Commit Graph

208 Commits

Author SHA1 Message Date
teastep
b81ae53477 Correct handling of IPSEC; re-order rules slightly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8123 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 16:39:40 +00:00
teastep
2a2a7530c2 Add optimizations in basic chain handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8122 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 00:03:25 +00:00
teastep
e75be13ff4 Fix exclusion in zone definition
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 21:38:18 +00:00
teastep
4be347d1cc Move 'dynamic' jumps to the INPUT and FORWARD chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 19:41:23 +00:00
teastep
3cad33ea20 More defense against silly lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 22:15:07 +00:00
teastep
7b4abdba94 Validate comma-separated lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 01:07:57 +00:00
teastep
65df4d9f73 Ruleset optimization -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8100 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-24 16:22:03 +00:00
teastep
746a00994d Create 'sourceonly' hosts option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8093 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:48:03 +00:00
teastep
3f4d773489 Allow DNS names in DEST column of a DNAT rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-17 19:02:40 +00:00
teastep
99a5eba368 Remove delayed insertion of RETURN rules in dnat chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-16 23:24:41 +00:00
teastep
2f96bc5181 More work on DNAT/REDIRECT mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8065 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-14 16:34:26 +00:00
teastep
318b4f002d Consult policies when constructing dnat chains; warning when zone specified on NAT-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 18:47:06 +00:00
teastep
55a25721e6 More tweaks to DNAT/REDIRECT thingy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8052 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 00:41:10 +00:00
teastep
88a74e40f3 Another look at DNAT/REDIRECT and nested zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8051 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 21:11:39 +00:00
teastep
755983b38c Make DNAT/MASQ short-circuit dependent on z->fw policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8050 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 17:39:14 +00:00
teastep
3d84cec3a3 Fix for DNAT/REDIRECT nested-zone mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8048 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 01:32:18 +00:00
teastep
2583fc3f93 Fix initialization problem in Rules module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8047 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 00:35:07 +00:00
teastep
384e88df43 First step in adding structure to NAT table ruleset
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 19:56:44 +00:00
teastep
0e6472a272 Eliminate mark_referenced()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-17 20:53:27 +00:00
teastep
f9bda7d0a0 Eliminate one version of numeric_value()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7856 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 19:06:01 +00:00
teastep
1d534e1d9c Update the version of a couple of Perl Modules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-07 00:01:06 +00:00
teastep
832ef83da9 Allow COMMENT in macro bodies
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7839 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-06 23:49:21 +00:00
teastep
b7c130b10b Update version in module headers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7812 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-01 17:45:43 +00:00
teastep
ff82e98c78 Back out verbose fix for undefined value on missing file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-27 15:50:20 +00:00
teastep
6e6da40039 Apply missing config file fix to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-24 02:28:18 +00:00
teastep
a07b0277e3 Remove silly tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7714 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-22 16:53:49 +00:00
teastep
954db796bd Update version to 4.1.1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7710 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-21 18:48:23 +00:00
teastep
4cd8450ce8 Improve NFQUEUE handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7705 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-20 20:47:19 +00:00
teastep
e101e6d0dd Finish implementing alternate parameter syntax
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-19 18:58:49 +00:00
teastep
8cae1a45d0 Add support for NFLOG
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7689 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-18 18:05:08 +00:00
teastep
4db0dc2667 Bring trunk up to date with branch/4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7668 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-11-15 23:24:54 +00:00
teastep
2246e54d28 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7483 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-10-19 19:43:14 +00:00
teastep
63705c0b64 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-28 22:26:29 +00:00
teastep
d9e2c5b973 Update trunk with Macro REDIRECT fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7387 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-25 20:02:55 +00:00
teastep
808b7fc0a1 Remove support for 'detectnets' from Shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7377 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-21 17:24:57 +00:00
teastep
7a96b07e81 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7376 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-21 16:55:28 +00:00
teastep
bbcf8fdcf8 Erradicate IPv6 experimentation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7329 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-12 15:03:47 +00:00
teastep
9b079d57e9 Change IP version enumeration
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7326 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 21:04:36 +00:00
teastep
63f74768e2 Add IP version arg to more functions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:45:53 +00:00
teastep
0075879b4c Add an argument to ensure_filter_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7323 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:34:42 +00:00
teastep
8a9b9c2714 Add an argument to new_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7322 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:27:45 +00:00
teastep
12d19c8ec3 Add an argument to new_chain()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7321 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:21:51 +00:00
teastep
5c5f2b3a06 Add level to chain table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7320 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 20:12:13 +00:00
teastep
5fabfc4ba4 Back out chain table partitioning
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7317 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-11 17:29:41 +00:00
teastep
597c8fecc0 Partition chain table for iptables/ip6tables
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7315 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 23:30:55 +00:00
teastep
5819589cb0 First timid step toward IPv6 support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7313 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 22:28:06 +00:00
teastep
6141995184 Bring trunk up to date with branches/4.0/
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7312 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-10 15:52:57 +00:00
el_cubano
d9b400b313 Update outdated weblinks to GPL and update FSF mailing address.
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7296 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-09-08 16:09:51 +00:00
teastep
5f6596a728 Bring trunk up to date with 4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7228 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-26 15:12:04 +00:00
teastep
aa523ea52c Bring trunk up to date with branch/4.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7113 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-08-10 17:37:02 +00:00