Tom Eastep
|
3711e64d71
|
Fix for 0 values propagated to the script
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 14:38:29 -07:00 |
|
Tom Eastep
|
3092a85999
|
SWAG regarding LOG_VERBOSITY issue
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 13:43:57 -07:00 |
|
Tom Eastep
|
c49e3076ec
|
Recode fix for find_first_interface_address()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 13:28:07 -07:00 |
|
Tom Eastep
|
eb47b9b54f
|
Add a comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 13:17:11 -07:00 |
|
Tom Eastep
|
62c9cb7b36
|
Change 'first_install' tests
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 13:16:16 -07:00 |
|
Tom Eastep
|
f17365cf6d
|
Fix find_first_interface_address()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-07 13:05:42 -07:00 |
|
Tom Eastep
|
7ab3c6a612
|
Add /etc/shorewall/interfaces to the IFB instructions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-06 16:14:58 -07:00 |
|
Tom Eastep
|
450f2787ba
|
Cover 1:1 NAT in FAQ 2d.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-06 08:06:06 -07:00 |
|
Tom Eastep
|
9bf87bc5e1
|
Add FAQ 2d.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-06 08:02:20 -07:00 |
|
Tom Eastep
|
a670c05043
|
Reword reference to RFC 4787.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-06 07:48:35 -07:00 |
|
Tom Eastep
|
5e30c5683c
|
Tone down response to Shorewall FAQ 2 and provide RFC reference.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-06 07:44:43 -07:00 |
|
Tom Eastep
|
3b317afb2f
|
Add mDNS macro from Vincent Smeets.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-04-03 15:57:50 -07:00 |
|
Tom Eastep
|
430cbf310f
|
Revise FAQ 73 to match reality.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-31 08:38:29 -07:00 |
|
Tom Eastep
|
427b14b21d
|
Clean up file headers in the .conf files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 11:53:36 -07:00 |
|
Tom Eastep
|
ee8270aadf
|
Correct typo in the FAQ.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 11:35:33 -07:00 |
|
Tom Eastep
|
9a720cf516
|
Further clarify the use of log levels with macros
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 08:14:32 -07:00 |
|
Tom Eastep
|
18bb6c94ca
|
Improve formatting of 'rules' manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 08:08:57 -07:00 |
|
Tom Eastep
|
af893b6296
|
Add 'N' trace records for chain creation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 07:32:38 -07:00 |
|
Tom Eastep
|
c57ee7d68d
|
Update release notes with additional trace information.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 07:23:17 -07:00 |
|
Tom Eastep
|
b2d8039ff6
|
Remove unnecessary text and 'before' images from trace entries
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-30 07:12:22 -07:00 |
|
Tom Eastep
|
7e97e9519d
|
Conditionally trace writes by copy2().
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 11:56:26 -07:00 |
|
Tom Eastep
|
51d4bf19b5
|
Conditionally trace writes by copy2().
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 11:56:06 -07:00 |
|
Tom Eastep
|
dc7d4bdb09
|
Document CS->GS trace change.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 09:50:42 -07:00 |
|
Tom Eastep
|
350a89e449
|
More complete generated script trace
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 09:48:23 -07:00 |
|
Tom Eastep
|
5c91fb40e2
|
Remove unneeded test; correct typo
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 09:04:45 -07:00 |
|
Tom Eastep
|
db2bed06d8
|
Add 'T' to the documented netfilter trace types.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 08:31:12 -07:00 |
|
Tom Eastep
|
b261a5b2ec
|
Document netfilter trace types.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-29 07:23:17 -07:00 |
|
Tom Eastep
|
6d7226ae93
|
Remove special trace entries
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 16:31:03 -07:00 |
|
Tom Eastep
|
1fd656b8c9
|
Tweak trace facility
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 15:31:05 -07:00 |
|
Tom Eastep
|
3b07053d3b
|
Document new 'trace' facility
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 14:37:22 -07:00 |
|
Tom Eastep
|
b0733d93ee
|
Implement a more robust trace
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 13:09:04 -07:00 |
|
Tom Eastep
|
ef4237f5a0
|
Avoid verbosity overflow/underflow
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 07:27:27 -07:00 |
|
Tom Eastep
|
5ad0088ce7
|
Describe required quoting in shorewall[6].conf
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-28 07:12:16 -07:00 |
|
Tom Eastep
|
1236cccc6a
|
Set 'forward=1' on all interfaces in the multi-interface samples
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-27 16:46:05 -07:00 |
|
Tom Eastep
|
3e215d0482
|
Minor cleanup in the Chains module.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-27 08:18:41 -07:00 |
|
Tom Eastep
|
1153ff0c75
|
Avoid a shell warning when brctl is not installed.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-27 07:33:40 -07:00 |
|
Tom Eastep
|
f30cd7e287
|
Clarify provisional policy handling.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-26 08:02:49 -07:00 |
|
Tom Eastep
|
ad08d2195e
|
Add a short section about bridged OpenVPN configurations.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-25 15:30:46 -07:00 |
|
Tom Eastep
|
5a36606167
|
Document fix of EXTERNAL handling in proxyarp.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-25 12:13:52 -07:00 |
|
Tom Eastep
|
6cdc1ab7a2
|
Allow a logical interface name in the EXTERNAL column of the proxyarp file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-25 11:41:06 -07:00 |
|
Tom Eastep
|
a0a5c55a63
|
Add omitted defect to 4.4.8 problems corrected
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-25 10:14:39 -07:00 |
|
Tom Eastep
|
7d91edc6ec
|
Remove redundant line of code
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-23 12:49:06 -07:00 |
|
Tom Eastep
|
626b28fcd0
|
Auto-detect bridge when no options specified. Remove extra logic.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-23 09:28:11 -07:00 |
|
Tom Eastep
|
05752dcf0b
|
Auto-detection of bridges -- release documents.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-23 08:58:44 -07:00 |
|
Tom Eastep
|
5e9aceae68
|
Detect bridges
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-23 08:38:54 -07:00 |
|
Tom Eastep
|
8fc1a08766
|
Expand Split DNS Article
|
2010-03-22 19:57:23 -07:00 |
|
Tom Eastep
|
f9327d34e1
|
Add 'blacklst' to the documented unoptimized chains.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-22 06:58:29 -07:00 |
|
Tom Eastep
|
914d829a49
|
Don't optimize the 'blacklst' chain
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-22 06:47:39 -07:00 |
|
Tom Eastep
|
2e7a0297db
|
More LOGBURST/LOGRATE clarification.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-21 07:35:38 -07:00 |
|
Tom Eastep
|
6ac549ef4e
|
Add a comment explaining why avoiding creation of the blacklst chain
and branching to it is a bad idea.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-03-21 07:24:29 -07:00 |
|