3942 Commits

Author	SHA1	Message	Date
Tom Eastep	97de2be778	Change a fatal_error() call with an assertion in add_policy_rules() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-19 13:39:51 -08:00
Tom Eastep	85cae3c7f8	Add parens to improve readability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-19 12:47:17 -08:00
Tom Eastep	acd425a3c2	Remove superfluous logic from validate_portpari1() ... - Add comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-19 12:46:52 -08:00
Tom Eastep	27a0f0f7a0	Make TRACK_PROVIDERS=Yes the default ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-10 08:46:01 -08:00
Tom Eastep	9ac075fd56	Clear the connection mark in tunneled packets from tracked providers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-09 17:12:14 -08:00
Tom Eastep	b2604583af	Revert "Clear the connection mark in tunneled packets from tracked providers" ... This reverts commit 62c6411cb0.	2018-01-09 17:01:51 -08:00
Tom Eastep	62c6411cb0	Clear the connection mark in tunneled packets from tracked providers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-09 14:51:57 -08:00
Tom Eastep	1bc90beb01	Update copyrights ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-07 15:01:46 -08:00
Tom Eastep	eaccf033c6	Update copyrights for 2018 ... - Update some header versions to 5.1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-07 14:24:01 -08:00
Tom Eastep	056711d304	Remove anachronistic comment ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-06 13:58:20 -08:00
Tom Eastep	0aa0bebe07	Reword error message ... - "Invalid action name ..." to "Reserved action name ..." Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-06 13:56:36 -08:00
Tom Eastep	1a68d87c94	Don't enable forwarding in 'clear' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-04 15:39:07 -08:00
Tom Eastep	c518cfaa4a	Allow address variables to work correctly with the 'clear' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-03 08:58:28 -08:00
Tom Eastep	45a164733b	Fix breakage of ipp2p ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:38:14 -08:00
Tom Eastep	6f82bfe7d1	Handle PROTO '-' in conntrack file processing. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:54:15 -08:00
Tom Eastep	078c781dfa	Allow override of :syn assumption in CT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:15:33 -08:00
Tom Eastep	46f68c6dcb	Move adjustment of the protocol in process_conntrack_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 13:51:33 -08:00
Tom Eastep	9e3cb27d0a	Use the synchain name in log messages rather than the base chain name ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 14:13:50 -08:00
Tom Eastep	b1d1fa862a	Add comment noting that the 'physwild' interface member is currently unused ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:58:16 -08:00
Tom Eastep	24acf25451	Delete unused find_interfaces_by_option1() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:53:16 -08:00
Tom Eastep	229c47ac6c	Don't delete options that are to be ignored from %options ... - specifying some options can have side-effects that cause $interfaceref->{options}{$option} to be accessed Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:47:22 -08:00
Tom Eastep	38de9c1732	Make wildcard/option checks order-independent WRT the options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:24:08 -08:00
Tom Eastep	17f4fd7cd2	Initialize $physwild to $wildcard ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 15:42:16 -08:00
Tom Eastep	cfd02c1bb6	More $minroot changes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:58:38 -08:00
Tom Eastep	19b7601c72	Improve handling of wildcard interfaces and options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:43:45 -08:00
Tom Eastep	5a8e9cd0a3	Correct $minroot logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 09:08:27 -08:00
Tom Eastep	45468af2d2	Correct ingress policing for later releases of iproute2 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-18 11:52:19 -08:00
Tom Eastep	821d72093a	Rename DEFAULTACTION_SECTION to POLICYACTION_SECTION. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 16:25:15 -08:00
Tom Eastep	42d5d13780	Retain proto setting when switching inline <-> noinline ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 13:40:41 -08:00
Tom Eastep	7121a0f1b1	Disallow a protocol on the Reject Action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 12:58:05 -08:00
Tom Eastep	ab12d63a4f	Change 'default action' to 'policy action' in comments and messages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 12:55:17 -08:00
Tom Eastep	6ba1d5413b	Allow a protocol to be associated with an action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 11:24:08 -08:00
Tom Eastep	b04b65cac8	Clear counters in all tables during 'reset' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-30 14:31:59 -08:00
Tom Eastep	5dcb684efc	Don't be specific when deleting IPv6 balanced/fallback default routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-28 15:26:17 -08:00
Tom Eastep	7289175070	Chop first config dir if non-root or if compiling for export. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-23 09:57:12 -08:00
Tom Eastep	528b473f6b	Add some additional documentation to the Config module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-22 08:41:37 -08:00
Tom Eastep	2a9272ccd1	Clean up RAs involving "|" ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 08:26:17 -08:00
Tom Eastep	130ddff9de	Correct a typo in an error message ... - Includes cosmetic changes to Providers.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-10 11:25:52 -08:00
Tom Eastep	9cf298482d	Merge branch '5.1.8'	2017-11-09 12:59:59 -08:00
Tom Eastep	c5a586aa37	Allow [...] around gateway address in the providers file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-09 12:20:01 -08:00
Tom Eastep	832418585a	Don't make persistent routes and rules dependent on autosrc. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-08 09:46:25 -08:00
Tom Eastep	605f61fb3c	Don't make persistent routes and rules dependent on autosrc. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-08 09:45:59 -08:00
Tom Eastep	ef8b85fc3e	Implement support for logging in the SNAT file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-02 12:44:42 -07:00
Tom Eastep	b35f1112f4	Allow 'noinline' in /etc/shorewall[6]/actions to override 'inline' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 09:19:50 -07:00
Tom Eastep	77d9eeb915	Eliminate extra parameter editing of TPROXY parameter list. ... - Clarify syntax for actions with multiple parameters Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-19 13:08:12 -07:00
Tom Eastep	17838c1443	Add TCPMSS to the allowed mangle actions. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-19 12:58:38 -07:00
Tom Eastep	5867ce6c3b	CLAMPMSS now done in the mangle table. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-18 15:55:07 -07:00
Tom Eastep	8ea96098bf	Warning when 'persistent' used with RESTORE_DEFAULT_ROUTE=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 15:22:07 -07:00
Tom Eastep	02ed36332a	Revert "Warn when RESTORE_DEFAULT_ROUTE=Yes and a persistent provider is defined" ... This reverts commit 39a3c72057.	2017-10-11 11:24:54 -07:00
Tom Eastep	cb4f9e7261	Don't restore default routes when there is an enabled fallback provider ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:24:13 -07:00