	Add MSSQL Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 07:09:23 -07:00
Tom Eastep	5211b32aa6	Remove quotes from GEOIPDIR setting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 07:09:07 -07:00
Tom Eastep	c37beacd95	Add MSSQL Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 07:07:14 -07:00
Tom Eastep	5b891f1072	Remove quotes from GEOIPDIR setting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-25 07:05:38 -07:00
Tom Eastep	fc97f6d00e	Implement LOG target option control. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-24 13:54:59 -07:00
Tom Eastep	6142d4d535	Fix typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-23 07:55:07 -07:00
Tom Eastep	1f2ca30ebd	Infrastructure for iRule-based logging. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-22 16:46:11 -07:00
Tom Eastep	182a4c3080	Correct 'compile' usage text Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-21 07:10:38 -07:00
Tom Eastep	ab2376d61d	Document 15-cc limit. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-21 07:03:53 -07:00
Tom Eastep	f147046288	Change 'cc' to 'country-code' in invalid cc list error message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-21 07:01:07 -07:00
Tom Eastep	daaf3c031f	Change the 'no isocodes' error message to include the address family. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-20 09:40:37 -07:00
Tom Eastep	6b23eff650	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-20 09:05:42 -07:00
Tom Eastep	ef974b5c8d	Clear the DEFAULT table if no FALLBACK providers are up. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-20 09:00:22 -07:00
Tom Eastep	d8ec051114	Load the geoip cc's dynamically. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-20 08:59:59 -07:00
Tom Eastep	84f92aa87c	Don't capture result of an RE match. Correct a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-20 07:06:59 -07:00
Tom Eastep	70e4c26df1	Delete a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 16:46:57 -07:00
Tom Eastep	db96f6ead2	Reject long CC lists. - include offending CC in 'Invalid or Unknown' error Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 12:44:24 -07:00
Tom Eastep	f0a3e1652a	Bracket non-trivial cc lists with [...] Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 09:39:49 -07:00
Tom Eastep	56b8a9b9fa	Some code cleanup: - Store config value in a local rather than repeatedly referencing the %config hash. - Centralize generation of the valid table array Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 09:02:44 -07:00
Tom Eastep	231c5dbca0	Eliminate need to call optimize_policy_chains() when OPTIMIZE 4 is selected Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 08:15:20 -07:00
Tom Eastep	1a9789a3da	Optimization tracing - Correct tracing in optimize_chain() - Add tracing to new level 4 optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-19 07:54:50 -07:00
Tom Eastep	f15e6d3995	Additional optimization in level 4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-18 16:50:08 -07:00
Tom Eastep	3f42350a7b	Don't overwrite empty mark geometry settings. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-18 11:37:49 -07:00
Tom Eastep	e8648c993d	Use blackhole routes rather than unreachable. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-18 10:50:13 -07:00
Tom Eastep	55c88e8e81	Replace curly brace enclosure with a preceding caret to avoid ambiguity. - {...} is used to enclose a set of column/value pairs and it is certain that the two will become confused.	2012-05-17 15:26:16 -07:00
Tom Eastep	e086067567	Reverse logic in the installer to allow for Digest::SHA being the default now Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-17 14:29:57 -07:00
Tom Eastep	f5f80d2ccc	Re-arrange enforcement of restrictions on geoip. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-17 13:59:56 -07:00
Tom Eastep	3436fbd6ad	Don't use ?INCLUDE in modules files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-17 10:45:12 -07:00
Tom Eastep	d220d3d9d5	Abandon action.GeoIP in favor of extended syntax in the SOURCE and DEST columns. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-17 10:44:02 -07:00
Tom Eastep	6148c909f2	fix multiple ipsets in an imatch Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-16 19:52:41 -07:00
Tom Eastep	2eb25f3f6a	Correct the grammar in an error message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-16 07:52:42 -07:00
Tom Eastep	0673898e85	GeoIP tweaks: - Error if no CC - switch an 'if' expression to 'unless'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-16 07:52:19 -07:00
Tom Eastep	43d882db2b	Cosmetic cleanup Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-15 16:44:35 -07:00
Tom Eastep	78af118b9a	Quote original list when a translated list is ill-formed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-15 16:39:46 -07:00
Tom Eastep	85f58d6906	Avoid funny-looking ERROR: messages out of Embedded Perl. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-15 16:38:56 -07:00
Tom Eastep	17e25932f0	Fixes for GeoIP - Correct check for valid ACTION - Add to Shorewall6/actions.std - Only use geoip once per invocation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-15 11:14:28 -07:00
Tom Eastep	63ae00e4a4	Fix bug in 'interface_is_usable' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-15 06:58:03 -07:00
Tom Eastep	ac2ed505bb	Add GeoIP support Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-14 17:12:46 -07:00
Tom Eastep	926e589414	Exit the tcpost chain if a connection mark is restored Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-14 10:35:42 -07:00
Tom Eastep	9f1c920a39	Don't allow RSTs to be REJECTed	2012-05-14 10:34:11 -07:00
Tom Eastep	9ea233d55f	Split a couple of functions with address-family dependent logic. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-13 15:53:02 -07:00
Tom Eastep	60bde6231a	Improve interface_is_usable() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-13 13:49:59 -07:00
Tom Eastep	3d575a45bd	Re-code interface_is_usable() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-13 11:56:52 -07:00
Tom Eastep	1f621002b7	Ignore 'isusable' on 'enable' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-12 19:38:18 -07:00
Tom Eastep	cd150af790	Update .status file on disable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-12 07:44:46 -07:00
Tom Eastep	cd98266396	Correct add of default IPv6 route when no gateway specified Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-12 07:15:24 -07:00
Tom Eastep	3d541f50c8	Use "(S)" consistently in column headings. - add synonyms so both the singular and plural forms are accepted. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 12:42:04 -07:00
Tom Eastep	f77b350a7b	Clear the 'balance' table if no balanced providers. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 11:28:06 -07:00
Tom Eastep	bed4457e0e	Delete jump to 'tproxy' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 09:00:09 -07:00
Tom Eastep	2d5269be7b	Fix another conditional compilation bug. ?IF $false ?IF $false ... ?ENDIF foo <------- This line is not omitted! ?ENDIF Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 07:44:46 -07:00
Tom Eastep	a05b3afd7f	Eliminate the 'tproxy' chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 07:42:44 -07:00
Tom Eastep	9e743451f6	Add FORMAT 2 to tcrules files. Initialize $format in Tc.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-11 07:08:06 -07:00
Tom Eastep	cb7fc31f0b	Restore 4.5.3 compatibility Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-10 14:23:33 -07:00
Tom Eastep	69d735ea0a	Make TPROXY actually work! Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-10 11:19:23 -07:00
Tom Eastep	4d4fc315e0	More TPROXY changes - Combine identical DIVERT chains. - Add --transparent to -m socket - Reserve a TPROXY bit in the fwmark Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-10 07:25:07 -07:00
Tom Eastep	820c965b72	Allow Shorewall::Config::in_hex() to accept an argument already expressed in hex. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-09 13:51:49 -07:00
Tom Eastep	605ef6ef86	Tweak to DIVERT plus correct TPROXY in man pages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-09 13:10:51 -07:00
Tom Eastep	2eb7af23dc	Merge branch 'master' into 4.5.3	2012-05-09 10:03:43 -07:00
Tom Eastep	582d025f58	Add DIVERT action to tcrules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-09 09:41:58 -07:00
Tom Eastep	b55d8c04e4	Do logical->physical mapping in rtrules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-08 14:52:18 -07:00
Tom Eastep	3b6f5b2d8a	Finish alternative balancing Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-08 13:55:13 -07:00
Tom Eastep	6639b3534e	Close all input files in Shorewall::Config::cleanup() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-08 08:58:14 -07:00
Tom Eastep	59bf343521	Leave first filename and linenumber on the same line as error text. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-08 08:55:24 -07:00
Tom Eastep	1d6e6b65db	Finish a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 17:06:35 -07:00
Tom Eastep	2224fdbc65	Correct help text in compiler.pl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 16:55:51 -07:00
Tom Eastep	fd1d6cf935	Handle default shorewallrc location Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 16:55:17 -07:00
Tom Eastep	5d7442e9e9	Correct typo in converted blrules file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 12:13:26 -07:00
Tom Eastep	ef90006334	Avoid reference to unitialized variable on bogus FORMAT in interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 12:00:21 -07:00
Tom Eastep	2cbf1e86ad	Allow synonyms for column names in alternate specification formats - gateway and gateways in the tunnels file - mark and action in the tcrules file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 11:59:47 -07:00
Tom Eastep	dd8e9ff09d	Fix 'COMMENT' along in the tunnels file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 11:58:37 -07:00
Tom Eastep	4320150dc4	Add alternate specification in tunnels file ('gateways') - Make similar change in tcrules file with 'action' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-07 07:43:11 -07:00
Tom Eastep	003daec41c	Remove a couple of hard-coded '/usr/share' in Shorewall::Config Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-06 17:30:17 -07:00
Tom Eastep	cb159eba2e	Add RST action. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-06 12:14:30 -07:00
Tom Eastep	aac00c3cc7	Pop open stack in run_user_exit1 and run_user_exit2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-05 10:31:55 -07:00
Tom Eastep	cd35b6a13f	Modify macro.BLACKLIST to use blacklog when appropriate Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-05 08:56:55 -07:00
Tom Eastep	af228806fc	Allow manual changes to be used in macros. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-05 08:56:26 -07:00
Tom Eastep	69f6aae982	Delete extra copy of macro.BLACKLIST Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-05 08:40:25 -07:00
Tom Eastep	1d90ee174c	Cleanup of ERROR/WARNING message enhancement. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-04 07:01:08 -07:00
Tom Eastep	097ab853db	Apply Tuomo Soini's tunnels patch Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-04 06:18:22 -07:00
Tom Eastep	3e37f47fb5	Print out the include/open stack in WARNING and ERROR messages. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-03 17:17:55 -07:00
Tom Eastep	bd30d59f3d	Fix annotated interfaces files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-03 14:09:49 -07:00
Tom Eastep	e4c4900b32	Add recent changes to a couple of config files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-03 12:32:47 -07:00
Tom Eastep	4d23ec2c48	Belatedly document FORMAT-2 interfaces Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-03 10:07:36 -07:00
Tom Eastep	15aa1dae62	Enhancements to the 'refresh' command. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-02 13:48:18 -07:00
Tom Eastep	894931731b	Merge branch 'master' of ssh://shorewall.git.sourceforge.net/gitroot/shorewall/shorewall	2012-05-02 07:04:30 -07:00
Tom Eastep	3333486c9d	Another change to Debian startup at boot Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-01 10:55:29 -07:00
Tom Eastep	2dd82a9898	Update Multi-ISP documentation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-01 10:28:12 -07:00
Tom Eastep	45c637ad6b	Fix Debian boot startup (again) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-05-01 10:15:39 -07:00
Tom Eastep	731b310359	Use --hashlimit-upto when available. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-30 13:45:09 -07:00
Tom Eastep	35c08c109e	Fix IPv4 'reset' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-30 07:54:40 -07:00
Tom Eastep	766771d812	Remove absurd test Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-30 07:48:07 -07:00
Tom Eastep	b9e6349994	Add some comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-29 09:07:34 -07:00
Tom Eastep	9efb60c53a	Move init.slackware.firewall.sh to Shorewall-core Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-27 16:15:04 -07:00
Tom Eastep	e0570cc35e	Install fixes for Slackware Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-27 07:16:11 -07:00
Tom Eastep	9612044933	Make products start automatically at boot on Debian and derivatives Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-25 11:49:22 -07:00
Tom Eastep	c9b4d3d8c8	Add/improve comments. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-25 09:44:08 -07:00
Tom Eastep	dc63efdbfd	Use ?INCLUDE in modules files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-25 07:33:40 -07:00
Tom Eastep	d904a2de86	Search and destroy trailing whitespace Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-24 14:52:57 -07:00
Tom Eastep	f860cd037d	Change a comment in generate_matrix() to acknowledge 'KLUDGEFREE' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-24 13:34:56 -07:00
Tom Eastep	0f53c3cc7d	Convert all interfaces files to format-2 only Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-24 10:53:09 -07:00
Tom Eastep	3bdf703522	Allow TC experts to SAVE/RESTORE all parts of the packet mark Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-24 09:19:38 -07:00
Tom Eastep	dc85d4a844	Do SHA/SHA1 test if $BUILD = $TEST, independent of $DESTDIR Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-24 08:52:17 -07:00
Tom Eastep	a50bb407aa	Patch from Roberto Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-21 17:51:54 -07:00
Tom Eastep	f40144f6af	Corret tcrules manpages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-21 09:53:00 -07:00
Tom Eastep	0adbdbb101	Add TCP to macro.Amanda Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-20 09:46:13 -07:00
Tom Eastep	34f5838365	Allow multiple GATEWAYS to be listed in the tunnels file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-18 09:28:37 -07:00
Tom Eastep	2b7e5dd9d8	Suppress duplicate option when not KLUDGEFREE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-17 07:35:37 -07:00
Tom Eastep	44c8ef2ede	Correct ill-advised change to push_matches() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-17 07:30:17 -07:00
Tom Eastep	52ebca3fe1	Merge branch '4.5.2' Conflicts: Shorewall-core/lib.cli Shorewall/Perl/Shorewall/Config.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-16 13:47:05 -07:00
Tom Eastep	805166a354	Ressurect LOCKFILE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-16 07:21:06 -07:00
Tom Eastep	1462fcd351	Synchronize global settings Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-15 09:43:41 -07:00
Tom Eastep	aaab505006	Improve the debuggability of failed assertions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 17:57:49 -07:00
Tom Eastep	63a2a32b4b	Suppress trailing whitespace. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 13:50:59 -07:00
Tom Eastep	eb7a21030d	Correct Makefiles Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 12:03:51 -07:00
Tom Eastep	1bc03123b9	Delete code to modify Makefile Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 12:03:08 -07:00
Tom Eastep	e6aabec7ef	Install correct Makefile Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 12:03:00 -07:00
Tom Eastep	a32ce5c34a	Correct Makefiles Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 12:01:37 -07:00
Tom Eastep	fdc4a84a83	Delete code to modify Makefile Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 11:36:08 -07:00
Tom Eastep	d3943ea0fe	Install correct Makefile Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 11:17:27 -07:00
Tom Eastep	79b5c38ecb	Handle trailing whitespace in Shorewall::Config::read_a_line1() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 10:14:25 -07:00
Tom Eastep	31752d9ee1	Move macro.BLACKLIST to where it belongs Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 08:14:45 -07:00
Tom Eastep	24e2fe4a04	Make options argument to read_a_line manditory Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-14 08:04:28 -07:00
Tom Eastep	f88584b916	Merge branch '4.5.2' Conflicts: Shorewall-core/configure.pl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-12 14:48:56 -07:00
Tom Eastep	69a133083c	Modify Makefiles for directory relocation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-12 10:15:55 -07:00
Tom Eastep	59d1a57f06	Add the -T option to the load, reload, restart and start commands. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 14:28:44 -07:00
Tom Eastep	42950e53cd	Use logical add rather than arithmetic add for uniformity Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 14:28:09 -07:00
Tom Eastep	ae9f538ef8	Simplify an assertion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 14:27:48 -07:00
Tom Eastep	e880d2fd84	Remove some whitespace Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 08:03:02 -07:00
Tom Eastep	e791a63671	Merge branch '4.5.2' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 07:13:40 -07:00
Tom Eastep	e263a3c27d	Remove redundant logic Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-11 07:11:05 -07:00
Tom Eastep	0b5e30aa7b	Fix INCLUDE inside an ?IF ... ?ENDIF Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-10 17:27:47 -07:00
Tom Eastep	07ff3f294d	Fix INCLUDE inside an ?IF ... ?ENDIF Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-10 17:27:23 -07:00
Tom Eastep	6ba69c9540	Eliminate read_a_line1() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-10 17:01:38 -07:00
Tom Eastep	5ee554708c	Control the proliferation of arguments to read_a_line() by using a bit-mapped single argument. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-10 13:51:25 -07:00
Tom Eastep	623e545f09	Don't allow accounting chains to be altered when OPTIMIZE_ACCOUNTING=No Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-09 21:44:44 -07:00
Tom Eastep	74fdd97b14	Warn about not using sections in the accounting file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-09 16:47:56 -07:00
Tom Eastep	2545322163	Cleanup of read_a_line() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-09 16:00:26 -07:00
Tom Eastep	7b511f449f	Don't strip comments until after embedded Perl or Shell have been handled. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-09 15:12:13 -07:00
Tom Eastep	94097e2561	Add newlines to embedded multi-line shell and perl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-08 12:17:00 -07:00
Tom Eastep	50405f57ba	Don't suppress whitespace in embedded Perl and Shell Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-08 07:54:03 -07:00
Tom Eastep	860141127a	Re-enable '#' in quoted strings within embedded shell and perl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-08 07:30:46 -07:00
Tom Eastep	f8f599c1db	Restore progress message that was inadvertently deleted. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-07 09:34:32 -07:00
Tom Eastep	a2abad3f68	Modify getparams to use the installed shorewallrc file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-07 09:07:07 -07:00
Tom Eastep	c5f44d8737	Move read_a_line() prototype before first use. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-07 07:42:27 -07:00
Tom Eastep	25bca70ff2	Merge branch 'master' into 4.5.2	2012-04-07 07:39:14 -07:00
Tom Eastep	7204220991	Some more fixes to conditional inclusion. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-07 07:16:17 -07:00
Tom Eastep	97cc4930cf	Deimplement option leading ? in embedded directives Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 16:26:05 -07:00
Tom Eastep	5688dc77a3	Make ?BEGIN PERL end ?END PERL work. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 15:58:21 -07:00
Tom Eastep	9dd6f86c55	Use read_a_line() in the embedded_shell() and embedded_perl() functions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 15:46:01 -07:00
Tom Eastep	53395e788d	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 11:49:59 -07:00
Tom Eastep	2de64d5820	Remove find_echo() from lib.core - Also correct a couple of typos in comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 08:01:07 -07:00
Tom Eastep	24e115d0f9	Move a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-06 08:00:20 -07:00
Tom Eastep	29a820b2f2	Make handling of remote configuration data consistent. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-04 11:47:45 -07:00
Tom Eastep	bff3473279	Fix preceding commit -- it missed to cases of absolute pathnames. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-04 09:43:39 -07:00
Tom Eastep	319d07b1d3	Remove more absolute path names Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-04 09:24:48 -07:00
Tom Eastep	38b6dca223	Correct a number of issues with Shorewall-lite Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-04 07:08:02 -07:00
Tom Eastep	24d30275fa	Correct syntax errors in the generated script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-03 17:08:14 -07:00
Tom Eastep	fb428bf564	Don't modify CONFDIR and SHAREDIR in the shell code Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-02 12:39:49 -07:00
Tom Eastep	348c99c7d0	Compiler changes for Shorewall[6]-lite relocation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-02 07:46:38 -07:00
Tom Eastep	a11e2dd452	Correct uninstall scripts Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-02 06:48:23 -07:00
Tom Eastep	85fce606dc	Give all config files access to shorewallrc variables. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-01 13:19:38 -07:00
Tom Eastep	bb6e17fd3e	Many changes involved in getting a relocated installations to work Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-04-01 10:47:24 -07:00
Tom Eastep	e48e13012c	Fix up lib.base during installation - Shorewall-core installer creates all necessary directories.	2012-04-01 08:16:07 -07:00
Tom Eastep	02a68aa436	Look for ./shorewallrc first Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-31 17:40:18 -07:00
Tom Eastep	766370e22a	More work on installers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-31 14:42:01 -07:00
Tom Eastep	75b57b926a	Revert "Replace lib.base with symbolic link" This reverts commit `98f4a1c545`.	2012-03-31 12:57:38 -07:00
Tom Eastep	cf176474ac	Merge branch '4.5.2' Conflicts: Shorewall/Perl/Shorewall/Chains.pm	2012-03-31 09:44:36 -07:00
Tom Eastep	6ed207aba0	Fix 'dhcp' with 'nets' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-31 09:30:29 -07:00
Tom Eastep	924ec49d09	Add OWNER_NAME_MATCH to do_user Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 16:58:38 -07:00
Tom Eastep	a4097b7a02	Correct Typo in setup_null_routing() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 16:57:26 -07:00
Tom Eastep	e38fcb2bfc	Correct ipset creation and add a WARNING when creating an ipset Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 16:56:43 -07:00
Tom Eastep	c3b56d4123	Add BLACKLIST Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 16:53:02 -07:00
Tom Eastep	fead683f18	Modify init scripts if ${SHAREDIR} is non-standard Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 16:21:37 -07:00
Tom Eastep	98f4a1c545	Replace lib.base with symbolic link Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 15:30:04 -07:00
Tom Eastep	f5414d0fd1	Create ${SYSTEMD} if needed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 13:56:59 -07:00
Tom Eastep	15335f8615	Modify CLIs and libs to know where shorewallrc is. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-30 12:02:25 -07:00
Tom Eastep	0d19c99699	Correct default setting of CONFDIR when .shorewallrc is not found Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-28 06:28:53 -07:00
Tom Eastep	c2fa5ae78f	Correct typo in install.sh files Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-27 20:19:06 -07:00
Tom Eastep	e1e4855211	Rename USR to PREFIX Signed-off-by: Tom Eastep <teastep@shorewall.net>	2012-03-27 07:47:22 -07:00

... 13 14 15 16 17 ...

6158 Commits