Commit Graph

744 Commits

Author SHA1 Message Date
Tom Eastep
9d5dd2ad3a Implement an '-l' option to the 'show' command 2009-11-16 15:14:24 -08:00
Tom Eastep
2a910ebddf Suppress redundant tests for provider availability in route rules processing 2009-11-16 12:43:44 -08:00
Tom Eastep
31f01fe765 Document fixing route rule addition code 2009-11-16 11:20:02 -08:00
Tom Eastep
f5a019becc Implement 'show policies' command 2009-11-15 09:24:56 -08:00
Tom Eastep
893a847c87 Suppress extra COMMENT warnings 2009-11-10 17:17:55 -08:00
Tom Eastep
bf8c38e054 Add ZONE2ZONE option to shorewall.conf 2009-11-10 14:12:55 -08:00
Tom Eastep
89bdcf9a3d Implement 'physical' option 2009-11-06 07:27:44 -08:00
Tom Eastep
28b660c853 Avoid reporting bogus duplicate interface with two bridges and wildcard ports 2009-11-05 11:04:14 -08:00
Tom Eastep
4548db58da Relax port list limitation in /etc/shorewall/routestopped 2009-11-03 11:36:32 -08:00
Tom Eastep
4f5c602d5f Fix .spec error and document logrotate files 2009-11-03 10:12:38 -08:00
Tom Eastep
11ddfa92e9 Eliminate Perl run-time errors out of move_rules() 2009-11-01 17:14:42 -08:00
Tom Eastep
23d0806da2 Change Shorewall6 default STARTUP_LOG and LOG_VERBOSITY 2009-11-01 11:09:17 -08:00
Tom Eastep
f0b4b1f42e Add limit option to tcclasses 2009-10-26 12:23:32 -07:00
Tom Eastep
b3571261dd Fix optional providers 2009-10-24 12:05:44 -07:00
Tom Eastep
3e2cf982a3 Correct messages issued when a provider is not added 2009-10-24 08:50:15 -07:00
Tom Eastep
86df82a29a Fix IPv6 address validation error 2009-10-23 13:41:51 -07:00
Tom Eastep
d0cda6b6ea Add TRACK_PROVIDERS option 2009-10-20 13:24:17 -07:00
Tom Eastep
49f361124e Make 'track' the default 2009-10-20 12:24:28 -07:00
Tom Eastep
abc9ab061a Remove superfluous variables from generated script 2009-10-19 07:25:03 -07:00
Tom Eastep
f3043f1453 Document nested zone fix 2009-10-17 11:06:36 -07:00
Tom Eastep
b38841798e Fix initialization 2009-10-15 13:43:46 -07:00
Tom Eastep
990a9f0fdc Fix RETAIN_ALIASES 2009-10-13 14:36:47 -07:00
Tom Eastep
83a9d8dd1b Rename 'object' to 'script' 2009-10-05 15:43:29 -07:00
Tom Eastep
ab4e7cffcf Document fix to routestopped 2009-10-03 10:53:53 -07:00
Tom Eastep
beac09e45f STARTUP_LOG changes 2009-10-02 16:10:14 -07:00
Tom Eastep
964cba79a9 Initialize 4.4.3 2009-10-02 11:31:08 -07:00
Tom Eastep
393673a884 Allow MARK in action body -- take 2 2009-09-25 16:15:56 -04:00
Tom Eastep
428c3d1e4e Hack to make new LIMIT stuff work on ancient iptables releases 2009-09-20 09:12:35 -04:00
Tom Eastep
120aade417 Allow Extension Scripts for Accounting Chains 2009-09-15 12:22:51 -07:00
Tom Eastep
a5f3a05341 Fix typo in the Introduction 2009-09-14 13:43:32 -07:00
Tom Eastep
8fdebf0c38 Add new columns to macros 2009-09-13 08:09:40 -07:00
Tom Eastep
07d8872823 Indicate that Squeeze 'will' include 4.4 2009-09-12 09:20:38 -07:00
Tom Eastep
9b0a9e8ecd Add -<family> to 'ip route del default' command 2009-09-12 08:48:52 -07:00
Tom Eastep
8c2a228a7d Apply Jesse Shrieve's SNAT patch 2009-09-11 07:47:31 -07:00
Tom Eastep
7c1dd35a00 Update release documents 2009-09-09 12:18:31 -07:00
Tom Eastep
bb83db3eb9 Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - change log 2009-09-08 12:55:14 -07:00
Tom Eastep
b03d502bbb Allow comments on continued lines 2009-09-06 16:17:22 -07:00
Tom Eastep
70ebe17cb3 Reimplement MAPOLDACTIONS=Yes 2009-09-06 13:37:24 -07:00
Tom Eastep
ec94ed638e Better modularization of Chains and Actions 2009-09-05 08:43:14 -07:00
Tom Eastep
03821dc22c Process routestopped file during 'check' 2009-09-03 19:27:25 -07:00
Tom Eastep
f3455b107d 4.4.2 release doc initialization and update 2009-09-03 14:58:46 -07:00
Tom Eastep
62b1dbcd7f Document portlist-splitting change 2009-09-02 15:30:26 -07:00
Tom Eastep
fbfa4b4e49 Update release documents and make minor change to faq 2009-08-31 14:19:15 -07:00
Tom Eastep
2bb92a79f3 Fix silly hole in zones file parsing 2009-08-30 08:05:10 -07:00
Tom Eastep
d31721a066 Fix rule generated by MULTICAST=Yes -- release documents 2009-08-29 09:34:16 -07:00
Tom Eastep
1ef00c547b Disallow 'nets=' in a multi-zone interface definition 2009-08-29 07:41:27 -07:00
Tom Eastep
4809314fc1 Allow extending a zone defined with nets= 2009-08-29 07:20:16 -07:00
Tom Eastep
acfdc7e481 nets= allows multicast 2009-08-28 15:17:10 -07:00
Tom Eastep
5db7e77462 Turn off IP forwarding in the standalone example -- update release docs 2009-08-28 08:31:48 -07:00
Tom Eastep
383f3e8bcf Fix nested IPSEC zones 2009-08-26 12:44:10 -07:00
Tom Eastep
1b26c65cbc Fix logging in rules at the end of INPUT and OUTPUT 2009-08-25 09:22:26 -07:00
Tom Eastep
088e164f18 Redefine 'full' when used in a sub-class definition 2009-08-24 11:56:16 -07:00
Tom Eastep
e24dbb9aea Add 'clean' target to Makefiles 2009-08-23 10:43:01 -07:00
Tom Eastep
622db3655f More updates/corrections to change notes 2009-08-18 08:50:50 -07:00
Tom Eastep
4bc1fb145a Update change notes 2009-08-18 08:44:55 -07:00
Tom Eastep
0557148bec Avoid double globals initialization for IPv6 2009-08-16 09:24:51 -07:00
Tom Eastep
55f75604b3 Add support for 'persistent' 2009-08-15 08:15:38 -07:00
Tom Eastep
883f415e53 Start 4.4.1 2009-08-14 14:46:31 -07:00
Tom Eastep
2bac824207 Fix provider number in masq entry 2009-08-12 13:52:56 -07:00
Tom Eastep
55c879e4e6 Fix log record displays 2009-08-07 13:33:07 -07:00
Tom Eastep
70f46c02cc Fix logging NAT rules 2009-08-05 12:48:14 -07:00
Tom Eastep
999a00dc77 Remove need for '-v-1' when compiling to stdout 2009-08-03 11:20:34 -07:00
Tom Eastep
4af6c7650e Correct handling of nested IPSEC zone 2009-07-29 14:35:27 -07:00
Tom Eastep
8d8920e7ad Disallow ipsec zones nested within an ip zone 2009-07-29 07:49:06 -07:00
Tom Eastep
f2f8cab962 Make 'any' a reserved zone name 2009-07-26 12:29:37 -07:00
Tom Eastep
26cb2b1eeb Allow Shorewall6 to recognize TC, IP and IPSET 2009-07-26 12:26:49 -07:00
Tom Eastep
c77f462d2d Delete prog.functions and prog.functions6 2009-07-24 14:51:24 -07:00
Tom Eastep
4fd338f3ca Fix 'rpm -U' from earlier versions 2009-07-21 12:32:25 -07:00
Tom Eastep
f16b2300b6 Remove references to Shorewall-shell, Shorewall-perl and prior Shorewall versions from the manpages 2009-07-15 17:50:55 -07:00
Tom Eastep
8e9bef0a61 Fix routing with no providers 2009-07-15 13:03:49 -07:00
Tom Eastep
887a643f9e Initiate RC1 2009-07-12 10:06:57 -07:00
Tom Eastep
f88048ebe4 More revert conflicts 2009-07-06 18:23:23 -07:00
Tom Eastep
bc85b615ba More new macros 2009-06-29 21:05:23 -07:00
Tom Eastep
050375b211 Delete DISABLE_IPV6 option 2009-06-29 18:33:13 -07:00
Tom Eastep
9dbafc59d0 Fix 'findgw' 2009-06-29 08:14:53 -07:00
Tom Eastep
40bb8283d2 Verify the availability of the LOG target 2009-06-25 13:50:27 -07:00
Tom Eastep
f4338b52fe Fix 'show dynamic' 2009-06-24 15:28:43 -07:00
Tom Eastep
6eb202666c Fix for mis-configured interfaces 2009-06-24 08:58:37 -07:00
Tom Eastep
bd55a545b5 Rename lib.user to lib.private 2009-06-20 09:35:08 -07:00
Tom Eastep
01d046fac9 Add lib.user extension script 2009-06-19 14:39:45 -07:00
Tom Eastep
117116eb4e Add USER/GROUP column to /etc/shorewall/masq 2009-06-19 08:00:26 -07:00
Tom Eastep
dcb4ca61a5 Add iptrace/noiptrace commands 2009-06-17 12:03:05 -07:00
Tom Eastep
abe07c9fae Add 'upnpclient' interface option 2009-06-15 13:34:35 -07:00
Tom Eastep
4f675e2e18 Update release documents 2009-06-15 06:49:57 -07:00
Tom Eastep
a6d2497653 Integerize r2q before using it in a 'qdisc add' command 2009-06-14 14:29:12 -07:00
Tom Eastep
265e4fa546 First cut at 4.4 2009-06-12 15:51:43 -07:00
Tom Eastep
ee0667c9da Fix mnemonic handling in tcfilters 2009-06-12 07:27:08 -07:00
Tom Eastep
d079e69a1b Correct Typo in 2-interface IPv6 Sample shorewall6.conf 2009-06-09 07:59:23 -07:00
Tom Eastep
91b0e5aaa1 Update version and release docs to start work on 4.3.13 2009-06-07 10:52:53 -07:00
Tom Eastep
c370dc650c Remove support for 'norfc1918' and it's associated settings in shorewall.conf 2009-06-05 10:51:30 -07:00
Tom Eastep
7621859e0f Fix 'findgw' 2009-06-04 13:03:56 -07:00
Tom Eastep
7b20cf2af9 Fix 'shorewall reset' 2009-05-31 10:21:37 -07:00
Tom Eastep
d33532d6cd Add TOS field to tcfilters 2009-05-28 16:41:14 -07:00
Tom Eastep
97fa7a0513 Add LENGTH column to tcfilters file 2009-05-28 14:29:33 -07:00
Tom Eastep
7418e27308 Deimplement ipset binding support 2009-05-28 07:22:48 -07:00
Tom Eastep
a0071a21e8 Tweak and document HFSC implementation 2009-05-24 10:06:36 -07:00
Tom Eastep
4cf2c1b59f Avoid 'large quantum' warnings during start/restart 2009-05-23 09:04:06 -07:00
Tom Eastep
20805a6e46 Add Traceroute Macro for IPv6 2009-05-15 17:22:33 -07:00
Tom Eastep
f75f4158b3 Add 'findgw' user exit 2009-05-11 14:35:20 -07:00
Tom Eastep
887fee7618 Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall
Conflicts:

	Shorewall/changelog.txt
	Shorewall/releasenotes.txt
2009-05-09 10:03:33 -07:00
Tom Eastep
be9573d30f Fix 'start' with AUTOMAKE=Yes 2009-05-09 10:00:33 -07:00
Tom Eastep
e1771ebead Externalize the 'flow' classifier 2009-05-08 14:05:27 -07:00
Tom Eastep
ff26ff4697 Fix 'iprange' command 2009-05-07 07:21:46 -07:00
Tom Eastep
11962560fe Start 4.3.11 release documentation 2009-05-05 14:21:34 -07:00
Tom Eastep
8f6130cca4 Update to nested classes; document nested classes in the release docs 2009-05-04 16:03:14 -07:00
Tom Eastep
5b6769a722 Fix release documents re IPMARK; correct encode/decode 2009-05-04 12:04:04 -07:00
Tom Eastep
f533468da0 Resolve merge conflicts 2009-05-03 09:56:13 -07:00
Tom Eastep
90b07d849d Fix compile for export 2009-05-03 09:01:33 -07:00
Tom Eastep
16826aeb31 Remove IPMARK support 2009-05-03 08:38:27 -07:00
Tom Eastep
3e0a55f072 Fix 'all' in the SOURCE of DNAT- rules 2009-05-02 13:23:29 -07:00
Tom Eastep
c1cf1695c0 Deprecate interface names in the SOURCE column of /etc/shorewall/masq 2009-04-29 15:13:22 -07:00
Tom Eastep
7cf5c32358 Treat Class IDs as hex rather than as decimal numbers 2009-04-23 12:43:57 -07:00
Tom Eastep
b6090948dd Allow compile to STDOUT 2009-04-21 09:41:23 -07:00
Tom Eastep
34791612b5 Implement WIDE_TC_MARKS. Fix problems reported by Steven Springl. 2009-04-20 13:26:47 -07:00
Tom Eastep
aa4afa6b66 Prepare 4.3.10 2009-04-19 17:37:36 -07:00
teastep
e934ce9d85 Document IPMARK support in release documents
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9938 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-19 17:25:14 +00:00
teastep
985c551d26 Add IP, TC and IPSET configuration options
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9932 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-18 16:28:25 +00:00
teastep
be41b99ae8 Allow Shorewall6 on kernel 4.2.24
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9929 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-18 16:19:31 +00:00
teastep
0cc60ea021 Avoid 'Invalid BROADCAST address' errors
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 22:57:59 +00:00
teastep
fd7108784f Allow Shorewall6 on kernel 4.2.24
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-17 16:04:54 +00:00
teastep
347090da6e Correct netmask generation in tcfilters
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-12 15:22:00 +00:00
teastep
ae169f00a7 Implement rules that also log as a separate chain. Preserve original target in logging rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-09 18:45:21 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-07 17:35:06 +00:00
teastep
8a9af0acf5 Fix LOG_MARTIANS=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-02 16:33:56 +00:00
teastep
d950fa27f2 Allow <pathname> to be omitted from the 'compile' command
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-02 01:12:34 +00:00
teastep
dbf23f64e2 Removal of SAME support
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9774 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-01 01:31:04 +00:00
teastep
6c205d922a Add AUTOMAKE option
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9767 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-31 17:31:23 +00:00
teastep
cddd1b1ae9 Use iptables[6]-restore to instantiate the 'stopped' ruleset
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-30 00:49:00 +00:00
teastep
b663644d0d Ignore leading white space on certain continuation lines
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-27 16:55:51 +00:00
teastep
9328f0fc4c Detect dhclient dynamic gateway
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-24 20:58:04 +00:00
teastep
6013e8b53d Improve error message for startup errors. Document in release documents.
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9730 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-23 22:51:05 +00:00
teastep
6dac69554f Apply Tuomo Soini's patch for USE_DEFAULT_RT
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-19 14:04:57 +00:00
teastep
5ea4f651eb Update version
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9697 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-17 18:51:17 +00:00
teastep
f91a5dbf0c Document the deprecation of the old parameter macro syntax.
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9696 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-16 18:01:42 +00:00
teastep
ec52331dfc More port OPTIONS changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-07 20:22:20 +00:00
teastep
d83334a1d1 Document dynamic zones; add 'list' command to list dynamic zone content
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9613 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-06 20:25:59 +00:00
teastep
062c7ec822 Change 'Provides' for Shorewall6-lite
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-05 16:18:58 +00:00
teastep
3adff7f550 release doc update; add comments to prog.*
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9574 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-02 03:25:16 +00:00
teastep
698d6fc97e Fix Shorewall6 compilation issues -- Documentation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9553 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-27 01:17:59 +00:00
teastep
d1bbc2e820 Fix split_list1()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9542 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-26 16:53:33 +00:00
teastep
08ba35ca29 Port changes from branches/4.2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9541 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-26 16:34:31 +00:00
teastep
08c12ccd36 Finish SAME -- Document
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9527 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-25 17:39:32 +00:00
teastep
dba858068c Add nets= OPTION to the interfaces file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9520 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-23 23:39:46 +00:00
teastep
c355ec2509 More combining of products
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9489 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-22 17:43:56 +00:00
teastep
01c45b8897 Rename Shorewall-common to Shorewall
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9487 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-22 17:27:58 +00:00
teastep
46364902e3 Move Shorewall to Shorewall-common
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5817 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-03 01:33:28 +00:00
teastep
8f5d49a517 Fix ipsecnat tunnels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5637 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-22 22:27:26 +00:00
teastep
b0030d80d9 Commit fix to built-in actions wrt 'none'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-22 17:27:02 +00:00
teastep
f136f6c26d Update lib.cli to account for mindless renaming of /proc/net/ip_conntrack to /proc/net/nf_conntrack
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5565 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-18 02:57:30 +00:00
teastep
2f7c8f9120 Update modules for kernel 2.6.20
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5564 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-18 02:53:58 +00:00
teastep
b3ae34d7be Fix CRITICALHOSTS bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5547 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-15 16:03:31 +00:00
teastep
6cc17e8a32 Fix CONTINUE policy bug and document other changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5525 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-14 19:33:31 +00:00
teastep
6ad67cfb80 Rest of the fix for proxy arp clearing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5492 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-11 16:37:53 +00:00
teastep
310a1cb688 Don't clear proxy arp unconditionally
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5456 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-07 16:28:29 +00:00
teastep
f6178d50de Fix obscure bug in rule activation when zone exclusion is present
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5452 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-06 03:51:14 +00:00
teastep
052739fcfd Restore missing function merge_macro_source_dest()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-02 16:26:04 +00:00
teastep
423610a24d Add missing ! logic
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5445 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-26 16:48:24 +00:00
teastep
418e2bf49c Update verions to 3.4.0-RC3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5441 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-25 16:09:36 +00:00
teastep
fa1df2ecf8 Fix IMPLICIT_CONTINUE intra-zone policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5433 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-23 17:07:13 +00:00
teastep
179625239c Fix exit status from start/restart
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5426 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-20 17:52:29 +00:00
teastep
64872be247 Fix restoration of iprange dynamic blacklist entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5423 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-20 16:43:45 +00:00
teastep
32ab96b953 Don't ignore route_rules file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5411 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-16 16:05:36 +00:00
teastep
a4220f667e Add warning about balance and loose -- Release Documents
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5397 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-11 17:30:09 +00:00
teastep
fd1c74ca9f Add EXPORTPARAMS option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5376 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-09 16:15:08 +00:00
teastep
53af71374f Add missing modules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5368 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-06 21:29:30 +00:00
teastep
88cf980c52 More release document updates
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-04 17:25:26 +00:00
teastep
d42db46a4c Document 'compile' extension script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5348 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-03 01:28:29 +00:00
teastep
0136dbbea8 Fix INCLUDE in params file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5326 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-30 17:57:10 +00:00
teastep
b2e012dc02 Document maclist fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5309 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-26 16:44:17 +00:00
teastep
a29f012303 Rename SixXS macro
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5300 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-25 18:28:16 +00:00
teastep
cfa26973d0 Document LITEDIR in release docs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5284 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-24 17:34:04 +00:00
teastep
9b1e179b6b Update Version to Beta3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-22 16:04:11 +00:00
teastep
ac3bb774b4 ipsecnat now implies ipsecnat:noah
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5249 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-17 23:41:59 +00:00
teastep
cb2287437f Improve error message on maclist upgraded record
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-15 19:27:15 +00:00
teastep
cffd08c0fe Fix handling of ipp2p:udp in an action body
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5209 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-09 15:55:47 +00:00
teastep
f6800555b6 Rename shorewall.conf->shorewall-lite.conf -- phase II
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5188 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-02 21:25:35 +00:00
teastep
949c6d2983 Allow both Shorewall and Shorewall Lite on the same system without file conflicts
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-02 16:01:46 +00:00
teastep
a0b42400a3 Add wait4ifup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5180 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-01 00:40:42 +00:00
teastep
8558d49676 Fix for missing 'init' file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-30 18:04:15 +00:00
teastep
46cffe3dd3 Fix for empty blacklist file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-30 17:30:53 +00:00
teastep
052158b6e9 Remove additional noise from log messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5142 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-20 16:14:31 +00:00
teastep
72ab052ef1 Correct silly typo that caused masq file to be ignored when nat file was empty
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-20 15:39:39 +00:00
teastep
9d431a0292 Document new failure logging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5092 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-10 20:40:25 +00:00
teastep
75554a06be Allow tcrules in the POSTROUTING chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5066 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-08 22:43:46 +00:00
teastep
12cac4cb0d Change for OpenWRT compatibility
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-05 21:24:49 +00:00
teastep
9749b617ef Allow 'capabilities' file to be used with Shorewall
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5046 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-04 16:31:48 +00:00
teastep
7ad776f23e Restore 'try' command and improve 'safe-' commands
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5041 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-03 18:18:21 +00:00
teastep
bae18e9a67 Make colon after system name optional in the 'export' command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5036 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-02 17:11:33 +00:00
teastep
5af734ca77 Eliminate 'try' command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5029 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-01 16:36:17 +00:00
teastep
0ca8d0281c Second fix for .safe
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5022 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-30 00:23:33 +00:00
teastep
adfa31c8e4 Use multiport match in tcrules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5018 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-29 00:38:10 +00:00
teastep
b8c694e86f Use fwmark classifier for unknown interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5013 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-28 00:05:52 +00:00
teastep
aa4fb4ff11 Use modules file in export directory if any
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4997 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-24 02:28:08 +00:00
teastep
f6323ea466 Remove command-specific help; add -t option to show command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4969 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-21 22:52:07 +00:00
teastep
c17e322820 Remove /etc/shorewall/Documentation; strip documentation from shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4957 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-20 23:39:46 +00:00
teastep
5054e21730 update release notes to start 3.3.6; fix typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4951 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-20 15:42:20 +00:00
teastep
84142f6148 Update version for 3.3.5
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4947 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-19 22:33:13 +00:00
teastep
1356944d23 Add Makefile just for /usr/share/shorewall/configfiles
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4859 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-12 18:19:17 +00:00
teastep
ab51f029cc Don't return error status on 'start' if Shorewall[-lite] is already started
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-11 16:20:59 +00:00
teastep
2a94144472 Don't create ingress qdisc for device with IN-BANDWIDTH == 0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-10 18:53:12 +00:00