7811 Commits

Author	SHA1	Message	Date
Tom Eastep	e0a757ea03	Quit find after finding the first newer file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 14:15:45 -08:00
Tom Eastep	550003f0f4	Only look at regular files when running 'find' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 14:09:51 -08:00
Tom Eastep	4f50303318	Merge branch '5.1.10' ... # Conflicts: # Shorewall/lib.cli-std	2017-12-31 14:06:52 -08:00
Tom Eastep	5053999442	Don't run 'find' in the PWD ... - Also remove -mindepth so as to catch deletions in the directories Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 13:33:16 -08:00
Tom Eastep	6b5889177b	Correct startup_error() inadvertent change ... - Switch ensure_root() back to calling startup_error() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 09:24:21 -08:00
Tom Eastep	377c9f5708	Only search files in each CONFIG_PATH directory - no recursion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:44:05 -08:00
Tom Eastep	45a164733b	Fix breakage of ipp2p ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:38:14 -08:00
Tom Eastep	6f82bfe7d1	Handle PROTO '-' in conntrack file processing. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:54:15 -08:00
Tom Eastep	4e5b98d3d9	Only search files in each CONFIG_PATH directory - no recursion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:42:09 -08:00
Tom Eastep	078c781dfa	Allow override of :syn assumption in CT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:15:33 -08:00
Tom Eastep	46f68c6dcb	Move adjustment of the protocol in process_conntrack_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 13:51:33 -08:00
Tom Eastep	b42678269c	Revert "Add :syn to each TCP entry in the conntrack file" ... This reverts commit f861f8da35.	2017-12-29 13:08:27 -08:00
Tom Eastep	9bd10c0c00	Call fatal_error (not startup_error) when non-root does default compile ... - Also reword the message	2017-12-29 12:49:43 -08:00
Tom Eastep	f861f8da35	Add :syn to each TCP entry in the conntrack file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 12:38:58 -08:00
Tom Eastep	9e3cb27d0a	Use the synchain name in log messages rather than the base chain name ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 14:13:50 -08:00
Tom Eastep	d8a22d13dd	Allow non-root to run many 'show' commands ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 10:49:09 -08:00
Tom Eastep	9afe8daae0	Merge branch '5.1.10' ... # Conflicts: # Shorewall-core/install.sh # Shorewall/install.sh	2017-12-26 15:45:20 -08:00
Tom Eastep	43adcd26a1	Make the /etc and the configfiles .conf files the same ... Signed-off-by: Tom Eastep <teastep@shorewall.net> # Conflicts: # Shorewall/install.sh	2017-12-26 15:39:26 -08:00
Tom Eastep	f2a565729f	Replace $PRODUCT with ${PRODUCT} ... - Also correct one incidence of PRODUCT that should have been $PRODUCT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 14:00:00 -08:00
Tom Eastep	ea8b2a803a	Make the /etc and the configfiles .conf files the same ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 11:48:33 -08:00
Tom Eastep	16832149ca	Remove unneeded modification of $CONFDIR/$PRODUCT/$PRODUCT.conf ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 11:35:56 -08:00
Tom Eastep	7edf4918d7	Remove leading ":" from CONFIG_PATH in active shorewall[6].conf ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 10:27:19 -08:00
Tom Eastep	b1d1fa862a	Add comment noting that the 'physwild' interface member is currently unused ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:58:16 -08:00
Tom Eastep	24acf25451	Delete unused find_interfaces_by_option1() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:53:16 -08:00
Tom Eastep	229c47ac6c	Don't delete options that are to be ignored from %options ... - specifying some options can have side-effects that cause $interfaceref->{options}{$option} to be accessed Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:47:22 -08:00
Tom Eastep	38de9c1732	Make wildcard/option checks order-independent WRT the options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:24:08 -08:00
Tom Eastep	17f4fd7cd2	Initialize $physwild to $wildcard ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 15:42:16 -08:00
Tom Eastep	cfd02c1bb6	More $minroot changes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:58:38 -08:00
Tom Eastep	19b7601c72	Improve handling of wildcard interfaces and options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:43:45 -08:00
Tom Eastep	5a8e9cd0a3	Correct $minroot logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 09:08:27 -08:00
Tom Eastep	b5a6067588	Describe default interval and decay for rate estimator policing filters ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-20 09:04:52 -08:00
Tom Eastep	45468af2d2	Correct ingress policing for later releases of iproute2 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-18 11:52:19 -08:00
Tom Eastep	4ab8e1f0a2	Remove PSH from the FIN action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-05 15:25:54 -08:00
Tom Eastep	821d72093a	Rename DEFAULTACTION_SECTION to POLICYACTION_SECTION. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 16:25:15 -08:00
Tom Eastep	42d5d13780	Retain proto setting when switching inline <-> noinline ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 13:40:41 -08:00
Tom Eastep	7121a0f1b1	Disallow a protocol on the Reject Action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 12:58:05 -08:00
Tom Eastep	ab12d63a4f	Change 'default action' to 'policy action' in comments and messages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 12:55:17 -08:00
Tom Eastep	6ba1d5413b	Allow a protocol to be associated with an action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-02 11:24:08 -08:00
Tom Eastep	4fc572f664	Exit the IPv6 AllowICMPs chain if packet isn't ipv6-icmp ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-01 14:50:17 -08:00
Tom Eastep	138e64c54a	Improve the documentation surrounding DNS names. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-01 09:25:20 -08:00
Tom Eastep	b04b65cac8	Clear counters in all tables during 'reset' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-30 14:31:59 -08:00
Tom Eastep	5dcb684efc	Don't be specific when deleting IPv6 balanced/fallback default routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-28 15:26:17 -08:00
Tom Eastep	3e87e5004a	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2017-11-27 09:36:13 -08:00
Roberto C. Sánchez	c89b113a61	Fix typos	2017-11-26 15:39:59 -05:00
Tom Eastep	7289175070	Chop first config dir if non-root or if compiling for export. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-23 09:57:12 -08:00
Tom Eastep	a9373d727b	Use logical interface names in the samples. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-22 09:40:15 -08:00
Tom Eastep	528b473f6b	Add some additional documentation to the Config module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-22 08:41:37 -08:00
Tom Eastep	d22210c074	Set g_export before calling get_config() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 13:46:41 -08:00
Tom Eastep	f411f7dd31	Remove redundant test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 10:45:10 -08:00
Tom Eastep	502e98eb9f	Add Redfish console to the IPMI macro ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 10:44:54 -08:00
Tom Eastep	f73bad440d	Don't verify IP and SHOREWALL_SHELL when compiling/checking for test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 10:02:15 -08:00
W. van den Akker	23bc019a82	Add OpenWRT options. ... Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 09:00:46 -08:00
Tom Eastep	9d299ef866	Don't verify IP and SHOREWALL_SHELL setting when compiling for export ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 08:50:05 -08:00
Tom Eastep	2a9272ccd1	Clean up RAs involving "|" ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-14 08:26:17 -08:00
Tom Eastep	130ddff9de	Correct a typo in an error message ... - Includes cosmetic changes to Providers.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-10 11:25:52 -08:00
Tom Eastep	9cf298482d	Merge branch '5.1.8'	2017-11-09 12:59:59 -08:00
Tom Eastep	c5a586aa37	Allow [...] around gateway address in the providers file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-09 12:20:01 -08:00
Tom Eastep	832418585a	Don't make persistent routes and rules dependent on autosrc. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-08 09:46:25 -08:00
Tom Eastep	605f61fb3c	Don't make persistent routes and rules dependent on autosrc. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-08 09:45:59 -08:00
Tom Eastep	8dfa0be611	Add shorewall-logging(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-02 15:26:14 -07:00
Tom Eastep	ef8b85fc3e	Implement support for logging in the SNAT file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-02 12:44:42 -07:00
Tom Eastep	2b5613026a	Merge branch '5.1.8'	2017-10-25 09:14:20 -07:00
Tom Eastep	c7c318c0e7	Align columns in actions.std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-25 09:13:37 -07:00
Tom Eastep	d1976189aa	Correct a couple of typos in the manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-22 12:59:31 -07:00
Tom Eastep	6b4905c2c0	Replace 'tcp' with '6' in action.TCPFlags ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 12:33:36 -07:00
Tom Eastep	774b707352	Inline Multicast when Address Type Match is available ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 12:01:41 -07:00
Tom Eastep	c3bd58827f	Align columns in actions.std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 11:44:10 -07:00
Tom Eastep	b35f1112f4	Allow 'noinline' in /etc/shorewall[6]/actions to override 'inline' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 09:19:50 -07:00
Tom Eastep	a0eb91cb90	Inline the Broadcast action when ADDRTYPE match is available ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-20 08:49:14 -07:00
Tom Eastep	77d9eeb915	Eliminate extra parameter editing of TPROXY parameter list. ... - Clarify syntax for actions with multiple parameters Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-19 13:08:12 -07:00
Tom Eastep	17838c1443	Add TCPMSS to the allowed mangle actions. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-19 12:58:38 -07:00
Tom Eastep	5867ce6c3b	CLAMPMSS now done in the mangle table. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-18 15:55:07 -07:00
Tom Eastep	8ea96098bf	Warning when 'persistent' used with RESTORE_DEFAULT_ROUTE=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 15:22:07 -07:00
Tom Eastep	02ed36332a	Revert "Warn when RESTORE_DEFAULT_ROUTE=Yes and a persistent provider is defined" ... This reverts commit 39a3c72057.	2017-10-11 11:24:54 -07:00
Tom Eastep	15a3b29a32	Revert "Document warning when RESTORE_DEFAULT_ROUTE=Yes and 'persistent'" ... This reverts commit bfab002dda.	2017-10-11 11:24:39 -07:00
Tom Eastep	cb4f9e7261	Don't restore default routes when there is an enabled fallback provider ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:24:13 -07:00
Tom Eastep	bfab002dda	Document warning when RESTORE_DEFAULT_ROUTE=Yes and 'persistent' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:01:09 -07:00
Tom Eastep	ddb12fcad9	Add/correct comments ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:00:46 -07:00
Tom Eastep	42ce754961	Don't restore default routes when a fallback= provider is enabled ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:00:05 -07:00
Tom Eastep	5cd4d63bc5	Delete main default routes when a fallback provider is enabled ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:59:31 -07:00
Tom Eastep	5b567f2d8b	Correct delete_default_routes() in tables other than main ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:58:48 -07:00
Tom Eastep	39a3c72057	Warn when RESTORE_DEFAULT_ROUTE=Yes and a persistent provider is defined ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:58:09 -07:00
Tom Eastep	b47e633c38	Use 'route replace' rather than 'route add' to avoid persistence issues ... Previous failure case was: - disable interface - reload - enable interface Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-09 08:58:10 -07:00
Tom Eastep	1b55a37a28	Ensure that 'rule add' commands don't fail with persistent interfaces ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-08 08:53:53 -07:00
Tom Eastep	a97dcd23d0	Allow merging of rules that specify an IPSEC policy ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-07 13:17:43 -07:00
Tom Eastep	108b169d8d	Treat LOG_TARGET like all other capabilities ... - Previous implementation could generate unworkable script when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-06 08:01:52 -07:00
Tom Eastep	8469f983d8	Merge branch '5.1.7' ... # Conflicts: # Shorewall/Perl/prog.footer	2017-09-29 15:25:37 -07:00
Tom Eastep	f54acb665a	Correct handling of mark range in MARK target. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-29 14:44:33 -07:00
Tom Eastep	3d2e9eb93e	Improve the fix for SELinux "getattr" denials ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-28 15:16:50 -07:00
Tom Eastep	c6a939301f	Improve the fix for SELinux "getattr" denials ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-28 15:16:00 -07:00
Tom Eastep	1cb98254cc	Handle SELinux getattr denials in open() processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-26 16:42:54 -07:00
Tom Eastep	baa791a1e3	Handle SELinux getattr denials in open() processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-26 16:41:50 -07:00
Tom Eastep	8b4b965f63	Remove unnecessary disable/enable of script generation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 14:36:30 -07:00
Tom Eastep	8ee2d6246c	Update a comment in the compiler ... - get_configuration() also processes the shorewallrc file(s) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 12:32:34 -07:00
Tom Eastep	a7be3dfece	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:13 -07:00
Tom Eastep	846e8c4ece	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:08 -07:00
Tom Eastep	e2bf7e6584	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:28:09 -07:00
Tom Eastep	ff3994f6a1	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:17:50 -07:00
Tom Eastep	494ec9c59c	Avoid extra comparison in reload_command() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:49:11 -07:00
Tom Eastep	1cde92e8f3	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:43:44 -07:00
Tom Eastep	721a1e3b33	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:39:52 -07:00
Tom Eastep	84fa774cb7	Change copyright dates in lib.runtime ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 09:03:00 -07:00
Tom Eastep	91e59c2ed4	Remove the Lite Makefiles ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 11:56:04 -07:00
Tom Eastep	be5aabcbfb	Correct typo in Chains.pm ... &g_dockeringress -> $g_dockeringress Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:14:22 -07:00
Tom Eastep	a8937e6bc8	Correct harmless typo ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:06:41 -07:00
Tom Eastep	5e1cf17ebc	DOCKER-INGRESS support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-17 10:57:29 -07:00
Tom Eastep	85a7ec6fe5	Correct module loading in the compiler ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-14 15:08:38 -07:00
Tom Eastep	2ed11c7e15	Default ADD_IP_ALIASES to 'No' in Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:55:53 -07:00
Tom Eastep	4f79d2e82b	Move and simplify handling of nat columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:04 -07:00
Tom Eastep	e6a2ba78a4	Correct handling of DEST column during action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 10:05:37 -07:00
Tom Eastep	41ea3bdeda	Modify the Event actions to handle NAT rules ... - Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:47:12 -07:00
Tom Eastep	1065c2951b	Allow NAT targets to be passed to the Event actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:46:03 -07:00
Tom Eastep	3b373f3f21	Correct handling of ipsets in the DEST column of the snat file ... - Also corrected handling of exclusion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-06 11:30:42 -07:00
Tom Eastep	0c05ab3bff	Correct typo in shorewall-snat(5) ... - missing ':' in IPv4 Example 4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-05 10:29:19 -07:00
Tom Eastep	b54a691110	Improve dynamic gateway detection ... - Use provider's routing table, if any Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 15:04:47 -07:00
Tom Eastep	90f33dd436	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:48:14 -07:00
Tom Eastep	3d322d31b7	Add UDP rule to macro.RDP ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-22 08:07:32 -07:00
Tom Eastep	34e4fffd7d	Module suffix changes ... - Re-order default list in the compiler to match lib.common - MODULE_SUFFIX="ko ko.xz" in standard .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 12:44:23 -07:00
Tom Eastep	419ff8903b	Invert logic in Shorewall::Chains::delete_reference() - better readability ... - similar change in Shorewall::Chains::adjust_reference_counts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:25:27 -07:00
Tom Eastep	390ac30be8	Remove a superfluous line of code from Shorewall::Chains::format_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:12:54 -07:00
Tom Eastep	8cb98f16ea	Add a comment in Shorewall::Chains::optimize_level8() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 08:08:24 -07:00
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	ddefde2d10	Correct handling of address variables in DNAT rule. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 08:30:11 -07:00
Tom Eastep	2beeedd8fe	Remove incorrect '+' info from shorewall-interfaces(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:19:00 -07:00
Tom Eastep	1a2647618e	Allow runtime address variables as the server IP in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:18:16 -07:00
Tom Eastep	72293883dd	Tabify the Zones module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 11:28:14 -07:00
Tom Eastep	c31397532c	Verify that parent and child zones have a common interface ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 09:24:05 -07:00
Tom Eastep	d0861e813b	Make Shorewall's handling of '+' consistent with that of iptables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 08:22:57 -07:00
Tom Eastep	da62bd2b32	Use a hash slice in recently-added code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:34 -07:00
Tom Eastep	a83c19cc33	Adjust some default values in shorewall.conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-10 15:48:16 -07:00
Tom Eastep	a504820d19	Correct optimize level 8 handling of policy and policychain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 16:56:30 -07:00
Tom Eastep	4c2c1bcdf1	Export CONFDIR and SHAREDIR to the generated script. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-06 13:42:01 -07:00
Tom Eastep	f2ee8013fc	Update the providers manpage re balanced IPv6 routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-05 10:12:42 -07:00
Tom Eastep	657215f9b5	Add sample enabled and disabled scripts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:50:49 -07:00
Tom Eastep	5589ab76d9	Add arguments to the enabled and disabled user exits ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:44:15 -07:00
Tom Eastep	6425e5ae5d	Remove superfluous white space in the generated script ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-02 14:09:05 -07:00
Tom Eastep	8521c6f750	Merge branch '5.1.5'	2017-08-02 14:02:03 -07:00
Tom Eastep	80e6cd8a2f	Add enabled and disabled user exits ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-29 15:15:57 -07:00
Tom Eastep	69a0061d0f	Correct handling of MAC addresses in the accounting file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-27 14:55:19 -07:00
Tom Eastep	5a24953e6c	Merge branch '5.1.5'	2017-07-27 09:14:50 -07:00
Tom Eastep	eea3cca90c	Correct handling of USER/GROUP in the OUTPUT accounting section ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-27 09:01:46 -07:00
Tom Eastep	a420ef04d9	Correct tcfilter source port handling when BASIC_FILTERS=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-26 16:48:53 -07:00
Tom Eastep	e573436b12	Correct tcfilter source port handling when BASIC_FILTERS=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-23 12:14:57 -07:00
Tom Eastep	b9b7baf98d	Merge branch '5.1.5'	2017-07-20 10:37:53 -07:00
Tom Eastep	922bd9eeca	Implement SPARSE=Very ... - Only installs the .conf file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-09 16:18:09 -07:00
Tom Eastep	2d0cb5c2d8	Process the snat file if the masq file is empty ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-06 09:09:52 -07:00
Tom Eastep	9d160d4342	Add RESTORE_DEFAULT_ROUTE to shorewall6.conf samples ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-27 15:50:56 -07:00
Tom Eastep	1301848315	Change .conf files to specify USE_NFLOG_SIZE=No ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-26 10:46:16 -07:00
Tom Eastep	f050fc6e05	Avoid issues with Perl 5.30 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 20:57:48 -07:00
Tom Eastep	61b6898782	Add dropBcasts action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 18:36:54 -07:00
Tom Eastep	aee8c14ea6	Correct update setting of USE_NFLOG_SIZE ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 17:10:44 -07:00
Tom Eastep	ff2323b249	Add the USE_NFLOG_SIZE option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 16:54:14 -07:00
Tom Eastep	b4a06e9656	NFLOG_SIZE capability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 13:44:26 -07:00
Tom Eastep	4122021344	Improve editing of port numbers/service names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 07:44:23 -07:00
Tom Eastep	71d50e0217	Use --nflog-size rather than --nflog-range ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 07:43:39 -07:00
Tom Eastep	1b6f15d577	Correct multiple fallback providers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-23 07:41:23 -07:00
Tom Eastep	7515520b46	Don't use symlinks for shorewall6 manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-22 13:57:00 -07:00
Tom Eastep	2f5687c65a	Don't generate multihop routes unnecessarily ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-18 09:37:41 -07:00
Tom Eastep	66d1fbd3aa	Clean up shorewall[6].conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 10:39:46 -07:00
Tom Eastep	c410459e27	Correct install of section 5 manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 10:30:49 -07:00
Tom Eastep	987e54cd54	Move shorewall6-proxyndp.xml to Shorewall/manpages/shorewall-proxyndp.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 09:07:28 -07:00
Tom Eastep	42a46d42b6	Centralize the complete list of manpages in shorewall(8) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-16 17:11:43 -07:00
Tom Eastep	d8ef934f24	Consolidate manpages between Shorewall and Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-16 15:01:41 -07:00
Tom Eastep	62a60ad995	Add comments around functions moved from IPAddrs.pm to Chains.pm. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-14 12:26:22 -07:00
Tom Eastep	b1ba05db2b	Correct handling of port ranges and port variables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 17:07:55 -07:00
Tom Eastep	57f7cb4f3c	Runtime Port Variables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 11:55:56 -07:00
Tom Eastep	4cf60258af	Correct a runtime error with NFQUEUE. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 11:07:54 -07:00
Tom Eastep	1061644ac7	Clean up links in the manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-08 15:43:59 -07:00
Tom Eastep	4a262c0e1b	Add FIN action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-31 08:28:27 -07:00
Tom Eastep	29ffb7eb4b	Merge branch '5.1.4'	2017-05-31 08:23:07 -07:00
Tom Eastep	a775fdcb7c	Remove stutter from the .conf manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-31 08:21:45 -07:00
Tom Eastep	12a32d3a6b	Update LOGFORMAT documentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-26 07:33:34 -07:00
Tom Eastep	45d96a5d64	Clean up the introductory part of shorewall-rules.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-19 08:02:42 -07:00
Tom Eastep	f21d6de4d6	Clean up the introductory part of shorewall-rules.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-17 15:28:51 -07:00
Tom Eastep	965a8e8f68	Minor cleanup of the Config module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-15 09:29:12 -07:00
Tom Eastep	eb26a467e9	Add snat and mangle to %config_files ... - Tabify initialization of %config_files Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-12 08:37:54 -07:00
Tom Eastep	bb70a3637b	Add PERL_HASH_SEED option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-02 07:51:37 -07:00
Tom Eastep	6c20cc7c4f	Inline the start_command::do_it() function in lib.cli-std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-01 13:51:53 -07:00
Tom Eastep	d4e05f6163	Correct handling of IPv6 tunnel-src and tunnel-dst ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-23 08:36:22 -07:00
Tom Eastep	6201f37913	Clarify <filename> in the generated script's header ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-18 16:45:17 -07:00
Tom Eastep	7ee44d6b4b	Correct a typo in the generated script's header syntax description ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-18 16:31:51 -07:00
Tom Eastep	363b8f9802	Correct validation of string interface options. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-13 06:48:14 -07:00
Tom Eastep	00d4724fd8	Some cleanup of the Chains module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-05 20:14:13 -07:00
Tom Eastep	a46f19899b	Correct typo in links to the logging article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-27 16:12:56 -07:00
Tom Eastep	d2392c3a9b	Add IPv6 UPnP Support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-24 09:54:36 -07:00
Tom Eastep	0763b27b0b	Correct a comment ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 15:59:55 -07:00
Tom Eastep	8b90827611	Minor cleanup of split_columns() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 10:18:07 -07:00
Tom Eastep	8507c97b5a	Clean up column/value pair editing. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 09:46:52 -07:00
Tom Eastep	a6306f2c08	?reset action param now sets parmsmodified. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-18 12:53:05 -07:00
Tom Eastep	a79dc194a4	Re-factor the directive message change ... - results in much more compact code - Document change in the config basics doc Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-18 11:42:53 -07:00
Tom Eastep	bdcf93f92c	Report the call site when issuing messages from an action. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-17 17:08:19 -07:00
Tom Eastep	6b84727886	Delete useless blank line ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-17 13:26:07 -07:00
Tom Eastep	5f445d9c2b	Merge branch '5.1.3'	2017-03-16 14:14:20 -07:00
Tom Eastep	31bd10ffdd	Correct two-interface sample snat file ... - s/92/192/ Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 21:18:23 -07:00
Tom Eastep	c3303067fc	Correct all+ handling in the policy file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 11:20:37 -07:00
Tom Eastep	55cf06d0a8	Correct all+ handling in the policy file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 10:09:53 -07:00
Tom Eastep	158f6305b1	Correct install fix ... - Also remove extra logic from action.Broadcast Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:39:25 -07:00
Tom Eastep	6407520a35	Add warning messages to the deprecated actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:32:28 -07:00
Tom Eastep	54336eaa80	Delete IPv6 actions that are now handled by their IPv4 counterparts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:24:17 -07:00
Tom Eastep	5b85627fb8	Merge branch '5.1.3' ... Conflicts: Shorewall/Perl/Shorewall/Config.pm Shorewall6/Actions/action.Multicast	2017-03-14 14:16:47 -07:00
Tom Eastep	a00d7217e3	Correct last commit ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 13:58:59 -07:00
Tom Eastep	54ef4e4ced	Delete deprecated actions during install ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 13:46:24 -07:00
Tom Eastep	a447d726fa	Revert change which screwed up ?begin perl ... ?end perl line numbering ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 12:44:33 -07:00
Tom Eastep	fe29adbd66	Correct use of $family in combined actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 16:52:16 -07:00
Tom Eastep	4dc6be6b3b	Deprecate A_AllowICMPs ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 15:09:07 -07:00
Tom Eastep	6ebc8f4266	Merge branch '5.1.3'	2017-03-13 14:55:23 -07:00
Tom Eastep	c5c4211081	Unify actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 14:54:25 -07:00
Tom Eastep	4010f9bce4	Add multicast to the Deprecated A_Drop and A_Reject actions ... - Move A_Drop to deprecated/ directory Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 14:18:23 -07:00
Tom Eastep	02bb717d7d	Quote SMURF_LOG_LEVEL setting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:21:13 -07:00
Tom Eastep	046998ed84	Tabification of new actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:19:35 -07:00
Tom Eastep	24a014655b	Quote all _DEFAULT settings in the sample .conf files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:00:29 -07:00
Tom Eastep	0b8945da8e	Correctly handle expansion of option names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 10:20:15 -07:00
Tom Eastep	da363880a9	Always quote the LEVEL and DEFAULT settings when updating ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 09:51:58 -07:00
Tom Eastep	037fe490f3	Process config options in file order during update. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-12 17:09:41 -07:00
Tom Eastep	b13014c9ab	Expand variables in .conf except when upgrading ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-11 11:21:07 -08:00
Tom Eastep	76aef6cb04	Correct generation of '! --syn' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-11 08:43:04 -08:00
Tom Eastep	4c72b3ee58	Make sure that $LOG_LEVEL is defined ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-10 11:06:23 -08:00
Tom Eastep	d9071c5308	Correct $LOG_LEVEL expansion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-10 10:24:24 -08:00
Tom Eastep	3d8d5aa469	quote $LOG_LEVEL in shorewall[6].conf files ... - Delete AllowICMPs from IPv4 policy action settings Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-08 14:16:24 -08:00
Tom Eastep	49811d24fa	Correct convertion of tcrules->mangle when a writable mangle exists ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 15:21:45 -08:00
Tom Eastep	fe4aaee1b4	Fix typos in action.dropNotSyn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 14:37:08 -08:00
Tom Eastep	0ec7bc846e	Correct logging in inline policy actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 13:58:14 -08:00
Tom Eastep	dbcd4d9d16	Correct typo in action.AllowICMPs ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 13:57:05 -08:00
Tom Eastep	5a996cbda7	Change AllowICMPs to an inline action ... Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/actions.std	2017-03-07 13:56:44 -08:00
Tom Eastep	6019adaae5	Change macro.ICMPs to an inline action ... Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/actions.std	2017-03-07 13:54:52 -08:00
Tom Eastep	4f869c3506	More manpage updates for tcp:!syn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 11:13:58 -08:00
Tom Eastep	e3c2874b21	Modify dropNotSyn to use {proto=6:!syn} ... - also make the same change in the rejNotSyn audited case	2017-03-07 11:00:39 -08:00
Tom Eastep	e8a0142480	Document tcp:!syn support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:48:24 -08:00
Tom Eastep	a4768776f7	Modify rejNotSyn to use new/corrected features ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:34:15 -08:00
Tom Eastep	8e000b158e	Correct the handling of tcp-reset ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:33:51 -08:00
Tom Eastep	f1d1ab6411	Implement tcp:!syn in PROTO column ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:33:20 -08:00
Tom Eastep	cd103bb715	Correct rejNotSyn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 16:01:31 -08:00
Tom Eastep	5f1370f1b4	Clear the firewall on Debian systemd 'stop' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 11:22:55 -08:00
Tom Eastep	dc53fa2665	Correct file/line from ?error ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 11:02:06 -08:00
Tom Eastep	71d9a03697	Update shorewall[6]-rules. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 14:29:57 -08:00
Tom Eastep	137d4bcc90	Alter logging behavior of Limit ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 13:03:57 -08:00
Tom Eastep	356d3fa2dd	Correct new directives with respect to omitting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 12:09:54 -08:00
Tom Eastep	80d93235b5	Eliminate builtin actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 12:09:33 -08:00
Tom Eastep	c1e7fce1c5	Report the file/line where action invoked ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 09:29:00 -08:00
Tom Eastep	63ec936f21	Remove determinism sorts	2017-03-04 19:05:33 -08:00
Tom Eastep	dabe0bd205	Set PERL_HASH_SEED to make compilation deterministic. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-04 18:48:48 -08:00
Tom Eastep	63cf7dd699	Revert "Move $test to the config module." ... This reverts commit 876d76b294.	2017-03-04 18:45:40 -08:00
Matt Darfeuille	0b3a32b365	Change the preferred way to remove sysvinit script ... - Correct typo in command - Correct spacing Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-04 09:03:59 -08:00
Tom Eastep	a7d45e9566	Restore logging to the BLACKLIST action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-03 10:14:30 -08:00
Tom Eastep	876d76b294	Move $test to the config module. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 11:42:07 -08:00
Tom Eastep	9075a6dd7a	Copy libs and footer when compiling for test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 10:49:49 -08:00
Tom Eastep	61f5e3531c	Rename action.allowUPnP to action.allowinUPnP ... - Allows 'show action allowinUPnP' to work correctly. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 10:05:31 -08:00
Matt Darfeuille	7ffe8e4e4b	shorewall: Document the -p option in installer ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-23 09:33:35 -08:00