b619f1333e
Correct status of optional interface during 'disable'
...
- If <interface>.status contains 0 but the interface's routing table has
been deleted, then 'disable' would not correct the file.
- This simple change corrects that problem.
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-04-15 13:29:08 -07:00
9b1ef03c49
Correct the 'show filter' command
...
- Also consolidate some awkward code
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-29 15:49:41 -07:00
90444bdc44
Correct comment
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-29 15:48:45 -07:00
44671e906d
Correct typo
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-13 18:16:51 -07:00
160c259866
Silly documentation change
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-11 12:32:45 -07:00
8f826ce70d
Avoid 'ip' error messages due to missing optional interface
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-10 12:55:34 -07:00
895428c7c1
Handle the case where a single host exclusion specifies multiple nets
...
Also reorganize the exclusion code to make it self-contained within
add_common_rules()
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-10 10:30:33 -07:00
0855bc4187
Create /etc/iproute2/rt_tables if it doesn't exist
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-09 15:52:49 -08:00
3e52a6c005
Remove interface status files during 'stop/clear' processing
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-08 16:13:05 -08:00
8ce3f23464
Set AUTOHELPERS=No in the samples
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-08 13:27:47 -08:00
467cc4c252
Correct src-dst single exclusion
...
Match the destination address in the output chain
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-08 11:50:49 -08:00
a9359d2610
Update $globals{VERSION}
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-07 15:41:15 -08:00
9479b83c48
Correct add_dbl_exclution_ijump()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-07 14:18:06 -08:00
f37a74a667
Add a comment
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-07 12:30:37 -08:00
0ecf0703dc
Correct classic blacklisting
...
- No filtering in the OUTPUT chain
- Correct ipsec filtering
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-07 12:26:59 -08:00
f1317f919f
Handle ipsec correctly in ipset-based dynamic blacklisting
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-06 20:26:58 -08:00
cbe2935fce
Handle 'nodbl' in complex host definitions
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-06 17:18:50 -08:00
a8718b9867
Clearify 'ip' in shorewall-hosts(5)
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-05 15:21:26 -08:00
a9c2ee3a76
Major cleanup of DYNAMIC_BLACKLIST code
...
1) Avoid having to parse the setting in the Zones, Misc and rules modules
2) Apply ipset match rule after dealing with exclusions rather than before
3) Correct handling of src-dst
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-05 14:45:41 -08:00
dfd40ee208
Factor out ipset match rule generateion
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-04 13:44:23 -08:00
8d0dba349c
Shorten DBL exclusion chain names
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-04 12:10:56 -08:00
f21d8b2a27
Correct parsing of the hosts file:
...
1) Fixed IPv6 parsing of the HOSTS column
2) Properly detect IPv4 loopback violations
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-03 09:54:33 -08:00
11fb1ab6cf
Insert comments into add_common_rules()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 19:51:18 -08:00
e8f28fa564
Allow 'nodbl' for classic blacklisting
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 16:16:02 -08:00
337a4bd6ec
Use shorter names for dbl exclusion chains
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 14:54:45 -08:00
91d5dbb7ba
Fix some blacklisting bugs:
...
- src-dst didn't work
- typo in shorewall.conf(5)
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 13:53:31 -08:00
4ca77b109c
Replace bizarre {dbl} encoding (what was I smoking when I wrote that code?)
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 10:40:12 -08:00
a96656a509
Clean up shorewall.conf(5)
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 09:52:16 -08:00
f928b4d6fc
Add a comment
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 08:45:46 -08:00
a3abafa98b
Add a 'nodbl' option for the hosts file.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-03-02 08:33:36 -08:00
1377fc8897
Stop errors when displaying an empty routing table
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2024-02-28 15:20:25 -08:00
b8581e54fa
Remove StandardOutput specifications from unit files
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-11-03 10:38:26 -08:00
ba87937f49
Replace StandardOutput=syslog by StandardOutput=journal in unit files
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-10-30 09:24:47 -07:00
69f0d4d881
Simon Mater's patch to support gbits and gbps in rate/burst specifications
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-10-09 09:39:01 -07:00
6681191c88
Correct 'show bl|blacklists' syntax
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-10-09 09:26:41 -07:00
2ceeb2c934
Merge branch '5.2.8'
2020-09-25 10:05:35 -07:00
97165ed41e
Add target file(s) 5.2.8-base
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.2.8-base
2020-09-24 15:16:51 -07:00
5b0cacd9c4
Add NFS V1.4 macro
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-24 14:46:24 -07:00
eeec6f2396
Update shorewall-snat(5)
...
- Delete incorrect statement about a list of addresses in SNAT()
- Replace IPv4 Example 6 with one that uses the PROBABILITY column
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-24 11:19:46 -07:00
2e7d1ac4a3
Update shorewall-snat(5)
...
- Delete incorrect statement about a list of addresses in SNAT()
- Replace IPv4 Example 6 with one that uses the PROBABILITY column
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-24 11:19:12 -07:00
34c59dca32
Don't export interface_is_plain()
...
- It was used in a superseded change
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-19 11:38:41 -07:00
9aa2a4b704
Use less obscure code to set $call_generate_all_acasts;
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-19 11:20:10 -07:00
d363809859
Complete the table documentation at the top of the file
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-18 13:44:41 -07:00
6c4383b5ce
Add target file(s) 5.2.8-RC1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
5.2.8-RC1
2020-09-17 14:47:53 -07:00
877807943d
Add target file(s) 5.2.8-RC1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-17 14:47:29 -07:00
378df2861a
Add target file(s) 5.2.8-RC1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-17 14:47:20 -07:00
f84be9faa4
Display consistent banner
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-17 10:46:53 -07:00
c6dea1525f
Describe using a shell alias to invoke shorewall6-lite from 'shorewall6'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-15 18:04:33 -07:00
a7505f3ecb
Remove ${SBINDIR}/shorewall when removing Shorewall-core
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2020-09-15 16:57:44 -07:00
8c10c96844
Revert "Move ${SBINDIR}/shorewall6 to the Shorewall-core product"
...
This reverts commit 1ca886abd7
.
2020-09-15 16:49:19 -07:00