shorewall_code

mirror of https://gitlab.com/shorewall/code.git synced 2024-12-22 14:20:40 +01:00

Author	SHA1	Message	Date
Tom Eastep	94c6b37e8e	Avoid leaving an orphan '!' behind. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-05-01 07:51:24 -07:00
Tom Eastep	219b2e0761	A more comprehensive solution to multiple -[piosd] matches. - eliminate duplicate -[piosd] matches in merged rules - avoid tracing !* unconditionally Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-05-01 07:26:25 -07:00
Tom Eastep	16161d9cfc	Add new trace types. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-05-01 06:43:09 -07:00
Tom Eastep	1173518d78	More minor cleanup of first code Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-30 07:22:09 -07:00
Tom Eastep	2864841a9e	Correct release notes update version to RC1 correct typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-29 11:21:31 -07:00
Tom Eastep	076da4bd5c	Couple of tweaks to my earliest code Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-29 11:19:50 -07:00
Tom Eastep	a997d6507d	Update release notes with more common example of failure. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-28 08:09:10 -07:00
Tom Eastep	039668b333	Update release notes to reflect reality. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-28 06:57:45 -07:00
Tom Eastep	2c1cede54e	Revise addressless bridge change Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-27 15:23:38 -07:00
Tom Eastep	d8b0f496df	Allow simple configuration of a bridge with no IP address Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-27 12:26:58 -07:00
Tom Eastep	988f7c4d7e	More fixes for bad NAT optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-26 16:50:18 -07:00
Tom Eastep	f49848bd5b	Document rare optimization fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-26 16:32:53 -07:00
Tom Eastep	0e4698d57c	Fix rare optimization bug Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-26 16:19:58 -07:00
Tom Eastep	6d61e962eb	Use -m conntrack if available in place of -m state Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-25 13:35:41 -07:00
Tom Eastep	21e0c68ef2	Bump version to 4.4.9 RC1	2010-04-25 09:37:17 -07:00
Tom Eastep	fb2ddcee7b	Bump Version to 4.4.9 Beta 5	2010-04-24 21:53:12 -07:00
Tom Eastep	6053352f8c	A better fix for find_first_interface_address() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-23 20:06:45 -07:00
Tom Eastep	2cb3bac946	Document fix for find_first_interface_address()	2010-04-23 12:18:51 -07:00
Tom Eastep	232fc21fe2	Allow find_first_interface_address[_if_any] to work properly in the params file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-23 11:54:36 -07:00
Tom Eastep	b821bdcdfd	One more pass at improving regex's for target isolation and matching Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-22 14:45:34 -07:00
Tom Eastep	64bf772594	Set OUTPUT policy to ACCEPT when optimize_chain deletes all of its rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-22 13:38:38 -07:00
Tom Eastep	b0b39cfc39	Document optimization level 2 fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-22 11:55:13 -07:00
Tom Eastep	fb754b3a2e	Don't remove a lone ACCEPT rule from the OUTPUT chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-22 11:35:14 -07:00
Tom Eastep	0dde75d345	Fix install scripts (again) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-19 13:08:03 -07:00
Tom Eastep	a0abb11f67	Extend 'show log <ipaddr>' to search for a regular expression. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-19 13:02:21 -07:00
Tom Eastep	8c09f21e5d	Implement 'show log <token>' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-19 10:20:28 -07:00
Tom Eastep	a1a78cf09b	Abandon the fantesy that multiple optimize 8 passes will achieve anything. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 17:12:08 -07:00
Tom Eastep	938cfd7ba4	Don't create fw-><bport> chains and rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 12:29:51 -07:00
Tom Eastep	c52a3dcd14	Don't generate policy chains for fw to bridgeport zones. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 09:56:11 -07:00
Tom Eastep	1030c852f9	Simplify a test Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 09:21:30 -07:00
Tom Eastep	e7a4aaafc1	Modify optimization 8 loop to continue until no chains are combined. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 09:17:57 -07:00
Tom Eastep	8e1284f74c	Document OPTIMIZE=15 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 09:17:12 -07:00
Tom Eastep	4f00de0c57	Make additional optimize 8 passes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 08:42:25 -07:00
Tom Eastep	21b44ac42b	Change version to 4.4.9-Beta4 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-16 07:25:53 -07:00
Tom Eastep	82d6ba511f	Unify the REs that look for '-[jg] <chain>' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 18:02:31 -07:00
Tom Eastep	cec59360f6	Use '-j' rather than '-g' when jumping to tcpre, just to be safe Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 14:14:13 -07:00
Tom Eastep	46d207a86f	Restore original amount of whitespace in maclist rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 14:13:37 -07:00
Tom Eastep	e9a94b0cfb	Unify reference count adjustment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 14:12:48 -07:00
Tom Eastep	cf59d9ec68	Fix an optimize 8 bug. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 12:45:00 -07:00
Tom Eastep	dde540c42d	Update release notes for optimize 4 problems. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 12:44:37 -07:00
Tom Eastep	c1bcf360ee	Fix another 'add_rule' that should have been an 'add_jump' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 09:59:57 -07:00
Tom Eastep	f7e48a94da	Fix install scripts. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 09:39:21 -07:00
Tom Eastep	96d69bd8c3	Centralize message generation; optimize optimization-8 loop Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 09:29:37 -07:00
Tom Eastep	9ad5ee1818	Add correct release id. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-15 07:25:35 -07:00
Tom Eastep	aeb90969f7	Optimize 8 Documentation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-14 17:12:25 -07:00
Tom Eastep	cff6f0010f	Remove chain name after '-A' (again). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-14 17:05:03 -07:00
Tom Eastep	f8bacb54ef	Optimize 8 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-14 13:21:10 -07:00
Tom Eastep	4137961169	Speed up the replace_references* functions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-11 09:00:24 -07:00
Tom Eastep	715ea9ef32	Speed up delete_jumps() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-11 08:38:14 -07:00
Tom Eastep	91a711b34f	Document startup log fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-10 11:54:54 -07:00
Tom Eastep	4365b83b15	Rationalize init logs Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-10 11:46:50 -07:00
Tom Eastep	76b9ef7005	Use unshift rather than splice for readability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-10 09:25:29 -07:00
Tom Eastep	2e443df8e3	Adjust references in move_rules() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-10 09:09:46 -07:00
Tom Eastep	ff73d802da	More cleanup of rule and chain deletion: - Rename purge_jumps() to delete_jumps() - Add delete_chain() function - Remove an unnecessary assertion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-10 08:37:17 -07:00
Tom Eastep	1de304bfd9	Relocate purge_jumps() and change the loop exit condition to be a bit safer. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 13:51:44 -07:00
Tom Eastep	14477d61fe	Verify that purge_jumps() reset the 'to' chain's referenced flag. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 12:28:01 -07:00
Tom Eastep	2ff1df53da	Unify chain deletion. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 11:38:18 -07:00
Tom Eastep	7a831107c7	Replace the complex rule deletion loops with C-stype for loops. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 09:58:32 -07:00
Tom Eastep	9dc8267888	Don't apply RE to rules that we've already checked. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 09:46:07 -07:00
Tom Eastep	1e078b8c8d	Use splice() to delete rules from chains Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 09:38:03 -07:00
Tom Eastep	2f3f591af1	Document removal of fallback scripts. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 07:43:36 -07:00
Tom Eastep	56bc28a182	Prepare 4.4.9 Beta 3 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-09 07:32:21 -07:00
Tom Eastep	c2c0fb0dd2	Fix deletion of only rule in a chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 17:20:11 -07:00
Tom Eastep	ab1a27ca2a	Update version to 4.4.9 Beta 2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 13:14:51 -07:00
Tom Eastep	9a00191c88	Remove a 'defined' test that is no longer needed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 13:12:17 -07:00
Tom Eastep	359c221783	Keep rules arrays compressed throughout the compilation process Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 12:53:30 -07:00
Tom Eastep	3937c10251	Keep rule arrays compressed during optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 11:35:15 -07:00
Tom Eastep	9126cc63d9	Delete unused rules arrays Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-08 10:55:31 -07:00
Tom Eastep	c668707aac	Update release docs with optimize 4 fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 20:18:56 -07:00
Tom Eastep	cca2c18370	Another case where reference counts are wrong Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 20:07:03 -07:00
Tom Eastep	aeb3b277b0	Fix reference count issue Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 19:47:49 -07:00
Tom Eastep	9d7d7e06d8	Update release documents Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 14:43:50 -07:00
Tom Eastep	3711e64d71	Fix for 0 values propagated to the script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 14:38:29 -07:00
Tom Eastep	3092a85999	SWAG regarding LOG_VERBOSITY issue Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 13:43:57 -07:00
Tom Eastep	c49e3076ec	Recode fix for find_first_interface_address() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 13:28:07 -07:00
Tom Eastep	62c9cb7b36	Change 'first_install' tests Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 13:16:16 -07:00
Tom Eastep	f17365cf6d	Fix find_first_interface_address() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-07 13:05:42 -07:00
Tom Eastep	3b317afb2f	Add mDNS macro from Vincent Smeets. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-04-03 15:57:50 -07:00
Tom Eastep	427b14b21d	Clean up file headers in the .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-30 11:53:36 -07:00
Tom Eastep	af893b6296	Add 'N' trace records for chain creation. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-30 07:32:38 -07:00
Tom Eastep	c57ee7d68d	Update release notes with additional trace information. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-30 07:23:17 -07:00
Tom Eastep	b2d8039ff6	Remove unnecessary text and 'before' images from trace entries Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-30 07:12:22 -07:00
Tom Eastep	7e97e9519d	Conditionally trace writes by copy2(). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 11:56:26 -07:00
Tom Eastep	51d4bf19b5	Conditionally trace writes by copy2(). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 11:56:06 -07:00
Tom Eastep	dc7d4bdb09	Document CS->GS trace change. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 09:50:42 -07:00
Tom Eastep	350a89e449	More complete generated script trace Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 09:48:23 -07:00
Tom Eastep	5c91fb40e2	Remove unneeded test; correct typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 09:04:45 -07:00
Tom Eastep	db2bed06d8	Add 'T' to the documented netfilter trace types. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 08:31:12 -07:00
Tom Eastep	b261a5b2ec	Document netfilter trace types. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-29 07:23:17 -07:00
Tom Eastep	6d7226ae93	Remove special trace entries Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-28 16:31:03 -07:00
Tom Eastep	1fd656b8c9	Tweak trace facility Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-28 15:31:05 -07:00
Tom Eastep	3b07053d3b	Document new 'trace' facility Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-28 14:37:22 -07:00
Tom Eastep	b0733d93ee	Implement a more robust trace Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-28 13:09:04 -07:00
Tom Eastep	ef4237f5a0	Avoid verbosity overflow/underflow Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-28 07:27:27 -07:00
Tom Eastep	3e215d0482	Minor cleanup in the Chains module. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-27 08:18:41 -07:00
Tom Eastep	1153ff0c75	Avoid a shell warning when brctl is not installed. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-27 07:33:40 -07:00
Tom Eastep	f30cd7e287	Clarify provisional policy handling. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-26 08:02:49 -07:00
Tom Eastep	5a36606167	Document fix of EXTERNAL handling in proxyarp. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-25 12:13:52 -07:00
Tom Eastep	6cdc1ab7a2	Allow a logical interface name in the EXTERNAL column of the proxyarp file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-25 11:41:06 -07:00
Tom Eastep	a0a5c55a63	Add omitted defect to 4.4.8 problems corrected Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-25 10:14:39 -07:00
Tom Eastep	7d91edc6ec	Remove redundant line of code Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-23 12:49:06 -07:00
Tom Eastep	626b28fcd0	Auto-detect bridge when no options specified. Remove extra logic. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-23 09:28:11 -07:00
Tom Eastep	05752dcf0b	Auto-detection of bridges -- release documents. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-23 08:58:44 -07:00
Tom Eastep	5e9aceae68	Detect bridges Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-23 08:38:54 -07:00
Tom Eastep	914d829a49	Don't optimize the 'blacklst' chain Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-22 06:47:39 -07:00
Tom Eastep	6ac549ef4e	Add a comment explaining why avoiding creation of the blacklst chain and branching to it is a bad idea. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-21 07:24:29 -07:00
Tom Eastep	6fc347b9be	Prepare 4.4.9-Beta1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-20 07:06:47 -07:00
Tom Eastep	9a88156769	Back off on not jumping to the blacklist chain when there are no blacklist entries. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-19 11:32:22 -07:00
Tom Eastep	fae29bcf6f	Change version to 4.4.8 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-19 10:17:32 -07:00
Tom Eastep	508475d80b	Avoid panic among the user base by suppressing missing table error messages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-19 10:10:20 -07:00
Tom Eastep	b22b279bd1	Some additional idiot-proofing. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-19 10:01:02 -07:00
Tom Eastep	a71f5df64f	Fix indentation and quoting in TC progress messages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-19 06:59:58 -07:00
Tom Eastep	f44dbcf20b	More copyright updates Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-18 11:13:51 -07:00
Tom Eastep	91bc3b3293	Mark a restored configuration as 'Restored' rather than 'Started'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-17 10:10:56 -07:00
Tom Eastep	1177540fd8	Update version to RC2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 12:39:35 -07:00
Tom Eastep	66c883de2c	Fix UDPLITE handling of source port when no dest port given. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 10:45:31 -07:00
Tom Eastep	b2a56cd542	Copyright update Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 09:53:51 -07:00
Tom Eastep	a01fa345b7	Add support for UDP Lite Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 09:42:50 -07:00
Tom Eastep	5ac2b16936	Correct typo in comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 08:49:17 -07:00
Tom Eastep	16bbe780c7	Try to avoid printing import banners unnecessarily Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 07:23:02 -07:00
Tom Eastep	787cec4fe7	Fix 'uninitialized variable' bug in Config::copy2 Bug reported by Tuomo Soini Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-16 07:12:39 -07:00
Tom Eastep	a2ac726ce9	Add changelog entry Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-11 18:16:31 -08:00
Tom Eastep	196cd5417f	Allow 'default' optimizations to be disabled by specifying optimization 4096. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-11 17:15:44 -08:00
Tom Eastep	57dc5731b2	Add change log entry Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-10 17:31:35 -08:00
Tom Eastep	249f9412f6	Add undocumented OPTIMIZE=-1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-10 17:31:08 -08:00
Tom Eastep	4f32be03d7	Fix typo in comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-08 15:34:38 -08:00
Tom Eastep	93494c6ae3	Eliminate nested function declarations in generate_matrix() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-08 13:11:10 -08:00
Tom Eastep	fb4f7ebd67	Update release notes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-08 08:18:10 -08:00
Tom Eastep	07cba9e066	Bump version to RC1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-08 08:11:00 -08:00
Tom Eastep	efed2286b0	Move qt1() to lib.common Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-07 11:50:54 -08:00
Tom Eastep	ce8d1cbc59	Change port range in release notes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-07 08:39:09 -08:00
Tom Eastep	f246f728e7	Flag '-' used as a port range separator Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-07 08:36:26 -08:00
Tom Eastep	4e18414fd7	Uninstall the logrotate scripts Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 09:24:51 -08:00
Tom Eastep	5671a7ae2f	Add new options to online usage info. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 08:45:43 -08:00
Tom Eastep	88447bfc7d	Avoid dropping first line of library source text Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 08:45:21 -08:00
Tom Eastep	2d458b46b4	Update help text in prog.header* Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 08:13:33 -08:00
Tom Eastep	928b162d3c	Fix bug in handling of -p option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 08:12:04 -08:00
Tom Eastep	7557b4b5fb	Update version to 4.4.8 Beta 3 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 07:41:29 -08:00
Tom Eastep	fe089ddc36	Don't copy headers in imported libraries Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-06 07:40:43 -08:00
Tom Eastep	c8d8d75cae	Cosmetic change Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-05 10:40:18 -08:00
Tom Eastep	35974535b2	More removal/relocation of functions. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-05 07:29:27 -08:00
Tom Eastep	f8c7a284a5	Remove duplicate/unneeded functions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-05 07:02:00 -08:00
Tom Eastep	8e5114859c	Only load lib.base and lib.cli (lib.base loads lib.common) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-05 06:51:13 -08:00
Tom Eastep	b4d4cedef9	Fix silly bug in 'show dynamic <zone>' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 19:05:47 -08:00
Tom Eastep	abb943bfb7	Do library consolidation on IPv6 and load lib.cli into shorecap. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 13:11:33 -08:00
Tom Eastep	50330f71f6	Move many routines into lib.common. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 12:38:02 -08:00
Tom Eastep	3e4d9b3118	Rename lib.run -> lib.common	2010-03-04 12:13:41 -08:00
Tom Eastep	7757c0bc20	Rename lib.run to lib.common Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 09:54:56 -08:00
Tom Eastep	41d709b043	Allow 'get_script_version' to correctly handle point releases Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 09:40:48 -08:00
Tom Eastep	7b52d812ae	Generate correct library path name Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 09:40:18 -08:00
Tom Eastep	24432a5f76	Back out dumb change to install.sh Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 09:17:57 -08:00
Tom Eastep	4c081e5998	Add lib.run Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-04 09:12:48 -08:00
Tom Eastep	5d87983803	Update change log. Remove anacronistic comment. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 16:14:15 -08:00
Tom Eastep	1d52683af8	Don't display 'Old' capabilities that are not enabled. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 15:28:49 -08:00
Tom Eastep	a963c8f955	Don't export CONFDIR or SHAREDIR Document CONFDIR, SHAREDIR and VARDIR Add FILEMODE to the old reserved variable names Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 11:46:23 -08:00
Tom Eastep	a4414a9695	Delete references to unimplemented functions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 10:53:40 -08:00
Tom Eastep	3f73b3c408	Export *DIR variables Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 10:39:18 -08:00
Tom Eastep	49c1350aa0	Documentation for final cleanup of variable names Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 10:28:09 -08:00
Tom Eastep	c6981de0e5	Complete elimination of globals that are not .conf options Documentation to follow Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 09:50:07 -08:00
Tom Eastep	ee74696747	IPv6 work to only export when necessary Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 08:59:58 -08:00
Tom Eastep	234e4fa754	Update module versions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 08:51:55 -08:00
Tom Eastep	7457f643ee	Don't export globals when the script is 4.4.8 or later Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-03 08:51:40 -08:00
Tom Eastep	70296b4bd6	Some fixes for -lite changes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 17:16:11 -08:00
Tom Eastep	78a39ccad5	Centralize exporting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 16:03:44 -08:00
Tom Eastep	cce4bf277a	Reduce export usage; Allow PURGE and RESTOREFILE to be specified on the run-line Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 14:49:31 -08:00
Tom Eastep	2656a9b0c7	Eliminate use of PRODUCT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 12:34:36 -08:00
Tom Eastep	5613d0105a	Remove all reliance on HOSTNAME Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 11:59:38 -08:00
Tom Eastep	68f5215f07	Remove Reliance on HOSTNAME in generated programs Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 11:45:35 -08:00
Tom Eastep	3ea6f6792f	Eliminate VERSION reserved variable name Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 08:02:10 -08:00
Tom Eastep	5fc6d58e19	Eliminate STOPPING variable Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 07:37:30 -08:00
Tom Eastep	d4936f4bad	Tweak to an RE used in optimization Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-02 06:58:09 -08:00
Tom Eastep	169f97d76b	Fix typo Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-01 11:28:54 -08:00
Tom Eastep	8cfcacc862	Update release document with fix for multiple policy matches Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-01 08:40:20 -08:00
Tom Eastep	f11bfd3890	Eliminate redundate setting of PRODUCT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-01 08:32:59 -08:00
Tom Eastep	cfa09dce22	Avoid multiple policy matches with OPTIMIZE=7 and not KLUDGEFREE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-01 08:32:37 -08:00
Tom Eastep	3ba797cb14	Correct several bugs in the VERBOSITY overhaul Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-03-01 06:57:04 -08:00
Tom Eastep	53c73bc8e9	Eliminate VERBOSE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 17:58:01 -08:00
Tom Eastep	14f83759ae	Propagate VERBOSITY even though we don't use it yet Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 17:39:35 -08:00
Tom Eastep	546a48543d	Propagate LOG_VERBOSITY Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 17:30:11 -08:00
Tom Eastep	39883aa690	Eliminate LOG_VERBOSE Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 16:58:30 -08:00
Tom Eastep	fb55d63eaf	Allow verbosity to be separate from -V Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 16:42:50 -08:00
Tom Eastep	333ac21c2f	Prepare the footers for 4.6. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 15:25:25 -08:00
Tom Eastep	83ed0a401b	I'll eventually get it the way I like it Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 13:45:33 -08:00
Tom Eastep	585711caa8	Even simpler RE for detecting builtins Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 13:29:26 -08:00
Tom Eastep	693d0e5d4c	Make new test in add_jump() a bit safer. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 12:44:29 -08:00
Tom Eastep	91a14b4e82	Make -s the default on Debian; Issue message when installing in a distro-specific way Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 09:15:11 -08:00
Tom Eastep	d2992c21f4	Update version to Beta 2	2010-02-28 09:04:37 -08:00
Tom Eastep	c9c957c5b8	HKP Macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-28 07:37:16 -08:00
Tom Eastep	3c4b41fbe0	Implement -s option in the major installers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-27 11:48:39 -08:00
Tom Eastep	643d4831ab	More all-caps variable elimination Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-26 17:05:35 -08:00
Tom Eastep	061d850c16	Rename RESTOREPATH to g_restorepath Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-26 08:35:50 -08:00
Tom Eastep	c1ac19a81e	Correct a couple of typos	2010-02-25 16:35:19 -08:00
Tom Eastep	8aaddf368b	More reserved variable names documented Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-25 12:37:22 -08:00
Tom Eastep	e66b8759d6	Document variable name changes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-25 12:18:41 -08:00
Tom Eastep	7fe7ebc891	Fix Handling of NFQUEUE(queue-num) in policies Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-25 08:44:28 -08:00
Tom Eastep	4059fe6956	Belatedly update some version numbers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-25 08:43:32 -08:00
Tom Eastep	4415050fd2	Eliminate another reserved variable name Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-23 17:00:26 -08:00
Tom Eastep	bffb1793d7	More global variable renaming Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-23 07:52:35 -08:00
Tom Eastep	70a246501e	Update version of Tc.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-23 07:08:48 -08:00
Tom Eastep	b2350829b9	Rename 'debugging' to 'g_debugging' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-22 16:43:38 -08:00
Tom Eastep	3fc10cd94b	Prepend 'SW_' to constructed shell variable names. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-22 10:27:59 -08:00
Tom Eastep	88d29d2e35	Eliminate a couple of more all-caps variable name restrictions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-22 08:24:29 -08:00
Tom Eastep	55c9cf3e99	Eliminate some of the reserved all-caps variable names Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-22 08:05:23 -08:00
Tom Eastep	2a965d42b9	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-21 07:57:34 -08:00
Tom Eastep	e690303937	Modify Roberto's patch for 'show <chain>' error reporting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-20 19:09:54 -08:00
Tom Eastep	8baa4e60c9	Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall/shorewall	2010-02-20 18:59:17 -08:00
Roberto C. Sanchez	6a3b2b0dee	Clarify error message when user asks shorewall to show a non-existent chain	2010-02-20 21:57:45 -05:00
Tom Eastep	6307653a01	Pick up one fix from 4.4.7.4 regarding CONTINUE rules. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-20 09:42:58 -08:00
Tom Eastep	5696742ef3	Update release Document with 4.4.7.5 changes and Debian Init Script Fix Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-20 08:34:47 -08:00
Tom Eastep	a83663bf25	Return failure status when a supported command fails. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-20 08:20:42 -08:00
Tom Eastep	edaf541850	Don't apply rate limiting twice in ACCEPT+ rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-19 14:01:45 -08:00
Tom Eastep	ceff8adc78	Restore duplicate interface detection in tcinterfaces. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-18 16:11:30 -08:00
Tom Eastep	3a2173ddb4	Some code cleanup in Tc.pm. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-18 15:56:59 -08:00
Tom Eastep	ea8be87720	Use Hex representation of device numbers > 9 in simple TC. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-18 12:53:01 -08:00
Tom Eastep	4e0225a4c3	Update Documentation for per-IP rate limiting fixes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-18 07:12:36 -08:00
Tom Eastep	ea8a6c837f	Document per-IP rate change Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 15:41:12 -08:00
Tom Eastep	00b0490cd7	Create a unique hashtable for each instance of a per-IP rate limit Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 15:39:21 -08:00
Tom Eastep	625963a4f0	Final (hopefully) fix for SFQ handle assignment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 09:02:18 -08:00
Tom Eastep	41bb0782a3	Another tweak to SFQ handle assignment. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 08:06:27 -08:00
Tom Eastep	5649dbf9a8	Improve assignment of class ID for SFQ classses Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 07:41:30 -08:00
Tom Eastep	115ce7b87d	Update release documents for bug fixes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-17 06:49:13 -08:00
Tom Eastep	eaafeb8c2b	Add --hashlimit-htable-expire if the units are minutes or larger	2010-02-17 06:43:52 -08:00
Tom Eastep	375160d733	Avoid duplicate SFQ class numbers	2010-02-17 06:43:16 -08:00
Tom Eastep	167b29c2c5	Bump module version in Compiler.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-15 14:24:52 -08:00
Tom Eastep	8aaf4aab3a	Don't create log chain for 'RETURN' rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-15 14:24:00 -08:00
Tom Eastep	4546394531	Cosmetic changes to Compiler.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-15 14:07:35 -08:00
Tom Eastep	5d08d51fe5	Add $remote_fs to Required-Start and Required-Stop for Debian Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-15 08:39:50 -08:00
Tom Eastep	12d3420a5d	Detect FLOW_FILTER when LOAD_HELPERS_ONLY=No	2010-02-14 10:34:19 -08:00
Tom Eastep	0624451537	Fix for OLD_HL_MATCH. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-14 07:22:12 -08:00
Tom Eastep	5e9ecf1491	Update version of Config module	2010-02-13 11:00:34 -08:00
Tom Eastep	50d246c8be	A little cleanup of compiler.pl Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-13 10:03:32 -08:00
Tom Eastep	ec95e5b32c	Document fix for rate limiting of NAT rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-13 09:11:14 -08:00
Tom Eastep	1258149e0e	Don't apply rate limiting twice in NAT rules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-13 07:21:27 -08:00
Tom Eastep	ea5a6c79bc	Bump CAPVERSION	2010-02-11 16:22:47 -08:00
Tom Eastep	5a96771e07	Start 4.4.8 Beta 1	2010-02-11 15:46:57 -08:00
Tom Eastep	757fea7467	Update documentation regarding FLOW_FILTER Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-11 14:35:12 -08:00
Tom Eastep	b35f20b403	Avoid CAPVERSION bump to implement FLOW_FILTER detection Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-11 07:29:41 -08:00
Tom Eastep	b8c195f570	Accurately detect 'flow' availability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-10 14:50:26 -08:00
Tom Eastep	b1c64913b4	Reformat column header in tcinterfaces	2010-02-10 12:00:17 -08:00
Tom Eastep	433fc385bc	'bridge' implies 'routeback' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-09 14:04:36 -08:00
Tom Eastep	21d4c8ba21	Document workaround for lack of 'flow' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-08 10:03:10 -08:00
Tom Eastep	46e2afcf16	Ignore TYPE if old distro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-08 07:13:20 -08:00
Tom Eastep	b45a70f98a	Make 'nosmurfs' work correctly on IPv6 with Address Type Match Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-08 07:12:58 -08:00
Tom Eastep	18d03a61f5	Make 'nosmurfs' work with Address Type Match on IPv6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-07 08:43:31 -08:00
Tom Eastep	11a2ec9f7c	Update version to 4.4.7	2010-02-05 16:40:48 -08:00
Tom Eastep	e64af57cae	Give smurf logging chain a fixed name. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-03 16:04:59 -08:00
Tom Eastep	f4e175f149	Fix IPv6 'nosmurfs'. Make 'nosmurfs' logging more efficient. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-03 15:03:15 -08:00
Tom Eastep	97f3e5b8de	Clear known problems. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-03 07:18:55 -08:00
Tom Eastep	52880a8822	Clean up generate_matrix() fix. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-03 06:57:51 -08:00
Tom Eastep	9d288241da	Fix issues in generate_matrix(). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-02 19:42:54 -08:00
Tom Eastep	096fb29203	DEBUG and PURGE -- take 2. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-02 13:57:50 -08:00
Tom Eastep	1d8a7ad09f	Clear DEBUG and PURGE shell variables Delete a blank line Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-02 13:55:29 -08:00
Tom Eastep	753eb97667	Update version to 4.4.7 RC2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-02 10:30:53 -08:00
Tom Eastep	ede17e2da0	Set ADD_IP_ALIASES=No in all shorewall.conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-02 08:16:41 -08:00
Tom Eastep	dd60f04a9f	Work around lack of MARK Target support	2010-02-01 16:22:57 -08:00
Tom Eastep	58f6e57286	Update known problems	2010-02-01 16:19:36 -08:00
Tom Eastep	d354560863	Finish last change. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-01 14:25:51 -08:00
Tom Eastep	f0d101605b	Don't try to combine nat chains that include '-s'. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-02-01 14:24:07 -08:00
Tom Eastep	1981372c94	Make search for "-j ACCEPT" a little tighter Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-31 08:27:30 -08:00
Tom Eastep	f2709dd525	Correct release notes to match implementation Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-30 20:31:39 -08:00
Tom Eastep	3d39a47582	Set $have_ipsec after completing parse of the hosts file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-30 07:26:35 -08:00
Tom Eastep	659f774451	Sort %detect_capability for easier verification. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-29 13:09:53 -08:00
Tom Eastep	9d2decd26d	Modify determine_capabilities to use detect_capability() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-29 10:38:22 -08:00
Tom Eastep	b8ec2be516	Clean up handling of %detect_capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-28 16:39:45 -08:00
Tom Eastep	ecc7861115	Validate LOAD_HELPERS_ONLY before detecting capabilities. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-28 08:05:24 -08:00
Tom Eastep	ebd847ef70	Don't display capabilties if they have not been determined Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-28 08:04:54 -08:00
Tom Eastep	05f2bb4b3a	Correction to last patch. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 17:52:27 -08:00
Tom Eastep	103a1660bc	Update release notes for RC 1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 12:57:47 -08:00
Tom Eastep	9d25318d80	Fix detection of HASHLIMIT_MATCH on old kernels. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 12:53:31 -08:00
Tom Eastep	be117f6638	Remove traffic shaping modules from 'helpers' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 10:37:42 -08:00
Tom Eastep	2069855e44	Restore module loader to lib.base (it is needed by shorecap). Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 10:09:12 -08:00
Tom Eastep	846715b009	Remove module loading code from lib.base Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 09:58:14 -08:00
Tom Eastep	54456de888	Update module versions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 09:01:00 -08:00
Tom Eastep	c05c1a6f50	Update version to 4.4.7 RC1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-27 06:58:44 -08:00
Tom Eastep	1556002b54	A couple of tweaks to the LOAD_HELPERS_ONLY optimization change. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-25 15:59:31 -08:00
Tom Eastep	fb007bc1c7	Bump version to Beta 4	2010-01-25 12:25:01 -08:00
Tom Eastep	9408a114c6	Don't load unused modules when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-25 10:50:49 -08:00
Tom Eastep	d933aa602b	Eliminate 'ORIGINAL_POLICY_MATCH' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-25 08:13:22 -08:00
Tom Eastep	90b68a05de	Don't export %capabilities Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-25 07:56:16 -08:00
Tom Eastep	bfdc6719c1	Fix DropBcasts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-24 12:16:15 -08:00
Tom Eastep	e14d48c2cf	Bump version to 4.4.7-Beta3 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-22 16:46:29 -08:00
Tom Eastep	0d63182ab4	Fix ambiguous syntax in Config.pm Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-22 16:44:45 -08:00
Tom Eastep	199a50e1c7	Update version to 4.4.7 Beta 2 Add problems corrected to the release notes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-22 10:35:27 -08:00
Tom Eastep	8def4d03c3	Document LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 20:17:25 -08:00
Tom Eastep	8f85c75264	Implement LOAD_HELPERS_ONLY for IPv6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 15:49:44 -08:00
Tom Eastep	efc43b1b24	Add implementation of LOAD_HELPERS_ONLY Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 15:49:35 -08:00
Tom Eastep	a248acb4d4	Add LOAD_HELPERS_ONLY Option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 15:49:23 -08:00
Tom Eastep	4303ad0a3e	Add Module Helpers File Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 15:48:24 -08:00
Tom Eastep	10fe25050f	Add TC_PRIOMAP fix to change log Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 10:39:40 -08:00
Tom Eastep	a7d4207bf5	Add TC_PRIOMAP to shorewall*.conf Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-21 10:38:32 -08:00
Tom Eastep	6b9afd6a82	Remove "-common" from installer messages Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-19 08:28:08 -08:00
Tom Eastep	9788e057bf	Correct filenames in install.sh -- Take 2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-18 09:29:14 -08:00
Tom Eastep	1716995d75	Correct filenames in install.sh Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-18 09:20:09 -08:00
Tom Eastep	5cc2edf15a	Add the new tc files to the repository Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-18 09:03:05 -08:00
Tom Eastep	8798d3cdb4	Install tcinterfaces and tcpri Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-18 07:39:36 -08:00
Tom Eastep	4453bb7dc8	More updates from 4.5	2010-01-17 16:18:44 -08:00
Tom Eastep	eb790c6d89	Add IPMARK and TPROXY modules to load list	2010-01-17 15:51:19 -08:00
Tom Eastep	e119037dea	Make 'is_isable()' work with 'lo'	2010-01-17 15:38:20 -08:00
Tom Eastep	f072c10b18	Set version to 4.4.7 Beta1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-17 09:10:48 -08:00
Tom Eastep	957de4b057	Add new options to shorewall[6].conf Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-17 08:50:32 -08:00
Tom Eastep	146a738e4c	Document TPROXY Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-17 08:20:15 -08:00
Tom Eastep	f4102417ff	Shorewall::Config changes for TPROXY from 4.5 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-17 08:15:14 -08:00
Tom Eastep	07cdb8ca82	Backport TPROXY from 4.5 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-17 08:12:44 -08:00
Tom Eastep	47007c5dbd	Allow protocol to be expressed in octal or hex Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 14:20:47 -08:00
Tom Eastep	aad8ea837a	Allow port numbers to be specified in Hex Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 14:00:47 -08:00
Tom Eastep	5ec7759d81	Don't pass an undefined value to fatal_error when numeric conversion fails. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 12:35:18 -08:00
Tom Eastep	fddb85189e	Update release documents for functionality backported from 4.5. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 11:32:50 -08:00
Tom Eastep	4bf0b8e1dd	Add new configuration options and optimization changes from 4.5 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 09:53:53 -08:00
Tom Eastep	d5cc302ad9	Start 4.4.7 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-16 08:11:13 -08:00
Tom Eastep	45d975cb45	Final editing of release notes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-14 08:25:32 -08:00
Tom Eastep	6e998edd48	Correct typo -- TC_EXPORT -> TC_EXPERT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-14 07:48:19 -08:00
Tom Eastep	ebf1e55609	Version to 4.4.6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 15:38:19 -08:00
Tom Eastep	1f1812b786	Document mDNS change in the release notes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 13:24:24 -08:00
Tom Eastep	bffe8ce4c6	Add multicast address to mDNS macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 13:20:07 -08:00
Tom Eastep	79f8031267	Add IGMP to the mDNS macro. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 13:03:34 -08:00
Tom Eastep	b8b7555ff9	Add "[ <device> ]" to "show tc" usage syntax Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 12:28:20 -08:00
Tom Eastep	880cd269c7	More mark geometry misses Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 12:16:40 -08:00
Tom Eastep	72de96760f	One more 0xFF -> $globals{TC_MASK} fix Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 12:11:00 -08:00
Tom Eastep	890cbfbd5d	Document TRACK_PROVIDERS change in the release notes. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 10:59:34 -08:00
Tom Eastep	10c5630786	A few more instances of TC_MASK Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 10:50:14 -08:00
Tom Eastep	555133fa3c	Bump version to 4.4.6-Beta2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 10:14:31 -08:00
Tom Eastep	b4b6dce7c8	Add some comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 08:12:00 -08:00
Tom Eastep	4821d5e8b7	Change quantum to 1875 for simple TC SFQ. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-13 08:11:49 -08:00
Tom Eastep	55e41483de	Update Release Documents Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 20:12:31 -08:00
Tom Eastep	db2a1fe749	Add lib.cli changes to 4.4.6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 18:57:04 -08:00
Tom Eastep	f69a741691	Port Simplified TC to 4.4.6 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 17:01:20 -08:00
Tom Eastep	7e183e8eb4	Change version to 4.4.6-Beta1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 15:57:55 -08:00
Tom Eastep	57672d096c	Don't invoke 4.5 optimization under 4.4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 15:47:14 -08:00
Tom Eastep	ae31a09e8b	Move code and add comments: - Declare all of the 'preview' helpers together in Chains.pm - Add some clarifying comments in the compiler. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 15:32:59 -08:00
Tom Eastep	4420eed8d7	Allow users to preview the generated ruleset. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 15:32:50 -08:00
Tom Eastep	818dfb6295	Document 'show macro' in the release docs. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 13:46:14 -08:00
Tom Eastep	6c62f14749	Add 'show macro' command Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 13:40:25 -08:00
Tom Eastep	4464094773	Update release documents for DHCPfwd Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 07:51:20 -08:00
Tom Eastep	b6a7723c05	Add DHCPfwd macro Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 07:48:55 -08:00
Tom Eastep	baa893773d	Apply Macro changes from Tuomo Soini Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-12 07:35:41 -08:00
Tom Eastep	6b085b7897	Update module versions Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 18:54:23 -08:00
Tom Eastep	5b4e9eb8e6	Revert change with migration issue Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 15:30:33 -08:00
Tom Eastep	0b549c7a15	Suppress mark geometry output Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:55:42 -08:00
Tom Eastep	fc8bfdcbf9	Update release documents Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:49:45 -08:00
Tom Eastep	1a74dbf93e	Add mark geometry changes to Shorewall::Chains and Shorewall::Compiler Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:39:22 -08:00
Tom Eastep	01293427f5	Add Mark Geometry changes to Shorewall::Tc Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:29:34 -08:00
Tom Eastep	4f5bb5e90b	Add new mark geometry changes to Shorewall::Providers Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:22:01 -08:00
Tom Eastep	d2d2912534	Add New mark geometry variables to Shorewall::Config Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-11 14:16:03 -08:00
Tom Eastep	4e50ea14ea	Back out EXMARK detection since it is unused in 4.4. Long overdue change to LIBVERSION Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-09 09:30:25 -08:00
Tom Eastep	b0feeb805d	Fix typo in clear_firewall() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-09 07:28:57 -08:00
Tom Eastep	54b21365c2	Update release documents for [...] change Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-08 13:58:15 -08:00
Tom Eastep	e6c0c8f6b7	Allow both <...> and [...] for IPv6 Addresses Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-08 13:55:13 -08:00
Tom Eastep	83c2473d78	Correct typo in error message Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-06 08:26:13 -08:00
Tom Eastep	ca4eee3ae4	Correct handling of 'refresh' failures Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-06 08:01:46 -08:00
Tom Eastep	db819b1d3f	Update release notes to qualify when ipsets are restored by 'restore' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-06 07:57:02 -08:00
Tom Eastep	605da92eca	Don't try to restore ipsets when 'restore' is being used to recover from a start/restart failure. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-06 07:44:34 -08:00
Tom Eastep	d362af9fb6	Set CAPSVERSION to 4.4.7 just to be safe. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-05 10:00:29 -08:00
Tom Eastep	ab1dc03986	Implement EXMARK capability Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-05 09:35:11 -08:00
Tom Eastep	d6123a8fbc	Improve IPSET_SAVE restore logic: - Call startup_error() rather than fatal_error() - Call startup_error when restore-ipsets file exists but Shorewall is running Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 14:23:33 -08:00
Tom Eastep	84051ca19a	Update the release notes regarding SAVE_IPSETS and save/restore Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 12:49:58 -08:00
Tom Eastep	4e0f9b2ef3	Make save/restore work with SAVE_IPSETS=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 12:43:12 -08:00
Tom Eastep	e3c75dcfcc	Document the restoration of SAVE_IPSETS=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 11:54:59 -08:00
Tom Eastep	1aa55779e2	Re-enable SAVE_IPSETS=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 11:14:45 -08:00
Tom Eastep	b491eae3c0	Document Lenny/xtables-addons hack Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 10:20:40 -08:00
Tom Eastep	a1fd3aa7e3	Add a hack to work around a 'feature' of xtables-addons on Lenny Be more careful about checking for the ipset utility before saving the ipsets Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-04 10:15:27 -08:00
Tom Eastep	f306018159	Update all .conf files to specify 'MODULE_SUFFIX=ko' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-02 09:33:27 -08:00
Tom Eastep	55e874b23f	Update copyrights Signed-off-by: Tom Eastep <teastep@shorewall.net>	2010-01-01 12:58:27 -08:00
Tom Eastep	65c282af8b	Delete temporary nat chain used in capabilities detection. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-12-31 10:42:21 -08:00
Tom Eastep	ea2ab6e4b6	A better solution to Marcus Limosani's issue	2009-12-29 08:22:15 -08:00
Tom Eastep	f568f3df9e	Final fix for Marcus Limosani's problem	2009-12-28 15:05:54 -08:00
Tom Eastep	738a6de11b	Make use of interface chains deterministic	2009-12-28 07:36:15 -08:00
Tom Eastep	167d86746c	Correct typo in usage output	2009-12-27 11:56:38 -08:00
Tom Eastep	f933816735	Simplify handling of packet clearing	2009-12-26 15:04:41 -08:00
Tom Eastep	d62f3a4fed	Set version to 4.4.6	2009-12-24 08:00:59 -08:00
Tom Eastep	f233b86278	Fix 'forward' interface option in IPv6	2009-12-24 07:51:44 -08:00
Tom Eastep	e38df7efcb	Fix another bug in ROUTE_FILTER Handling	2009-12-23 15:13:43 -08:00
Tom Eastep	e37cf0a370	Fix other issues with rp_filter fix	2009-12-20 15:54:41 -08:00
Tom Eastep	d87d0893d2	Fix typos in the release notes	2009-12-20 12:05:35 -08:00
Tom Eastep	8eb6d136ae	Fix typo in release notes	2009-12-19 18:25:48 -08:00
Tom Eastep	d45dd5387a	Fix type on release notes	2009-12-19 18:23:15 -08:00
Tom Eastep	61b2ed7b57	Fix bug that prevented routefilter=2	2009-12-19 16:57:16 -08:00
Tom Eastep	15a1b39822	Update change log	2009-12-19 16:40:13 -08:00
Tom Eastep	436169f0b2	Update documentation for rp_filter change	2009-12-19 16:09:20 -08:00
Tom Eastep	9cf75a4253	Revert "this is crap" This reverts commit `7be7ef6685`.	2009-12-19 16:05:28 -08:00
Tom Eastep	7be7ef6685	this is crap	2009-12-19 16:05:13 -08:00
Tom Eastep	d5914addd1	Disallow port 00	2009-12-19 14:59:03 -08:00
Tom Eastep	19af1a081c	Handle kernel 2.6.31 and rp_filter	2009-12-19 13:47:12 -08:00
Tom Eastep	4f4d77be48	Add Kernel Version to the capabilities	2009-12-19 12:42:39 -08:00
Tom Eastep	24ddacb4a7	Adjust module versions	2009-12-19 07:35:30 -08:00
Tom Eastep	508e1123bb	Revert change that allowed out of order policies	2009-12-19 07:24:17 -08:00
Tom Eastep	10ae98571b	Revert change that allowed out of order policies	2009-12-19 07:20:00 -08:00
Tom Eastep	182ed24b02	Add a comment to process_rule1()	2009-12-14 15:52:16 -08:00
Tom Eastep	576cd76842	Remove superfluous logic from process_rule1	2009-12-14 14:49:38 -08:00
Tom Eastep	e9d12cfc11	Remove superfluous line of code	2009-12-14 07:17:55 -08:00
Tom Eastep	c8e185554f	Fix typo in MODULESDIR fix	2009-12-13 09:19:52 -08:00
Tom Eastep	43c45a064c	Add current and limit to conntrack table display	2009-12-12 09:10:24 -08:00
Tom Eastep	f938e9789e	More release notes editing	2009-12-11 13:45:24 -08:00
Tom Eastep	beb7634ca6	Correct numerous typos in the release notes	2009-12-11 13:41:24 -08:00
Tom Eastep	9988cfb619	Remove silly logic in expand_rule()	2009-12-10 08:00:18 -08:00
Tom Eastep	a150ed1a72	Update change log	2009-12-08 13:30:55 -08:00
Tom Eastep	3214b14197	Fix macro handling of SOURCE and DEST columns	2009-12-08 13:29:06 -08:00
Tom Eastep	79ce532b69	Document fix for 'reload -c'	2009-12-08 08:30:37 -08:00
Tom Eastep	a321ec6225	Fix DONT_LOAD vs 'reload -c'	2009-12-07 14:44:46 -08:00
Tom Eastep	4076a6bca7	Fix ENHANCED_REJECT and MODULE_SUFFIX	2009-12-07 13:55:49 -08:00
Tom Eastep	5e1f550b69	Fix ENHANCED_REJECT and MODULE_SUFFIX	2009-12-07 13:51:54 -08:00
Tom Eastep	7a6ad80c8a	Make kernel version detection work with non-standard version naming such as found on OpenWRT	2009-12-06 10:42:28 -08:00
Tom Eastep	c8616d4c67	Fix Shorewall6 capability detection	2009-12-05 21:35:05 -08:00
Tom Eastep	01ed97ad94	Describe checking for cls_flow support	2009-12-05 09:05:16 -08:00
Tom Eastep	e18238c665	Update 'flow=' description in the release notes	2009-12-05 08:05:20 -08:00
Tom Eastep	12279e57ed	Add information about 'flow' to the release notes	2009-12-04 15:04:59 -08:00
Tom Eastep	ee2195e745	Allow LOGFILE=/dev/null	2009-12-03 16:30:06 -08:00
Tom Eastep	486f1a3493	Allow /dev/null for LOGFILE	2009-12-03 16:16:13 -08:00
Tom Eastep	a188fec942	Auto-load cls_flow and search .../sched for modules	2009-12-03 12:20:58 -08:00
Tom Eastep	4bf55883ee	Auto-load cls_flow	2009-12-03 12:15:23 -08:00
Tom Eastep	4c7731fee6	Remove change log error for rejected change	2009-12-03 10:44:36 -08:00
Tom Eastep	768da64869	Remove incorrect migration consideration	2009-12-03 07:05:36 -08:00
Tom Eastep	4494272dcd	Improve error message	2009-11-29 09:55:32 -08:00
Tom Eastep	8c033de049	Fix limit check on TC mark values	2009-11-28 14:05:27 -08:00
Tom Eastep	8b2c6853f3	Remove description of reverted change from the release notes	2009-11-28 08:06:01 -08:00
Tom Eastep	e582f222ad	Backout another Patch from the Virtual Zone Sequence and re-apply a couple of small optimizations	2009-11-28 07:25:31 -08:00
Tom Eastep	e5106f10bc	Revert `8ff4d004c0`	2009-11-28 07:23:23 -08:00
Tom Eastep	4e8d753682	Revert "Finish Virtual Zones" This reverts commit `222c8cf88f`.	2009-11-28 07:20:52 -08:00
Tom Eastep	d1812b4174	Revert "Fix a couple of bugs in virtual zones" This reverts commit `22991ac9dd`.	2009-11-28 07:20:28 -08:00
Tom Eastep	038b84e775	Revert "Small optimization in virtual zones" This reverts commit `251d7116c8`.	2009-11-28 07:20:01 -08:00
Tom Eastep	f21c71d7a6	Revert "Match section rules to the number of mark rules" This reverts commit `1699d8e941`.	2009-11-28 07:19:41 -08:00
Tom Eastep	0b1621027b	Revert "Make 'virtual' a zone type rather than an option" This reverts commit `18eedf7e34`.	2009-11-28 07:19:10 -08:00
Tom Eastep	f5378e7652	Revert "More doc updates for virtual zones" This reverts commit `a37e56d823`.	2009-11-28 07:18:46 -08:00
Tom Eastep	ea2c55a993	Revert "Fix off-by-one problem" This reverts commit `543af8bccb`.	2009-11-28 07:18:07 -08:00
Tom Eastep	f5bf3c9b43	Fix merge conflicts	2009-11-28 07:16:03 -08:00
Tom Eastep	7352771c5d	Fix .spec history to omit false steps	2009-11-27 12:29:11 -08:00
Tom Eastep	8297db4c59	Fix .spec history to omit false steps	2009-11-27 11:41:14 -08:00
Tom Eastep	543af8bccb	Fix off-by-one problem	2009-11-27 08:56:23 -08:00
Tom Eastep	7f16e96167	Set version to 4.4.5 Beta1	2009-11-27 08:52:37 -08:00
Tom Eastep	a37e56d823	More doc updates for virtual zones	2009-11-27 08:49:00 -08:00
Tom Eastep	18eedf7e34	Make 'virtual' a zone type rather than an option	2009-11-27 08:17:18 -08:00
Tom Eastep	1699d8e941	Match section rules to the number of mark rules	2009-11-26 17:12:11 -08:00
Tom Eastep	251d7116c8	Small optimization in virtual zones	2009-11-26 14:48:46 -08:00
Tom Eastep	22991ac9dd	Fix a couple of bugs in virtual zones	2009-11-26 14:19:10 -08:00
Tom Eastep	222c8cf88f	Finish Virtual Zones	2009-11-26 12:14:58 -08:00
Tom Eastep	8ff4d004c0	Better virtual zone implementation	2009-11-25 18:14:14 -08:00
Tom Eastep	8263ea1312	Limit providers to 15	2009-11-25 12:18:08 -08:00
Tom Eastep	d189c08533	Revert "Add 'virtual' zone support" This reverts commit `a2cd4bd1f4`.	2009-11-25 11:51:13 -08:00
Tom Eastep	a2cd4bd1f4	Add 'virtual' zone support	2009-11-25 09:42:28 -08:00
Tom Eastep	4c40b205f8	Revert "Experimental explicit CONTINUE" This reverts commit `10056a03d9`.	2009-11-24 13:14:24 -08:00
Tom Eastep	10056a03d9	Experimental explicit CONTINUE	2009-11-24 12:50:53 -08:00
Tom Eastep	cd84efea94	Yet one more change to IPv6 address validation	2009-11-24 08:29:12 -08:00
Tom Eastep	deb45c5a27	Yet another IPv6 Address Normalization fix	2009-11-23 15:57:12 -08:00
Tom Eastep	bdb673a642	More IPv6 fixes	2009-11-23 15:21:25 -08:00
Tom Eastep	1710f9ce7c	Several fixes to IPv6 Address Handling	2009-11-23 14:44:53 -08:00
Tom Eastep	9d85d0ff7a	Allow IPv6 DNS names in net contexts	2009-11-23 13:51:46 -08:00
Tom Eastep	d3d21d4d18	Fix 'show policies' in Shorewall6[-lite]	2009-11-23 13:50:41 -08:00
Tom Eastep	f186c436d4	Improve wording of Problem Corrected #3	2009-11-23 11:48:08 -08:00
Tom Eastep	5610f78a48	Update version of Shorewall::Policy; improve 'expanded' description in Shorewall::Chains	2009-11-23 11:31:38 -08:00
Tom Eastep	cc809eaf78	Complete merge of 4.4 branch into master	2009-11-23 11:15:33 -08:00
Tom Eastep	c17ac8f23f	commit crap for now	2009-11-23 11:13:57 -08:00
Tom Eastep	532105ec39	Allow specific policy to supersede a wildcard policy	2009-11-23 10:02:04 -08:00
Tom Eastep	b30cae89e3	Allow <zone>::<serverport> in the rules file DEST column	2009-11-23 09:56:15 -08:00
Tom Eastep	99a35c1bf0	Allow <zone>::<serverport> in the rules file DEST column	2009-11-23 09:33:16 -08:00
Tom Eastep	d43ba935d1	Simplify port == 0 test	2009-11-22 09:03:01 -08:00
Tom Eastep	5b02ef68a5	Simplify port == 0 test	2009-11-22 09:00:03 -08:00
Tom Eastep	90170d6018	Update changelog	2009-11-22 08:58:06 -08:00
Tom Eastep	d4ff629fd8	Generate error on port == 0	2009-11-22 08:44:11 -08:00
Tom Eastep	720442b400	Fix merge screwup	2009-11-22 08:43:32 -08:00
Tom Eastep	bd9c0ac285	Generate error on port == 0	2009-11-22 08:39:03 -08:00
Tom Eastep	76e7dea858	Generate error on port == 0	2009-11-22 08:36:40 -08:00
Tom Eastep	6e9d9e239d	Apply 4.4.4.1 changes to master	2009-11-22 08:20:07 -08:00
Tom Eastep	c8209f4ce2	Apply bridge fix to 4.4	2009-11-22 08:18:23 -08:00
Tom Eastep	4aeee6fd8b	Make 'expanded' apply to all wildcard policies	2009-11-21 14:18:01 -08:00
Tom Eastep	c7de19cf39	Allow specific policy to supersede an expanded one	2009-11-21 13:56:40 -08:00
Tom Eastep	cbe944c354	Open the 4.5.0 Thread	2009-11-21 11:41:10 -08:00
Tom Eastep	ecf6a0ec4a	Open 4.4.5	2009-11-21 11:08:50 -08:00
Tom Eastep	bce4d51a18	Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes	2009-11-21 07:54:42 -08:00
Tom Eastep	c5bb493b29	Fix class number assignment when WIDE_TC_MARKS=Yes	2009-11-20 12:25:15 -08:00
Tom Eastep	0df84cf8b5	Remove superfluous line of code	2009-11-19 10:54:58 -08:00
Tom Eastep	a23632f45e	Mostly cosmetic cleanup of Shorewall::Chains	2009-11-19 10:35:25 -08:00
Tom Eastep	c39a9fb5eb	Fix typo in shorewall-rules(5)	2009-11-18 19:55:20 -08:00
Tom Eastep	4579a71574	More massaging of redundant test suppression	2009-11-17 11:14:02 -08:00
Tom Eastep	831611e792	Update version of Shorewall::Policy	2009-11-16 20:24:01 -08:00
Tom Eastep	5f70b261b6	Update version of Shorewall::Compiler	2009-11-16 20:21:59 -08:00
Tom Eastep	c4bfab29a5	Clean up release notes	2009-11-16 15:21:11 -08:00
Tom Eastep	9d5dd2ad3a	Implement an '-l' option to the 'show' command	2009-11-16 15:14:24 -08:00
Tom Eastep	5ec4f8d82c	Unconditionally include route marking and sticky chains	2009-11-16 14:15:01 -08:00
Tom Eastep	2a910ebddf	Suppress redundant tests for provider availability in route rules processing	2009-11-16 12:43:44 -08:00
Tom Eastep	31f01fe765	Document fixing route rule addition code	2009-11-16 11:20:02 -08:00
Tom Eastep	016537f631	Don't add route rules when interface is down	2009-11-16 10:58:38 -08:00
Tom Eastep	dd543a2934	Tweak policies display	2009-11-16 09:30:37 -08:00
Tom Eastep	f5a019becc	Implement 'show policies' command	2009-11-15 09:24:56 -08:00
Tom Eastep	b662718eec	Replace canonical_chain by rules_chain	2009-11-14 07:07:19 -08:00
Tom Eastep	10affb1cde	Set version to 4.4.4	2009-11-13 13:52:49 -08:00
Tom Eastep	fa3bdde214	Set version to Beta2	2009-11-13 12:39:41 -08:00
Tom Eastep	0e6c9abb5b	A fix for COPY handling	2009-11-12 16:45:39 -08:00
Tom Eastep	f904866336	More minor cleanup of chain name change	2009-11-12 12:30:08 -08:00
Tom Eastep	2d53f8cb0c	Delete unnecessary function	2009-11-11 16:35:46 -08:00
Tom Eastep	e748341afd	Correct mis-statement in the release notes	2009-11-11 16:35:06 -08:00
Tom Eastep	b943f09e37	Fix indentation	2009-11-11 12:34:15 -08:00
Tom Eastep	4e6b8f8f42	Set version to 4.4.4-Beta1	2009-11-11 10:58:22 -08:00
Tom Eastep	0f078e7440	Ignore empty port in INTERFACE column	2009-11-11 10:52:14 -08:00
Tom Eastep	a4eb581d44	Document full logical interface implementation	2009-11-11 10:45:01 -08:00
Tom Eastep	06d3b2c692	Allow wildcard logical names in COPY column	2009-11-11 10:17:53 -08:00
Tom Eastep	6987cd15c5	Avoid dereference of null variable	2009-11-11 10:10:45 -08:00
Tom Eastep	ba8ad6346a	More use of logical chain name	2009-11-11 10:06:06 -08:00
Tom Eastep	893a847c87	Suppress extra COMMENT warnings	2009-11-10 17:17:55 -08:00
Tom Eastep	bd9c651961	Clarify physical naming rules and '+'	2009-11-10 15:25:25 -08:00
Tom Eastep	bf8c38e054	Add ZONE2ZONE option to shorewall.conf	2009-11-10 14:12:55 -08:00
Tom Eastep	7120a73f0e	Minor efficiency improvement in move_rules()	2009-11-10 08:08:02 -08:00
Tom Eastep	c9e57c93a2	Insure uniqueness of physical names; use logical name when constructing the name of a chain	2009-11-10 07:24:14 -08:00
Tom Eastep	4e2f2923b6	Update ::Config::VERSION	2009-11-09 13:16:40 -08:00
Tom Eastep	79b5cb49df	Fix over-zealous use of physical name; Correct syntax errors	2009-11-09 12:38:00 -08:00
Tom Eastep	893a0c9d42	Remove order dependency in interface OPTIONS processing	2009-11-09 11:15:08 -08:00
Tom Eastep	9b127e6e06	Improve performance of logical->physical mapping	2009-11-09 07:27:14 -08:00
Tom Eastep	92208251b7	Add undocumented LOGICAL_NAMES option	2009-11-09 07:01:25 -08:00
Tom Eastep	dda6f06883	Update module versions	2009-11-08 09:01:30 -08:00
Tom Eastep	4d977306f9	Make 'physical' work as a general logical name facility	2009-11-08 08:37:03 -08:00
Tom Eastep	83621ff416	Add logical->physical mapping to Shorewall::Chains	2009-11-08 07:11:38 -08:00
Tom Eastep	09f1b6501c	Add logical->physical mapping to Shorewall::Providers	2009-11-08 07:00:43 -08:00
Tom Eastep	ca1dd1416d	Add logical->physical mapping to Shorewall::Tc	2009-11-08 06:26:47 -08:00
Tom Eastep	1238b771a2	Apply logical->physical mapping to /proc settings	2009-11-07 18:59:10 -08:00
Tom Eastep	b1706e10e3	Correct typo	2009-11-07 07:58:15 -08:00
Tom Eastep	bcd4887d84	Correct capitalization in error message; remove unused variable	2009-11-07 07:39:28 -08:00
Tom Eastep	7f54a6fea9	Make non-wild physical work correctly	2009-11-07 07:19:52 -08:00
Tom Eastep	496cfc391e	Make parsing of zone options tighter	2009-11-06 15:51:53 -08:00
Tom Eastep	b491745f1c	More physical interface changes	2009-11-06 13:10:19 -08:00
Tom Eastep	4ef45ff665	Generate an error if a bridge port is configured as a provider interface	2009-11-06 09:22:16 -08:00
Tom Eastep	73eab1fa55	Report physical name in zone reports rather than logical name	2009-11-06 08:40:53 -08:00
Tom Eastep	d73ebb8a6a	Add comment explaining the purpose of dump_zone_contents()	2009-11-06 08:11:18 -08:00
Tom Eastep	7014bd3ea0	Add 'physical' interface option for bridge ports	2009-11-06 08:07:13 -08:00
Tom Eastep	89bdcf9a3d	Implement 'physical' option	2009-11-06 07:27:44 -08:00
Tom Eastep	a98195e156	Back out fix for multiple bridges with wildcard ports	2009-11-05 16:34:41 -08:00
Tom Eastep	fb3477b8b5	A couple of additional tweaks to the two-bridge fix	2009-11-05 13:40:03 -08:00
Tom Eastep	b4199fd068	Document ICMP codes	2009-11-05 11:44:40 -08:00
Tom Eastep	28b660c853	Avoid reporting bogus duplicate interface with two bridges and wildcard ports	2009-11-05 11:04:14 -08:00
Tom Eastep	4548db58da	Relax port list limitation in /etc/shorewall/routestopped	2009-11-03 11:36:32 -08:00
Tom Eastep	4f5c602d5f	Fix .spec error and document logrotate files	2009-11-03 10:12:38 -08:00
Tom Eastep	25549b176c	Update version to 4.4.4	2009-11-03 10:06:29 -08:00
Tom Eastep	306549119a	Add logrotate files to packages	2009-11-03 10:06:10 -08:00
Tom Eastep	5a525134ea	Be sure that startup log is secured 0600	2009-11-03 09:34:21 -08:00
Tom Eastep	f2f91ce7dd	Some optimizations	2009-11-03 09:28:34 -08:00
Tom Eastep	c893ba6ffa	Remove dependence of Shorewall::Rules on Scalar::Util	2009-11-03 07:40:06 -08:00
Tom Eastep	45653ffe79	A couple of more move_rules() tweaks	2009-11-02 15:35:00 -08:00
Tom Eastep	f97e0c5989	Flesh out fix for Perl run-time errors	2009-11-02 07:15:20 -08:00
Tom Eastep	11ddfa92e9	Eliminate Perl run-time errors out of move_rules()	2009-11-01 17:14:42 -08:00
Tom Eastep	23d0806da2	Change Shorewall6 default STARTUP_LOG and LOG_VERBOSITY	2009-11-01 11:09:17 -08:00
Tom Eastep	59d01ccf97	A couple of tweaks to 'limit' class option	2009-10-27 12:33:14 -07:00
Tom Eastep	105754823a	Raise max limit to 128	2009-10-26 13:03:26 -07:00
Tom Eastep	f0b4b1f42e	Add limit option to tcclasses	2009-10-26 12:23:32 -07:00
Tom Eastep	cc0adc218f	Update comments and release documentation	2009-10-26 10:03:51 -07:00
Tom Eastep	8251948d2a	Add a comment	2009-10-24 15:55:56 -07:00
Tom Eastep	b3571261dd	Fix optional providers	2009-10-24 12:05:44 -07:00
Tom Eastep	c922afaf23	Tweak release notes	2009-10-24 12:01:15 -07:00
Tom Eastep	3e2cf982a3	Correct messages issued when a provider is not added	2009-10-24 08:50:15 -07:00
Tom Eastep	86df82a29a	Fix IPv6 address validation error	2009-10-23 13:41:51 -07:00
Tom Eastep	46896e7dce	Fix for Ipv6	2009-10-23 11:34:13 -07:00
Tom Eastep	445527d27e	Use /etc/debian_version to distinguish Debian-based systems	2009-10-21 16:12:02 -07:00
Tom Eastep	d0cda6b6ea	Add TRACK_PROVIDERS option	2009-10-20 13:24:17 -07:00
Tom Eastep	49f361124e	Make 'track' the default	2009-10-20 12:24:28 -07:00
Tom Eastep	7adb9b12bb	Move all function declarations from prog.footer6 to prog.header6	2009-10-19 07:37:49 -07:00
Tom Eastep	a0482132c6	Move all function declarations from prog.footer6 to prog.header6	2009-10-19 07:28:30 -07:00
Tom Eastep	abc9ab061a	Remove superfluous variables from generated script	2009-10-19 07:25:03 -07:00
Tom Eastep	65e4a5ff66	Move all functions from prog.footer to prog.header; minor tweaks elsewhere	2009-10-18 08:47:20 -07:00
Tom Eastep	0a74320bc2	Fix progress message	2009-10-17 14:23:11 -07:00
Tom Eastep	31bbec0fdd	Make 'debug' work with the safe commands	2009-10-17 13:05:26 -07:00
Tom Eastep	30dbfdc949	Fix intentation problem introduces with config-detection fix	2009-10-17 11:08:34 -07:00
Tom Eastep	f3043f1453	Document nested zone fix	2009-10-17 11:06:36 -07:00
Tom Eastep	e6755b7172	Merge nested zone fix into master	2009-10-17 10:59:41 -07:00
Tom Eastep	b38841798e	Fix initialization	2009-10-15 13:43:46 -07:00
Tom Eastep	44c5ebcfa4	Fix initialization	2009-10-15 13:06:04 -07:00
Tom Eastep	6e6063f193	Don't wait for openvpn to start	2009-10-15 12:22:37 -07:00
Cristian Rodríguez	e2f64af187	if configured, openvpn should start before shorewall	2009-10-14 14:08:02 -03:00
Tom Eastep	19a90db09f	Back out last unnecessary change	2009-10-14 07:13:52 -07:00
Tom Eastep	990a9f0fdc	Fix RETAIN_ALIASES	2009-10-13 14:36:47 -07:00
Tom Eastep	1b0a3e4417	Correct typos in release notes	2009-10-13 08:13:34 -07:00
Tom Eastep	80f41779f8	Replace keyword 'object' with 'script'	2009-10-12 08:24:47 -07:00
Tom Eastep	f1d014dfe4	Fix test for null INITLOG	2009-10-08 15:57:25 -07:00
Tom Eastep	7064b8dd08	Update version of changed modules	2009-10-08 15:49:54 -07:00
Tom Eastep	3f7a1f9574	Rename a variable	2009-10-08 09:48:15 -07:00
Tom Eastep	83a9d8dd1b	Rename 'object' to 'script'	2009-10-05 15:43:29 -07:00
Tom Eastep	dc643c67e9	Move declaration to inner block where it is used	2009-10-05 14:23:43 -07:00
Tom Eastep	ab4e7cffcf	Document fix to routestopped	2009-10-03 10:53:53 -07:00
Tom Eastep	8089ef1599	Fix 'routeback' in routestopped file	2009-10-03 10:44:26 -07:00
Tom Eastep	beac09e45f	STARTUP_LOG changes	2009-10-02 16:10:14 -07:00
Tom Eastep	de933ba912	Fix typo in comment	2009-10-02 13:10:49 -07:00
Tom Eastep	964cba79a9	Initialize 4.4.3	2009-10-02 11:31:08 -07:00
Tom Eastep	065808be16	Fix reference to README.Debian.gz	2009-10-02 11:13:44 -07:00
Tom Eastep	a87cb7b95d	Generate list of builtins in initialize()	2009-10-01 15:02:14 -07:00
Tom Eastep	a8cc7d2a7e	More clarification of masq file changes	2009-10-01 12:34:34 -07:00
Tom Eastep	ddb46931a0	Update version	2009-10-01 08:44:05 -07:00
Tom Eastep	327e170be5	Fix range-in-masq patch	2009-10-01 08:16:22 -07:00
Tom Eastep	5e49be219b	Fix result from bad pull	2009-10-01 07:49:43 -07:00
Tom Eastep	d323c5b9c5	Delete shorewall-perl and shorewall-shell during upgrade	2009-10-01 07:37:30 -07:00
Tom Eastep	39ee3b2025	Tweak emitter	2009-09-29 14:28:50 -05:00
Tom Eastep	393673a884	Allow MARK in action body -- take 2	2009-09-25 16:15:56 -04:00
Tom Eastep	bfdc8db31a	Allow MARK in action body	2009-09-25 16:01:24 -04:00
Tom Eastep	c1305eb059	Correct typo in error message	2009-09-25 13:36:45 -04:00
Tom Eastep	d84458518e	Add capability to detect old hashlimit syntax	2009-09-23 16:56:31 -04:00
Tom Eastep	428c3d1e4e	Hack to make new LIMIT stuff work on ancient iptables releases	2009-09-20 09:12:35 -04:00
Tom Eastep	20250c9ce9	Hack to make new LIMIT stuff work on ancient iptables releases	2009-09-20 09:10:23 -04:00
Tom Eastep	96b19dd218	Fix accounting extension feature	2009-09-15 13:01:20 -07:00
Tom Eastep	120aade417	Allow Extension Scripts for Accounting Chains	2009-09-15 12:22:51 -07:00
Tom Eastep	4f4925002a	Revert "Allow Extension Scripts for Accounting Chains" This reverts commit `728ad2fecf`.	2009-09-15 12:18:29 -07:00
Tom Eastep	728ad2fecf	Allow Extension Scripts for Accounting Chains	2009-09-15 11:16:37 -07:00
Tom Eastep	a5f3a05341	Fix typo in the Introduction	2009-09-14 13:43:32 -07:00
Tom Eastep	6afc43d200	Correct typo in comment	2009-09-13 09:20:32 -07:00
Tom Eastep	8fdbb6f252	Bump Nat.pm version; remove inadvertent paste	2009-09-13 09:13:50 -07:00
Tom Eastep	5793246d7c	Make processing of original dest in Format-1 macros more obvious	2009-09-13 09:01:34 -07:00
Tom Eastep	8fdebf0c38	Add new columns to macros	2009-09-13 08:09:40 -07:00
Tom Eastep	07d8872823	Indicate that Squeeze 'will' include 4.4	2009-09-12 09:20:38 -07:00
Tom Eastep	9b0a9e8ecd	Add -<family> to 'ip route del default' command	2009-09-12 08:48:52 -07:00
Tom Eastep	8c2a228a7d	Apply Jesse Shrieve's SNAT patch	2009-09-11 07:47:31 -07:00
Tom Eastep	f33e842f1b	Update module version	2009-09-10 14:56:23 -07:00
Tom Eastep	74aff4f4ef	Bump the version in a couple of modules modified for 4.4.2	2009-09-09 12:58:39 -07:00
Tom Eastep	212937a29d	Make 'map_old_actions' a little cleaner	2009-09-09 12:37:49 -07:00
Tom Eastep	7c1dd35a00	Update release documents	2009-09-09 12:18:31 -07:00
Tom Eastep	0b03f52ad9	Don't look for extension script for built-in actions	2009-09-09 11:53:51 -07:00
Tom Eastep	5fc0137a2e	Update Compiler module version	2009-09-08 17:05:01 -07:00
Tom Eastep	128edd4bba	Slight optimization -- also makes code easier to read	2009-09-08 16:00:40 -07:00
Tom Eastep	b4712a93fa	Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - comments	2009-09-08 13:04:34 -07:00
Tom Eastep	bb83db3eb9	Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - change log	2009-09-08 12:55:14 -07:00
Tom Eastep	5655dbb01b	Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead	2009-09-08 12:54:23 -07:00
Tom Eastep	b03d502bbb	Allow comments on continued lines	2009-09-06 16:17:22 -07:00
Tom Eastep	70ebe17cb3	Reimplement MAPOLDACTIONS=Yes	2009-09-06 13:37:24 -07:00
Tom Eastep	efa952572c	Update 4.4.2	2009-09-06 11:43:46 -07:00
Tom Eastep	7192b47289	Add a Lenny->Squeeze Howto	2009-09-06 09:51:32 -07:00
Tom Eastep	75eb186ea7	Split MASQ SOURCE warning into two separate warnings	2009-09-05 16:02:16 -07:00
Tom Eastep	ec94ed638e	Better modularization of Chains and Actions	2009-09-05 08:43:14 -07:00
Tom Eastep	dd64ea2484	Update known_problems for 4.4.2	2009-09-04 11:41:23 -07:00
Tom Eastep	bb8ad187f1	Update version to 4.4.2	2009-09-04 11:40:34 -07:00
Tom Eastep	03821dc22c	Process routestopped file during 'check'	2009-09-03 19:27:25 -07:00
Tom Eastep	76d9a80df3	A small optimization on the last restriction removal	2009-09-03 18:26:50 -07:00
Tom Eastep	84bff13e7f	Apply 4.4.1.2 fix to trunk	2009-09-03 18:25:32 -07:00
Tom Eastep	4a809e14ab	Documentation cleanup	2009-09-03 15:24:19 -07:00
Tom Eastep	f3455b107d	4.4.2 release doc initialization and update	2009-09-03 14:58:46 -07:00
Tom Eastep	df5291e119	Apply initialization fix to master branch	2009-09-03 14:54:47 -07:00
Tom Eastep	015d4f58ce	Allow moving rules with commands	2009-09-03 14:11:44 -07:00
Tom Eastep	4412a05a70	Fix detection of PERSISTENT_SNAT	2009-09-03 13:56:00 -07:00
Tom Eastep	62b1dbcd7f	Document portlist-splitting change	2009-09-02 15:30:26 -07:00
Tom Eastep	c9e9877f05	Combine port-list handling into a single function	2009-09-02 14:49:07 -07:00
Tom Eastep	9e09e61a1a	Delete blank line	2009-09-01 11:18:14 -07:00
Tom Eastep	b778f04b1a	Massage fix for multicast and nets=	2009-09-01 11:11:57 -07:00
Tom Eastep	b30da86cce	Fix automatic multicast with nets=	2009-09-01 08:56:54 -07:00
Tom Eastep	fbfa4b4e49	Update release documents and make minor change to faq	2009-08-31 14:19:15 -07:00
Tom Eastep	1544c0b2b1	Add some comments concerning "$\|"	2009-08-31 10:41:08 -07:00
Tom Eastep	d368d80a12	More robust checking of zone definitions	2009-08-31 09:09:15 -07:00
Tom Eastep	5297bb8b8d	Fix undefined variable warning	2009-08-31 09:08:49 -07:00
Tom Eastep	2bb92a79f3	Fix silly hole in zones file parsing	2009-08-30 08:05:10 -07:00
Tom Eastep	d31721a066	Fix rule generated by MULTICAST=Yes -- release documents	2009-08-29 09:34:16 -07:00
Tom Eastep	b4f7b85b3b	Fix multicast network in Policy.pm	2009-08-29 09:26:46 -07:00
Tom Eastep	b7915991ba	Add MULTICAST=Yes corrected problem description to release notes	2009-08-29 09:24:51 -07:00
Tom Eastep	a0a9e087de	Fix typo in release notes	2009-08-29 09:07:27 -07:00
Tom Eastep	1ef00c547b	Disallow 'nets=' in a multi-zone interface definition	2009-08-29 07:41:27 -07:00
Tom Eastep	f2c3d9cd79	Correct typo	2009-08-29 07:20:40 -07:00
Tom Eastep	4809314fc1	Allow extending a zone defined with nets=	2009-08-29 07:20:16 -07:00
Tom Eastep	acfdc7e481	nets= allows multicast	2009-08-28 15:17:10 -07:00
Tom Eastep	a62d86aca7	Update interfaces manpage	2009-08-28 13:45:00 -07:00
Tom Eastep	5db7e77462	Turn off IP forwarding in the standalone example -- update release docs	2009-08-28 08:31:48 -07:00
Tom Eastep	383f3e8bcf	Fix nested IPSEC zones	2009-08-26 12:44:10 -07:00
Tom Eastep	52dfd5b259	Make cleanup after error explicit	2009-08-26 10:34:04 -07:00
Tom Eastep	db803807a7	Add comment regarding tcclass.guarantee	2009-08-26 10:32:57 -07:00
Tom Eastep	1b26c65cbc	Fix logging in rules at the end of INPUT and OUTPUT	2009-08-25 09:22:26 -07:00
Tom Eastep	088e164f18	Redefine 'full' when used in a sub-class definition	2009-08-24 11:56:16 -07:00
Tom Eastep	4eb9e5db3d	Correct example in the docs and ensure that future idiots don't place 'default' in the PRIO column of tcclasses	2009-08-24 06:25:26 -07:00
Tom Eastep	679cff2779	Correct example in the docs and ensure that future idiots don't place 'default' in the PRIO column of tcclasses	2009-08-23 20:45:05 -07:00
Tom Eastep	6b5493b81c	Add .*~ to files removed by "clean"	2009-08-23 12:55:29 -07:00
Tom Eastep	e24dbb9aea	Add 'clean' target to Makefiles	2009-08-23 10:43:01 -07:00
Tom Eastep	267bc808f5	Use 'set_command()' in the 'compile' case as well as the 'check' case	2009-08-22 09:39:15 -07:00
Tom Eastep	5ac331a5a0	Rename verbosity-oriented variables/functions	2009-08-22 07:57:55 -07:00
Tom Eastep	5dd41249c6	Remove trailing whitespace	2009-08-20 14:32:15 -07:00
Tom Eastep	8c16ac1d46	Update Module versions	2009-08-20 08:53:57 -07:00
Tom Eastep	ddf8bbe516	Remove some V4/V6 tests	2009-08-18 11:03:17 -07:00
Tom Eastep	622db3655f	More updates/corrections to change notes	2009-08-18 08:50:50 -07:00
Tom Eastep	4bc1fb145a	Update change notes	2009-08-18 08:44:55 -07:00
Tom Eastep	897748aa83	Be silent about deleting temporary NAT chain	2009-08-18 08:43:37 -07:00
Tom Eastep	1cf22ead7f	Correct allip() return value	2009-08-18 07:35:17 -07:00
Tom Eastep	90b0bedc43	More performance tweaks	2009-08-17 16:29:18 -07:00
Tom Eastep	787a1867a0	Another tiny performance enhancement	2009-08-17 12:58:50 -07:00
Tom Eastep	e756689d0c	Very minor performance tweak	2009-08-17 11:22:03 -07:00
Tom Eastep	89a6d7e5db	Tweak initialization comments	2009-08-17 10:45:46 -07:00
Tom Eastep	d8cc9c5c92	Fix capabilities test for PERSISTENT_SNAT	2009-08-17 08:07:58 -07:00
Tom Eastep	6d2809f154	Note the inadaquacy of the Busybox version of the iproute2 utilities	2009-08-17 07:17:33 -07:00
Tom Eastep	0557148bec	Avoid double globals initialization for IPv6	2009-08-16 09:24:51 -07:00
Tom Eastep	cbc9fa6e4c	Update README.txt	2009-08-15 17:43:26 -07:00
Tom Eastep	201145eed9	More Persistent SNAT tweaks	2009-08-15 08:56:05 -07:00
Tom Eastep	c908edab34	Add new capability for persistent SNAT	2009-08-15 08:35:54 -07:00
Tom Eastep	55f75604b3	Add support for 'persistent'	2009-08-15 08:15:38 -07:00
Tom Eastep	f042c641d6	Remove extraneous export	2009-08-15 07:01:06 -07:00
Tom Eastep	9b87812531	update version of Nat module	2009-08-14 15:03:59 -07:00
Tom Eastep	883f415e53	Start 4.4.1	2009-08-14 14:46:31 -07:00
Tom Eastep	2bac824207	Fix provider number in masq entry	2009-08-12 13:52:56 -07:00
Tom Eastep	5cb9ff0009	Fix 'upnpclient' on required interfaces	2009-08-11 08:31:58 -07:00
Tom Eastep	51e7bcdaf4	Extend release notes and correct typos	2009-08-11 08:02:36 -07:00
Tom Eastep	3e7c7a7e90	Fix a couple of typos	2009-08-09 11:38:18 -07:00
Tom Eastep	b7a6223f44	Make perl an RPM prerequisite	2009-08-09 08:38:55 -07:00
Tom Eastep	6a25d6b9db	Make a functional Perl a prerequisite for installation	2009-08-09 08:33:22 -07:00
Tom Eastep	1d1133532f	Make 'SHOREWALL_COMPILER=shell' a WARNING rather than an ERROR	2009-08-09 08:19:24 -07:00
Tom Eastep	1a5027de9f	Restore ipset binding capability	2009-08-08 08:26:22 -07:00
Tom Eastep	1051c44f51	Add xtables-addons install link to release notes	2009-08-07 14:42:06 -07:00
Tom Eastep	8011a61970	Add section IDs to Dynamic Zones page	2009-08-07 13:54:24 -07:00
Tom Eastep	a4090dc34f	Document that 'any' is now a reserved word	2009-08-07 13:41:21 -07:00
Tom Eastep	55c879e4e6	Fix log record displays	2009-08-07 13:33:07 -07:00
Tom Eastep	374aceb06c	Fix a couple of typos	2009-08-07 12:24:56 -07:00
Tom Eastep	7fbfb61fee	Remove empty section from the release notes	2009-08-07 09:59:13 -07:00
Tom Eastep	fd75bc728a	Idiot-proofing of the upgrade issues page	2009-08-07 09:46:20 -07:00
Tom Eastep	ed1e1f1352	Yet more idiot-proofing	2009-08-07 07:47:31 -07:00
Tom Eastep	a069b8817c	More idiot-proofing of the release notes	2009-08-07 07:23:24 -07:00
Tom Eastep	71fb62c760	More tweaking of the release notes	2009-08-06 12:35:00 -07:00
Tom Eastep	b92730554e	Idiot-proofing of the release notes	2009-08-06 12:23:35 -07:00
Tom Eastep	3af3ce6779	More release note tweaks	2009-08-06 10:24:21 -07:00
Tom Eastep	0c0026db53	Tweak release notes	2009-08-06 07:45:50 -07:00
Tom Eastep	9fd25a4832	Fix logging NAT rules -- fix release notes	2009-08-05 13:00:10 -07:00
Tom Eastep	031afd59b5	Fix logging NAT rules -- update release notes wording	2009-08-05 12:51:11 -07:00
Tom Eastep	70f46c02cc	Fix logging NAT rules	2009-08-05 12:48:14 -07:00
Tom Eastep	9ce5887269	Restore LAST LINE to those files that are processed by the shell	2009-08-05 07:59:32 -07:00
Tom Eastep	e91d3dd905	More LAST LINE deletions	2009-08-05 07:38:02 -07:00
Tom Eastep	02b950dc9e	Update the Notices page to reflect an earlier release date for 4.4	2009-08-03 14:49:51 -07:00
Tom Eastep	999a00dc77	Remove need for '-v-1' when compiling to stdout	2009-08-03 11:20:34 -07:00
Tom Eastep	3efaef813f	Update version to 4.4.0	2009-08-03 10:16:37 -07:00
Tom Eastep	bdb69876ee	Add migration issue for nested zones	2009-07-29 16:55:05 -07:00
Tom Eastep	489e09a4d7	Propagate super option to parents	2009-07-29 15:33:47 -07:00
Tom Eastep	4af6c7650e	Correct handling of nested IPSEC zone	2009-07-29 14:35:27 -07:00
Tom Eastep	8d8920e7ad	Disallow ipsec zones nested within an ip zone	2009-07-29 07:49:06 -07:00
Tom Eastep	19736bcdbd	Update version to RC2	2009-07-28 13:45:26 -07:00
Tom Eastep	f2f8cab962	Make 'any' a reserved zone name	2009-07-26 12:29:37 -07:00
Tom Eastep	26cb2b1eeb	Allow Shorewall6 to recognize TC, IP and IPSET	2009-07-26 12:26:49 -07:00
Tom Eastep	2d45a35c8f	Make PREFIX work under Cygwin - Take 2	2009-07-25 07:44:53 -07:00
Tom Eastep	eed9df1c06	Make PREFIX work under Cygwin	2009-07-25 07:30:08 -07:00
Tom Eastep	c028fefa30	Fix 'disable_ipv6 -- take 2	2009-07-24 17:27:42 -07:00
Tom Eastep	fde24c16df	Fix 'disable_ipv6	2009-07-24 16:58:49 -07:00
Tom Eastep	c77f462d2d	Delete prog.functions and prog.functions6	2009-07-24 14:51:24 -07:00
Tom Eastep	45fffc7261	Replace 'edit' by 'validate' in compiler parameter handling logic	2009-07-22 10:43:53 -07:00
Tom Eastep	264126e9f5	Fix syntax error in last change	2009-07-22 10:43:15 -07:00
Tom Eastep	7f790e3aa2	Don't call generate_matrix() during 'check'	2009-07-21 14:13:26 -07:00
Tom Eastep	4fd338f3ca	Fix 'rpm -U' from earlier versions	2009-07-21 12:32:25 -07:00
Tom Eastep	902d6e0d45	A couple of cosmetic fixes	2009-07-21 06:57:11 -07:00
Tom Eastep	2146a356a6	Fix .spec to re-add the init symlinks during an upgrade	2009-07-21 06:53:00 -07:00
Tom Eastep	0204ea46a6	Ensure that move_rules doesn't crash in NONAT case	2009-07-16 15:59:59 -07:00
Tom Eastep	55045ace4b	Optimize nonat rules in certain cases	2009-07-16 11:05:37 -07:00
Tom Eastep	f16b2300b6	Remove references to Shorewall-shell, Shorewall-perl and prior Shorewall versions from the manpages	2009-07-15 17:50:55 -07:00
Tom Eastep	9c2966448e	Fix NONAT of sub-zone	2009-07-15 15:59:53 -07:00
Tom Eastep	8e9bef0a61	Fix routing with no providers	2009-07-15 13:03:49 -07:00
Tom Eastep	3bd9d31c05	Correct NOROUTE logic when no providers	2009-07-15 12:32:26 -07:00
Tom Eastep	17f61ad1c6	Optimize creation of /etc/iproute2/rt_tables	2009-07-15 12:22:31 -07:00
Tom Eastep	8f57a5d7a2	Some minor tweaks to the Providers module	2009-07-14 16:12:59 -07:00
Tom Eastep	d64b526319	Come cleanup of the Chains module	2009-07-13 16:54:39 -07:00
Tom Eastep	887a643f9e	Initiate RC1	2009-07-12 10:06:57 -07:00
Tom Eastep	75861185e0	Minor typo/cosmetic corrections	2009-07-12 09:26:25 -07:00
Tom Eastep	4d09aa0ff4	Remove duplicate macro GIT and update OpenVZ Doc	2009-07-10 11:31:33 -07:00
Tom Eastep	5bd3d710b7	Push version to Beta 4	2009-07-09 16:41:10 -07:00
Tom Eastep	bdd124b504	Derive IP6TABLES from IPTABLES	2009-07-09 10:29:56 -07:00
Tom Eastep	2142e92f8a	Remove add_command and replace all calls with calls to add_commands	2009-07-06 18:38:39 -07:00
Tom Eastep	0bb1fbd9c4	Make DISABLE_IPV6=No the default for released shorewall.conf files	2009-07-06 18:38:10 -07:00
Tom Eastep	f88048ebe4	More revert conflicts	2009-07-06 18:23:23 -07:00
Tom Eastep	bab4f9df33	Resolve revert conflicts	2009-07-06 18:08:17 -07:00
Tom Eastep	16006e0425	Ensure that PATH is exported	2009-07-01 14:02:00 -07:00
Tom Eastep	81188bce1c	Update release notes	2009-06-30 09:01:05 -07:00
Tom Eastep	4a98936290	Update home page for Beta 3	2009-06-30 07:06:47 -07:00
Tom Eastep	bc85b615ba	More new macros	2009-06-29 21:05:23 -07:00
Tom Eastep	0afd7f3a6f	More new macros	2009-06-29 21:00:34 -07:00
Tom Eastep	26aa8ba504	Delete DISABLE_IPV6 option	2009-06-29 18:33:44 -07:00
Tom Eastep	050375b211	Delete DISABLE_IPV6 option	2009-06-29 18:33:13 -07:00
Tom Eastep	9dbafc59d0	Fix 'findgw'	2009-06-29 08:14:53 -07:00
Tom Eastep	d32d677028	Add macro.OSPF	2009-06-28 06:18:43 -07:00
Tom Eastep	bc89604ba2	Add macro.OSPF	2009-06-28 06:17:48 -07:00
Tom Eastep	0b08186056	Fix a typo in the release notes	2009-06-27 13:46:50 -07:00
Tom Eastep	f264510729	Minor corrections to release notes	2009-06-27 10:27:30 -07:00
Tom Eastep	25c2403f48	Update version to Beta 3	2009-06-27 08:26:41 -07:00
Tom Eastep	b2b6633ced	More on port list split/validation	2009-06-26 15:05:35 -07:00
Tom Eastep	cb681ab5ca	Fix for source port counting	2009-06-26 10:31:43 -07:00
Tom Eastep	900cfa0def	1) Cosmetic change to compiler.pl 2) Make 'purge_jump' handle '-g <target>' correctly 3) Minor effeciency changes to Chains.pm	2009-06-26 09:46:15 -07:00
Tom Eastep	40bb8283d2	Verify the availability of the LOG target	2009-06-25 13:50:27 -07:00
Tom Eastep	ca15ead9ab	Remove '#LAST LINE' from config files	2009-06-25 06:24:49 -07:00
Tom Eastep	2f01fc9a3e	Fix 'show dynamic' -- take 2	2009-06-24 15:41:15 -07:00
Tom Eastep	f4338b52fe	Fix 'show dynamic'	2009-06-24 15:28:43 -07:00
Tom Eastep	6eb202666c	Fix for mis-configured interfaces	2009-06-24 08:58:37 -07:00
Tom Eastep	c85eacb863	Add new macros	2009-06-23 14:47:49 -07:00
Cristian Rodríguez	1967f9cbb4	Merge branch 'master' of ssh://judas_iscariote@shorewall.git.sourceforge.net/gitroot/shorewall	2009-06-21 18:58:27 -04:00
Tom Eastep	bd55a545b5	Rename lib.user to lib.private	2009-06-20 09:35:08 -07:00
Tom Eastep	f991e28308	Remove Shorewall-shell syntax from the tos manpage	2009-06-19 15:06:56 -07:00
Tom Eastep	01d046fac9	Add lib.user extension script	2009-06-19 14:39:45 -07:00
Tom Eastep	117116eb4e	Add USER/GROUP column to /etc/shorewall/masq	2009-06-19 08:00:26 -07:00
Tom Eastep	dcb4ca61a5	Add iptrace/noiptrace commands	2009-06-17 12:03:05 -07:00
Cristian Rodríguez	9e246996ad	Merge branch 'master' of ssh://judas_iscariote@shorewall.git.sourceforge.net/gitroot/shorewall	2009-06-17 12:39:38 -04:00
Tom Eastep	927aa5f0e8	Additional fix up of optional interface handling. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-06-17 09:39:35 -07:00
Tom Eastep	b99444ab8b	Make new optional interface code work with shared providers	2009-06-17 07:30:01 -07:00
Cristian Rodríguez	b714605663	Add new GIT macro	2009-06-16 22:12:56 -04:00
Tom Eastep	3483e8052a	Small optimization in lookup_provider()	2009-06-16 15:52:38 -07:00
Tom Eastep	64fd1167d1	replace a couple of instances of 'which' with 'mywhich'; relocate some global variable code	2009-06-16 15:39:04 -07:00
Tom Eastep	c00195e62a	Replace '_IS_UP' with '_IS_USABLE'	2009-06-16 14:25:13 -07:00
Tom Eastep	2a7491ebf2	More work on optional interfaces	2009-06-16 14:03:15 -07:00
Tom Eastep	1e98ec52a0	Fix typo in release notes	2009-06-16 12:36:32 -07:00
Tom Eastep	6064d9e681	Document that 'continue' is no longer released	2009-06-16 09:51:32 -07:00
Tom Eastep	58b2488459	Clean up 'upnpclient' implementation	2009-06-16 09:43:22 -07:00
Tom Eastep	abe07c9fae	Add 'upnpclient' interface option	2009-06-15 13:34:35 -07:00
Tom Eastep	b6410902a0	Relocate code that sets provider variables	2009-06-15 12:25:20 -07:00
Tom Eastep	8eb6ab7cc9	Set optional interface variables when there are no providers	2009-06-15 12:07:18 -07:00
Tom Eastep	c96db9a01c	Set optional provider variables when NOROUTE is true	2009-06-15 11:35:46 -07:00
Tom Eastep	440cc08802	Fix ORIGINAL DEST issue	2009-06-15 08:45:34 -07:00
Tom Eastep	f723bc2ef1	Restore find_interface_by_mac()	2009-06-15 07:33:41 -07:00
Tom Eastep	894d4e5aa5	Update version to Beta2	2009-06-15 06:50:21 -07:00
Tom Eastep	4f675e2e18	Update release documents	2009-06-15 06:49:57 -07:00
Tom Eastep	48452fcc23	Delete 'continue' file	2009-06-15 05:51:21 -07:00
Tom Eastep	d0230e205d	Remove '-h' from install.sh help text	2009-06-15 05:50:23 -07:00
Tom Eastep	a6d2497653	Integerize r2q before using it in a 'qdisc add' command	2009-06-14 14:29:12 -07:00
Tom Eastep	f02cddd780	Restore find_first_interface_address and find_first_interface_address_if_any	2009-06-14 13:40:27 -07:00
Tom Eastep	7440cd7d21	Correct 'help' in compiler.pl	2009-06-14 13:39:42 -07:00
Tom Eastep	e2ae6453ac	Replace 'Shorewall-perl' with 'Shorewall'	2009-06-13 07:07:55 -07:00
Tom Eastep	265e4fa546	First cut at 4.4	2009-06-12 15:51:43 -07:00
Tom Eastep	1025ca6002	Refine `ee0667c9da` slightly	2009-06-12 07:34:31 -07:00
Tom Eastep	ee0667c9da	Fix mnemonic handling in tcfilters	2009-06-12 07:27:08 -07:00
Tom Eastep	a1330cbfdf	Purely cosmetic change in the Actions module	2009-06-10 14:31:22 -07:00
Tom Eastep	d079e69a1b	Correct Typo in 2-interface IPv6 Sample shorewall6.conf	2009-06-09 07:59:23 -07:00
Tom Eastep	bcdcee42e2	Fix typo in release notes	2009-06-07 15:23:18 -07:00
Tom Eastep	91b0e5aaa1	Update version and release docs to start work on 4.3.13	2009-06-07 10:52:53 -07:00
Tom Eastep	bed38c72cf	Fix syntax error in Debian init scripts	2009-06-07 08:36:37 -07:00
Tom Eastep	cb77458070	Allow INITLOG to be set in /etc/default/shorewall[6]; fix syntax error in Zones module	2009-06-07 08:07:56 -07:00
Tom Eastep	be8b352ee7	Cleanup of STDERR redirection; Update module versions	2009-06-05 15:12:59 -07:00
Tom Eastep	c7210be5f0	Update slackware fireall script to redirect STDERR	2009-06-05 14:37:26 -07:00
Tom Eastep	69c78676ad	Redirect STDERR to log	2009-06-05 13:49:23 -07:00
Tom Eastep	a8dc934443	Revise init.devian.sh handling	2009-06-05 13:05:17 -07:00
Tom Eastep	9ee0d05507	Update version to 4.3.12	2009-06-05 11:53:01 -07:00
Tom Eastep	c370dc650c	Remove support for 'norfc1918' and it's associated settings in shorewall.conf	2009-06-05 10:51:30 -07:00
Tom Eastep	ed5dc806cc	Switch Debian installs to use STARTUP_LOG	2009-06-05 08:46:58 -07:00
Tom Eastep	7621859e0f	Fix 'findgw'	2009-06-04 13:03:56 -07:00
Tom Eastep	910a91bf47	Add 'return 0' to start file	2009-06-04 10:37:26 -07:00
Tom Eastep	93b2227ce6	Add FAQ 36 re: BANDWIDTH_IN	2009-06-03 17:11:14 -07:00
Tom Eastep	7b20cf2af9	Fix 'shorewall reset'	2009-05-31 10:21:37 -07:00
Tom Eastep	7ecd3f0437	Correct previous commit	2009-05-29 07:21:51 -07:00
Tom Eastep	f2cb2cca9e	Suppress duplicate progress messages	2009-05-29 07:03:24 -07:00
Tom Eastep	d33532d6cd	Add TOS field to tcfilters	2009-05-28 16:41:14 -07:00
Tom Eastep	97fa7a0513	Add LENGTH column to tcfilters file	2009-05-28 14:29:33 -07:00
Tom Eastep	d35274d7d9	Minor cosmetic change to the source	2009-05-28 14:04:42 -07:00
Tom Eastep	7418e27308	Deimplement ipset binding support	2009-05-28 07:22:48 -07:00
Tom Eastep	d0d999488b	Fix silly bug in capabilities detection	2009-05-28 06:42:47 -07:00
Tom Eastep	0bd3b0c0af	Clarify requirement for RT parameters	2009-05-24 16:58:41 -07:00
Tom Eastep	a0071a21e8	Tweak and document HFSC implementation	2009-05-24 10:06:36 -07:00
Tom Eastep	d97a96b350	First implementation of HFSC queuing discipline	2009-05-23 17:07:57 -07:00
Tom Eastep	787caa7f32	First implementation of HFSC queuing discipline	2009-05-23 17:04:39 -07:00
Tom Eastep	4cf2c1b59f	Avoid 'large quantum' warnings during start/restart	2009-05-23 09:04:06 -07:00
Tom Eastep	110b6a613d	More code structure cleanup -- Providers. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-05-22 13:55:39 -07:00
Tom Eastep	d6c8cd5d3e	Warn if 'proxyarp' specified on a non-loose provider	2009-05-21 09:39:43 -07:00
Tom Eastep	e82716baf4	shorewall.conf rationalization	2009-05-20 16:29:23 -07:00
Tom Eastep	bddf78ded5	Missing user exists from Shorewall6	2009-05-20 13:40:42 -07:00
Tom Eastep	142fab8d46	Some documentation updates	2009-05-20 07:54:17 -07:00
Tom Eastep	5236a793a9	Simplify shorewall.spec	2009-05-19 17:31:12 -07:00
Tom Eastep	ad6b47d3bf	More code rationalization	2009-05-19 17:11:56 -07:00
Tom Eastep	2c25deeccf	Add additional extension script files -- second phase	2009-05-19 17:11:31 -07:00
Tom Eastep	dba5f719c0	Add additional extension script files	2009-05-19 17:10:42 -07:00
Tom Eastep	20805a6e46	Add Traceroute Macro for IPv6	2009-05-15 17:22:33 -07:00
Tom Eastep	f75f4158b3	Add 'findgw' user exit	2009-05-11 14:35:20 -07:00
Tom Eastep	b9fb023208	Correct typo in comment	2009-05-11 07:04:08 -07:00
Tom Eastep	f9689d0b47	Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall	2009-05-10 12:24:07 -07:00
Tom Eastep	3162eff925	Support version 3 of dhclient	2009-05-10 12:22:23 -07:00
Tom Eastep	e97f7a622c	Update version to 4.3.11	2009-05-10 07:08:47 -07:00
Tom Eastep	b94d2e1d42	Revert "Update version to 4.3.11" This reverts commit `b0b47e7f30`.	2009-05-10 07:06:47 -07:00
Tom Eastep	b0b47e7f30	Update version to 4.3.11	2009-05-10 07:04:18 -07:00
Tom Eastep	887fee7618	Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall Conflicts: Shorewall/changelog.txt Shorewall/releasenotes.txt	2009-05-09 10:03:33 -07:00
Tom Eastep	be9573d30f	Fix 'start' with AUTOMAKE=Yes	2009-05-09 10:00:33 -07:00
Tom Eastep	e1771ebead	Externalize the 'flow' classifier	2009-05-08 14:05:27 -07:00
Tom Eastep	8f1ea63711	Make traffic shaping work better with IPv6	2009-05-08 13:30:47 -07:00
Tom Eastep	0e94016462	Delete error message -- it's also occurring on 2.6.28	2009-05-08 13:19:48 -07:00
Tom Eastep	7766855e98	More comments about failing 'tc filter add' command	2009-05-08 08:12:54 -07:00
Tom Eastep	ff26ff4697	Fix 'iprange' command	2009-05-07 07:21:46 -07:00
Tom Eastep	d66fc7a7e1	Add warning when successful tc command returns non-zero exit status	2009-05-07 07:19:25 -07:00
Tom Eastep	c9538bbdee	Minor code cleanup in Tc	2009-05-06 13:40:18 -07:00
Tom Eastep	71480f38e2	Complete prior commit. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-05-06 09:49:06 -07:00
Tom Eastep	202d5f800e	1) Avoid multiple pri 65535 fw filters 2) Fix tcdevices > 9 3) Add some decimal/binary comments Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-05-06 09:47:13 -07:00
Tom Eastep	56016ca1bb	Improve interface number assignment	2009-05-06 07:07:38 -07:00
Tom Eastep	83bef182b1	Update some module versions	2009-05-05 18:11:49 -07:00
Tom Eastep	2125f3140f	Allow upper case A-F in Hex numbers	2009-05-05 16:23:37 -07:00
Tom Eastep	df42a82b01	Minor cosmetic improvements	2009-05-05 16:00:12 -07:00
Tom Eastep	404a7250b0	Some early code cleanup	2009-05-05 15:43:38 -07:00
Tom Eastep	11962560fe	Start 4.3.11 release documentation	2009-05-05 14:21:34 -07:00
Tom Eastep	5758ba3f69	Fix SCTP source port filtering	2009-05-05 14:13:05 -07:00
Tom Eastep	94a7df0cd5	Pass many fewer arguments while processing providers file and route_rules file	2009-05-05 11:38:45 -07:00
Tom Eastep	1b380fbbab	Pass many fewer arguments while processing masq rules	2009-05-05 11:31:47 -07:00
Tom Eastep	e68b571abe	Pass many fewer arguments while processing accounting rules	2009-05-05 11:25:56 -07:00
Tom Eastep	293987a383	Pass many fewer arguments while processing traffic shaping files	2009-05-05 11:23:01 -07:00
Tom Eastep	a23fc3c46c	Pass many fewer arguments while processing a record in /etc/shorewall/rules	2009-05-05 11:14:53 -07:00
Tom Eastep	c05071afc4	Another class number decimal/hex fix	2009-05-05 08:24:02 -07:00
Tom Eastep	624c24f2c0	Sequentially assign class numbers when WIDE_TC_MARKS=Yes	2009-05-05 07:50:46 -07:00
Tom Eastep	8f6130cca4	Update to nested classes; document nested classes in the release docs	2009-05-04 16:03:14 -07:00
Tom Eastep	03cd8350dc	Initial implementation of nested classes	2009-05-04 14:19:09 -07:00
Tom Eastep	d3cd3ea26c	Remove obsolete test	2009-05-04 13:25:21 -07:00
Tom Eastep	c7352303f4	Clean up documentation	2009-05-04 13:14:25 -07:00
Tom Eastep	5b6769a722	Fix release documents re IPMARK; correct encode/decode	2009-05-04 12:04:04 -07:00
Tom Eastep	2db6130c26	Disallow 'occurs' with 'classify'; allow '<devname>:<classnum>' in tcclasses	2009-05-04 09:48:22 -07:00
Tom Eastep	13d3f86e23	Correct clearing of marks in POSTROUTING so that IPMARK works in the FORWARD table	2009-05-04 08:54:20 -07:00
Tom Eastep	b02dc1692f	Clean up latest occurs effort	2009-05-03 17:05:02 -07:00
Tom Eastep	f533468da0	Resolve merge conflicts	2009-05-03 09:56:13 -07:00
Tom Eastep	79adcb964f	Cosmetic improvements in tcclasses processing	2009-05-03 09:03:00 -07:00
Tom Eastep	90b07d849d	Fix compile for export	2009-05-03 09:01:33 -07:00
Tom Eastep	16826aeb31	Remove IPMARK support	2009-05-03 08:38:27 -07:00
Tom Eastep	626b60ff0e	Add error check	2009-05-02 17:28:50 -07:00
Tom Eastep	5e4196dafb	Fix occurs suffix handling	2009-05-02 16:19:50 -07:00
Tom Eastep	4a9a8534e3	Finish fast per-IP classifier	2009-05-02 16:01:48 -07:00
Tom Eastep	3e0a55f072	Fix 'all' in the SOURCE of DNAT- rules	2009-05-02 13:23:29 -07:00
Tom Eastep	2aecb9ac12	More tcfilter readability improvements	2009-05-02 10:47:23 -07:00
Tom Eastep	8216a4e721	Simplify tcfilter generation -- take 2 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-05-02 09:46:54 -07:00
Tom Eastep	ababc533f1	Revert "Vastly simplify generation of tc filters" This reverts commit `22da513b3a`.	2009-05-02 09:33:21 -07:00
Tom Eastep	22da513b3a	Vastly simplify generation of tc filters Signed-off-by: Tom Eastep <teastep@shorewall.net>	2009-05-02 09:25:27 -07:00
Tom Eastep	992b0bf00f	Correct minor class construction description	2009-05-02 07:03:25 -07:00
Tom Eastep	c937d3b1c0	More documentation about compiling to STDOUT	2009-05-01 11:38:52 -07:00
Tom Eastep	24e49e682b	Offer advice about how to avoid new masq SOURCE warning	2009-05-01 07:15:16 -07:00
Tom Eastep	f693224d93	Update release notes	2009-04-30 09:27:34 -07:00
Tom Eastep	c1cf1695c0	Deprecate interface names in the SOURCE column of /etc/shorewall/masq	2009-04-29 15:13:22 -07:00
Tom Eastep	2c09282ca3	Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall	2009-04-27 20:38:36 -07:00
Tom Eastep	7cf5c32358	Treat Class IDs as hex rather than as decimal numbers	2009-04-23 12:43:57 -07:00
Tom Eastep	7cd9a2a983	Replace 'pref' by 'prio' in 'tc xxx add' commands	2009-04-21 16:44:41 -07:00
Tom Eastep	05d1d2ab68	Minor wording change to release notes	2009-04-21 14:08:15 -07:00
Tom Eastep	b6090948dd	Allow compile to STDOUT	2009-04-21 09:41:23 -07:00
Tom Eastep	e465fea86a	Better fix for '-0x...' handling	2009-04-21 07:08:47 -07:00
Tom Eastep	846af27ebf	Fix Steven's other nit regarding -0x...	2009-04-20 20:39:38 -07:00
Tom Eastep	82bf6eb3f5	Revise WIDE_TC_MARKS classid generation	2009-04-20 17:54:33 -07:00
Tom Eastep	dcee6562a2	Fix another bug reported by Steven Springl	2009-04-20 16:35:48 -07:00
Tom Eastep	34791612b5	Implement WIDE_TC_MARKS. Fix problems reported by Steven Springl.	2009-04-20 13:26:47 -07:00
Tom Eastep	58fa0fe114	Clean up of shared optional provider fix	2009-04-20 10:28:18 -07:00
Tom Eastep	ec04636c86	Correct handling of optional shared providers	2009-04-20 08:30:15 -07:00
Tom Eastep	aa4afa6b66	Prepare 4.3.10	2009-04-19 17:37:36 -07:00
teastep	a5c25bea19	More documentation git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9941 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 20:41:46 +00:00
teastep	e076cf00f9	Add 'encode' and 'decode' commands git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9940 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 19:58:04 +00:00
teastep	8d450e673c	Change classid generation algorithm git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9939 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 19:56:04 +00:00
teastep	e934ce9d85	Document IPMARK support in release documents git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9938 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 17:25:14 +00:00
teastep	0bb8fffcd9	Add support for IPMARK -- Phase II git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9937 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 16:47:40 +00:00
teastep	32a1ac87f5	Add IPMARK target support -- first phase git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9936 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 15:46:57 +00:00
teastep	3cb7186e90	Modify regression test to ensure that modification timestamp of the output file changes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9935 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-19 14:19:40 +00:00
teastep	322a5de871	Recommit lost commit git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 18:48:28 +00:00
teastep	834064f3af	Cosmetic improvement to generated script git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9933 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:32:45 +00:00
teastep	985c551d26	Add IP, TC and IPSET configuration options git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9932 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:28:25 +00:00
teastep	b8988a2171	Handle empty setup_common() git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9930 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:20:06 +00:00
teastep	be41b99ae8	Allow Shorewall6 on kernel 4.2.24 Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9929 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:19:31 +00:00
teastep	47387d085d	Another go-around with the macro.template file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9927 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:18:40 +00:00
teastep	032f8dc004	Add 'FORMAT 2' to the macro template file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9925 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-18 16:17:42 +00:00
teastep	0cc60ea021	Avoid 'Invalid BROADCAST address' errors Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-17 22:57:59 +00:00
teastep	fd7108784f	Allow Shorewall6 on kernel 4.2.24 Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-17 16:04:54 +00:00
teastep	058e03e791	Another go-around with the macro.template file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9905 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-17 16:04:04 +00:00
teastep	5d5b73dafc	Add 'FORMAT 2' to the macro template file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9902 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-17 16:03:16 +00:00
teastep	ade958dd51	Add undocumented LOGMARK log level Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9851 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-12 15:22:19 +00:00
teastep	347090da6e	Correct netmask generation in tcfilters Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-12 15:22:00 +00:00
teastep	97e61965c0	Fix another inversion case Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9846 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-11 21:48:34 +00:00
teastep	de037034a5	Bump version to 4.3.9 Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9845 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-11 15:31:25 +00:00
teastep	9bfc7b6d99	Tiny optimization. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-11 15:28:50 +00:00
teastep	c39fcc4db7	Optimization of log rule code Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9843 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 20:36:22 +00:00
teastep	b734d3af31	Fix subtle bug introduced in last commit Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9842 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 20:36:09 +00:00
teastep	20cfd0033c	Fix a 4.3 bug in expand_rule(). Don't repeat matches on target rule when log chain is used. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9841 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 19:47:39 +00:00
teastep	28e84a6aba	Break up long port lists in jump to logging chain Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 16:31:04 +00:00
teastep	e0040f4011	Small optimizations in expand_rule() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 16:16:25 +00:00
teastep	ff014f328b	Correct usage text Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-10 16:15:36 +00:00
teastep	8278203e03	Remove one argument from expand_rule() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9835 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-09 22:21:48 +00:00
teastep	f20013898e	Don't use -g when the target might not be terminating Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9834 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-09 20:18:11 +00:00
teastep	ae169f00a7	Implement rules that also log as a separate chain. Preserve original target in logging rules Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-09 18:45:21 +00:00
teastep	7d2b410904	Correct rule generation when an interface is specified as the destination of a PREROUTING rule. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-08 03:37:15 +00:00
teastep	28b6fd8033	Simplify hashlimit match code Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9830 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 18:15:51 +00:00
teastep	36e0c85f5f	Require the Hashlimit Match capability for per-IP rate limiting Use the current key words in the generated hashlimit match Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9828 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 17:36:23 +00:00
teastep	cd1f5d3c83	Document the hashlimit feature Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 17:35:06 +00:00
teastep	c545e65cea	First part of 'hashlimit' implemenation Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 03:23:01 +00:00
teastep	b1e9453c62	The other half of the re-implementation of 'enable/disable_object' Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9825 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 03:22:49 +00:00
teastep	0744df13d6	Reimplement object_enable/disable Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9824 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 03:22:30 +00:00
teastep	b6053d8577	Fix second bug regarding ADD_IP_ALIASES=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 03:22:16 +00:00
teastep	eb533d8b00	Make SHOREWALL_COMPILER=perl explicit in shorewall.conf Send SHOREWALL_COMPILER errors to STDERR Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9822 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-07 03:22:02 +00:00
teastep	4b419186bc	Add note about documentation to release highlights Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9805 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-04 17:22:17 +00:00
teastep	52b0b4e602	More removal of SAVE_IPSETS=Yes logic Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9804 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-04 17:22:06 +00:00
teastep	844bb448c7	Fix inversion rules (omitted hunk) Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9797 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-04 15:09:17 +00:00
teastep	e2c5ad441a	Generate inversion that satisfies iptables 1.4.3. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9796 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-04 15:09:04 +00:00
teastep	77bbd88ab4	Cosmetic improvement in generated code for arp and route filtering. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9787 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-03 14:36:16 +00:00
teastep	54620a962e	Small optimization in "logmartians" fix. Update manpage to reflect new implementation Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9786 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-03 14:31:21 +00:00
teastep	8a9af0acf5	Fix LOG_MARTIANS=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-02 16:33:56 +00:00
teastep	180925173b	Ignore AUTOMAKE setting when a <directory> is given to start/restart Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9782 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-02 14:24:23 +00:00
teastep	d950fa27f2	Allow <pathname> to be omitted from the 'compile' command Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-02 01:12:34 +00:00
teastep	29c8098d37	Cosmetic improvement in generated script. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9780 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-01 19:53:38 +00:00
teastep	ef50c0be25	More removal of SAME target Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9775 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-01 01:31:16 +00:00
teastep	dbf23f64e2	Removal of SAME support Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9774 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-01 01:31:04 +00:00
teastep	35790476a3	Fix bug in Shorewall::Rules::process_rule1() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9773 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-01 00:04:04 +00:00
teastep	d3a54e626c	De-implement $Shorewall::Config::object_enabled and associated methods Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-04-01 00:03:51 +00:00
teastep	d00f52f933	Fix run-time error in Shorewall::process_rules1() git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9771 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-31 22:42:49 +00:00
teastep	39131f3809	Some optimizations in Shorewall::Rules::compile_stop_firewall() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9770 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-31 22:42:37 +00:00
teastep	238ff4550f	AUTOMAKE also applies to 'restart' Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9768 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-31 18:54:00 +00:00
teastep	6c205d922a	Add AUTOMAKE option Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9767 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-31 17:31:23 +00:00
teastep	22526979db	Make generation of 'stop' ruleset activation more foolproof. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-30 19:58:26 +00:00
teastep	b215f91d4a	Pass input directly to iptables[6]-restore during stop Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9763 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-30 18:33:30 +00:00
teastep	715554e579	Cleanup of iptables-restore/stop code. Don't purge ipsets on stop. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9762 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-30 18:00:23 +00:00
teastep	cddd1b1ae9	Use iptables[6]-restore to instantiate the 'stopped' ruleset Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-30 00:49:00 +00:00
teastep	7210e8c15e	Move generation of stop_firewall() to the end of the compilation sequence Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9760 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-29 17:52:24 +00:00
teastep	adb9830e9e	Move 'compile_stop_firewall' to Shorewall::Rules Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9743 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-28 19:22:15 +00:00
teastep	d9622dabfe	Centralize iptables knowledge in the Chains module -- first phase Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9742 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-28 19:21:36 +00:00
teastep	cc5c6b40aa	Fix typo in release notes Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9741 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-28 19:21:03 +00:00
teastep	b663644d0d	Ignore leading white space on certain continuation lines Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-27 16:55:51 +00:00
teastep	d67c94de9c	Move extension script handling to generate_script_1() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-26 18:18:09 +00:00
teastep	9328f0fc4c	Detect dhclient dynamic gateway Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-24 20:58:04 +00:00
teastep	6013e8b53d	Improve error message for startup errors. Document in release documents. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9730 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-23 22:51:05 +00:00
teastep	1545d62ba9	Update version by hand Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9729 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-23 22:50:04 +00:00
teastep	e986e80c0a	Fix swping Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9727 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-22 23:24:57 +00:00
teastep	1ff093b1c0	Minor tweak to Shorewall::Zones Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9724 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-21 22:46:16 +00:00
teastep	bb8e562d18	Detect IP configuration early in start/restart so that stopping the fireawall isn't necessary in the case of failure. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9722 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-21 16:45:27 +00:00
teastep	6dac69554f	Apply Tuomo Soini's patch for USE_DEFAULT_RT Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-19 14:04:57 +00:00
teastep	2734d2b8cb	Change 'flow' filter rule (which still doesn't work :-() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9702 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-18 21:33:28 +00:00
teastep	a9641e69c7	Clean up Multi-ISP 4.4 doc Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9698 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-17 19:55:34 +00:00
teastep	5ea4f651eb	Update version Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9697 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-17 18:51:17 +00:00
teastep	f91a5dbf0c	Document the deprecation of the old parameter macro syntax. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9696 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-16 18:01:42 +00:00
teastep	08cd0684ec	Use new syntax in standard actions. Add additional comments in Shorewall::Config Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9695 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-16 16:37:21 +00:00
teastep	fc3a2fc386	Add explanation of maximum zone length Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-15 15:54:29 +00:00
teastep	229e573c3c	Make zone type numeric for faster comparison Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9684 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-13 22:59:49 +00:00
teastep	e75789d894	A few minor changes in Shorewall::Chains. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9682 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-11 01:16:45 +00:00
teastep	77444634e1	Correct fatal error message generated by assert() Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9675 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 21:45:30 +00:00
teastep	ce5efc5dfa	Add a comment Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9674 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 21:45:18 +00:00
teastep	5a6d66f263	Replace discrete tests with calls to fatal_error() with calls to assert(); second batch Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9673 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 20:57:18 +00:00
teastep	b987ea4940	Replace discrete tests with fatal_error() calls with assert() calls. Signed-off-by: Tom Eastep <teastep@shorewall.net> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9672 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 20:56:53 +00:00
teastep	70570c4a18	Change policy->{is_optional} to policy->{provisional} Signed-off-by: Tom Eastep <teastep@ursa.(none)> git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9668 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 16:28:29 +00:00
el_cubano	4d8137cb61	Fix up defaults files. git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9632 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-09 13:01:10 +00:00
teastep	faa8a9ec2d	Cosmetic changes to four Perl Modules git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-08 16:51:22 +00:00
teastep	dcee4a3d08	Commit updates from Git git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9625 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-08 01:40:35 +00:00
teastep	94bd270bcd	Delete 'routefilter' from valid hosts file options git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9623 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-07 23:30:19 +00:00
teastep	ec52331dfc	More port OPTIONS changes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-07 20:22:20 +00:00
teastep	3d92f7a016	More tweaks to ipset management git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9615 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-07 00:39:04 +00:00
teastep	2f1f376d50	Replace 'list' with 'show dynamic' and add support in shorewall-lite git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9614 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-06 20:43:46 +00:00
teastep	d83334a1d1	Document dynamic zones; add 'list' command to list dynamic zone content git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9613 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-06 20:25:59 +00:00
teastep	a7126b6b4c	First working dynamic zone implementation git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9612 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-06 17:00:38 +00:00
teastep	f788e4ecb3	Reincarnation of Dynamic Zones -- Phase II git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9611 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-06 04:08:07 +00:00
teastep	3795f02f70	Reincarnation of Dynamic Zones -- Phase I git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9610 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-06 00:14:42 +00:00
teastep	be8e9990bd	Back out silly part of last change git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9608 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-05 20:27:22 +00:00
teastep	410e551a69	Re-enable list-valued return from validate_4address() git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-05 19:56:24 +00:00
teastep	062c7ec822	Change 'Provides' for Shorewall6-lite git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-05 16:18:58 +00:00
teastep	14673e4ab5	Detect bogus DNAT- rule git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9600 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-05 04:03:05 +00:00
teastep	661029a38e	Cosmetic Change git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9599 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-05 04:02:03 +00:00
teastep	cd2172e7e4	Put all Perl components in a common directory -- Phase IV git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9598 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 22:52:05 +00:00
teastep	ea270c1769	Put all Perl components in a common directory -- Phase II git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9596 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 22:45:07 +00:00
teastep	36b87dff49	Put all Perl components in a common directory -- Phase I git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9595 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 22:41:56 +00:00
teastep	ebc18a86cf	Move unsupported example files into Contrib git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9593 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 16:44:44 +00:00
teastep	06d0c36e22	Move init to configfiles/ git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9592 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 16:34:55 +00:00
teastep	3c5a26ee31	Change file permissions git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9591 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 16:32:37 +00:00
teastep	62cb1a2544	Remove 'ipsec' file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9590 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 01:32:28 +00:00
teastep	675d6f5822	Move overlooked file to configfiles git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9589 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 01:26:23 +00:00
teastep	4fb45619d4	Move overlooked file to configfiles git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9588 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 01:23:55 +00:00
teastep	fb1c418336	Correct a miss in install.sh git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9587 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 01:20:52 +00:00
teastep	a7f958b739	Create a configfiles directory in SVN to help unclutter the product directory git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9586 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 01:15:51 +00:00
teastep	5a26d80d19	Create a Macros directory in SVN to help unclutter the product directory git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9585 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-04 00:46:31 +00:00
teastep	6cce1fc03d	Fix comments in prog.xxx6 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9584 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-03 23:41:30 +00:00
teastep	0438e5ca74	Correct typo in install script git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9583 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-03 23:38:56 +00:00
teastep	fe7a5e5a3f	Correct optimization from 4.3.6 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9581 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-03 04:07:33 +00:00
teastep	1ea1af793d	Fix two typos git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9575 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-02 16:02:15 +00:00
teastep	3adff7f550	release doc update; add comments to prog.* git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9574 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-02 03:25:16 +00:00
teastep	cb078a416e	Rename 'shorewall' to 'shorewall.sh' to avoid Cygwin issues git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9573 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-01 21:38:43 +00:00
teastep	2883479e53	Initial 4.3.7 changes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9572 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-01 19:46:30 +00:00
teastep	c6f1cb605d	Restore SHAREDIRPL to it's 4.2 value git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9571 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-03-01 18:09:38 +00:00
teastep	5767a96005	Apply 4.2.6.1 fix to trunk git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9566 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-28 17:40:39 +00:00
teastep	dba14fdf91	Update README files git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9558 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 17:24:01 +00:00
teastep	d34d0a5dfa	Update release notes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9557 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 16:52:31 +00:00
teastep	e6fa6a5153	Delete jumps to empty chains git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9556 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 16:19:36 +00:00
teastep	fa4fc86e18	Update version to 4.3.6 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9555 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 15:19:42 +00:00
teastep	698d6fc97e	Fix Shorewall6 compilation issues -- Documentation git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9553 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 01:17:59 +00:00
teastep	dccbc5a283	Fix Shorewall6 compilation issues git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9552 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 01:13:39 +00:00
teastep	c61a82b7aa	Final (hopefully) fix for expand_rule() and PREROUTE_RESTRICT git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9551 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-27 00:50:03 +00:00
teastep	b8d7ee040e	Remove nonsensical logic in expand_rule() git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9550 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 22:28:27 +00:00
teastep	00afd5b142	The real fix for Makeitso's problem git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9548 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 22:05:20 +00:00
teastep	f801c7cbfc	Fix expand_rule() handling of PREROUTING_RESTRICTION git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9547 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 21:46:03 +00:00
teastep	a5a3b4c3e7	Make split_list1() a little more robust git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9543 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 17:12:55 +00:00
teastep	d1bbc2e820	Fix split_list1() git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9542 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 16:53:33 +00:00
teastep	08ba35ca29	Port changes from branches/4.2 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9541 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb	2009-02-26 16:34:31 +00:00

... 19 20 21 22 23 ...

3908 Commits