Tom Eastep
|
73060a3761
|
Correct typo in dropBcast()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-06 07:58:21 -07:00 |
|
Tom Eastep
|
03885f71d3
|
Create add_expanded_ijump() that breaks long lines
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-03 15:13:48 -07:00 |
|
Tom Eastep
|
b735b93378
|
Re-factor irule generation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-03 10:59:09 -07:00 |
|
Tom Eastep
|
afd66157a5
|
Discontinue support for 4.4.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-03 10:27:59 -07:00 |
|
Tom Eastep
|
2f8c4e6ddc
|
Clarify conditional variables in multi-ISP example.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-03 08:52:26 -07:00 |
|
Tom Eastep
|
b639a18eb9
|
Simplify fix for -q
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-03 08:16:27 -07:00 |
|
Tom Eastep
|
5ce5d5e607
|
Delete superfluous blank line
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 15:03:50 -07:00 |
|
Tom Eastep
|
3e1ed30f4e
|
Make initial progress message obey VERBOSITY
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 14:23:27 -07:00 |
|
Tom Eastep
|
00c5985458
|
Rename clone_rule() to clone_irule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 12:38:16 -07:00 |
|
Tom Eastep
|
1a44b66656
|
Cleaner handling of trailing spaces from log_irule_limit.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 12:32:35 -07:00 |
|
Tom Eastep
|
b215cf379a
|
Generate a warning when Limit is invoked.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 12:31:29 -07:00 |
|
Tom Eastep
|
3ec6745df9
|
Use log_irule_limit() internally where possible.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 11:48:02 -07:00 |
|
Tom Eastep
|
55be5b0119
|
Add log_irule_limit() and log_irule() functions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 11:47:19 -07:00 |
|
Tom Eastep
|
42a649d093
|
Create $globals{LOGILIMIT}
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-02 09:00:36 -07:00 |
|
Tom Eastep
|
18e7e43b2f
|
Eliminate globals{STATEMATCH}
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-01 16:01:57 -07:00 |
|
Tom Eastep
|
6803ce5d41
|
Add constants for %used values.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-07-01 15:36:16 -07:00 |
|
Tom Eastep
|
565fb74795
|
Correct bridge detection and 'qt' implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-24 13:07:38 -07:00 |
|
Tom Eastep
|
fc754040d5
|
Avoid shell error when detecting owner name match
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-24 09:51:32 -07:00 |
|
Tom Eastep
|
cc5a59231b
|
Make qt() work correctly when tracing.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-24 07:17:15 -07:00 |
|
Tom Eastep
|
25f96e6a88
|
Reword unreachable warning (again)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-20 10:50:28 -07:00 |
|
Tom Eastep
|
71bcd11ab6
|
Make ?...shell/perl directives case insensitive
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-20 10:39:39 -07:00 |
|
Tom Eastep
|
4bd35a0b93
|
Allow 'routeback=0'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-16 08:37:53 -07:00 |
|
Tom Eastep
|
52eb29d01e
|
Remove incorrect statement from the Macro document
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-15 06:51:59 -07:00 |
|
Tom Eastep
|
cb132e2421
|
Include the chain name in the 'unreachable' warning.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-11 06:29:07 -07:00 |
|
Tom Eastep
|
53f1cd40df
|
Add 'unmanaged' option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-10 12:36:18 -07:00 |
|
Tom Eastep
|
c653d9ce83
|
Only issue one 'unreachable' warning per chain.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-08 10:02:19 -07:00 |
|
Tom Eastep
|
6b67f2698d
|
Add a Kerberos macro (from James Shubin)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-08 07:37:00 -07:00 |
|
Tom Eastep
|
254d2037ef
|
Delete unused variable.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-04 15:34:25 -07:00 |
|
Tom Eastep
|
cb8e76b1d2
|
Add sub get_opttype to emphasize where rule option types are used.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-04 12:49:20 -07:00 |
|
Tom Eastep
|
2b579d2dff
|
Small efficiency change in helper processing.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-04 12:48:22 -07:00 |
|
Tom Eastep
|
fc3e3dbf3c
|
Cosmetic change.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-03 10:53:33 -07:00 |
|
Tom Eastep
|
81acedd1b3
|
Reword the 'unreachable' warning.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-02 17:13:41 -07:00 |
|
Tom Eastep
|
d8f53cc0a9
|
Merge branch '4.5.17'
Conflicts:
Shorewall/Perl/Shorewall/Chains.pm
|
2013-06-02 15:31:45 -07:00 |
|
Tom Eastep
|
481811d29f
|
Merge NFACCT and EXPENSIVE matches during optimization
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-02 13:29:13 -07:00 |
|
Tom Eastep
|
3867902b27
|
Use 'NONE' policies for LOOPBACK and LOCAL zones to non-firewall zones.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-02 07:31:32 -07:00 |
|
Tom Eastep
|
adf51d0059
|
Revise the unreachable warning stuff.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 16:32:46 -07:00 |
|
Tom Eastep
|
7dbd50708b
|
Clear the current filename after last file is processed.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:05:35 -07:00 |
|
Tom Eastep
|
4340bcffb1
|
Don't optimize away a rule that includes nfacct matches.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:05:25 -07:00 |
|
Tom Eastep
|
4a05e56d6d
|
Disable warning on unreachable rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:05:16 -07:00 |
|
Tom Eastep
|
2d8078033c
|
Clear the current filename after last file is processed.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:03:10 -07:00 |
|
Tom Eastep
|
c5f2eeea80
|
Don't optimize away a rule that includes nfacct matches.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:02:39 -07:00 |
|
Tom Eastep
|
5343243f6b
|
Disable warning on unreachable rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-06-01 13:01:55 -07:00 |
|
Tom Eastep
|
4865899018
|
Avoid a forward jump for local zones.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-30 06:52:09 -07:00 |
|
Tom Eastep
|
9b68204865
|
Generate an 'unreachable rule(s)' warning.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-30 06:17:22 -07:00 |
|
Tom Eastep
|
a550dd3eed
|
Issue a warning when a rule is dropped do to terminated chain.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-29 21:01:07 -07:00 |
|
Tom Eastep
|
e405ab80bf
|
Update Common Action doc for 'Auth' change
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-29 08:40:43 -07:00 |
|
Tom Eastep
|
e9badc1f61
|
Correct comment in action.Drop
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-29 08:35:15 -07:00 |
|
Tom Eastep
|
f0aa29222f
|
Correct minor IPv6 TPROXY bug
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-29 07:18:46 -07:00 |
|
Tom Eastep
|
eaf1d0e5c2
|
Another error check for hosts files and loopback zones.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-28 10:00:07 -07:00 |
|
Tom Eastep
|
446f764d19
|
Allow config with only local and firewall zones.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2013-05-28 08:03:44 -07:00 |
|