15142 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tom Eastep	0a31fba6bb	Update version and copyright dates in lib.core ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 13:00:50 -07:00
Tom Eastep	9701c9c522	Update version and copyright dates in lib.base ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 12:57:02 -07:00
Tom Eastep	973d352209	Update shorewall script ... - Update copyright dates - Add a comment about PRODUCT setting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 12:51:27 -07:00
Tom Eastep	91e59c2ed4	Remove the Lite Makefiles ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 11:56:04 -07:00
Tom Eastep	be5aabcbfb	Correct typo in Chains.pm ... &g_dockeringress -> $g_dockeringress Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:14:22 -07:00
Tom Eastep	a8937e6bc8	Correct harmless typo ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:06:41 -07:00
Tom Eastep	e91bd9a0e9	Remove useless/empty .tmp file when SAVE_IPSETS is set ... - Add SAVE_IPSETS support to the Redhat/Fedora sysv init script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 09:28:43 -07:00
Tom Eastep	5e1cf17ebc	DOCKER-INGRESS support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-17 10:57:29 -07:00
Tom Eastep	85a7ec6fe5	Correct module loading in the compiler ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-14 15:08:38 -07:00
Tom Eastep	fb831e3128	Remove empty/useless ipsets tmp file in Shorewall-init ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:56:24 -07:00
Tom Eastep	2ed11c7e15	Default ADD_IP_ALIASES to 'No' in Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:55:53 -07:00
Tom Eastep	ef1353790e	Correct VLSM editing in the 'ipcalc' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:41 -07:00
Tom Eastep	4f79d2e82b	Move and simplify handling of nat columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:04 -07:00
Tom Eastep	e6a2ba78a4	Correct handling of DEST column during action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 10:05:37 -07:00
Tom Eastep	41ea3bdeda	Modify the Event actions to handle NAT rules ... - Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:47:12 -07:00
Tom Eastep	1065c2951b	Allow NAT targets to be passed to the Event actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:46:03 -07:00
Tom Eastep	3b373f3f21	Correct handling of ipsets in the DEST column of the snat file ... - Also corrected handling of exclusion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-06 11:30:42 -07:00
Tom Eastep	0c05ab3bff	Correct typo in shorewall-snat(5) ... - missing ':' in IPv4 Example 4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-05 10:29:19 -07:00
Tom Eastep	ef3a33e3f4	Merge branch '5.1.6' ... # Conflicts: # Shorewall-core/lib.common Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-30 15:02:23 -07:00
Tom Eastep	8a78fb6e77	Correct -p check for the conntrack utility's availability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-29 09:06:36 -07:00
Tom Eastep	b54a691110	Improve dynamic gateway detection ... - Use provider's routing table, if any Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 15:04:47 -07:00
Tom Eastep	90f33dd436	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:48:14 -07:00
Tom Eastep	b7aef24d7c	Delete useless line of code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:18:29 -07:00
Tom Eastep	6f475cde3f	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 10:19:25 -07:00
Tom Eastep	6053a40af0	Apply Tuomo Soini's loadmodule patch ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 09:20:50 -07:00
Tom Eastep	7e4dba7623	Revert "Correct check for module already loaded" ... This reverts commit 2e98d4375b.	2017-08-23 08:01:25 -07:00
Tom Eastep	3d322d31b7	Add UDP rule to macro.RDP ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-22 08:07:32 -07:00
Tom Eastep	34e4fffd7d	Module suffix changes ... - Re-order default list in the compiler to match lib.common - MODULE_SUFFIX="ko ko.xz" in standard .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 12:44:23 -07:00
Tom Eastep	2e98d4375b	Correct check for module already loaded ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 10:27:29 -07:00
Tom Eastep	419ff8903b	Invert logic in Shorewall::Chains::delete_reference() - better readability ... - similar change in Shorewall::Chains::adjust_reference_counts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:25:27 -07:00
Tom Eastep	390ac30be8	Remove a superfluous line of code from Shorewall::Chains::format_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:12:54 -07:00
Tom Eastep	8cb98f16ea	Add a comment in Shorewall::Chains::optimize_level8() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 08:08:24 -07:00
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	d8eca457de	Correct typo in the Aliased Interfaces article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 08:24:44 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	0603f8e355	Serialize start of IPv4 and IPv6 under systemd ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 12:48:18 -07:00
Tom Eastep	ddefde2d10	Correct handling of address variables in DNAT rule. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 08:30:11 -07:00
Tom Eastep	2beeedd8fe	Remove incorrect '+' info from shorewall-interfaces(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:19:00 -07:00
Tom Eastep	1a2647618e	Allow runtime address variables as the server IP in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:18:16 -07:00
Tom Eastep	72293883dd	Tabify the Zones module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 11:28:14 -07:00
Tom Eastep	c31397532c	Verify that parent and child zones have a common interface ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 09:24:05 -07:00
Tom Eastep	d0861e813b	Make Shorewall's handling of '+' consistent with that of iptables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 08:22:57 -07:00
Tom Eastep	5d5bef105a	Remove reference to swping from the shorewall-init article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:58 -07:00
Tom Eastep	da62bd2b32	Use a hash slice in recently-added code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:34 -07:00
Tom Eastep	a83c19cc33	Adjust some default values in shorewall.conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-10 15:48:16 -07:00
Tom Eastep	96a33395e8	Correct typo in the Squid document ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-09 15:42:19 -07:00
Tom Eastep	dabe8abe52	Add 'action' to the conntrack columns for alternate input ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-09 12:41:45 -07:00
Tom Eastep	a504820d19	Correct optimize level 8 handling of policy and policychain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 16:56:30 -07:00
Matt Darfeuille	8db4265ccc	docs: Clarify path for locating Shorewall files ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 13:48:47 -07:00