Tom Eastep
|
4f869c3506
|
More manpage updates for tcp:!syn
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-07 11:13:58 -08:00 |
|
Tom Eastep
|
e8a0142480
|
Document tcp:!syn support
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-07 10:48:24 -08:00 |
|
Tom Eastep
|
71d9a03697
|
Update shorewall[6]-rules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-03-05 14:29:57 -08:00 |
|
Tom Eastep
|
48d301b2cf
|
Rename the policy LIMIT column to RATE
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-12 10:17:43 -08:00 |
|
Tom Eastep
|
735919d8d3
|
Add LOG_LEVEL option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-12 09:52:55 -08:00 |
|
Tom Eastep
|
09fda9eb6c
|
Manpage updates:
- interfaces: Clarify the 'bridge' option
- rtrules: Warn about similar rules with same priority
|
2017-02-10 11:43:04 -08:00 |
|
Tom Eastep
|
7e984af094
|
Some cleanup of policy actions
- Allow '+' in policy file action list
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-07 13:19:53 -08:00 |
|
Tom Eastep
|
e91f414223
|
Document policy action changes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-06 17:09:23 -08:00 |
|
Tom Eastep
|
079d862bb3
|
Document default-action lists
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-02-06 10:51:57 -08:00 |
|
Tom Eastep
|
70a395892f
|
Make BLACKLIST work correctly in the blrules file
- Add the 'section' action option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-23 15:03:02 -08:00 |
|
Tom Eastep
|
e6933f4c8d
|
Add BLACKLIST policy
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-18 10:55:15 -08:00 |
|
Tom Eastep
|
cc3b8793e0
|
Make BALANCE_PROVIDERS default the setting of USE_DEFAULT_RT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-17 15:02:16 -08:00 |
|
Tom Eastep
|
45b9ddf188
|
Add BALANCE_PROVIDERS option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-17 08:58:09 -08:00 |
|
Tom Eastep
|
2d16fac9ed
|
Revert "Implement USE_DEFAULT_RT=Exact"
This reverts commit 2ca1ae734a.
|
2017-01-17 08:25:33 -08:00 |
|
Tom Eastep
|
2ca1ae734a
|
Implement USE_DEFAULT_RT=Exact
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-14 08:14:08 -08:00 |
|
Tom Eastep
|
b8c322a05f
|
Ignore SUBSYSLOCK when $SERVICEDIR is non-empty
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-06 15:50:26 -08:00 |
|
Tom Eastep
|
f68d3fd9fa
|
Revert "Remove SUBSYSLOCK"
This reverts commit 386b137e9b.
|
2017-01-06 09:49:40 -08:00 |
|
Tom Eastep
|
386b137e9b
|
Remove SUBSYSLOCK
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2017-01-05 10:03:03 -08:00 |
|
Tom Eastep
|
c4bbb46e3f
|
Eliminate rawpost table support
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-26 14:20:08 -08:00 |
|
Tom Eastep
|
e3951cb5a3
|
Re-add volume 8 manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-18 16:16:50 -08:00 |
|
Tom Eastep
|
08c6b80e1e
|
Correct typo in the snat manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-11 14:32:27 -08:00 |
|
Tom Eastep
|
cb7ab3908a
|
SOURCE/DEST changes in the mangle manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-11 14:06:59 -08:00 |
|
Tom Eastep
|
b4d42507b2
|
Another SOURCE/DEST manpage change.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-10 16:22:47 -08:00 |
|
Tom Eastep
|
b756c63b1e
|
More SOURCE/DEST manpage updates
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-10 14:41:08 -08:00 |
|
Tom Eastep
|
eea9882953
|
Implement CPU Fanout for NFQUEUE.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-09 10:46:39 -08:00 |
|
Tom Eastep
|
6a43dd1564
|
Bring shorewall6-actions(5) up to date
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-09 09:46:29 -08:00 |
|
Tom Eastep
|
5ea3334a66
|
Support a richer SOURCE and DEST syntax
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-12-09 09:43:10 -08:00 |
|
Tom Eastep
|
77e83f0afd
|
Eliminate the CHAIN_SCRIPTS option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-29 16:33:23 -08:00 |
|
Tom Eastep
|
a45fe692cc
|
Add a SWITCH column to the mangle files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-29 16:13:44 -08:00 |
|
Tom Eastep
|
799b17210c
|
Enhanced syntax for SOURCE and DEST columns in the rules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-25 15:10:14 -08:00 |
|
Tom Eastep
|
01306e1230
|
Try another approach to the RCP_/RSH_COMMAND formatting issue
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-23 14:48:28 -08:00 |
|
Tom Eastep
|
87870ac46e
|
Clean up formatting of the RCP_/RSH_COMMAND manpage descriptions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-23 14:08:13 -08:00 |
|
Tom Eastep
|
875c352473
|
Unify the CLI
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-21 10:00:55 -08:00 |
|
Tom Eastep
|
6095d05af9
|
Update manpages for 'update' improvements
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-11-07 13:50:11 -08:00 |
|
Tom Eastep
|
3f68814a38
|
Disallow more than one address[-range] in SNAT rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-31 15:15:35 -07:00 |
|
Tom Eastep
|
46c8147521
|
Deprecate INLINE_MATCHES=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-27 13:55:11 -07:00 |
|
Tom Eastep
|
0e7d5f3972
|
Support '+' in SNAT action invocation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-18 16:00:36 -07:00 |
|
Tom Eastep
|
5b5f91f75f
|
SNAT option documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-18 15:32:22 -07:00 |
|
Tom Eastep
|
f3dd77a3f1
|
Merge branch '5.0.13'
|
2016-10-16 16:36:08 -07:00 |
|
Tom Eastep
|
2c191bf595
|
Correct .conf manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-16 15:07:34 -07:00 |
|
Tom Eastep
|
43fdddb438
|
Add 'snat' config file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-15 11:38:52 -07:00 |
|
Tom Eastep
|
28849e60cf
|
Correct example in the shorewall6-masq manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-14 15:55:36 -07:00 |
|
Tom Eastep
|
49fae96b09
|
Update the manpages for 'blacklist' verbosity
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-10 19:45:42 -07:00 |
|
Tom Eastep
|
3058f2fb84
|
Delete code supporting old kernel/iproute2 IPv6 restrictions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-07 11:02:36 -07:00 |
|
Tom Eastep
|
b5e7e41708
|
Correct NFQUEUE! manpage description
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-07 05:50:24 -07:00 |
|
Tom Eastep
|
14e8568d9e
|
Add the FIREWALL .conf option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-05 15:03:54 -07:00 |
|
Tom Eastep
|
ca7ca4bdfe
|
Add a 'timeout' option to DYNAMIC_BLACKLIST
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-05 12:56:47 -07:00 |
|
Tom Eastep
|
8d731c81e4
|
Add 'disconnect' option to ipset-based dynamic blacklisting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-04 09:09:45 -07:00 |
|
Tom Eastep
|
6ad7d47eb6
|
Correct DYNAMIC_BLACKLISTING documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2016-10-03 08:19:19 -07:00 |
|
Tom Eastep
|
97186e5402
|
Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code
|
2016-10-02 14:04:02 -07:00 |
|