Commit Graph

130 Commits

Author SHA1 Message Date
Tom Eastep
0f4d8eb929 Use 'conntrack' for 'show connections' 2010-09-23 19:08:40 -07:00
Tom Eastep
57bcfee559 Add 'Mark in any table' capability 2010-08-27 08:35:33 -07:00
Tom Eastep
0234564a1b Add destination IP blacklisting 2010-08-10 17:33:50 -07:00
Tom Eastep
364ad41cf5 Add support for new ipset match syntax 2010-08-03 21:06:17 -07:00
Tom Eastep
0b9aa0f84b Fix the dump command 2010-07-31 13:52:28 -07:00
Tom Eastep
fdcc263023 Fix a couple of minor bugs 2010-07-31 13:11:46 -07:00
Tom Eastep
bebeba8cae Document Universal Configuration and allow for empty LOGFILE 2010-07-31 12:45:43 -07:00
Tom Eastep
2ee4fd8f5a Add FWMARK_RT_MASK capability.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-07-04 09:08:04 -07:00
Tom Eastep
ec3fdbde98 More changes having to do with with dynamic chains
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-06-08 11:26:53 -07:00
Tom Eastep
0978f3d41a More periodic removal of trailing white space 2010-06-07 09:16:56 -07:00
Tom Eastep
6d61e962eb Use -m conntrack if available in place of -m state
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-25 13:35:41 -07:00
Tom Eastep
8c09f21e5d Implement 'show log <token>'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-04-19 10:20:28 -07:00
Tom Eastep
508475d80b Avoid panic among the user base by suppressing missing table error messages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-19 10:10:20 -07:00
Tom Eastep
b4d4cedef9 Fix silly bug in 'show dynamic <zone>'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-04 19:05:47 -08:00
Tom Eastep
50330f71f6 Move many routines into lib.common.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-04 12:38:02 -08:00
Tom Eastep
4c081e5998 Add lib.run
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-04 09:12:48 -08:00
Tom Eastep
a963c8f955 Don't export CONFDIR or SHAREDIR
Document CONFDIR, SHAREDIR and VARDIR
Add FILEMODE to the old reserved variable names

Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-03 11:46:23 -08:00
Tom Eastep
3f73b3c408 Export *DIR variables
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-03 10:39:18 -08:00
Tom Eastep
c6981de0e5 Complete elimination of globals that are not .conf options
Documentation to follow

Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-03 09:50:07 -08:00
Tom Eastep
7457f643ee Don't export globals when the script is 4.4.8 or later
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-03 08:51:40 -08:00
Tom Eastep
2656a9b0c7 Eliminate use of PRODUCT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-02 12:34:36 -08:00
Tom Eastep
5613d0105a Remove all reliance on HOSTNAME
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-02 11:59:38 -08:00
Tom Eastep
3ea6f6792f Eliminate VERSION reserved variable name
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-03-02 08:02:10 -08:00
Tom Eastep
53c73bc8e9 Eliminate VERBOSE
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-28 17:58:01 -08:00
Tom Eastep
643d4831ab More all-caps variable elimination
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-26 17:05:35 -08:00
Tom Eastep
061d850c16 Rename RESTOREPATH to g_restorepath
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-26 08:35:50 -08:00
Tom Eastep
4059fe6956 Belatedly update some version numbers
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-25 08:43:32 -08:00
Tom Eastep
4415050fd2 Eliminate another reserved variable name
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-23 17:00:26 -08:00
Tom Eastep
bffb1793d7 More global variable renaming
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-23 07:52:35 -08:00
Tom Eastep
b2350829b9 Rename 'debugging' to 'g_debugging'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-22 16:43:38 -08:00
Tom Eastep
88d29d2e35 Eliminate a couple of more all-caps variable name restrictions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-22 08:24:29 -08:00
Tom Eastep
55c9cf3e99 Eliminate some of the reserved all-caps variable names
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-22 08:05:23 -08:00
Tom Eastep
e690303937 Modify Roberto's patch for 'show <chain>' error reporting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-20 19:09:54 -08:00
Roberto C. Sanchez
6a3b2b0dee Clarify error message when user asks shorewall to show a non-existent chain 2010-02-20 21:57:45 -05:00
Tom Eastep
db2a1fe749 Add lib.cli changes to 4.4.6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 18:57:04 -08:00
Tom Eastep
6c62f14749 Add 'show macro' command
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 13:40:25 -08:00
Tom Eastep
4e0f9b2ef3 Make save/restore work with SAVE_IPSETS=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 12:43:12 -08:00
Tom Eastep
43c45a064c Add current and limit to conntrack table display 2009-12-12 09:10:24 -08:00
Tom Eastep
9d5dd2ad3a Implement an '-l' option to the 'show' command 2009-11-16 15:14:24 -08:00
Tom Eastep
f5a019becc Implement 'show policies' command 2009-11-15 09:24:56 -08:00
Tom Eastep
55c879e4e6 Fix log record displays 2009-08-07 13:33:07 -07:00
Tom Eastep
2f01fc9a3e Fix 'show dynamic' -- take 2 2009-06-24 15:41:15 -07:00
Tom Eastep
f4338b52fe Fix 'show dynamic' 2009-06-24 15:28:43 -07:00
Tom Eastep
7b20cf2af9 Fix 'shorewall reset' 2009-05-31 10:21:37 -07:00
teastep
322a5de871 Recommit lost commit
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-18 18:48:28 +00:00
teastep
52b0b4e602 More removal of SAVE_IPSETS=Yes logic
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9804 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-04-04 17:22:06 +00:00
teastep
2f1f376d50 Replace 'list' with 'show dynamic' and add support in shorewall-lite
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9614 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-06 20:43:46 +00:00
teastep
d83334a1d1 Document dynamic zones; add 'list' command to list dynamic zone content
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9613 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-06 20:25:59 +00:00
teastep
a7126b6b4c First working dynamic zone implementation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9612 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-06 17:00:38 +00:00
teastep
2883479e53 Initial 4.3.7 changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9572 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-03-01 19:46:30 +00:00
teastep
08ba35ca29 Port changes from branches/4.2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9541 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-26 16:34:31 +00:00
teastep
d7d8acc764 Even More product consolidation changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9491 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-22 18:28:18 +00:00
teastep
c355ec2509 More combining of products
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9489 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-22 17:43:56 +00:00
teastep
01c45b8897 Rename Shorewall-common to Shorewall
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9487 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2009-02-22 17:27:58 +00:00
teastep
46364902e3 Move Shorewall to Shorewall-common
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5817 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-03 01:33:28 +00:00
teastep
f136f6c26d Update lib.cli to account for mindless renaming of /proc/net/ip_conntrack to /proc/net/nf_conntrack
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5565 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-03-18 02:57:30 +00:00
teastep
fa1df2ecf8 Fix IMPLICIT_CONTINUE intra-zone policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5433 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-23 17:07:13 +00:00
teastep
781d1fe3b4 Fix to dynamic rules restoration change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5424 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-02-20 17:05:25 +00:00
teastep
97817453e6 Update copyrights to 2007
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5217 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-01-12 22:06:29 +00:00
teastep
052158b6e9 Remove additional noise from log messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5142 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-20 16:14:31 +00:00
teastep
e584c5a422 Change version to 3.4 in all files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-18 21:57:44 +00:00
teastep
837f977d6d More logging cleanup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-12 17:49:52 +00:00
teastep
626e0c577f More error logging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-12 16:16:30 +00:00
teastep
425402114f Tighten up check for 'syslogd -C'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5064 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-06 16:37:29 +00:00
teastep
12cac4cb0d Change for OpenWRT compatibility
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-05 21:24:49 +00:00
teastep
7ad776f23e Restore 'try' command and improve 'safe-' commands
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5041 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-03 18:18:21 +00:00
teastep
9e81065809 More workarounds for light-weight /bin/sh
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5028 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-12-01 16:16:02 +00:00
teastep
0056150713 More light-weight shell workarounds
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5026 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-30 21:28:31 +00:00
teastep
5924ab71b5 Fix for 'show macros' where /bin/sh is a light-weight shell
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5025 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-30 17:17:53 +00:00
teastep
0ca8d0281c Second fix for .safe
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5022 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-30 00:23:33 +00:00
teastep
65bfa41c0a First fix for .safe
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5021 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-30 00:16:25 +00:00
teastep
08edd066c8 Move 'logwatch' processing to lib.cli
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5020 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-29 01:11:29 +00:00
teastep
cd50bf9396 Move 'allow' processing to lib.cli
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5019 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-29 00:53:39 +00:00
teastep
f6323ea466 Remove command-specific help; add -t option to show command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4969 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-21 22:52:07 +00:00
teastep
9ef9f2227d More fixing for SAVE_IPSETS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4883 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-15 16:45:31 +00:00
teastep
3a1191f1df Fix IPSETS_SAVE=Yes problem with 'save'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4879 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-15 04:16:59 +00:00
teastep
0826532600 Add comment
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4797 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-05 21:46:55 +00:00
teastep
ada66ed0de Fix banner in 'hits' output
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4796 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-05 20:24:34 +00:00
teastep
9b4359e0b2 Move 'hits' command processing to lib.cli
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4795 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-11-05 19:47:59 +00:00
teastep
2ed3d8611d Rename lib.commands to lib.cli and update makeshorewall to copy it to Shorewall Lite
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4746 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2006-10-28 14:46:43 +00:00