a1cd2ba0f3
Bring 'multiple space before comment' fix forward to master
...
Probably unneeded but better be safe
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-27 06:59:52 -07:00
12f48e1b97
Don't pass '-j' in target arg to expand_rule()
...
- use the target to locate chain for reference tracking
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-26 10:37:07 -07:00
15fbbdaac7
Fix exclusion in blacklist
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-26 10:33:57 -07:00
bd8bcabdf0
Use the 'disposition' argument to expand_rule() to specify the target chain
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-26 08:40:24 -07:00
75e12148ac
Bump version to Beta 2
2010-08-25 09:58:07 -07:00
4a865e0a6d
Pretty up some come
2010-08-24 13:08:21 -07:00
91c5a2f80b
Fix old ipset detection bug
2010-08-24 13:08:06 -07:00
5c49aa843c
Generate warning when a rules file entry generates no iptables-restore input
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-24 08:38:49 -07:00
383e792807
Restore wildcard properties to zone lists
2010-08-24 06:52:53 -07:00
5a92c3262f
Fix REQUIRE_INTERFACE=Yes
2010-08-23 17:19:41 -07:00
d74af30368
Fix zone-exclusion bug
2010-08-23 16:31:46 -07:00
160ad231df
Fix an old optimization bug
2010-08-23 15:14:09 -07:00
335ac8cdca
Improve IPSEC accounting.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-20 10:07:19 -07:00
e70d9c82d8
Revise and document IPSEC Accounting
...
- Place accounting rules in accipsecin and accipsecout
- Add warning when rule inserted into unreferenced accounting chain
- Add warning when an accounting chain has no references
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-20 08:24:45 -07:00
33ee9b1481
Add IPSEC Accounting (again)
2010-08-20 06:53:31 -07:00
d9d31ff132
Remove another 'our' variable
2010-08-19 15:34:04 -07:00
c80b1b3585
Correct types in do_ipsec()
2010-08-19 15:33:49 -07:00
af77eb08bc
Back out IPSEC accounting rules
2010-08-19 15:13:01 -07:00
2a9bbbfe62
Eliminate an ugly 'our' variable.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 12:00:52 -07:00
676da7a2f1
More reorganization of process_rule()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 11:53:26 -07:00
d997ef1653
First cut at IPSEC support in the accounting file.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 11:46:26 -07:00
4322d7b2af
Zone exclusion
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 16:10:58 -07:00
4460b49842
Complete Zone list Support
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 14:38:53 -07:00
fafb0dea73
Update version to 4.4.13-Beta1
2010-08-18 12:40:34 -07:00
255cd6cf9c
Implement zone lists in rules file entries
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 12:18:58 -07:00
7a17b65368
Allow simple zone lists in rules
2010-08-18 07:26:38 -07:00
12aecdef37
Use '&' trick to avoid prototype matching
2010-08-17 09:17:25 -07:00
a0dffa787d
Add an assertion
2010-08-16 19:17:44 -07:00
2919c48ba0
Avoid forward reference to ensure_chain()
2010-08-16 13:25:01 -07:00
00837ed503
Add Shorewall::Chains::find_chain()
2010-08-16 13:12:12 -07:00
633eba6c90
Set version to 4.4.12
2010-08-15 08:50:45 -07:00
1510e111c4
Fix typo in conf basics doc
2010-08-13 20:27:14 -07:00
7281c9166e
Record the config directory in the state file
2010-08-12 17:54:07 -07:00
15eec24672
Simplify logic for generating all parent zones
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-12 15:15:19 -07:00
49053afdcb
Fix port range validate issue
2010-08-12 09:49:26 -07:00
69eaf84078
Fix bug with 'any'
2010-08-12 07:31:37 -07:00
965ad7ced1
Minor tweaks to the IPAddrs module
2010-08-11 11:46:26 -07:00
0234564a1b
Add destination IP blacklisting
2010-08-10 17:33:50 -07:00
8d4498c9b8
Update Version to 4.4.12 RC 1
2010-08-06 19:31:36 -07:00
0f02ee2628
Fix issue with set match generation
2010-08-06 10:17:54 -07:00
364ad41cf5
Add support for new ipset match syntax
2010-08-03 21:06:17 -07:00
2774ee1bd6
Make 'icmp' a synonym for 'ipv6-icmp' in IPv6 compilations
2010-08-02 08:04:55 -07:00
3ce8ff5741
Bump version to Beta 4
2010-08-01 16:10:32 -07:00
967629569b
Taylor Universal config to work with Shorewall-init and streamline ruleset
...
- Make interface 'all' optional and set REQUIRE_INTERFACE=Yes
- Add COMPLETE option
- Set FASTACCEPT in Universal samples
- Reset SUBSYSLOCK in Universal samples
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-01 08:36:56 -07:00
a88e2afa69
Tweak the Universal documentation
2010-07-31 18:43:54 -07:00
0b3dfcc844
Revert version to Beta 3
2010-07-31 13:23:53 -07:00
fdcc263023
Fix a couple of minor bugs
2010-07-31 13:11:46 -07:00
0174045181
Fixes for Universal Sample
2010-07-31 10:49:49 -07:00
beeeb6efbc
Allow '+' as a physical interface
2010-07-31 10:08:45 -07:00
fdeb9006fa
Correct module versions
2010-07-31 09:02:51 -07:00
