Commit Graph

510 Commits

Author SHA1 Message Date
teastep
a9909fd369 A couple of tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6420 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-20 15:14:40 +00:00
teastep
65b270e5b6 Make a piece of code more compact
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6418 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-20 13:49:50 +00:00
teastep
3007800fbe Correct rejNotSyn
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6405 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-19 13:49:56 +00:00
teastep
9820f84ca2 Update home page with down server info
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-18 18:13:46 +00:00
teastep
2c6571789c Add version file to Shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6396 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-17 22:24:01 +00:00
teastep
afd462c6b2 Tighten up editing -- some more
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6384 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-17 14:17:29 +00:00
teastep
7346304b57 Tighten up editing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6383 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-17 14:10:46 +00:00
teastep
f154a69dfe Generate the 'clear' exit
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6373 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-16 15:12:31 +00:00
teastep
fc192962c4 Straighten out -e and appropriate priv -- take 4
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6371 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-16 04:01:08 +00:00
teastep
d934b9e654 Straighten out -e and appropriate priv
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6368 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-16 03:37:37 +00:00
teastep
1f1bd792e1 Update version for build testing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6366 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 22:42:00 +00:00
teastep
8cbf608215 Replace addrtype MULTICAST with address match
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6364 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 20:40:15 +00:00
teastep
c05903e2e2 Remove some optimizations that break without the KLUDGEFREE capability; remove an image of the config file entry from some error messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6363 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 20:04:34 +00:00
teastep
736c41a507 Some cosmetic changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6362 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 20:03:18 +00:00
teastep
b0122f9696 Make validate_address() easier to read
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6361 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 20:02:42 +00:00
teastep
668f13693b Make lookups of host names more efficient
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6357 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-15 17:19:07 +00:00
teastep
89d8afe45c Fix dynamic zone fiasco
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6352 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-14 23:14:30 +00:00
teastep
61f661e79e Fix 'add' into empty ipsec zone
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6347 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-14 21:30:04 +00:00
teastep
0812b938ff Fix OUTPUT DNAT rule generated by nat entry
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6346 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-14 19:11:26 +00:00
teastep
3aec0bd800 Fix overoptimization of port list handling; prevent run-time error with bcast address in providers file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6343 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-14 14:14:38 +00:00
teastep
67ba788889 Validate macro params in action files; don't complain about RSH_/RCP_COMMAND in shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6338 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-13 17:00:19 +00:00
teastep
3a5b81082b Reorganize process_action3 for possible nested macro implementation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6337 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-13 16:30:19 +00:00
teastep
f6ae8ff0f4 Reorganize process_action1 for possible nested macro implementation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6336 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-13 15:49:43 +00:00
teastep
e79944b2c6 Name macro file in 'End Macro' progress message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6335 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-13 15:39:20 +00:00
teastep
95f4d6a006 Be sure that find_macro() returns a defined value
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6333 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-12 19:30:52 +00:00
teastep
13402f4da4 Recursive Macros -- Phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6332 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-12 18:13:11 +00:00
teastep
c8fa0fcde3 Fix 'logreject' target -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6330 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-12 00:33:48 +00:00
teastep
201dd3078e Fix 'logreject' target
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6329 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-12 00:28:14 +00:00
teastep
9f25e2c614 Update version to 3.9.7
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6328 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-11 20:09:48 +00:00
teastep
c34422e9c8 Move IPv4 definitions to IPAddrs.pm
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6327 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-11 15:39:11 +00:00
teastep
f442e82886 Correct definition of RFC1918 networks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6326 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-11 15:31:23 +00:00
teastep
ef836d7096 Remove redundant tests in proto/port handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6325 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 22:28:03 +00:00
teastep
d1a4442c76 Fix DHCP rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6322 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 18:31:24 +00:00
teastep
613df34c38 Fix typo in shorewall.conf manpage
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6320 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 17:07:46 +00:00
teastep
730077c2fc A more compact version of 6318
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6319 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 16:25:20 +00:00
teastep
28b807a03c Fix another SECTION bug; edit max connections and interval passed to Limit rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6318 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 16:13:16 +00:00
teastep
bbcd693cec Fix bugs in SECTION and COMMENT handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6317 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-10 15:29:41 +00:00
teastep
f91bf1eb0c Fix mess-up in last version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6314 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 23:54:47 +00:00
teastep
0a4d40bd84 Add single back quote to the verboten characters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6313 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 23:20:31 +00:00
teastep
5a52ee2f90 Outlaw backslash characters in config files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6312 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 21:17:37 +00:00
teastep
79972e028d Forbid both single and double quotes in config file entries (single quotes ok in comments)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6311 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 20:55:54 +00:00
teastep
8d3bd6e70a Don't allow comments ending in '\'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6308 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 19:40:35 +00:00
teastep
1397af57fb Issue 'Processing...' message before first call to 'split_line()'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6307 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 19:05:27 +00:00
teastep
cba2f947e9 Issue 'Processing...' message before first call to 'split_line()'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 19:03:09 +00:00
teastep
ba6a5eeb39 Disallow double quotes in COMMENT lines
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6305 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 18:22:40 +00:00
teastep
9fe1d8e260 Fix COMMENT rule generation -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6304 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 17:30:28 +00:00
teastep
c83727b516 Fix COMMENT rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6303 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 16:04:15 +00:00
teastep
732ea6950e Fix COMMENT handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6302 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 15:59:57 +00:00
teastep
590a096894 Avoid some wasted motion in COMMENT handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6301 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 15:41:45 +00:00
teastep
3c4a854366 Fix "!" optimization bypass
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6300 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 15:24:09 +00:00
teastep
6f15caa222 Fix 'DEST = all'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6299 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 15:08:39 +00:00
teastep
d00d83da9b Clean up handling of server port in rules processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6298 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-09 14:48:18 +00:00
teastep
442874f723 Correct error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6294 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 22:42:35 +00:00
teastep
6d20c6672d Cleanup in process_rule1(); cosmetic changes to global variable generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6293 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 22:28:48 +00:00
teastep
e131aef733 reorganize run-time globals management
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6292 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 21:23:18 +00:00
teastep
95c4bec713 Use global variables in provider setup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6291 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 20:36:57 +00:00
teastep
f4df6dce05 Back out previous change to providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6290 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 20:03:19 +00:00
teastep
0d00d30d94 More address validate changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6289 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 19:05:25 +00:00
teastep
b557ba02c8 Fix qualified action in Macro
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6288 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 18:36:31 +00:00
teastep
77ce1b5a43 Add edits for IP addresses and ranges
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6287 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 18:25:16 +00:00
teastep
f35199fc6a Tighen up editing of 'balance=nnn'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6285 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 17:04:06 +00:00
teastep
eda48ec9cf Fix test for duplicate provider mark (again)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6284 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 15:40:27 +00:00
teastep
18a7ce4f1d Fix duplicate log rate and add tests for illegal ESTABLISHED,RELATED rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6283 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 14:16:20 +00:00
teastep
6d6edff079 Add firewall zone to mss loops
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6282 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 03:44:18 +00:00
teastep
7d3e81a3da Add some comments
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6281 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 03:38:18 +00:00
teastep
08e578c1ac Undo prior idiocy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6280 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:59:02 +00:00
teastep
a941d4d105 More changes in log generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6279 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:44:25 +00:00
teastep
a96f86c36c More fixes for logging rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6278 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:34:58 +00:00
teastep
18fd54baf7 Fix log rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6277 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:19:16 +00:00
teastep
8406623bcf Handle mss in zones file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:08:44 +00:00
teastep
8385ebaa31 Try to fix section bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6275 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 00:48:05 +00:00
teastep
cf3650bbe3 rename ipseczones() to haveipseczones()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6274 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 22:20:00 +00:00
teastep
ab7c4200b1 Improve handling of ipsec zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6273 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 22:12:42 +00:00
teastep
fac8d4cd25 Correct fix for duplicate chain jumps
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6272 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:51:19 +00:00
teastep
d2c3b034b6 Always supply options hash in a host entry
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6271 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:44:55 +00:00
teastep
80d2f1dde8 Fix for double-up on jumps to special chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6270 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:34:19 +00:00
teastep
4ec96b6619 Tweak to host list processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6267 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 17:36:21 +00:00
teastep
55e8ff29c7 Mini-optimization in Providers handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6266 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 14:48:36 +00:00
teastep
b9fcda9812 Fix 'detect' in GATEWAY column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6265 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 14:28:23 +00:00
teastep
366e9a369a Remove some whitespace added in previous patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6262 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:57:47 +00:00
teastep
ca5253a13e Fix missing white space
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:43:21 +00:00
teastep
dfed6bd16d Fix typo in generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6260 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:32:02 +00:00
teastep
bc40507b80 Fix some more bugs with hosts file handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6259 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 22:26:50 +00:00
teastep
f5d9097817 Fix find_hosts_by_option() -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6258 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 18:27:41 +00:00
teastep
72544d54f0 Fix find_hosts_by_option()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6257 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 18:06:41 +00:00
teastep
59ca220c0b Use '-m addrtype' in 'detectnets' output rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6256 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 16:10:00 +00:00
teastep
ef44b4741a Fix more exclusion problems in hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6255 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 15:43:30 +00:00
teastep
666ecf49b6 Fix "!" in hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6254 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 01:17:58 +00:00
teastep
d826944666 Update version to 3.9.6
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6251 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 19:32:22 +00:00
teastep
94086440b8 Suppress creation of jumps to unused TOS chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6249 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 14:42:30 +00:00
teastep
0980d11157 Fix TOS handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6248 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 14:39:41 +00:00
teastep
b68e830852 Fix accounting problem with jumping to otherwise unreferenced chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6247 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 13:41:36 +00:00
teastep
7a7488e3e0 Fix unknown zone handling in Tunnels file -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6246 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 04:35:55 +00:00
teastep
6bd88d06c6 Fix unknown zone handling in Tunnels file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6245 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:47:15 +00:00
teastep
bd9e9345ab Fix non-bug in openvpn handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6244 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:18:45 +00:00
teastep
2da69bd0b7 More openvpn changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6243 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:02:21 +00:00
teastep
cad5d896d3 Fix openvpnserver handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6242 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 23:03:41 +00:00
teastep
21a71d7b64 Fix 'other' tunnel types
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6241 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 22:31:48 +00:00
teastep
036d54a269 Fix another silly typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6240 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 20:18:31 +00:00
teastep
1d0abb274d Fix silly typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6239 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 19:57:01 +00:00
teastep
0360d0aea0 Fix ipsec tunnels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6238 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 18:55:57 +00:00
teastep
caf7d528be Fix REDIRECT all
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6237 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 16:49:56 +00:00
teastep
55f48d634c Fix CONFDIR handling -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6233 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:41:27 +00:00
teastep
1b2428768e Fix CONFDIR handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6232 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:38:32 +00:00
teastep
e7b4985784 Correct grammar in messages produced by 'require_capability'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:12:29 +00:00
teastep
14a66a102e Require server with DNAT -- tweak
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6230 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 14:55:02 +00:00
teastep
3f2b8cda25 Require server with DNAT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6229 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 14:16:18 +00:00
teastep
c7bc204ba0 Allow action-only rules -- improve error messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6228 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 01:28:37 +00:00
teastep
aeb3460d2b Allow action-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6227 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 01:05:47 +00:00
teastep
81cf114080 Tweak fix for NAT rules in macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6222 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 18:59:51 +00:00
teastep
3474415660 Add more progress messages; fix NAT rules in macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6221 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 18:56:56 +00:00
teastep
c28cb4aad0 Improve editing of TOS values -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6220 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:30:30 +00:00
teastep
99d89a378a Improve editing of TOS values
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6219 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:28:03 +00:00
teastep
45c8d39a1b Improve editing of TEST column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6218 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:10:07 +00:00
teastep
29ff6888fe Improve editing of LIMIT/BURST -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6217 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:01:36 +00:00
teastep
83d7df107d Improve editing of LIMIT/BURST
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6216 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:56:05 +00:00
teastep
04064d01e6 Disallow rate limiting with DROP/REJECT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:33:49 +00:00
teastep
b98c2dc661 Disallow DROP with ratelimiting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6214 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:30:59 +00:00
teastep
d1b9a71a3b Ensure that action extension scripts are always processed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6213 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:02:24 +00:00
teastep
92823f08f3 Catch invalid use of COMMENT in action body
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6209 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 15:13:51 +00:00
teastep
61fb84d23b Fix COMMENT in action files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6208 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 14:24:56 +00:00
teastep
14a243fa20 Fix bad ruleset caused by empty action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6207 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 14:00:08 +00:00
teastep
94d324d01d Fix LOG rule with level in an action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6206 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 02:07:04 +00:00
teastep
9f8aebe33d Fix LOG rules in action files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6205 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 00:56:36 +00:00
teastep
7af29213b8 Revert change 6200
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6201 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:59:11 +00:00
teastep
72f278b704 Restructure process_actions1 to be like the Shell version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6200 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:43:04 +00:00
teastep
7aec5dc398 Catch self-invocation of an action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6199 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:20:01 +00:00
teastep
fd7d07cd75 Make SOURCE and DEST reserved names
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6197 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 18:49:56 +00:00
teastep
79d57a7751 Fix handling of Action extension scripts
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6195 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 16:43:58 +00:00
teastep
16d22e9c27 Simplify 'isolate_basic_target'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6194 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 16:22:08 +00:00
teastep
47b309f221 Remove redundant space from log rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6192 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:49:41 +00:00
teastep
3d4900ef9e Fix tag handling with macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6191 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:39:36 +00:00
teastep
2243553b28 Use --or-mark like shorewall-shell
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6190 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:03:44 +00:00
teastep
6accb50ca7 Fix mask used in connmark manipulation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6189 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 14:24:19 +00:00
teastep
e9b6bdc9a6 Fix OWNER handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6188 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 00:33:30 +00:00
teastep
bf81862741 Adjust macro merging -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6187 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:40:37 +00:00
teastep
5f1f0b9ace Adjust macro merging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:39:38 +00:00
teastep
fcbe8768c3 Another round of Macro fiddling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6185 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:04:30 +00:00
teastep
e2e316c6c7 Fix port 0 in macro invocation -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6184 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 21:24:40 +00:00
teastep
4aec31b1ac Fix port 0 in macro invocation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6183 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 21:23:21 +00:00
teastep
a2453451db Add MARK handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6179 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 18:30:10 +00:00
teastep
15c8f371b1 Fix for macro handling of rate and user
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6178 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 17:50:50 +00:00
teastep
6852e09ba3 More multiport improvements
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6176 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 17:24:44 +00:00
teastep
d5b278a969 Fix ipset match generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6174 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:39:41 +00:00
teastep
c984c0bbe3 Try to handle multiport sport/dport correctly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6173 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:20:49 +00:00
teastep
d1d8a11858 Try to handle multiport sport/dport correctly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:18:45 +00:00
teastep
278ab3bc8d Fix mark testing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 15:55:41 +00:00
teastep
ecc6c0bb5d Small optimization of provider handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6170 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 14:53:57 +00:00
teastep
bb157c5864 Fix silly providers bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6169 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 14:29:34 +00:00
teastep
f64e8128ed Fix IPP2P matching
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 01:02:55 +00:00
teastep
3c15fdabdd Fix "!" following log level
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6167 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 00:01:24 +00:00
teastep
3156e2f3d2 Correct error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6166 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 22:25:34 +00:00
teastep
0d01ff7d84 Update version to 3.9.5
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 22:00:07 +00:00
teastep
f95a9e4db3 Fix remaining problems reported by Andras Sarkozy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6157 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 17:55:43 +00:00
teastep
0b996cb556 Remove ACCEPT- silliness; fix IPSET capability detection
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6156 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 16:29:19 +00:00
teastep
e596c92d74 Fix some rule problems -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6155 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 15:25:07 +00:00
teastep
c1d6faf509 Fix some rule problems
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6154 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 15:07:51 +00:00
teastep
a6358bf7e4 Fix some 'policy' file bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6151 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 22:29:10 +00:00
teastep
bc7b6354df Validate netmap interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6150 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 18:33:30 +00:00
teastep
ecbd719bef Fix RETAIN_ALIASES=Yes behavior; only 'detect' first address for SNAT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6149 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 14:28:11 +00:00
teastep
8c497548ca Fix deletion of aliases (some more)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6148 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 04:23:10 +00:00
teastep
fbec94e465 Fix ADDRESSES = 'detect' on optional interface -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6147 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 15:08:17 +00:00
teastep
f22fc6575e Fix ADDRESSES = 'detect' on optional interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6146 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 15:07:08 +00:00
teastep
e8a4bb4469 Fix exclusion in masq SOURCE column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6145 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 14:59:18 +00:00
teastep
849615da17 Add additional command/rule controls
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6144 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 13:48:28 +00:00
teastep
da503e4b07 Create 'add_commands'; revise handling of 'detect' in the masq ADDRESSES column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6135 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 16:18:42 +00:00
teastep
69be038583 Fix setting of ORIGINAL_POLICY_MATCH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:15:13 +00:00
teastep
213eca848a Fix another masq ipsec option handling bug -- take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6133 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:06:17 +00:00
teastep
710354caee Fix another masq ipsec option handling bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:04:10 +00:00
teastep
269dacda14 Fix 'nodst' rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6131 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 14:42:39 +00:00
teastep
2434c4f1ea Another masq ipsec fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6130 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 00:49:14 +00:00
teastep
f5c3c7c753 Fix policy and masq
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6129 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 00:17:27 +00:00
teastep
8721d87fe3 Fix SAME:
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6127 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-26 22:16:40 +00:00
teastep
01af0eb020 Fix another iprange bug in generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-26 16:56:04 +00:00
teastep
e3f35a632a Fix an iprange problem with the hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6120 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 21:03:40 +00:00
teastep
41b02f5029 Fix another exclusion bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6119 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 18:44:46 +00:00
teastep
b27cc81582 More cleanup of hosts file exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:45:46 +00:00
teastep
e8934d79c9 Fix host list exclusion -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:27:48 +00:00
teastep
86690a049e Fix host list exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:26:16 +00:00
teastep
7db77a4b22 Fix ADDRESSES=detect with ADD_SNAT_ALIASES=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6115 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:00:15 +00:00
teastep
c32ee9a18c Fix incorrect precedence
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 15:33:15 +00:00
teastep
140dd95130 More log level changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6113 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 00:19:55 +00:00
teastep
3a67b4f76c Fix more log level bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6112 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 00:11:02 +00:00
teastep
58f179e6c8 Fixes for log levels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6111 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 23:15:27 +00:00
teastep
7a166b7ba7 Fix for RFC1918_STRICT=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:36:10 +00:00
teastep
558343be7d Fix BLACKLIST_LOGLEVEL
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6108 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:27:40 +00:00
teastep
bb6476ba07 A little more maclist optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:05:26 +00:00
teastep
a19ed69ef5 A little optimization of maclist code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6106 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 20:53:07 +00:00
teastep
ef12a3c681 Don't generate bogus logging rule if no MACLIST_LOG_LEVEL
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6105 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 20:32:52 +00:00
teastep
7fe76f778c Fix MACLIST bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6104 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 19:53:13 +00:00
teastep
30c5dbf2f7 Fix syntax error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6102 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 15:38:37 +00:00
teastep
40471c1c1b Validate log levels and translate them to numeric values where appropriate
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6101 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 14:53:45 +00:00
teastep
246dcc716f Fix LOGALLNEW
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6097 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 00:16:53 +00:00
teastep
29f51b52b4 Fix dynamic zone problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6095 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 23:17:30 +00:00
teastep
92a4483f88 Make missing capabilties file error messages friendlier
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 20:44:24 +00:00
teastep
593828a24a Fix missing PATH in shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6090 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 20:24:28 +00:00
teastep
e722b6f581 Allow entries in shorewall.conf to be optional
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6089 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 19:49:02 +00:00
teastep
465570a673 Fix formatting oddity
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6087 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:28:07 +00:00
teastep
1fa2cb7904 Remove redundant test
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6086 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:26:20 +00:00
teastep
716d370e9b Fix syntax error in generated script; more maclist streamlining
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6085 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:20:54 +00:00
teastep
2b397ffc5d Streamline maclist broadcast handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6084 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:04:59 +00:00
teastep
37214c1d7d Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6081 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 17:26:17 +00:00
teastep
8476592a4f Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6080 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 17:19:12 +00:00
teastep
fd7301cc6c Add MAC verification run-time progress message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6078 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 14:33:37 +00:00
teastep
3a50a8a1be Allow 'optional' to work with 'maclist'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 14:14:46 +00:00
teastep
9b0b9a9ec5 Fix typo in maclist
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 23:21:34 +00:00
teastep
a116eb5235 Fix explicit intrazone policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6072 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 22:33:37 +00:00
teastep
c46b1a50d5 Remove release notes from shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6069 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 21:46:48 +00:00
teastep
680af9ed60 Make BLACKLISTNEWONLY=No and FASTACCEPT=Yes mutually exclusive
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6068 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 21:42:35 +00:00
teastep
c0e5fcf6c6 Fold IP_FORWARDING into the trivalue mechanism
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6067 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 19:45:27 +00:00
teastep
52f201b6b8 Allow default value for trivalued options
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6066 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 19:30:42 +00:00
teastep
d3556e4d40 Final fix for detectnets
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6064 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 18:24:09 +00:00
teastep
0a0a379bf5 Fix 'detectnets' one more time
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6063 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 15:43:03 +00:00
teastep
ffe223fdc6 Disallow ipsec options on non-ipsec zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6062 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 15:41:08 +00:00
teastep
897a7b55b6 Another fix for 'detectnets'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 15:26:47 +00:00
teastep
27433b33e5 Fix 'routeback' on multi-zone interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6060 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 14:50:19 +00:00
teastep
ea0a8d09d1 Improve interface BROADCAST handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6059 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 14:42:07 +00:00
teastep
abe8ce238d Fix missing ipsec option value handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6058 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 14:29:30 +00:00
teastep
ab17a8ba51 Fix multi-zone interface handling broken by 'detectnets' work
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6057 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 14:21:48 +00:00
teastep
592e4861ad Tweaks to 'detectnets'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6055 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 00:40:20 +00:00
teastep
e4c8d85fb9 Finish 'detectnets'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6054 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 23:57:30 +00:00
teastep
82eaf6fe1a Fix arp_ignore (again); more ROUTE_FILTER and LOG_MARTIANS changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6053 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 22:41:47 +00:00
teastep
9c9546c55a Make ROUTE_FILTER and LOG_MARTIANS tri-valued
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6052 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 21:24:38 +00:00
teastep
145d33c044 More /proc fixes -- cosmetic
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6051 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 16:32:23 +00:00
teastep
3470b8976d More /proc fixes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6050 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 16:28:11 +00:00
teastep
ae70b89fc5 A fix for LOG_MARTIANS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6049 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 15:59:17 +00:00
teastep
4929296163 A fix for LOG_MARTIANS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6046 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 15:52:06 +00:00
teastep
776c9a811a Fix log_martians bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6042 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 14:49:48 +00:00
teastep
a5549a06bf Fix port 0 problem (again :-()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6040 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-21 14:07:37 +00:00
teastep
2ebfa7c88f Fix several problems with 'all' processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 16:47:04 +00:00
teastep
5fe9aa1c94 Check for the existance of the firewall zone
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6036 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 14:58:11 +00:00
teastep
8f406123b5 Check for reserved zone names
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6035 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 14:13:57 +00:00
teastep
5c241dbc65 Little tweak to 'all'-NONE policy fix -- take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6034 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 04:59:38 +00:00
teastep
e99a37f98d Little tweak to 'all'-NONE policy fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6033 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 04:52:42 +00:00
teastep
e2e9cb78e6 Handling of NONE policy with SOURCE=all
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6030 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-20 00:02:41 +00:00
teastep
f65a020329 Fix 'none' handling in rules file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6025 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-19 21:24:25 +00:00
teastep
c3d35b6ed6 Fix a couple of more bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6024 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-19 21:14:18 +00:00
teastep
5c438ffdf5 Fix NONAT rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6023 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-19 16:23:40 +00:00
teastep
d3e78eddad Fix and extend last change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6015 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-19 01:01:03 +00:00
teastep
c7cae95aaa Check for invalid exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6014 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-19 00:49:38 +00:00
teastep
ecaa0cec33 Add some more comments in the Module headers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6013 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 23:59:03 +00:00
teastep
83d4e36214 More module comments
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6012 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 23:55:25 +00:00
teastep
a72ca2d1a2 Add some comments in the Module headers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6011 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 23:43:54 +00:00
teastep
a2528abe82 Fix Perl run-time error in MAC handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6010 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 22:28:01 +00:00
teastep
f85f952a77 remove newbi accent from 'new_chain'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6009 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 21:07:32 +00:00
teastep
e1088b92bf Replace leading spaces with tabs -- round 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6008 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 20:56:41 +00:00
teastep
ca7e844869 Replace leading spaces with tabs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6007 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 20:53:25 +00:00
teastep
798c44d2c2 Fix dropInvalid
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6005 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 20:36:19 +00:00
teastep
e581c5573c Update version to 3.9.3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6004 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 20:03:59 +00:00
teastep
05360661ea Don't clear arp_filter and arp_ignore
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6002 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-18 19:32:30 +00:00