extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 14:48:51 +01:00
Code Issues Packages Projects Releases Wiki Activity
10,106 Commits 104 Branches 736 Tags 55 MiB
7d25f6356b
Commit Graph

1263 Commits

Author SHA1 Message Date
Tom Eastep
e4afc15370 Finish Vserver Implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-30 20:35:46 -07:00
Tom Eastep
9e37fe1ffa Deimplement flawed rate limiting with simple TC 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-26 07:42:08 -07:00
Tom Eastep
fe27554fd0 Document undefined value issue 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-24 14:18:48 -07:00
Tom Eastep
cc376ab72e Update release documents for REQUIRE_INTERFACE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-23 13:00:00 -07:00
Tom Eastep
d5aaa97d4e Update release documents for changes ported from the 4.4.10 branch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-22 08:40:07 -07:00
Tom Eastep
efa4cfa921 Update release documents for 4.4.11 Beta 1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-18 12:09:43 -07:00
Tom Eastep
503b1cf795 Update release note version banner 2010-06-16 16:46:56 -07:00
Tom Eastep
625f254d02 Add tcfilters to manpage index 2010-06-10 06:15:15 -07:00
Tom Eastep
0978f3d41a More periodic removal of trailing white space 2010-06-07 09:16:56 -07:00
Tom Eastep
b741ff2a81 Document first 4.4.11 features 2010-06-06 20:40:39 -07:00
Tom Eastep
b3370dfd78 Initiate 4.4.11 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-06 13:36:45 -07:00
Tom Eastep
742a3b2eef Make wait and required work on wildcard interfaces 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-04 10:35:45 -07:00
Tom Eastep
82a74d7534 Resolve Optional/Required interfaces with wildcard names 
Optional is allowed
Required is not

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-04 08:46:29 -07:00
Tom Eastep
165535cd8b Disallow wildcard optional/required interfaces 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-04 07:18:55 -07:00
Tom Eastep
43afd03b9b Bump version to 4.4.10 2010-06-03 11:18:02 -07:00
Tom Eastep
c52d0c4d9f Update release notes for 'version -a' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-31 08:05:33 -07:00
Tom Eastep
47c4cbd85a Remove extra step in DSL modem access 2010-05-30 11:31:41 -07:00
Tom Eastep
5bd1bac70d Document fix for optimization bug 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-29 09:13:52 -07:00
Tom Eastep
e29d6d080d Restore -a functionality to the version command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-29 08:59:45 -07:00
Tom Eastep
3125a4d0d3 Restore RPM RedHat compatibility 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-27 06:49:49 -07:00
Tom Eastep
cc269d5d19 Make RPM SuSE-only 2010-05-26 18:49:33 -07:00
Tom Eastep
3db31f2f65 Add SAFESTOP setting to /etc/default/shorewall*. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-25 07:16:02 -07:00
Tom Eastep
eaad566978 Update documents for Shorewall-lite 2010-05-20 17:06:53 -07:00
Tom Eastep
182f433772 Add note about supported distributions to release notes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-20 06:32:34 -07:00
Tom Eastep
50dc02da07 Implement the 'REQUIRE_INTERFACE' option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-19 07:32:02 -07:00
Tom Eastep
4e748f9255 Add Shorewall-init manpage and update release notes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 20:40:03 -07:00
Tom Eastep
4690075ed8 Start firewall on up event for optional interface. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 20:29:03 -07:00
Tom Eastep
1eb5e5b081 Fail the install on unknown distros. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 15:30:53 -07:00
Tom Eastep
9c5fb89b4c Improve documentation in the release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 14:55:16 -07:00
Tom Eastep
0c9a0150d2 Document Shorewall-init; delete old auto-stop code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 14:42:39 -07:00
Tom Eastep
679ad6cf04 Allow OS X to be an Administrative System 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-06 09:07:16 -07:00
Tom Eastep
96bef5bd49 Assume 'routeback' in routestopped based on interface config. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-03 12:31:11 -07:00
Tom Eastep
fca404eeaf Update version to 4.4.9 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-03 10:02:02 -07:00
Tom Eastep
70c6a2cdf3 Update version to 4.4.9-RC2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-02 07:25:50 -07:00
Tom Eastep
16161d9cfc Add new trace types. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-01 06:43:09 -07:00
Tom Eastep
2864841a9e Correct release notes 
update version to RC1
correct typo

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-29 11:21:31 -07:00
Tom Eastep
a997d6507d Update release notes with more common example of failure. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-28 08:09:10 -07:00
Tom Eastep
039668b333 Update release notes to reflect reality. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-28 06:57:45 -07:00
Tom Eastep
2c1cede54e Revise addressless bridge change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-27 15:23:38 -07:00
Tom Eastep
d8b0f496df Allow simple configuration of a bridge with no IP address 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-27 12:26:58 -07:00
Tom Eastep
f49848bd5b Document rare optimization fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-26 16:32:53 -07:00
Tom Eastep
fb2ddcee7b Bump Version to 4.4.9 Beta 5 2010-04-24 21:53:12 -07:00
Tom Eastep
2cb3bac946 Document fix for find_first_interface_address() 2010-04-23 12:18:51 -07:00
Tom Eastep
64bf772594 Set OUTPUT policy to ACCEPT when optimize_chain deletes all of its rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 13:38:38 -07:00
Tom Eastep
b0b39cfc39 Document optimization level 2 fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 11:55:13 -07:00
Tom Eastep
a0abb11f67 Extend 'show log <ipaddr>' to search for a regular expression. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-19 13:02:21 -07:00
Tom Eastep
8c09f21e5d Implement 'show log <token>' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-19 10:20:28 -07:00
Tom Eastep
938cfd7ba4 Don't create fw-><bport> chains and rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 12:29:51 -07:00
Tom Eastep
8e1284f74c Document OPTIMIZE=15 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 09:17:12 -07:00
Tom Eastep
21b44ac42b Change version to 4.4.9-Beta4 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 07:25:53 -07:00
Tom Eastep
dde540c42d Update release notes for optimize 4 problems. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-15 12:44:37 -07:00
Tom Eastep
9ad5ee1818 Add correct release id. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-15 07:25:35 -07:00
Tom Eastep
aeb90969f7 Optimize 8 Documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-14 17:12:25 -07:00
Tom Eastep
91a711b34f Document startup log fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-10 11:54:54 -07:00
Tom Eastep
1e078b8c8d Use splice() to delete rules from chains 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-09 09:38:03 -07:00
Tom Eastep
2f3f591af1 Document removal of fallback scripts. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-09 07:43:36 -07:00
Tom Eastep
56bc28a182 Prepare 4.4.9 Beta 3 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-09 07:32:21 -07:00
Tom Eastep
ab1a27ca2a Update version to 4.4.9 Beta 2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-08 13:14:51 -07:00
Tom Eastep
359c221783 Keep rules arrays compressed throughout the compilation process 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-08 12:53:30 -07:00
Tom Eastep
c668707aac Update release docs with optimize 4 fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-07 20:18:56 -07:00
Tom Eastep
9d7d7e06d8 Update release documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-07 14:43:50 -07:00
Tom Eastep
3b317afb2f Add mDNS macro from Vincent Smeets. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-03 15:57:50 -07:00
Tom Eastep
c57ee7d68d Update release notes with additional trace information. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-30 07:23:17 -07:00
Tom Eastep
dc7d4bdb09 Document CS->GS trace change. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-29 09:50:42 -07:00
Tom Eastep
db2bed06d8 Add 'T' to the documented netfilter trace types. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-29 08:31:12 -07:00
Tom Eastep
b261a5b2ec Document netfilter trace types. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-29 07:23:17 -07:00
Tom Eastep
1fd656b8c9 Tweak trace facility 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-28 15:31:05 -07:00
Tom Eastep
3b07053d3b Document new 'trace' facility 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-28 14:37:22 -07:00
Tom Eastep
5a36606167 Document fix of EXTERNAL handling in proxyarp. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-25 12:13:52 -07:00
Tom Eastep
a0a5c55a63 Add omitted defect to 4.4.8 problems corrected 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-25 10:14:39 -07:00
Tom Eastep
05752dcf0b Auto-detection of bridges -- release documents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-23 08:58:44 -07:00
Tom Eastep
914d829a49 Don't optimize the 'blacklst' chain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-22 06:47:39 -07:00
Tom Eastep
6fc347b9be Prepare 4.4.9-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-20 07:06:47 -07:00
Tom Eastep
fae29bcf6f Change version to 4.4.8 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-19 10:17:32 -07:00
Tom Eastep
91bc3b3293 Mark a restored configuration as 'Restored' rather than 'Started'. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-17 10:10:56 -07:00
Tom Eastep
1177540fd8 Update version to RC2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-16 12:39:35 -07:00
Tom Eastep
a01fa345b7 Add support for UDP Lite 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-16 09:42:50 -07:00
Tom Eastep
fb4f7ebd67 Update release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-08 08:18:10 -08:00
Tom Eastep
ce8d1cbc59 Change port range in release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 08:39:09 -08:00
Tom Eastep
f246f728e7 Flag '-' used as a port range separator 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 08:36:26 -08:00
Tom Eastep
49c1350aa0 Documentation for final cleanup of variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 10:28:09 -08:00
Tom Eastep
8cfcacc862 Update release document with fix for multiple policy matches 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 08:40:20 -08:00
Tom Eastep
53c73bc8e9 Eliminate VERBOSE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-28 17:58:01 -08:00
Tom Eastep
d2992c21f4 Update version to Beta 2 2010-02-28 09:04:37 -08:00
Tom Eastep
c9c957c5b8 HKP Macro 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-28 07:37:16 -08:00
Tom Eastep
3c4b41fbe0 Implement -s option in the major installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-27 11:48:39 -08:00
Tom Eastep
061d850c16 Rename RESTOREPATH to g_restorepath 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-26 08:35:50 -08:00
Tom Eastep
c1ac19a81e Correct a couple of typos 2010-02-25 16:35:19 -08:00
Tom Eastep
8aaddf368b More reserved variable names documented 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 12:37:22 -08:00
Tom Eastep
e66b8759d6 Document variable name changes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 12:18:41 -08:00
Tom Eastep
7fe7ebc891 Fix Handling of NFQUEUE(queue-num) in policies 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 08:44:28 -08:00
Tom Eastep
4415050fd2 Eliminate another reserved variable name 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-23 17:00:26 -08:00
Tom Eastep
5696742ef3 Update release Document with 4.4.7.5 changes and Debian Init Script Fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-20 08:34:47 -08:00
Tom Eastep
4e0225a4c3 Update Documentation for per-IP rate limiting fixes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-18 07:12:36 -08:00
Tom Eastep
ea8a6c837f Document per-IP rate change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 15:41:12 -08:00
Tom Eastep
115ce7b87d Update release documents for bug fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 06:49:13 -08:00
Tom Eastep
ec95e5b32c Document fix for rate limiting of NAT rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 09:11:14 -08:00
Tom Eastep
5a96771e07 Start 4.4.8 Beta 1 2010-02-11 15:46:57 -08:00
Tom Eastep
757fea7467 Update documentation regarding FLOW_FILTER 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-11 14:35:12 -08:00
Tom Eastep
21d4c8ba21 Document workaround for lack of 'flow' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-08 10:03:10 -08:00
Tom Eastep
11a2ec9f7c Update version to 4.4.7 2010-02-05 16:40:48 -08:00
Tom Eastep
f4e175f149 Fix IPv6 'nosmurfs'. Make 'nosmurfs' logging more efficient. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-03 15:03:15 -08:00
Tom Eastep
753eb97667 Update version to 4.4.7 RC2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-02 10:30:53 -08:00
Tom Eastep
ede17e2da0 Set ADD_IP_ALIASES=No in all shorewall.conf files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-02 08:16:41 -08:00
Tom Eastep
dd60f04a9f Work around lack of MARK Target support 2010-02-01 16:22:57 -08:00
Tom Eastep
f2709dd525 Correct release notes to match implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-30 20:31:39 -08:00
Tom Eastep
103a1660bc Update release notes for RC 1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-27 12:57:47 -08:00
Tom Eastep
9408a114c6 Don't load unused modules when LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-25 10:50:49 -08:00
Tom Eastep
0d63182ab4 Fix ambiguous syntax in Config.pm 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-22 16:44:45 -08:00
Tom Eastep
199a50e1c7 Update version to 4.4.7 Beta 2 
Add problems corrected to the release notes.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-22 10:35:27 -08:00
Tom Eastep
8def4d03c3 Document LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-21 20:17:25 -08:00
Tom Eastep
146a738e4c Document TPROXY 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-17 08:20:15 -08:00
Tom Eastep
fddb85189e Update release documents for functionality backported from 4.5. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-16 11:32:50 -08:00
Tom Eastep
d5cc302ad9 Start 4.4.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-16 08:11:13 -08:00
Tom Eastep
45d975cb45 Final editing of release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-14 08:25:32 -08:00
Tom Eastep
6e998edd48 Correct typo -- TC_EXPORT -> TC_EXPERT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-14 07:48:19 -08:00
Tom Eastep
ebf1e55609 Version to 4.4.6 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 15:38:19 -08:00
Tom Eastep
1f1812b786 Document mDNS change in the release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 13:24:24 -08:00
Tom Eastep
890cbfbd5d Document TRACK_PROVIDERS change in the release notes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 10:59:34 -08:00
Tom Eastep
55e41483de Update Release Documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 20:12:31 -08:00
Tom Eastep
4420eed8d7 Allow users to preview the generated ruleset. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 15:32:50 -08:00
Tom Eastep
818dfb6295 Document 'show macro' in the release docs. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 13:46:14 -08:00
Tom Eastep
4464094773 Update release documents for DHCPfwd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 07:51:20 -08:00
Tom Eastep
5b4e9eb8e6 Revert change with migration issue 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-11 15:30:33 -08:00
Tom Eastep
fc8bfdcbf9 Update release documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-11 14:49:45 -08:00
Tom Eastep
54b21365c2 Update release documents for [...] change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-08 13:58:15 -08:00
Tom Eastep
db819b1d3f Update release notes to qualify when ipsets are restored by 'restore' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-06 07:57:02 -08:00
Tom Eastep
84051ca19a Update the release notes regarding SAVE_IPSETS and save/restore 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 12:49:58 -08:00
Tom Eastep
e3c75dcfcc Document the restoration of SAVE_IPSETS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 11:54:59 -08:00
Tom Eastep
b491eae3c0 Document Lenny/xtables-addons hack 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 10:20:40 -08:00
Tom Eastep
d87d0893d2 Fix typos in the release notes 2009-12-20 12:05:35 -08:00
Tom Eastep
8eb6d136ae Fix typo in release notes 2009-12-19 18:25:48 -08:00
Tom Eastep
d45dd5387a Fix type on release notes 2009-12-19 18:23:15 -08:00
Tom Eastep
436169f0b2 Update documentation for rp_filter change 2009-12-19 16:09:20 -08:00
Tom Eastep
9cf75a4253 Revert "this is crap" 
This reverts commit 7be7ef6685.
 2009-12-19 16:05:28 -08:00
Tom Eastep
7be7ef6685 this is crap 2009-12-19 16:05:13 -08:00
Tom Eastep
508e1123bb Revert change that allowed out of order policies 2009-12-19 07:24:17 -08:00
Tom Eastep
43c45a064c Add current and limit to conntrack table display 2009-12-12 09:10:24 -08:00
Tom Eastep
f938e9789e More release notes editing 2009-12-11 13:45:24 -08:00
Tom Eastep
beb7634ca6 Correct numerous typos in the release notes 2009-12-11 13:41:24 -08:00
Tom Eastep
79ce532b69 Document fix for 'reload -c' 2009-12-08 08:30:37 -08:00
Tom Eastep
4076a6bca7 Fix ENHANCED_REJECT and MODULE_SUFFIX 2009-12-07 13:55:49 -08:00
Tom Eastep
c8616d4c67 Fix Shorewall6 capability detection 2009-12-05 21:35:05 -08:00
Tom Eastep
01ed97ad94 Describe checking for cls_flow support 2009-12-05 09:05:16 -08:00
Tom Eastep
e18238c665 Update 'flow=' description in the release notes 2009-12-05 08:05:20 -08:00
Tom Eastep
12279e57ed Add information about 'flow' to the release notes 2009-12-04 15:04:59 -08:00
Tom Eastep
ee2195e745 Allow LOGFILE=/dev/null 2009-12-03 16:30:06 -08:00
Tom Eastep
a188fec942 Auto-load cls_flow and search .../sched for modules 2009-12-03 12:20:58 -08:00
Tom Eastep
768da64869 Remove incorrect migration consideration 2009-12-03 07:05:36 -08:00
Tom Eastep
8b2c6853f3 Remove description of reverted change from the release notes 2009-11-28 08:06:01 -08:00
Tom Eastep
e5106f10bc Revert 8ff4d004c0 2009-11-28 07:23:23 -08:00
Tom Eastep
4e8d753682 Revert "Finish Virtual Zones" 
This reverts commit 222c8cf88f.
 2009-11-28 07:20:52 -08:00
Tom Eastep
0b1621027b Revert "Make 'virtual' a zone type rather than an option" 
This reverts commit 18eedf7e34.
 2009-11-28 07:19:10 -08:00
Tom Eastep
f5378e7652 Revert "More doc updates for virtual zones" 
This reverts commit a37e56d823.
 2009-11-28 07:18:46 -08:00
Tom Eastep
a37e56d823 More doc updates for virtual zones 2009-11-27 08:49:00 -08:00
Tom Eastep
18eedf7e34 Make 'virtual' a zone type rather than an option 2009-11-27 08:17:18 -08:00
Tom Eastep
222c8cf88f Finish Virtual Zones 2009-11-26 12:14:58 -08:00
Tom Eastep
8ff4d004c0 Better virtual zone implementation 2009-11-25 18:14:14 -08:00
Tom Eastep
8263ea1312 Limit providers to 15 2009-11-25 12:18:08 -08:00
Tom Eastep
d189c08533 Revert "Add 'virtual' zone support" 
This reverts commit a2cd4bd1f4.
 2009-11-25 11:51:13 -08:00
Tom Eastep
a2cd4bd1f4 Add 'virtual' zone support 2009-11-25 09:42:28 -08:00
Tom Eastep
d3d21d4d18 Fix 'show policies' in Shorewall6[-lite] 2009-11-23 13:50:41 -08:00
Tom Eastep
f186c436d4 Improve wording of Problem Corrected #3 2009-11-23 11:48:08 -08:00
Tom Eastep
cc809eaf78 Complete merge of 4.4 branch into master 2009-11-23 11:15:33 -08:00
Tom Eastep
c17ac8f23f commit crap for now 2009-11-23 11:13:57 -08:00
Tom Eastep
532105ec39 Allow specific policy to supersede a wildcard policy 2009-11-23 10:02:04 -08:00
Tom Eastep
b30cae89e3 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:56:15 -08:00
Tom Eastep
99a35c1bf0 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:33:16 -08:00
Tom Eastep
bd9c0ac285 Generate error on port == 0 2009-11-22 08:39:03 -08:00
Tom Eastep
c8209f4ce2 Apply bridge fix to 4.4 2009-11-22 08:18:23 -08:00
Tom Eastep
4aeee6fd8b Make 'expanded' apply to all wildcard policies 2009-11-21 14:18:01 -08:00
Tom Eastep
c7de19cf39 Allow specific policy to supersede an expanded one 2009-11-21 13:56:40 -08:00
Tom Eastep
cbe944c354 Open the 4.5.0 Thread 2009-11-21 11:41:10 -08:00
Tom Eastep
ecf6a0ec4a Open 4.4.5 2009-11-21 11:08:50 -08:00
Tom Eastep
bce4d51a18 Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes 2009-11-21 07:54:42 -08:00
Tom Eastep
c5bb493b29 Fix class number assignment when WIDE_TC_MARKS=Yes 2009-11-20 12:25:15 -08:00
Tom Eastep
5f70b261b6 Update version of Shorewall::Compiler 2009-11-16 20:21:59 -08:00
Tom Eastep
c4bfab29a5 Clean up release notes 2009-11-16 15:21:11 -08:00
Tom Eastep
9d5dd2ad3a Implement an '-l' option to the 'show' command 2009-11-16 15:14:24 -08:00
Tom Eastep
31f01fe765 Document fixing route rule addition code 2009-11-16 11:20:02 -08:00
Tom Eastep
dd543a2934 Tweak policies display 2009-11-16 09:30:37 -08:00
Tom Eastep
f5a019becc Implement 'show policies' command 2009-11-15 09:24:56 -08:00
Tom Eastep
e748341afd Correct mis-statement in the release notes 2009-11-11 16:35:06 -08:00
Tom Eastep
a4eb581d44 Document full logical interface implementation 2009-11-11 10:45:01 -08:00
Tom Eastep
893a847c87 Suppress extra COMMENT warnings 2009-11-10 17:17:55 -08:00
Tom Eastep
bd9c651961 Clarify physical naming rules and '+' 2009-11-10 15:25:25 -08:00
Tom Eastep
bf8c38e054 Add ZONE2ZONE option to shorewall.conf 2009-11-10 14:12:55 -08:00
Tom Eastep
89bdcf9a3d Implement 'physical' option 2009-11-06 07:27:44 -08:00
Tom Eastep
28b660c853 Avoid reporting bogus duplicate interface with two bridges and wildcard ports 2009-11-05 11:04:14 -08:00
Tom Eastep
4548db58da Relax port list limitation in /etc/shorewall/routestopped 2009-11-03 11:36:32 -08:00
Tom Eastep
4f5c602d5f Fix .spec error and document logrotate files 2009-11-03 10:12:38 -08:00
Tom Eastep
11ddfa92e9 Eliminate Perl run-time errors out of move_rules() 2009-11-01 17:14:42 -08:00
Tom Eastep
f0b4b1f42e Add limit option to tcclasses 2009-10-26 12:23:32 -07:00
Tom Eastep
cc0adc218f Update comments and release documentation 2009-10-26 10:03:51 -07:00
Tom Eastep
b3571261dd Fix optional providers 2009-10-24 12:05:44 -07:00
Tom Eastep
c922afaf23 Tweak release notes 2009-10-24 12:01:15 -07:00
Tom Eastep
3e2cf982a3 Correct messages issued when a provider is not added 2009-10-24 08:50:15 -07:00
Tom Eastep
86df82a29a Fix IPv6 address validation error 2009-10-23 13:41:51 -07:00
Tom Eastep
d0cda6b6ea Add TRACK_PROVIDERS option 2009-10-20 13:24:17 -07:00
Tom Eastep
49f361124e Make 'track' the default 2009-10-20 12:24:28 -07:00
Tom Eastep
f3043f1453 Document nested zone fix 2009-10-17 11:06:36 -07:00
Tom Eastep
b38841798e Fix initialization 2009-10-15 13:43:46 -07:00
Tom Eastep
990a9f0fdc Fix RETAIN_ALIASES 2009-10-13 14:36:47 -07:00
Tom Eastep
1b0a3e4417 Correct typos in release notes 2009-10-13 08:13:34 -07:00
Tom Eastep
ab4e7cffcf Document fix to routestopped 2009-10-03 10:53:53 -07:00
Tom Eastep
beac09e45f STARTUP_LOG changes 2009-10-02 16:10:14 -07:00
Tom Eastep
964cba79a9 Initialize 4.4.3 2009-10-02 11:31:08 -07:00
Tom Eastep
a8cc7d2a7e More clarification of masq file changes 2009-10-01 12:34:34 -07:00
Tom Eastep
5e49be219b Fix result from bad pull 2009-10-01 07:49:43 -07:00
Tom Eastep
d323c5b9c5 Delete shorewall-perl and shorewall-shell during upgrade 2009-10-01 07:37:30 -07:00
Tom Eastep
393673a884 Allow MARK in action body -- take 2 2009-09-25 16:15:56 -04:00
Tom Eastep
d84458518e Add capability to detect old hashlimit syntax 2009-09-23 16:56:31 -04:00
Tom Eastep
428c3d1e4e Hack to make new LIMIT stuff work on ancient iptables releases 2009-09-20 09:12:35 -04:00
Tom Eastep
120aade417 Allow Extension Scripts for Accounting Chains 2009-09-15 12:22:51 -07:00
Tom Eastep
a5f3a05341 Fix typo in the Introduction 2009-09-14 13:43:32 -07:00
Tom Eastep
8fdebf0c38 Add new columns to macros 2009-09-13 08:09:40 -07:00
Tom Eastep
8c2a228a7d Apply Jesse Shrieve's SNAT patch 2009-09-11 07:47:31 -07:00
Tom Eastep
7c1dd35a00 Update release documents 2009-09-09 12:18:31 -07:00
Tom Eastep
b03d502bbb Allow comments on continued lines 2009-09-06 16:17:22 -07:00
Tom Eastep
03821dc22c Process routestopped file during 'check' 2009-09-03 19:27:25 -07:00
Tom Eastep
4a809e14ab Documentation cleanup 2009-09-03 15:24:19 -07:00
Tom Eastep
f3455b107d 4.4.2 release doc initialization and update 2009-09-03 14:58:46 -07:00
Tom Eastep
fbfa4b4e49 Update release documents and make minor change to faq 2009-08-31 14:19:15 -07:00
Tom Eastep
2bb92a79f3 Fix silly hole in zones file parsing 2009-08-30 08:05:10 -07:00
Tom Eastep
d31721a066 Fix rule generated by MULTICAST=Yes -- release documents 2009-08-29 09:34:16 -07:00
Tom Eastep
b7915991ba Add MULTICAST=Yes corrected problem description to release notes 2009-08-29 09:24:51 -07:00
Tom Eastep
a0a9e087de Fix typo in release notes 2009-08-29 09:07:27 -07:00
Tom Eastep
1ef00c547b Disallow 'nets=' in a multi-zone interface definition 2009-08-29 07:41:27 -07:00
Tom Eastep
f2c3d9cd79 Correct typo 2009-08-29 07:20:40 -07:00
Tom Eastep
4809314fc1 Allow extending a zone defined with nets= 2009-08-29 07:20:16 -07:00
Tom Eastep
acfdc7e481 nets= allows multicast 2009-08-28 15:17:10 -07:00
Tom Eastep
a62d86aca7 Update interfaces manpage 2009-08-28 13:45:00 -07:00
Tom Eastep
5db7e77462 Turn off IP forwarding in the standalone example -- update release docs 2009-08-28 08:31:48 -07:00
Tom Eastep
383f3e8bcf Fix nested IPSEC zones 2009-08-26 12:44:10 -07:00
Tom Eastep
1b26c65cbc Fix logging in rules at the end of INPUT and OUTPUT 2009-08-25 09:22:26 -07:00
Tom Eastep
088e164f18 Redefine 'full' when used in a sub-class definition 2009-08-24 11:56:16 -07:00
Tom Eastep
e24dbb9aea Add 'clean' target to Makefiles 2009-08-23 10:43:01 -07:00
Tom Eastep
6d2809f154 Note the inadaquacy of the Busybox version of the iproute2 utilities 2009-08-17 07:17:33 -07:00
Tom Eastep
cbc9fa6e4c Update README.txt 2009-08-15 17:43:26 -07:00
Tom Eastep
201145eed9 More Persistent SNAT tweaks 2009-08-15 08:56:05 -07:00
Tom Eastep
c908edab34 Add new capability for persistent SNAT 2009-08-15 08:35:54 -07:00
Tom Eastep
55f75604b3 Add support for 'persistent' 2009-08-15 08:15:38 -07:00
Tom Eastep
883f415e53 Start 4.4.1 2009-08-14 14:46:31 -07:00
Tom Eastep
2bac824207 Fix provider number in masq entry 2009-08-12 13:52:56 -07:00
Tom Eastep
5cb9ff0009 Fix 'upnpclient' on required interfaces 2009-08-11 08:31:58 -07:00
Tom Eastep
51e7bcdaf4 Extend release notes and correct typos 2009-08-11 08:02:36 -07:00
Tom Eastep
1d1133532f Make 'SHOREWALL_COMPILER=shell' a WARNING rather than an ERROR 2009-08-09 08:19:24 -07:00
Tom Eastep
1a5027de9f Restore ipset binding capability 2009-08-08 08:26:22 -07:00
Tom Eastep
1051c44f51 Add xtables-addons install link to release notes 2009-08-07 14:42:06 -07:00
Tom Eastep
8011a61970 Add section IDs to Dynamic Zones page 2009-08-07 13:54:24 -07:00
Tom Eastep
a4090dc34f Document that 'any' is now a reserved word 2009-08-07 13:41:21 -07:00
Tom Eastep
55c879e4e6 Fix log record displays 2009-08-07 13:33:07 -07:00
Tom Eastep
374aceb06c Fix a couple of typos 2009-08-07 12:24:56 -07:00
Tom Eastep
7fbfb61fee Remove empty section from the release notes 2009-08-07 09:59:13 -07:00
Tom Eastep
fd75bc728a Idiot-proofing of the upgrade issues page 2009-08-07 09:46:20 -07:00
Tom Eastep
ed1e1f1352 Yet more idiot-proofing 2009-08-07 07:47:31 -07:00
Tom Eastep
a069b8817c More idiot-proofing of the release notes 2009-08-07 07:23:24 -07:00
Tom Eastep
71fb62c760 More tweaking of the release notes 2009-08-06 12:35:00 -07:00
Tom Eastep
b92730554e Idiot-proofing of the release notes 2009-08-06 12:23:35 -07:00
Tom Eastep
3af3ce6779 More release note tweaks 2009-08-06 10:24:21 -07:00
Tom Eastep
0c0026db53 Tweak release notes 2009-08-06 07:45:50 -07:00
Tom Eastep
9fd25a4832 Fix logging NAT rules -- fix release notes 2009-08-05 13:00:10 -07:00
Tom Eastep
031afd59b5 Fix logging NAT rules -- update release notes wording 2009-08-05 12:51:11 -07:00
Tom Eastep
70f46c02cc Fix logging NAT rules 2009-08-05 12:48:14 -07:00
Tom Eastep
999a00dc77 Remove need for '-v-1' when compiling to stdout 2009-08-03 11:20:34 -07:00
Tom Eastep
3efaef813f Update version to 4.4.0 2009-08-03 10:16:37 -07:00
Tom Eastep
bdb69876ee Add migration issue for nested zones 2009-07-29 16:55:05 -07:00
Tom Eastep
4af6c7650e Correct handling of nested IPSEC zone 2009-07-29 14:35:27 -07:00
Tom Eastep
8d8920e7ad Disallow ipsec zones nested within an ip zone 2009-07-29 07:49:06 -07:00
Tom Eastep
f2f8cab962 Make 'any' a reserved zone name 2009-07-26 12:29:37 -07:00
Tom Eastep
26cb2b1eeb Allow Shorewall6 to recognize TC, IP and IPSET 2009-07-26 12:26:49 -07:00
Tom Eastep
4fd338f3ca Fix 'rpm -U' from earlier versions 2009-07-21 12:32:25 -07:00
Tom Eastep
f16b2300b6 Remove references to Shorewall-shell, Shorewall-perl and prior Shorewall versions from the manpages 2009-07-15 17:50:55 -07:00
Tom Eastep
8e9bef0a61 Fix routing with no providers 2009-07-15 13:03:49 -07:00
Tom Eastep
887a643f9e Initiate RC1 2009-07-12 10:06:57 -07:00
Tom Eastep
bdd124b504 Derive IP6TABLES from IPTABLES 2009-07-09 10:29:56 -07:00
Tom Eastep
f88048ebe4 More revert conflicts 2009-07-06 18:23:23 -07:00
Tom Eastep
bab4f9df33 Resolve revert conflicts 2009-07-06 18:08:17 -07:00
Tom Eastep
81188bce1c Update release notes 2009-06-30 09:01:05 -07:00
Tom Eastep
4a98936290 Update home page for Beta 3 2009-06-30 07:06:47 -07:00
Tom Eastep
bc85b615ba More new macros 2009-06-29 21:05:23 -07:00
Tom Eastep
26aa8ba504 Delete DISABLE_IPV6 option 2009-06-29 18:33:44 -07:00
Tom Eastep
050375b211 Delete DISABLE_IPV6 option 2009-06-29 18:33:13 -07:00
Tom Eastep
9dbafc59d0 Fix 'findgw' 2009-06-29 08:14:53 -07:00
Tom Eastep
d32d677028 Add macro.OSPF 2009-06-28 06:18:43 -07:00
Tom Eastep
0b08186056 Fix a typo in the release notes 2009-06-27 13:46:50 -07:00
Tom Eastep
f264510729 Minor corrections to release notes 2009-06-27 10:27:30 -07:00
Tom Eastep
40bb8283d2 Verify the availability of the LOG target 2009-06-25 13:50:27 -07:00
Tom Eastep
f4338b52fe Fix 'show dynamic' 2009-06-24 15:28:43 -07:00
Tom Eastep
6eb202666c Fix for mis-configured interfaces 2009-06-24 08:58:37 -07:00
Tom Eastep
bd55a545b5 Rename lib.user to lib.private 2009-06-20 09:35:08 -07:00
Tom Eastep
f991e28308 Remove Shorewall-shell syntax from the tos manpage 2009-06-19 15:06:56 -07:00
Tom Eastep
01d046fac9 Add lib.user extension script 2009-06-19 14:39:45 -07:00
Tom Eastep
117116eb4e Add USER/GROUP column to /etc/shorewall/masq 2009-06-19 08:00:26 -07:00
Tom Eastep
dcb4ca61a5 Add iptrace/noiptrace commands 2009-06-17 12:03:05 -07:00
Tom Eastep
1e98ec52a0 Fix typo in release notes 2009-06-16 12:36:32 -07:00
Tom Eastep
6064d9e681 Document that 'continue' is no longer released 2009-06-16 09:51:32 -07:00
Tom Eastep
58b2488459 Clean up 'upnpclient' implementation 2009-06-16 09:43:22 -07:00
Tom Eastep
abe07c9fae Add 'upnpclient' interface option 2009-06-15 13:34:35 -07:00
Tom Eastep
4f675e2e18 Update release documents 2009-06-15 06:49:57 -07:00