Tom Eastep
|
7ee8e2eb03
|
Don't generate INPUT hairpin rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-14 07:17:57 -07:00 |
|
Tom Eastep
|
f04321592c
|
Document wildcard interface sfilter exemption.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-14 06:51:17 -07:00 |
|
Tom Eastep
|
4d08ad0eea
|
Exempt wildcard interfaces from sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-14 06:46:02 -07:00 |
|
Tom Eastep
|
fb8f66af61
|
Apply Tuomo's patch for the .conf manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-13 07:04:07 -07:00 |
|
Tom Eastep
|
73b9198d6d
|
Quell compiler warnings from Perl 5.14.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-13 06:39:38 -07:00 |
|
Tom Eastep
|
5d8e6ac6d3
|
Version to .3
|
2011-06-12 15:41:48 -07:00 |
|
Tom Eastep
|
9e913e77e9
|
Document dropping of deprecated options
|
2011-06-12 14:00:21 -07:00 |
|
Tom Eastep
|
fa2e2807d4
|
Delete deprecated options from the .conf files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-12 13:47:19 -07:00 |
|
Tom Eastep
|
156f1bcc7d
|
Apply Tuomo Soini's patch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-12 07:23:05 -07:00 |
|
Tom Eastep
|
a82c3f1471
|
Improvements to interfaces manpages
- Indicate when 'routefilter' cannot be used.
- Clarify use of 'sfilter'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-11 06:42:03 -07:00 |
|
Tom Eastep
|
c5aa17017d
|
Make zones with multiple interfaces complex
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-10 13:00:58 -07:00 |
|
Tom Eastep
|
051f09c35d
|
Set the interface routeback option if there are any IP host groups with 'routeback'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-10 10:29:21 -07:00 |
|
Tom Eastep
|
c633cb2743
|
Correct manpages: filter->sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-10 06:04:11 -07:00 |
|
Tom Eastep
|
60b8e92dc1
|
Don't leave unused sfilter chains in the config
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 17:09:53 -07:00 |
|
Tom Eastep
|
f5bda84e79
|
Couple of tweaks
|
2011-06-09 16:54:32 -07:00 |
|
Tom Eastep
|
76e68bd04b
|
Jump (don't go) to sfilter1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 14:15:29 -07:00 |
|
Tom Eastep
|
41a500c342
|
Update release docs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 13:59:36 -07:00 |
|
Tom Eastep
|
e76835504b
|
Don't move rules from a chain with references
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 13:35:49 -07:00 |
|
Tom Eastep
|
251da23cb5
|
Fix FORWARD with ipsec dest
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 09:57:45 -07:00 |
|
Tom Eastep
|
6a04e242ac
|
Update release docs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 07:41:02 -07:00 |
|
Tom Eastep
|
fe0bedacfc
|
Exempt ipsec from sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-09 07:40:40 -07:00 |
|
Tom Eastep
|
4ce751469b
|
Correct typo in the shorewall-providers manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-08 14:38:18 -07:00 |
|
Tom Eastep
|
94cdf24c7f
|
Improve wording in release notes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-08 11:03:47 -07:00 |
|
Tom Eastep
|
b0c47d4f47
|
Document application of sfilters to INPUT traffic.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-08 11:02:39 -07:00 |
|
Tom Eastep
|
6f3f49e45a
|
Apply sfilter to INPUT as well as FORWARD
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-08 09:41:11 -07:00 |
|
Tom Eastep
|
78004dae80
|
Update known problems and release notes
|
2011-06-07 16:58:44 -07:00 |
|
Tom Eastep
|
57398c683a
|
Initiate 4.4.20.2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 13:23:27 -07:00 |
|
Tom Eastep
|
deb7d92ded
|
Correct sfq handle assignment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 13:23:12 -07:00 |
|
Tom Eastep
|
e69f22725f
|
Add fix inadvertently dropped from 4.4.19.4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 12:50:24 -07:00 |
|
Tom Eastep
|
9c2c562bf5
|
Correct autorepeat wart
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 06:45:50 -07:00 |
|
Tom Eastep
|
cf0275a049
|
Make FAKE_AUDIT work again
|
2011-06-06 16:08:29 -07:00 |
|
Tom Eastep
|
59c11e205b
|
Update release notes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 15:48:26 -07:00 |
|
Tom Eastep
|
642319d706
|
Change annotated documentation default
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 15:40:21 -07:00 |
|
Tom Eastep
|
cfb3d6a801
|
Merge branch '4.4.20'
|
2011-06-06 14:09:26 -07:00 |
|
Tom Eastep
|
6136e986cf
|
Update version to 4.4.20.1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 14:08:25 -07:00 |
|
Tom Eastep
|
186f89f387
|
Merge branch '4.4.20'
|
2011-06-06 13:23:47 -07:00 |
|
Tom Eastep
|
e8f61e2109
|
Restate vulnerability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 13:19:40 -07:00 |
|
Tom Eastep
|
447d0f0b2d
|
Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 09:46:52 -07:00 |
|
Tom Eastep
|
c42c6864b4
|
Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 09:46:22 -07:00 |
|
Tom Eastep
|
2803d3ee0b
|
Merge branch '4.4.20'
|
2011-06-06 07:02:57 -07:00 |
|
Tom Eastep
|
c2e78bfaf8
|
Correct address of the FSF
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 06:55:40 -07:00 |
|
Tom Eastep
|
f04a541195
|
Merge branch '4.4.20'
|
2011-06-05 18:02:03 -07:00 |
|
Tom Eastep
|
037a9374df
|
Merge branch '4.4.20'
|
2011-06-05 17:59:19 -07:00 |
|
Tom Eastep
|
4436d479b4
|
Extend FAQ 4
|
2011-06-05 17:58:20 -07:00 |
|
Tom Eastep
|
b20156de9e
|
Add note about 'burst' to the complex TC doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-05 06:33:33 -07:00 |
|
Tom Eastep
|
e264e42d81
|
Add note about 'burst' to the complex TC doc
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-05 06:33:01 -07:00 |
|
Tom Eastep
|
aabefe91f1
|
Merge branch '4.4.20'
|
2011-06-04 08:46:40 -07:00 |
|
Tom Eastep
|
f1cbfab7ac
|
More blacklist/audit fixes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-04 08:45:23 -07:00 |
|
Tom Eastep
|
653a61a04a
|
Merge branch '4.4.20'
|
2011-06-04 07:44:24 -07:00 |
|
Tom Eastep
|
a9c0824a30
|
Correct BLACKLIST_DISPOSITION=A_xxx with BLACKLIST_LOG_LEVEL
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-04 07:44:07 -07:00 |
|