1319 Commits

Author	SHA1	Message	Date
Tom Eastep	993bdc740d	Make it invalid to to use a config file name as a chain name	2011-02-17 16:31:22 -08:00
Tom Eastep	b06630091d	Make procedure to delete a chain plus references to it; make exclusion chains begin with '~'	2011-02-17 14:53:39 -08:00
Tom Eastep	6f00f2127c	Delete optimize_okay() and add a couple of assertions	2011-02-17 10:48:46 -08:00
Tom Eastep	5634b08e22	Don't clear dont_optimize flag in accounting in sectioned configuration	2011-02-17 10:47:57 -08:00
Tom Eastep	300d931922	Assert correctness in decrement_reference_count()	2011-02-16 13:16:42 -08:00
Tom Eastep	fa8c8f5850	Dont optimize chains with RETURN	2011-02-16 13:15:29 -08:00
Tom Eastep	030839e4a4	Remove recursive_delete_references	2011-02-16 12:49:04 -08:00
Tom Eastep	2974167f06	Finally fix issue with copy_rules()	2011-02-16 10:08:11 -08:00
Tom Eastep	b03e3b94ef	More optimization fixes	2011-02-15 19:24:14 -08:00
Tom Eastep	99f38bfca1	Make the source-net and dest-match routines more readable	2011-02-14 20:11:38 -08:00
Tom Eastep	32f341c279	Correct optimization fix	2011-02-14 16:54:27 -08:00
Tom Eastep	6a9ca303d1	Remove masking declaration	2011-02-14 15:56:02 -08:00
Tom Eastep	4ad9a83996	Centralize handling of MACs in the Chains module	2011-02-14 15:34:11 -08:00
Tom Eastep	0fa027802f	Don't allow accounting or manual changes to have the name of a builtin target	2011-02-14 10:50:04 -08:00
Tom Eastep	3b7232a5fa	Fix a bug in the optimizer	2011-02-14 10:00:28 -08:00
Tom Eastep	59e361e93e	Split the 'restriction' member into two members	2011-02-14 09:22:27 -08:00
Tom Eastep	e64070f9e1	Restore loop detection in sectioned accounting rules	2011-02-13 16:38:01 -08:00
Tom Eastep	dd81eedb42	Fix another accounting sectioning bug	2011-02-13 14:32:11 -08:00
Tom Eastep	46a99a7cd9	Correct Config.pm version again	2011-02-13 11:46:56 -08:00
Tom Eastep	567824b7e2	Correct Config.pm version	2011-02-13 11:45:46 -08:00
Tom Eastep	95f8100696	Cosmetic change	2011-02-13 11:34:53 -08:00
Tom Eastep	b1abb3f554	Don't do unref/loop detection when accounting file is sectioned	2011-02-13 11:13:43 -08:00
Tom Eastep	a1eefea224	Fix FORWARD chain jumps with sectioning	2011-02-13 08:23:48 -08:00
Tom Eastep	1438332bbe	Remove hard-coded 0.0.0.0/0 from Providers.pm	2011-02-13 08:13:22 -08:00
Tom Eastep	5c0b592934	Section the accounting file	2011-02-12 12:47:15 -08:00
Tom Eastep	195903444d	Insist that SECTION headers have exactly two columns	2011-02-12 07:54:20 -08:00
Tom Eastep	677bd08d5d	Add more targets	2011-02-11 17:13:48 -08:00
Tom Eastep	4acdc5314a	Add 'NG' value for ACCOUNTING	2011-02-11 17:01:10 -08:00
Tom Eastep	9e921beb49	Fix a tri-value bug	2011-02-11 16:53:49 -08:00
Tom Eastep	af363888ab	Alphabetize the builtin target list	2011-02-10 16:55:04 -08:00
Tom Eastep	64614b7464	Add CLASSIFY to the builtin targets	2011-02-10 16:46:44 -08:00
Tom Eastep	2885081d86	Add more keywords to %builtin_targets	2011-02-10 13:11:58 -08:00
Tom Eastep	a3232516bb	Detect loops in accounting chain jumps	2011-02-09 15:43:19 -08:00
Tom Eastep	88244dc132	Don't allow MAC addresses in the accounting file	2011-02-07 17:12:43 -08:00
Tom Eastep	b4b59119ef	Don't allow non-accounting chain in the CHAIN accounting column	2011-02-07 16:32:38 -08:00
Tom Eastep	6e66736d28	Make IPv6 logic safer; cosmetic improvements in the generated script	2011-02-06 08:57:48 -08:00
Tom Eastep	2c2fdab0fe	Rename USE_LOCAL_MODULES to EXPORTMODULES ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2011-02-06 08:42:35 -08:00
Tom Eastep	2b8579c090	Tweak USE_LOCAL_MODULES change ... Make the "Other than /usr/share" test dependent on export Signed-off-by: Tom Eastep <teastep@shorewall.net>	2011-02-06 08:28:10 -08:00
Tom Eastep	106f23634c	Make use of USE_LOCAL_MODULES independent of export ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2011-02-06 08:15:16 -08:00
Tom Eastep	88bce4100a	Initiate 4.4.18	2011-02-05 16:41:34 -08:00
Tom Eastep	c557ec3740	Bump version of Tc module	2011-02-04 07:46:35 -08:00
Tom Eastep	ea2c72d1b1	Prepare for 4.4.17	2011-02-04 06:44:02 -08:00
Tom Eastep	838c7ac57b	Change a comment	2011-02-03 17:22:04 -08:00
Tom Eastep	23eef3b215	Normalize IPv6 addresses in decompose_net	2011-02-03 09:57:47 -08:00
Tom Eastep	4ed4443abb	Do a fancier job of comparing networks	2011-02-03 09:44:46 -08:00
Tom Eastep	27684908c4	Catch mis-matched nets in per-IP accounting rules	2011-02-03 09:25:13 -08:00
Tom Eastep	d68d40ee1c	Correct an optimization bug involving empty/unreferenced chains	2011-02-03 09:12:50 -08:00
Tom Eastep	98ad7e15b0	Don't optimize the accounting chain	2011-02-03 08:45:54 -08:00
Tom Eastep	953c0b48de	Fix several issues with IPv6 tcfilters	2011-02-03 08:28:00 -08:00
Tom Eastep	207db033b8	Disallow '.' in accounting and manual chain names	2011-02-01 12:58:05 -08:00