Tom Eastep
|
eaafeb8c2b
|
Add --hashlimit-htable-expire if the units are minutes or larger
|
2010-02-17 06:43:52 -08:00 |
|
Tom Eastep
|
375160d733
|
Avoid duplicate SFQ class numbers
|
2010-02-17 06:43:16 -08:00 |
|
Tom Eastep
|
167b29c2c5
|
Bump module version in Compiler.pm
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:24:52 -08:00 |
|
Tom Eastep
|
8aaf4aab3a
|
Don't create log chain for 'RETURN' rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:24:00 -08:00 |
|
Tom Eastep
|
4546394531
|
Cosmetic changes to Compiler.pm
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 14:07:35 -08:00 |
|
Tom Eastep
|
5d08d51fe5
|
Add $remote_fs to Required-Start and Required-Stop for Debian
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-15 08:39:50 -08:00 |
|
Tom Eastep
|
12d3420a5d
|
Detect FLOW_FILTER when LOAD_HELPERS_ONLY=No
|
2010-02-14 10:34:19 -08:00 |
|
Tom Eastep
|
ba01cecbcd
|
Explain RATE and BURST in the basics doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 08:54:34 -08:00 |
|
Tom Eastep
|
0624451537
|
Fix for OLD_HL_MATCH.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-14 07:22:12 -08:00 |
|
Tom Eastep
|
5e9ecf1491
|
Update version of Config module
|
2010-02-13 11:00:34 -08:00 |
|
Tom Eastep
|
50d246c8be
|
A little cleanup of compiler.pl
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 10:03:32 -08:00 |
|
Tom Eastep
|
ec95e5b32c
|
Document fix for rate limiting of NAT rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 09:11:14 -08:00 |
|
Tom Eastep
|
1258149e0e
|
Don't apply rate limiting twice in NAT rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-13 07:21:27 -08:00 |
|
Tom Eastep
|
ea5a6c79bc
|
Bump CAPVERSION
|
2010-02-11 16:22:47 -08:00 |
|
Tom Eastep
|
5a96771e07
|
Start 4.4.8 Beta 1
|
2010-02-11 15:46:57 -08:00 |
|
Tom Eastep
|
757fea7467
|
Update documentation regarding FLOW_FILTER
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-11 14:35:12 -08:00 |
|
Tom Eastep
|
b35f20b403
|
Avoid CAPVERSION bump to implement FLOW_FILTER detection
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-11 07:29:41 -08:00 |
|
Tom Eastep
|
b8c195f570
|
Accurately detect 'flow' availability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-10 14:50:26 -08:00 |
|
Tom Eastep
|
b1c64913b4
|
Reformat column header in tcinterfaces
|
2010-02-10 12:00:17 -08:00 |
|
Tom Eastep
|
433fc385bc
|
'bridge' implies 'routeback'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-09 14:04:36 -08:00 |
|
Tom Eastep
|
add302d02a
|
Correct typo in manpages
|
2010-02-09 06:49:30 -08:00 |
|
Tom Eastep
|
76f053246a
|
Add description of bandwidth specification to the tcinterfaces man pages
|
2010-02-09 06:42:31 -08:00 |
|
Tom Eastep
|
01521e4941
|
Correct typo in simple TC doc
|
2010-02-08 15:40:07 -08:00 |
|
Tom Eastep
|
21d4c8ba21
|
Document workaround for lack of 'flow'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-08 10:03:10 -08:00 |
|
Tom Eastep
|
1f86f54a8e
|
Update simple TC doc with 4.4.7 workaround for lack of 'flow'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-08 08:44:40 -08:00 |
|
Tom Eastep
|
46e2afcf16
|
Ignore TYPE if old distro
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-08 07:13:20 -08:00 |
|
Tom Eastep
|
b45a70f98a
|
Make 'nosmurfs' work correctly on IPv6 with Address Type Match
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-08 07:12:58 -08:00 |
|
Tom Eastep
|
6239218db5
|
Warn about absense of the 'flow' classifier.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-08 06:45:11 -08:00 |
|
Tom Eastep
|
18d03a61f5
|
Make 'nosmurfs' work with Address Type Match on IPv6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-07 08:43:31 -08:00 |
|
Tom Eastep
|
28b1139ef7
|
Add 'Tips and Hints' as an alias for the config file basics doc -- Take 2
|
2010-02-06 17:08:00 -08:00 |
|
Tom Eastep
|
b449d8168e
|
Add 'Tips and Hints' as an alias for the config file basics doc
|
2010-02-06 17:03:22 -08:00 |
|
Tom Eastep
|
11a2ec9f7c
|
Update version to 4.4.7
|
2010-02-05 16:40:48 -08:00 |
|
Tom Eastep
|
e64af57cae
|
Give smurf logging chain a fixed name.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-03 16:04:59 -08:00 |
|
Tom Eastep
|
f4e175f149
|
Fix IPv6 'nosmurfs'. Make 'nosmurfs' logging more efficient.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-03 15:03:15 -08:00 |
|
Tom Eastep
|
97f3e5b8de
|
Clear known problems.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-03 07:18:55 -08:00 |
|
Tom Eastep
|
52880a8822
|
Clean up generate_matrix() fix.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-03 06:57:51 -08:00 |
|
Tom Eastep
|
9d288241da
|
Fix issues in generate_matrix().
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 19:42:54 -08:00 |
|
Tom Eastep
|
096fb29203
|
DEBUG and PURGE -- take 2.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 13:57:50 -08:00 |
|
Tom Eastep
|
1d8a7ad09f
|
Clear DEBUG and PURGE shell variables
Delete a blank line
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 13:55:29 -08:00 |
|
Tom Eastep
|
e788b4c0f6
|
Mention DYNAMIC_BLACKLIST in the blacklisting doc.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 11:13:44 -08:00 |
|
Tom Eastep
|
753eb97667
|
Update version to 4.4.7 RC2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 10:30:53 -08:00 |
|
Tom Eastep
|
ede17e2da0
|
Set ADD_IP_ALIASES=No in all shorewall.conf files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-02 08:16:41 -08:00 |
|
Tom Eastep
|
dd60f04a9f
|
Work around lack of MARK Target support
|
2010-02-01 16:22:57 -08:00 |
|
Tom Eastep
|
58f6e57286
|
Update known problems
|
2010-02-01 16:19:36 -08:00 |
|
Tom Eastep
|
d354560863
|
Finish last change.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-01 14:25:51 -08:00 |
|
Tom Eastep
|
f0d101605b
|
Don't try to combine nat chains that include '-s'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-01 14:24:07 -08:00 |
|
Tom Eastep
|
193fdc85f0
|
Add 'Make Install' to iptables installation instructions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-31 12:12:55 -08:00 |
|
Tom Eastep
|
1981372c94
|
Make search for "-j ACCEPT" a little tighter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-31 08:27:30 -08:00 |
|
Tom Eastep
|
f2709dd525
|
Correct release notes to match implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-30 20:31:39 -08:00 |
|
Tom Eastep
|
3d39a47582
|
Set $have_ipsec after completing parse of the hosts file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-30 07:26:35 -08:00 |
|