Tom Eastep
|
12279e57ed
|
Add information about 'flow' to the release notes
|
2009-12-04 15:04:59 -08:00 |
|
Tom Eastep
|
ee2195e745
|
Allow LOGFILE=/dev/null
|
2009-12-03 16:30:06 -08:00 |
|
Tom Eastep
|
486f1a3493
|
Allow /dev/null for LOGFILE
|
2009-12-03 16:16:13 -08:00 |
|
Tom Eastep
|
a188fec942
|
Auto-load cls_flow and search .../sched for modules
|
2009-12-03 12:20:58 -08:00 |
|
Tom Eastep
|
4bf55883ee
|
Auto-load cls_flow
|
2009-12-03 12:15:23 -08:00 |
|
Tom Eastep
|
4c7731fee6
|
Remove change log error for rejected change
|
2009-12-03 10:44:36 -08:00 |
|
Tom Eastep
|
768da64869
|
Remove incorrect migration consideration
|
2009-12-03 07:05:36 -08:00 |
|
Tom Eastep
|
4494272dcd
|
Improve error message
|
2009-11-29 09:55:32 -08:00 |
|
Tom Eastep
|
8c033de049
|
Fix limit check on TC mark values
|
2009-11-28 14:05:27 -08:00 |
|
Tom Eastep
|
8b2c6853f3
|
Remove description of reverted change from the release notes
|
2009-11-28 08:06:01 -08:00 |
|
Tom Eastep
|
e582f222ad
|
Backout another Patch from the Virtual Zone Sequence and re-apply a couple of small optimizations
|
2009-11-28 07:25:31 -08:00 |
|
Tom Eastep
|
e5106f10bc
|
Revert 8ff4d004c0
|
2009-11-28 07:23:23 -08:00 |
|
Tom Eastep
|
4e8d753682
|
Revert "Finish Virtual Zones"
This reverts commit 222c8cf88f .
|
2009-11-28 07:20:52 -08:00 |
|
Tom Eastep
|
d1812b4174
|
Revert "Fix a couple of bugs in virtual zones"
This reverts commit 22991ac9dd .
|
2009-11-28 07:20:28 -08:00 |
|
Tom Eastep
|
038b84e775
|
Revert "Small optimization in virtual zones"
This reverts commit 251d7116c8 .
|
2009-11-28 07:20:01 -08:00 |
|
Tom Eastep
|
f21c71d7a6
|
Revert "Match section rules to the number of mark rules"
This reverts commit 1699d8e941 .
|
2009-11-28 07:19:41 -08:00 |
|
Tom Eastep
|
0b1621027b
|
Revert "Make 'virtual' a zone type rather than an option"
This reverts commit 18eedf7e34 .
|
2009-11-28 07:19:10 -08:00 |
|
Tom Eastep
|
f5378e7652
|
Revert "More doc updates for virtual zones"
This reverts commit a37e56d823 .
|
2009-11-28 07:18:46 -08:00 |
|
Tom Eastep
|
ea2c55a993
|
Revert "Fix off-by-one problem"
This reverts commit 543af8bccb .
|
2009-11-28 07:18:07 -08:00 |
|
Tom Eastep
|
f5bf3c9b43
|
Fix merge conflicts
|
2009-11-28 07:16:03 -08:00 |
|
Tom Eastep
|
7352771c5d
|
Fix .spec history to omit false steps
|
2009-11-27 12:29:11 -08:00 |
|
Tom Eastep
|
8297db4c59
|
Fix .spec history to omit false steps
|
2009-11-27 11:41:14 -08:00 |
|
Tom Eastep
|
543af8bccb
|
Fix off-by-one problem
|
2009-11-27 08:56:23 -08:00 |
|
Tom Eastep
|
7f16e96167
|
Set version to 4.4.5 Beta1
|
2009-11-27 08:52:37 -08:00 |
|
Tom Eastep
|
a37e56d823
|
More doc updates for virtual zones
|
2009-11-27 08:49:00 -08:00 |
|
Tom Eastep
|
18eedf7e34
|
Make 'virtual' a zone type rather than an option
|
2009-11-27 08:17:18 -08:00 |
|
Tom Eastep
|
1699d8e941
|
Match section rules to the number of mark rules
|
2009-11-26 17:12:11 -08:00 |
|
Tom Eastep
|
251d7116c8
|
Small optimization in virtual zones
|
2009-11-26 14:48:46 -08:00 |
|
Tom Eastep
|
22991ac9dd
|
Fix a couple of bugs in virtual zones
|
2009-11-26 14:19:10 -08:00 |
|
Tom Eastep
|
222c8cf88f
|
Finish Virtual Zones
|
2009-11-26 12:14:58 -08:00 |
|
Tom Eastep
|
8ff4d004c0
|
Better virtual zone implementation
|
2009-11-25 18:14:14 -08:00 |
|
Tom Eastep
|
8263ea1312
|
Limit providers to 15
|
2009-11-25 12:18:08 -08:00 |
|
Tom Eastep
|
d189c08533
|
Revert "Add 'virtual' zone support"
This reverts commit a2cd4bd1f4 .
|
2009-11-25 11:51:13 -08:00 |
|
Tom Eastep
|
a2cd4bd1f4
|
Add 'virtual' zone support
|
2009-11-25 09:42:28 -08:00 |
|
Tom Eastep
|
4c40b205f8
|
Revert "Experimental explicit CONTINUE"
This reverts commit 10056a03d9 .
|
2009-11-24 13:14:24 -08:00 |
|
Tom Eastep
|
10056a03d9
|
Experimental explicit CONTINUE
|
2009-11-24 12:50:53 -08:00 |
|
Tom Eastep
|
cd84efea94
|
Yet one more change to IPv6 address validation
|
2009-11-24 08:29:12 -08:00 |
|
Tom Eastep
|
deb45c5a27
|
Yet another IPv6 Address Normalization fix
|
2009-11-23 15:57:12 -08:00 |
|
Tom Eastep
|
bdb673a642
|
More IPv6 fixes
|
2009-11-23 15:21:25 -08:00 |
|
Tom Eastep
|
1710f9ce7c
|
Several fixes to IPv6 Address Handling
|
2009-11-23 14:44:53 -08:00 |
|
Tom Eastep
|
9d85d0ff7a
|
Allow IPv6 DNS names in net contexts
|
2009-11-23 13:51:46 -08:00 |
|
Tom Eastep
|
d3d21d4d18
|
Fix 'show policies' in Shorewall6[-lite]
|
2009-11-23 13:50:41 -08:00 |
|
Tom Eastep
|
f186c436d4
|
Improve wording of Problem Corrected #3
|
2009-11-23 11:48:08 -08:00 |
|
Tom Eastep
|
5610f78a48
|
Update version of Shorewall::Policy; improve 'expanded' description in Shorewall::Chains
|
2009-11-23 11:31:38 -08:00 |
|
Tom Eastep
|
cc809eaf78
|
Complete merge of 4.4 branch into master
|
2009-11-23 11:15:33 -08:00 |
|
Tom Eastep
|
c17ac8f23f
|
commit crap for now
|
2009-11-23 11:13:57 -08:00 |
|
Tom Eastep
|
532105ec39
|
Allow specific policy to supersede a wildcard policy
|
2009-11-23 10:02:04 -08:00 |
|
Tom Eastep
|
b30cae89e3
|
Allow <zone>::<serverport> in the rules file DEST column
|
2009-11-23 09:56:15 -08:00 |
|
Tom Eastep
|
99a35c1bf0
|
Allow <zone>::<serverport> in the rules file DEST column
|
2009-11-23 09:33:16 -08:00 |
|
Tom Eastep
|
d43ba935d1
|
Simplify port == 0 test
|
2009-11-22 09:03:01 -08:00 |
|
Tom Eastep
|
5b02ef68a5
|
Simplify port == 0 test
|
2009-11-22 09:00:03 -08:00 |
|
Tom Eastep
|
90170d6018
|
Update changelog
|
2009-11-22 08:58:06 -08:00 |
|
Tom Eastep
|
d4ff629fd8
|
Generate error on port == 0
|
2009-11-22 08:44:11 -08:00 |
|
Tom Eastep
|
720442b400
|
Fix merge screwup
|
2009-11-22 08:43:32 -08:00 |
|
Tom Eastep
|
bd9c0ac285
|
Generate error on port == 0
|
2009-11-22 08:39:03 -08:00 |
|
Tom Eastep
|
76e7dea858
|
Generate error on port == 0
|
2009-11-22 08:36:40 -08:00 |
|
Tom Eastep
|
6e9d9e239d
|
Apply 4.4.4.1 changes to master
|
2009-11-22 08:20:07 -08:00 |
|
Tom Eastep
|
c8209f4ce2
|
Apply bridge fix to 4.4
|
2009-11-22 08:18:23 -08:00 |
|
Tom Eastep
|
4aeee6fd8b
|
Make 'expanded' apply to all wildcard policies
|
2009-11-21 14:18:01 -08:00 |
|
Tom Eastep
|
c7de19cf39
|
Allow specific policy to supersede an expanded one
|
2009-11-21 13:56:40 -08:00 |
|
Tom Eastep
|
cbe944c354
|
Open the 4.5.0 Thread
|
2009-11-21 11:41:10 -08:00 |
|
Tom Eastep
|
ecf6a0ec4a
|
Open 4.4.5
|
2009-11-21 11:08:50 -08:00 |
|
Tom Eastep
|
bce4d51a18
|
Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes
|
2009-11-21 07:54:42 -08:00 |
|
Tom Eastep
|
c5bb493b29
|
Fix class number assignment when WIDE_TC_MARKS=Yes
|
2009-11-20 12:25:15 -08:00 |
|
Tom Eastep
|
0df84cf8b5
|
Remove superfluous line of code
|
2009-11-19 10:54:58 -08:00 |
|
Tom Eastep
|
a23632f45e
|
Mostly cosmetic cleanup of Shorewall::Chains
|
2009-11-19 10:35:25 -08:00 |
|
Tom Eastep
|
c39a9fb5eb
|
Fix typo in shorewall-rules(5)
|
2009-11-18 19:55:20 -08:00 |
|
Tom Eastep
|
4579a71574
|
More massaging of redundant test suppression
|
2009-11-17 11:14:02 -08:00 |
|
Tom Eastep
|
831611e792
|
Update version of Shorewall::Policy
|
2009-11-16 20:24:01 -08:00 |
|
Tom Eastep
|
5f70b261b6
|
Update version of Shorewall::Compiler
|
2009-11-16 20:21:59 -08:00 |
|
Tom Eastep
|
c4bfab29a5
|
Clean up release notes
|
2009-11-16 15:21:11 -08:00 |
|
Tom Eastep
|
9d5dd2ad3a
|
Implement an '-l' option to the 'show' command
|
2009-11-16 15:14:24 -08:00 |
|
Tom Eastep
|
5ec4f8d82c
|
Unconditionally include route marking and sticky chains
|
2009-11-16 14:15:01 -08:00 |
|
Tom Eastep
|
2a910ebddf
|
Suppress redundant tests for provider availability in route rules processing
|
2009-11-16 12:43:44 -08:00 |
|
Tom Eastep
|
31f01fe765
|
Document fixing route rule addition code
|
2009-11-16 11:20:02 -08:00 |
|
Tom Eastep
|
016537f631
|
Don't add route rules when interface is down
|
2009-11-16 10:58:38 -08:00 |
|
Tom Eastep
|
dd543a2934
|
Tweak policies display
|
2009-11-16 09:30:37 -08:00 |
|
Tom Eastep
|
f5a019becc
|
Implement 'show policies' command
|
2009-11-15 09:24:56 -08:00 |
|
Tom Eastep
|
b662718eec
|
Replace canonical_chain by rules_chain
|
2009-11-14 07:07:19 -08:00 |
|
Tom Eastep
|
10affb1cde
|
Set version to 4.4.4
|
2009-11-13 13:52:49 -08:00 |
|
Tom Eastep
|
fa3bdde214
|
Set version to Beta2
|
2009-11-13 12:39:41 -08:00 |
|
Tom Eastep
|
0e6c9abb5b
|
A fix for COPY handling
|
2009-11-12 16:45:39 -08:00 |
|
Tom Eastep
|
f904866336
|
More minor cleanup of chain name change
|
2009-11-12 12:30:08 -08:00 |
|
Tom Eastep
|
2d53f8cb0c
|
Delete unnecessary function
|
2009-11-11 16:35:46 -08:00 |
|
Tom Eastep
|
e748341afd
|
Correct mis-statement in the release notes
|
2009-11-11 16:35:06 -08:00 |
|
Tom Eastep
|
b943f09e37
|
Fix indentation
|
2009-11-11 12:34:15 -08:00 |
|
Tom Eastep
|
4e6b8f8f42
|
Set version to 4.4.4-Beta1
|
2009-11-11 10:58:22 -08:00 |
|
Tom Eastep
|
0f078e7440
|
Ignore empty port in INTERFACE column
|
2009-11-11 10:52:14 -08:00 |
|
Tom Eastep
|
a4eb581d44
|
Document full logical interface implementation
|
2009-11-11 10:45:01 -08:00 |
|
Tom Eastep
|
06d3b2c692
|
Allow wildcard logical names in COPY column
|
2009-11-11 10:17:53 -08:00 |
|
Tom Eastep
|
6987cd15c5
|
Avoid dereference of null variable
|
2009-11-11 10:10:45 -08:00 |
|
Tom Eastep
|
ba8ad6346a
|
More use of logical chain name
|
2009-11-11 10:06:06 -08:00 |
|
Tom Eastep
|
893a847c87
|
Suppress extra COMMENT warnings
|
2009-11-10 17:17:55 -08:00 |
|
Tom Eastep
|
bd9c651961
|
Clarify physical naming rules and '+'
|
2009-11-10 15:25:25 -08:00 |
|
Tom Eastep
|
bf8c38e054
|
Add ZONE2ZONE option to shorewall.conf
|
2009-11-10 14:12:55 -08:00 |
|
Tom Eastep
|
7120a73f0e
|
Minor efficiency improvement in move_rules()
|
2009-11-10 08:08:02 -08:00 |
|
Tom Eastep
|
c9e57c93a2
|
Insure uniqueness of physical names; use logical name when constructing the name of a chain
|
2009-11-10 07:24:14 -08:00 |
|
Tom Eastep
|
4e2f2923b6
|
Update ::Config::VERSION
|
2009-11-09 13:16:40 -08:00 |
|
Tom Eastep
|
79b5cb49df
|
Fix over-zealous use of physical name; Correct syntax errors
|
2009-11-09 12:38:00 -08:00 |
|
Tom Eastep
|
893a0c9d42
|
Remove order dependency in interface OPTIONS processing
|
2009-11-09 11:15:08 -08:00 |
|
Tom Eastep
|
9b127e6e06
|
Improve performance of logical->physical mapping
|
2009-11-09 07:27:14 -08:00 |
|
Tom Eastep
|
92208251b7
|
Add undocumented LOGICAL_NAMES option
|
2009-11-09 07:01:25 -08:00 |
|
Tom Eastep
|
dda6f06883
|
Update module versions
|
2009-11-08 09:01:30 -08:00 |
|
Tom Eastep
|
4d977306f9
|
Make 'physical' work as a general logical name facility
|
2009-11-08 08:37:03 -08:00 |
|
Tom Eastep
|
83621ff416
|
Add logical->physical mapping to Shorewall::Chains
|
2009-11-08 07:11:38 -08:00 |
|
Tom Eastep
|
09f1b6501c
|
Add logical->physical mapping to Shorewall::Providers
|
2009-11-08 07:00:43 -08:00 |
|
Tom Eastep
|
ca1dd1416d
|
Add logical->physical mapping to Shorewall::Tc
|
2009-11-08 06:26:47 -08:00 |
|
Tom Eastep
|
1238b771a2
|
Apply logical->physical mapping to /proc settings
|
2009-11-07 18:59:10 -08:00 |
|
Tom Eastep
|
b1706e10e3
|
Correct typo
|
2009-11-07 07:58:15 -08:00 |
|
Tom Eastep
|
bcd4887d84
|
Correct capitalization in error message; remove unused variable
|
2009-11-07 07:39:28 -08:00 |
|
Tom Eastep
|
7f54a6fea9
|
Make non-wild physical work correctly
|
2009-11-07 07:19:52 -08:00 |
|
Tom Eastep
|
496cfc391e
|
Make parsing of zone options tighter
|
2009-11-06 15:51:53 -08:00 |
|
Tom Eastep
|
b491745f1c
|
More physical interface changes
|
2009-11-06 13:10:19 -08:00 |
|
Tom Eastep
|
4ef45ff665
|
Generate an error if a bridge port is configured as a provider interface
|
2009-11-06 09:22:16 -08:00 |
|
Tom Eastep
|
73eab1fa55
|
Report physical name in zone reports rather than logical name
|
2009-11-06 08:40:53 -08:00 |
|
Tom Eastep
|
d73ebb8a6a
|
Add comment explaining the purpose of dump_zone_contents()
|
2009-11-06 08:11:18 -08:00 |
|
Tom Eastep
|
7014bd3ea0
|
Add 'physical' interface option for bridge ports
|
2009-11-06 08:07:13 -08:00 |
|
Tom Eastep
|
89bdcf9a3d
|
Implement 'physical' option
|
2009-11-06 07:27:44 -08:00 |
|
Tom Eastep
|
a98195e156
|
Back out fix for multiple bridges with wildcard ports
|
2009-11-05 16:34:41 -08:00 |
|
Tom Eastep
|
fb3477b8b5
|
A couple of additional tweaks to the two-bridge fix
|
2009-11-05 13:40:03 -08:00 |
|
Tom Eastep
|
b4199fd068
|
Document ICMP codes
|
2009-11-05 11:44:40 -08:00 |
|
Tom Eastep
|
28b660c853
|
Avoid reporting bogus duplicate interface with two bridges and wildcard ports
|
2009-11-05 11:04:14 -08:00 |
|
Tom Eastep
|
4548db58da
|
Relax port list limitation in /etc/shorewall/routestopped
|
2009-11-03 11:36:32 -08:00 |
|
Tom Eastep
|
4f5c602d5f
|
Fix .spec error and document logrotate files
|
2009-11-03 10:12:38 -08:00 |
|
Tom Eastep
|
25549b176c
|
Update version to 4.4.4
|
2009-11-03 10:06:29 -08:00 |
|
Tom Eastep
|
306549119a
|
Add logrotate files to packages
|
2009-11-03 10:06:10 -08:00 |
|
Tom Eastep
|
5a525134ea
|
Be sure that startup log is secured 0600
|
2009-11-03 09:34:21 -08:00 |
|
Tom Eastep
|
f2f91ce7dd
|
Some optimizations
|
2009-11-03 09:28:34 -08:00 |
|
Tom Eastep
|
c893ba6ffa
|
Remove dependence of Shorewall::Rules on Scalar::Util
|
2009-11-03 07:40:06 -08:00 |
|
Tom Eastep
|
45653ffe79
|
A couple of more move_rules() tweaks
|
2009-11-02 15:35:00 -08:00 |
|
Tom Eastep
|
f97e0c5989
|
Flesh out fix for Perl run-time errors
|
2009-11-02 07:15:20 -08:00 |
|
Tom Eastep
|
11ddfa92e9
|
Eliminate Perl run-time errors out of move_rules()
|
2009-11-01 17:14:42 -08:00 |
|
Tom Eastep
|
23d0806da2
|
Change Shorewall6 default STARTUP_LOG and LOG_VERBOSITY
|
2009-11-01 11:09:17 -08:00 |
|
Tom Eastep
|
59d01ccf97
|
A couple of tweaks to 'limit' class option
|
2009-10-27 12:33:14 -07:00 |
|
Tom Eastep
|
105754823a
|
Raise max limit to 128
|
2009-10-26 13:03:26 -07:00 |
|
Tom Eastep
|
f0b4b1f42e
|
Add limit option to tcclasses
|
2009-10-26 12:23:32 -07:00 |
|
Tom Eastep
|
cc0adc218f
|
Update comments and release documentation
|
2009-10-26 10:03:51 -07:00 |
|
Tom Eastep
|
8251948d2a
|
Add a comment
|
2009-10-24 15:55:56 -07:00 |
|
Tom Eastep
|
b3571261dd
|
Fix optional providers
|
2009-10-24 12:05:44 -07:00 |
|
Tom Eastep
|
c922afaf23
|
Tweak release notes
|
2009-10-24 12:01:15 -07:00 |
|
Tom Eastep
|
3e2cf982a3
|
Correct messages issued when a provider is not added
|
2009-10-24 08:50:15 -07:00 |
|
Tom Eastep
|
86df82a29a
|
Fix IPv6 address validation error
|
2009-10-23 13:41:51 -07:00 |
|
Tom Eastep
|
46896e7dce
|
Fix for Ipv6
|
2009-10-23 11:34:13 -07:00 |
|
Tom Eastep
|
445527d27e
|
Use /etc/debian_version to distinguish Debian-based systems
|
2009-10-21 16:12:02 -07:00 |
|
Tom Eastep
|
d0cda6b6ea
|
Add TRACK_PROVIDERS option
|
2009-10-20 13:24:17 -07:00 |
|
Tom Eastep
|
49f361124e
|
Make 'track' the default
|
2009-10-20 12:24:28 -07:00 |
|
Tom Eastep
|
7adb9b12bb
|
Move all function declarations from prog.footer6 to prog.header6
|
2009-10-19 07:37:49 -07:00 |
|
Tom Eastep
|
a0482132c6
|
Move all function declarations from prog.footer6 to prog.header6
|
2009-10-19 07:28:30 -07:00 |
|
Tom Eastep
|
abc9ab061a
|
Remove superfluous variables from generated script
|
2009-10-19 07:25:03 -07:00 |
|
Tom Eastep
|
65e4a5ff66
|
Move all functions from prog.footer to prog.header; minor tweaks elsewhere
|
2009-10-18 08:47:20 -07:00 |
|
Tom Eastep
|
0a74320bc2
|
Fix progress message
|
2009-10-17 14:23:11 -07:00 |
|
Tom Eastep
|
31bbec0fdd
|
Make 'debug' work with the safe commands
|
2009-10-17 13:05:26 -07:00 |
|
Tom Eastep
|
30dbfdc949
|
Fix intentation problem introduces with config-detection fix
|
2009-10-17 11:08:34 -07:00 |
|
Tom Eastep
|
f3043f1453
|
Document nested zone fix
|
2009-10-17 11:06:36 -07:00 |
|
Tom Eastep
|
e6755b7172
|
Merge nested zone fix into master
|
2009-10-17 10:59:41 -07:00 |
|
Tom Eastep
|
b38841798e
|
Fix initialization
|
2009-10-15 13:43:46 -07:00 |
|
Tom Eastep
|
44c5ebcfa4
|
Fix initialization
|
2009-10-15 13:06:04 -07:00 |
|
Tom Eastep
|
6e6063f193
|
Don't wait for openvpn to start
|
2009-10-15 12:22:37 -07:00 |
|
Cristian Rodríguez
|
e2f64af187
|
if configured, openvpn should start before shorewall
|
2009-10-14 14:08:02 -03:00 |
|
Tom Eastep
|
19a90db09f
|
Back out last unnecessary change
|
2009-10-14 07:13:52 -07:00 |
|
Tom Eastep
|
990a9f0fdc
|
Fix RETAIN_ALIASES
|
2009-10-13 14:36:47 -07:00 |
|
Tom Eastep
|
1b0a3e4417
|
Correct typos in release notes
|
2009-10-13 08:13:34 -07:00 |
|
Tom Eastep
|
80f41779f8
|
Replace keyword 'object' with 'script'
|
2009-10-12 08:24:47 -07:00 |
|
Tom Eastep
|
f1d014dfe4
|
Fix test for null INITLOG
|
2009-10-08 15:57:25 -07:00 |
|
Tom Eastep
|
7064b8dd08
|
Update version of changed modules
|
2009-10-08 15:49:54 -07:00 |
|
Tom Eastep
|
3f7a1f9574
|
Rename a variable
|
2009-10-08 09:48:15 -07:00 |
|
Tom Eastep
|
83a9d8dd1b
|
Rename 'object' to 'script'
|
2009-10-05 15:43:29 -07:00 |
|
Tom Eastep
|
dc643c67e9
|
Move declaration to inner block where it is used
|
2009-10-05 14:23:43 -07:00 |
|
Tom Eastep
|
ab4e7cffcf
|
Document fix to routestopped
|
2009-10-03 10:53:53 -07:00 |
|
Tom Eastep
|
8089ef1599
|
Fix 'routeback' in routestopped file
|
2009-10-03 10:44:26 -07:00 |
|
Tom Eastep
|
beac09e45f
|
STARTUP_LOG changes
|
2009-10-02 16:10:14 -07:00 |
|
Tom Eastep
|
de933ba912
|
Fix typo in comment
|
2009-10-02 13:10:49 -07:00 |
|
Tom Eastep
|
964cba79a9
|
Initialize 4.4.3
|
2009-10-02 11:31:08 -07:00 |
|
Tom Eastep
|
065808be16
|
Fix reference to README.Debian.gz
|
2009-10-02 11:13:44 -07:00 |
|
Tom Eastep
|
a87cb7b95d
|
Generate list of builtins in initialize()
|
2009-10-01 15:02:14 -07:00 |
|
Tom Eastep
|
a8cc7d2a7e
|
More clarification of masq file changes
|
2009-10-01 12:34:34 -07:00 |
|
Tom Eastep
|
ddb46931a0
|
Update version
|
2009-10-01 08:44:05 -07:00 |
|
Tom Eastep
|
327e170be5
|
Fix range-in-masq patch
|
2009-10-01 08:16:22 -07:00 |
|
Tom Eastep
|
5e49be219b
|
Fix result from bad pull
|
2009-10-01 07:49:43 -07:00 |
|
Tom Eastep
|
d323c5b9c5
|
Delete shorewall-perl and shorewall-shell during upgrade
|
2009-10-01 07:37:30 -07:00 |
|
Tom Eastep
|
39ee3b2025
|
Tweak emitter
|
2009-09-29 14:28:50 -05:00 |
|
Tom Eastep
|
393673a884
|
Allow MARK in action body -- take 2
|
2009-09-25 16:15:56 -04:00 |
|
Tom Eastep
|
bfdc8db31a
|
Allow MARK in action body
|
2009-09-25 16:01:24 -04:00 |
|
Tom Eastep
|
c1305eb059
|
Correct typo in error message
|
2009-09-25 13:36:45 -04:00 |
|
Tom Eastep
|
d84458518e
|
Add capability to detect old hashlimit syntax
|
2009-09-23 16:56:31 -04:00 |
|
Tom Eastep
|
428c3d1e4e
|
Hack to make new LIMIT stuff work on ancient iptables releases
|
2009-09-20 09:12:35 -04:00 |
|
Tom Eastep
|
20250c9ce9
|
Hack to make new LIMIT stuff work on ancient iptables releases
|
2009-09-20 09:10:23 -04:00 |
|
Tom Eastep
|
96b19dd218
|
Fix accounting extension feature
|
2009-09-15 13:01:20 -07:00 |
|
Tom Eastep
|
120aade417
|
Allow Extension Scripts for Accounting Chains
|
2009-09-15 12:22:51 -07:00 |
|
Tom Eastep
|
4f4925002a
|
Revert "Allow Extension Scripts for Accounting Chains"
This reverts commit 728ad2fecf .
|
2009-09-15 12:18:29 -07:00 |
|
Tom Eastep
|
728ad2fecf
|
Allow Extension Scripts for Accounting Chains
|
2009-09-15 11:16:37 -07:00 |
|
Tom Eastep
|
a5f3a05341
|
Fix typo in the Introduction
|
2009-09-14 13:43:32 -07:00 |
|
Tom Eastep
|
6afc43d200
|
Correct typo in comment
|
2009-09-13 09:20:32 -07:00 |
|
Tom Eastep
|
8fdbb6f252
|
Bump Nat.pm version; remove inadvertent paste
|
2009-09-13 09:13:50 -07:00 |
|
Tom Eastep
|
5793246d7c
|
Make processing of original dest in Format-1 macros more obvious
|
2009-09-13 09:01:34 -07:00 |
|
Tom Eastep
|
8fdebf0c38
|
Add new columns to macros
|
2009-09-13 08:09:40 -07:00 |
|
Tom Eastep
|
07d8872823
|
Indicate that Squeeze 'will' include 4.4
|
2009-09-12 09:20:38 -07:00 |
|
Tom Eastep
|
9b0a9e8ecd
|
Add -<family> to 'ip route del default' command
|
2009-09-12 08:48:52 -07:00 |
|
Tom Eastep
|
8c2a228a7d
|
Apply Jesse Shrieve's SNAT patch
|
2009-09-11 07:47:31 -07:00 |
|
Tom Eastep
|
f33e842f1b
|
Update module version
|
2009-09-10 14:56:23 -07:00 |
|
Tom Eastep
|
74aff4f4ef
|
Bump the version in a couple of modules modified for 4.4.2
|
2009-09-09 12:58:39 -07:00 |
|
Tom Eastep
|
212937a29d
|
Make 'map_old_actions' a little cleaner
|
2009-09-09 12:37:49 -07:00 |
|
Tom Eastep
|
7c1dd35a00
|
Update release documents
|
2009-09-09 12:18:31 -07:00 |
|
Tom Eastep
|
0b03f52ad9
|
Don't look for extension script for built-in actions
|
2009-09-09 11:53:51 -07:00 |
|
Tom Eastep
|
5fc0137a2e
|
Update Compiler module version
|
2009-09-08 17:05:01 -07:00 |
|
Tom Eastep
|
128edd4bba
|
Slight optimization -- also makes code easier to read
|
2009-09-08 16:00:40 -07:00 |
|
Tom Eastep
|
b4712a93fa
|
Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - comments
|
2009-09-08 13:04:34 -07:00 |
|
Tom Eastep
|
bb83db3eb9
|
Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - change log
|
2009-09-08 12:55:14 -07:00 |
|
Tom Eastep
|
5655dbb01b
|
Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead
|
2009-09-08 12:54:23 -07:00 |
|
Tom Eastep
|
b03d502bbb
|
Allow comments on continued lines
|
2009-09-06 16:17:22 -07:00 |
|
Tom Eastep
|
70ebe17cb3
|
Reimplement MAPOLDACTIONS=Yes
|
2009-09-06 13:37:24 -07:00 |
|
Tom Eastep
|
efa952572c
|
Update 4.4.2
|
2009-09-06 11:43:46 -07:00 |
|
Tom Eastep
|
7192b47289
|
Add a Lenny->Squeeze Howto
|
2009-09-06 09:51:32 -07:00 |
|
Tom Eastep
|
75eb186ea7
|
Split MASQ SOURCE warning into two separate warnings
|
2009-09-05 16:02:16 -07:00 |
|
Tom Eastep
|
ec94ed638e
|
Better modularization of Chains and Actions
|
2009-09-05 08:43:14 -07:00 |
|
Tom Eastep
|
dd64ea2484
|
Update known_problems for 4.4.2
|
2009-09-04 11:41:23 -07:00 |
|
Tom Eastep
|
bb8ad187f1
|
Update version to 4.4.2
|
2009-09-04 11:40:34 -07:00 |
|
Tom Eastep
|
03821dc22c
|
Process routestopped file during 'check'
|
2009-09-03 19:27:25 -07:00 |
|
Tom Eastep
|
76d9a80df3
|
A small optimization on the last restriction removal
|
2009-09-03 18:26:50 -07:00 |
|
Tom Eastep
|
84bff13e7f
|
Apply 4.4.1.2 fix to trunk
|
2009-09-03 18:25:32 -07:00 |
|
Tom Eastep
|
4a809e14ab
|
Documentation cleanup
|
2009-09-03 15:24:19 -07:00 |
|
Tom Eastep
|
f3455b107d
|
4.4.2 release doc initialization and update
|
2009-09-03 14:58:46 -07:00 |
|
Tom Eastep
|
df5291e119
|
Apply initialization fix to master branch
|
2009-09-03 14:54:47 -07:00 |
|
Tom Eastep
|
015d4f58ce
|
Allow moving rules with commands
|
2009-09-03 14:11:44 -07:00 |
|
Tom Eastep
|
4412a05a70
|
Fix detection of PERSISTENT_SNAT
|
2009-09-03 13:56:00 -07:00 |
|
Tom Eastep
|
62b1dbcd7f
|
Document portlist-splitting change
|
2009-09-02 15:30:26 -07:00 |
|
Tom Eastep
|
c9e9877f05
|
Combine port-list handling into a single function
|
2009-09-02 14:49:07 -07:00 |
|
Tom Eastep
|
9e09e61a1a
|
Delete blank line
|
2009-09-01 11:18:14 -07:00 |
|
Tom Eastep
|
b778f04b1a
|
Massage fix for multicast and nets=
|
2009-09-01 11:11:57 -07:00 |
|
Tom Eastep
|
b30da86cce
|
Fix automatic multicast with nets=
|
2009-09-01 08:56:54 -07:00 |
|
Tom Eastep
|
fbfa4b4e49
|
Update release documents and make minor change to faq
|
2009-08-31 14:19:15 -07:00 |
|
Tom Eastep
|
1544c0b2b1
|
Add some comments concerning "$|"
|
2009-08-31 10:41:08 -07:00 |
|
Tom Eastep
|
d368d80a12
|
More robust checking of zone definitions
|
2009-08-31 09:09:15 -07:00 |
|
Tom Eastep
|
5297bb8b8d
|
Fix undefined variable warning
|
2009-08-31 09:08:49 -07:00 |
|
Tom Eastep
|
2bb92a79f3
|
Fix silly hole in zones file parsing
|
2009-08-30 08:05:10 -07:00 |
|
Tom Eastep
|
d31721a066
|
Fix rule generated by MULTICAST=Yes -- release documents
|
2009-08-29 09:34:16 -07:00 |
|
Tom Eastep
|
b4f7b85b3b
|
Fix multicast network in Policy.pm
|
2009-08-29 09:26:46 -07:00 |
|
Tom Eastep
|
b7915991ba
|
Add MULTICAST=Yes corrected problem description to release notes
|
2009-08-29 09:24:51 -07:00 |
|
Tom Eastep
|
a0a9e087de
|
Fix typo in release notes
|
2009-08-29 09:07:27 -07:00 |
|
Tom Eastep
|
1ef00c547b
|
Disallow 'nets=' in a multi-zone interface definition
|
2009-08-29 07:41:27 -07:00 |
|
Tom Eastep
|
f2c3d9cd79
|
Correct typo
|
2009-08-29 07:20:40 -07:00 |
|
Tom Eastep
|
4809314fc1
|
Allow extending a zone defined with nets=
|
2009-08-29 07:20:16 -07:00 |
|
Tom Eastep
|
acfdc7e481
|
nets= allows multicast
|
2009-08-28 15:17:10 -07:00 |
|
Tom Eastep
|
a62d86aca7
|
Update interfaces manpage
|
2009-08-28 13:45:00 -07:00 |
|
Tom Eastep
|
5db7e77462
|
Turn off IP forwarding in the standalone example -- update release docs
|
2009-08-28 08:31:48 -07:00 |
|
Tom Eastep
|
383f3e8bcf
|
Fix nested IPSEC zones
|
2009-08-26 12:44:10 -07:00 |
|
Tom Eastep
|
52dfd5b259
|
Make cleanup after error explicit
|
2009-08-26 10:34:04 -07:00 |
|
Tom Eastep
|
db803807a7
|
Add comment regarding tcclass.guarantee
|
2009-08-26 10:32:57 -07:00 |
|
Tom Eastep
|
1b26c65cbc
|
Fix logging in rules at the end of INPUT and OUTPUT
|
2009-08-25 09:22:26 -07:00 |
|
Tom Eastep
|
088e164f18
|
Redefine 'full' when used in a sub-class definition
|
2009-08-24 11:56:16 -07:00 |
|
Tom Eastep
|
4eb9e5db3d
|
Correct example in the docs and ensure that future idiots don't place 'default' in the PRIO column of tcclasses
|
2009-08-24 06:25:26 -07:00 |
|
Tom Eastep
|
679cff2779
|
Correct example in the docs and ensure that future idiots don't place 'default' in the PRIO column of tcclasses
|
2009-08-23 20:45:05 -07:00 |
|
Tom Eastep
|
6b5493b81c
|
Add .*~ to files removed by "clean"
|
2009-08-23 12:55:29 -07:00 |
|
Tom Eastep
|
e24dbb9aea
|
Add 'clean' target to Makefiles
|
2009-08-23 10:43:01 -07:00 |
|
Tom Eastep
|
267bc808f5
|
Use 'set_command()' in the 'compile' case as well as the 'check' case
|
2009-08-22 09:39:15 -07:00 |
|
Tom Eastep
|
5ac331a5a0
|
Rename verbosity-oriented variables/functions
|
2009-08-22 07:57:55 -07:00 |
|
Tom Eastep
|
5dd41249c6
|
Remove trailing whitespace
|
2009-08-20 14:32:15 -07:00 |
|
Tom Eastep
|
8c16ac1d46
|
Update Module versions
|
2009-08-20 08:53:57 -07:00 |
|
Tom Eastep
|
ddf8bbe516
|
Remove some V4/V6 tests
|
2009-08-18 11:03:17 -07:00 |
|
Tom Eastep
|
622db3655f
|
More updates/corrections to change notes
|
2009-08-18 08:50:50 -07:00 |
|
Tom Eastep
|
4bc1fb145a
|
Update change notes
|
2009-08-18 08:44:55 -07:00 |
|
Tom Eastep
|
897748aa83
|
Be silent about deleting temporary NAT chain
|
2009-08-18 08:43:37 -07:00 |
|
Tom Eastep
|
1cf22ead7f
|
Correct allip() return value
|
2009-08-18 07:35:17 -07:00 |
|
Tom Eastep
|
90b0bedc43
|
More performance tweaks
|
2009-08-17 16:29:18 -07:00 |
|
Tom Eastep
|
787a1867a0
|
Another tiny performance enhancement
|
2009-08-17 12:58:50 -07:00 |
|
Tom Eastep
|
e756689d0c
|
Very minor performance tweak
|
2009-08-17 11:22:03 -07:00 |
|
Tom Eastep
|
89a6d7e5db
|
Tweak initialization comments
|
2009-08-17 10:45:46 -07:00 |
|
Tom Eastep
|
d8cc9c5c92
|
Fix capabilities test for PERSISTENT_SNAT
|
2009-08-17 08:07:58 -07:00 |
|
Tom Eastep
|
6d2809f154
|
Note the inadaquacy of the Busybox version of the iproute2 utilities
|
2009-08-17 07:17:33 -07:00 |
|
Tom Eastep
|
0557148bec
|
Avoid double globals initialization for IPv6
|
2009-08-16 09:24:51 -07:00 |
|
Tom Eastep
|
cbc9fa6e4c
|
Update README.txt
|
2009-08-15 17:43:26 -07:00 |
|
Tom Eastep
|
201145eed9
|
More Persistent SNAT tweaks
|
2009-08-15 08:56:05 -07:00 |
|
Tom Eastep
|
c908edab34
|
Add new capability for persistent SNAT
|
2009-08-15 08:35:54 -07:00 |
|
Tom Eastep
|
55f75604b3
|
Add support for 'persistent'
|
2009-08-15 08:15:38 -07:00 |
|
Tom Eastep
|
f042c641d6
|
Remove extraneous export
|
2009-08-15 07:01:06 -07:00 |
|
Tom Eastep
|
9b87812531
|
update version of Nat module
|
2009-08-14 15:03:59 -07:00 |
|
Tom Eastep
|
883f415e53
|
Start 4.4.1
|
2009-08-14 14:46:31 -07:00 |
|
Tom Eastep
|
2bac824207
|
Fix provider number in masq entry
|
2009-08-12 13:52:56 -07:00 |
|
Tom Eastep
|
5cb9ff0009
|
Fix 'upnpclient' on required interfaces
|
2009-08-11 08:31:58 -07:00 |
|
Tom Eastep
|
51e7bcdaf4
|
Extend release notes and correct typos
|
2009-08-11 08:02:36 -07:00 |
|
Tom Eastep
|
3e7c7a7e90
|
Fix a couple of typos
|
2009-08-09 11:38:18 -07:00 |
|
Tom Eastep
|
b7a6223f44
|
Make perl an RPM prerequisite
|
2009-08-09 08:38:55 -07:00 |
|
Tom Eastep
|
6a25d6b9db
|
Make a functional Perl a prerequisite for installation
|
2009-08-09 08:33:22 -07:00 |
|
Tom Eastep
|
1d1133532f
|
Make 'SHOREWALL_COMPILER=shell' a WARNING rather than an ERROR
|
2009-08-09 08:19:24 -07:00 |
|
Tom Eastep
|
1a5027de9f
|
Restore ipset binding capability
|
2009-08-08 08:26:22 -07:00 |
|
Tom Eastep
|
1051c44f51
|
Add xtables-addons install link to release notes
|
2009-08-07 14:42:06 -07:00 |
|
Tom Eastep
|
8011a61970
|
Add section IDs to Dynamic Zones page
|
2009-08-07 13:54:24 -07:00 |
|
Tom Eastep
|
a4090dc34f
|
Document that 'any' is now a reserved word
|
2009-08-07 13:41:21 -07:00 |
|
Tom Eastep
|
55c879e4e6
|
Fix log record displays
|
2009-08-07 13:33:07 -07:00 |
|
Tom Eastep
|
374aceb06c
|
Fix a couple of typos
|
2009-08-07 12:24:56 -07:00 |
|
Tom Eastep
|
7fbfb61fee
|
Remove empty section from the release notes
|
2009-08-07 09:59:13 -07:00 |
|
Tom Eastep
|
fd75bc728a
|
Idiot-proofing of the upgrade issues page
|
2009-08-07 09:46:20 -07:00 |
|
Tom Eastep
|
ed1e1f1352
|
Yet more idiot-proofing
|
2009-08-07 07:47:31 -07:00 |
|
Tom Eastep
|
a069b8817c
|
More idiot-proofing of the release notes
|
2009-08-07 07:23:24 -07:00 |
|
Tom Eastep
|
71fb62c760
|
More tweaking of the release notes
|
2009-08-06 12:35:00 -07:00 |
|
Tom Eastep
|
b92730554e
|
Idiot-proofing of the release notes
|
2009-08-06 12:23:35 -07:00 |
|
Tom Eastep
|
3af3ce6779
|
More release note tweaks
|
2009-08-06 10:24:21 -07:00 |
|
Tom Eastep
|
0c0026db53
|
Tweak release notes
|
2009-08-06 07:45:50 -07:00 |
|
Tom Eastep
|
9fd25a4832
|
Fix logging NAT rules -- fix release notes
|
2009-08-05 13:00:10 -07:00 |
|
Tom Eastep
|
031afd59b5
|
Fix logging NAT rules -- update release notes wording
|
2009-08-05 12:51:11 -07:00 |
|