Commit Graph

346 Commits

Author SHA1 Message Date
teastep
7d3e81a3da Add some comments
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6281 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 03:38:18 +00:00
teastep
08e578c1ac Undo prior idiocy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6280 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:59:02 +00:00
teastep
a941d4d105 More changes in log generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6279 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:44:25 +00:00
teastep
a96f86c36c More fixes for logging rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6278 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:34:58 +00:00
teastep
18fd54baf7 Fix log rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6277 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:19:16 +00:00
teastep
8406623bcf Handle mss in zones file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 02:08:44 +00:00
teastep
8385ebaa31 Try to fix section bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6275 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-08 00:48:05 +00:00
teastep
cf3650bbe3 rename ipseczones() to haveipseczones()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6274 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 22:20:00 +00:00
teastep
ab7c4200b1 Improve handling of ipsec zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6273 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 22:12:42 +00:00
teastep
fac8d4cd25 Correct fix for duplicate chain jumps
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6272 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:51:19 +00:00
teastep
d2c3b034b6 Always supply options hash in a host entry
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6271 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:44:55 +00:00
teastep
80d2f1dde8 Fix for double-up on jumps to special chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6270 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 21:34:19 +00:00
teastep
4ec96b6619 Tweak to host list processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6267 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 17:36:21 +00:00
teastep
55e8ff29c7 Mini-optimization in Providers handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6266 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 14:48:36 +00:00
teastep
b9fcda9812 Fix 'detect' in GATEWAY column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6265 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-07 14:28:23 +00:00
teastep
366e9a369a Remove some whitespace added in previous patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6262 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:57:47 +00:00
teastep
ca5253a13e Fix missing white space
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:43:21 +00:00
teastep
dfed6bd16d Fix typo in generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6260 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 23:32:02 +00:00
teastep
bc40507b80 Fix some more bugs with hosts file handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6259 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 22:26:50 +00:00
teastep
f5d9097817 Fix find_hosts_by_option() -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6258 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 18:27:41 +00:00
teastep
72544d54f0 Fix find_hosts_by_option()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6257 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 18:06:41 +00:00
teastep
59ca220c0b Use '-m addrtype' in 'detectnets' output rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6256 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 16:10:00 +00:00
teastep
ef44b4741a Fix more exclusion problems in hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6255 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 15:43:30 +00:00
teastep
666ecf49b6 Fix "!" in hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6254 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-06 01:17:58 +00:00
teastep
d826944666 Update version to 3.9.6
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6251 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 19:32:22 +00:00
teastep
94086440b8 Suppress creation of jumps to unused TOS chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6249 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 14:42:30 +00:00
teastep
0980d11157 Fix TOS handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6248 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 14:39:41 +00:00
teastep
b68e830852 Fix accounting problem with jumping to otherwise unreferenced chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6247 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 13:41:36 +00:00
teastep
7a7488e3e0 Fix unknown zone handling in Tunnels file -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6246 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 04:35:55 +00:00
teastep
6bd88d06c6 Fix unknown zone handling in Tunnels file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6245 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:47:15 +00:00
teastep
bd9e9345ab Fix non-bug in openvpn handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6244 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:18:45 +00:00
teastep
2da69bd0b7 More openvpn changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6243 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-05 00:02:21 +00:00
teastep
cad5d896d3 Fix openvpnserver handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6242 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 23:03:41 +00:00
teastep
21a71d7b64 Fix 'other' tunnel types
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6241 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 22:31:48 +00:00
teastep
036d54a269 Fix another silly typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6240 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 20:18:31 +00:00
teastep
1d0abb274d Fix silly typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6239 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 19:57:01 +00:00
teastep
0360d0aea0 Fix ipsec tunnels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6238 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 18:55:57 +00:00
teastep
caf7d528be Fix REDIRECT all
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6237 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 16:49:56 +00:00
teastep
55f48d634c Fix CONFDIR handling -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6233 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:41:27 +00:00
teastep
1b2428768e Fix CONFDIR handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6232 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:38:32 +00:00
teastep
e7b4985784 Correct grammar in messages produced by 'require_capability'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 15:12:29 +00:00
teastep
14a66a102e Require server with DNAT -- tweak
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6230 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 14:55:02 +00:00
teastep
3f2b8cda25 Require server with DNAT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6229 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 14:16:18 +00:00
teastep
c7bc204ba0 Allow action-only rules -- improve error messages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6228 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 01:28:37 +00:00
teastep
aeb3460d2b Allow action-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6227 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-04 01:05:47 +00:00
teastep
81cf114080 Tweak fix for NAT rules in macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6222 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 18:59:51 +00:00
teastep
3474415660 Add more progress messages; fix NAT rules in macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6221 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 18:56:56 +00:00
teastep
c28cb4aad0 Improve editing of TOS values -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6220 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:30:30 +00:00
teastep
99d89a378a Improve editing of TOS values
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6219 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:28:03 +00:00
teastep
45c8d39a1b Improve editing of TEST column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6218 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:10:07 +00:00
teastep
29ff6888fe Improve editing of LIMIT/BURST -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6217 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 17:01:36 +00:00
teastep
83d7df107d Improve editing of LIMIT/BURST
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6216 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:56:05 +00:00
teastep
04064d01e6 Disallow rate limiting with DROP/REJECT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:33:49 +00:00
teastep
b98c2dc661 Disallow DROP with ratelimiting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6214 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:30:59 +00:00
teastep
d1b9a71a3b Ensure that action extension scripts are always processed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6213 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 16:02:24 +00:00
teastep
92823f08f3 Catch invalid use of COMMENT in action body
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6209 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 15:13:51 +00:00
teastep
61fb84d23b Fix COMMENT in action files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6208 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 14:24:56 +00:00
teastep
14a243fa20 Fix bad ruleset caused by empty action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6207 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 14:00:08 +00:00
teastep
94d324d01d Fix LOG rule with level in an action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6206 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 02:07:04 +00:00
teastep
9f8aebe33d Fix LOG rules in action files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6205 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-03 00:56:36 +00:00
teastep
7af29213b8 Revert change 6200
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6201 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:59:11 +00:00
teastep
72f278b704 Restructure process_actions1 to be like the Shell version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6200 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:43:04 +00:00
teastep
7aec5dc398 Catch self-invocation of an action
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6199 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 21:20:01 +00:00
teastep
fd7d07cd75 Make SOURCE and DEST reserved names
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6197 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 18:49:56 +00:00
teastep
79d57a7751 Fix handling of Action extension scripts
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6195 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 16:43:58 +00:00
teastep
16d22e9c27 Simplify 'isolate_basic_target'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6194 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 16:22:08 +00:00
teastep
47b309f221 Remove redundant space from log rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6192 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:49:41 +00:00
teastep
3d4900ef9e Fix tag handling with macros
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6191 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:39:36 +00:00
teastep
2243553b28 Use --or-mark like shorewall-shell
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6190 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 15:03:44 +00:00
teastep
6accb50ca7 Fix mask used in connmark manipulation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6189 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 14:24:19 +00:00
teastep
e9b6bdc9a6 Fix OWNER handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6188 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-02 00:33:30 +00:00
teastep
bf81862741 Adjust macro merging -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6187 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:40:37 +00:00
teastep
5f1f0b9ace Adjust macro merging
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:39:38 +00:00
teastep
fcbe8768c3 Another round of Macro fiddling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6185 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 23:04:30 +00:00
teastep
e2e316c6c7 Fix port 0 in macro invocation -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6184 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 21:24:40 +00:00
teastep
4aec31b1ac Fix port 0 in macro invocation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6183 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 21:23:21 +00:00
teastep
a2453451db Add MARK handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6179 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 18:30:10 +00:00
teastep
15c8f371b1 Fix for macro handling of rate and user
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6178 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 17:50:50 +00:00
teastep
6852e09ba3 More multiport improvements
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6176 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 17:24:44 +00:00
teastep
d5b278a969 Fix ipset match generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6174 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:39:41 +00:00
teastep
c984c0bbe3 Try to handle multiport sport/dport correctly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6173 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:20:49 +00:00
teastep
d1d8a11858 Try to handle multiport sport/dport correctly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 16:18:45 +00:00
teastep
278ab3bc8d Fix mark testing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 15:55:41 +00:00
teastep
ecc6c0bb5d Small optimization of provider handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6170 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 14:53:57 +00:00
teastep
bb157c5864 Fix silly providers bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6169 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 14:29:34 +00:00
teastep
f64e8128ed Fix IPP2P matching
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 01:02:55 +00:00
teastep
3c15fdabdd Fix "!" following log level
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6167 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-05-01 00:01:24 +00:00
teastep
3156e2f3d2 Correct error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6166 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 22:25:34 +00:00
teastep
0d01ff7d84 Update version to 3.9.5
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 22:00:07 +00:00
teastep
f95a9e4db3 Fix remaining problems reported by Andras Sarkozy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6157 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 17:55:43 +00:00
teastep
0b996cb556 Remove ACCEPT- silliness; fix IPSET capability detection
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6156 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 16:29:19 +00:00
teastep
e596c92d74 Fix some rule problems -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6155 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 15:25:07 +00:00
teastep
c1d6faf509 Fix some rule problems
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6154 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-30 15:07:51 +00:00
teastep
a6358bf7e4 Fix some 'policy' file bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6151 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 22:29:10 +00:00
teastep
bc7b6354df Validate netmap interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6150 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 18:33:30 +00:00
teastep
ecbd719bef Fix RETAIN_ALIASES=Yes behavior; only 'detect' first address for SNAT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6149 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 14:28:11 +00:00
teastep
8c497548ca Fix deletion of aliases (some more)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6148 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-29 04:23:10 +00:00
teastep
fbec94e465 Fix ADDRESSES = 'detect' on optional interface -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6147 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 15:08:17 +00:00
teastep
f22fc6575e Fix ADDRESSES = 'detect' on optional interface
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6146 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 15:07:08 +00:00
teastep
e8a4bb4469 Fix exclusion in masq SOURCE column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6145 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 14:59:18 +00:00
teastep
849615da17 Add additional command/rule controls
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6144 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-28 13:48:28 +00:00
teastep
da503e4b07 Create 'add_commands'; revise handling of 'detect' in the masq ADDRESSES column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6135 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 16:18:42 +00:00
teastep
69be038583 Fix setting of ORIGINAL_POLICY_MATCH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:15:13 +00:00
teastep
213eca848a Fix another masq ipsec option handling bug -- take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6133 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:06:17 +00:00
teastep
710354caee Fix another masq ipsec option handling bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 15:04:10 +00:00
teastep
269dacda14 Fix 'nodst' rule generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6131 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 14:42:39 +00:00
teastep
2434c4f1ea Another masq ipsec fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6130 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 00:49:14 +00:00
teastep
f5c3c7c753 Fix policy and masq
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6129 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-27 00:17:27 +00:00
teastep
8721d87fe3 Fix SAME:
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6127 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-26 22:16:40 +00:00
teastep
01af0eb020 Fix another iprange bug in generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-26 16:56:04 +00:00
teastep
e3f35a632a Fix an iprange problem with the hosts file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6120 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 21:03:40 +00:00
teastep
41b02f5029 Fix another exclusion bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6119 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 18:44:46 +00:00
teastep
b27cc81582 More cleanup of hosts file exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:45:46 +00:00
teastep
e8934d79c9 Fix host list exclusion -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:27:48 +00:00
teastep
86690a049e Fix host list exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:26:16 +00:00
teastep
7db77a4b22 Fix ADDRESSES=detect with ADD_SNAT_ALIASES=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6115 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 16:00:15 +00:00
teastep
c32ee9a18c Fix incorrect precedence
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 15:33:15 +00:00
teastep
140dd95130 More log level changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6113 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 00:19:55 +00:00
teastep
3a67b4f76c Fix more log level bugs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6112 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-25 00:11:02 +00:00
teastep
58f179e6c8 Fixes for log levels
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6111 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 23:15:27 +00:00
teastep
7a166b7ba7 Fix for RFC1918_STRICT=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:36:10 +00:00
teastep
558343be7d Fix BLACKLIST_LOGLEVEL
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6108 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:27:40 +00:00
teastep
bb6476ba07 A little more maclist optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 21:05:26 +00:00
teastep
a19ed69ef5 A little optimization of maclist code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6106 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 20:53:07 +00:00
teastep
ef12a3c681 Don't generate bogus logging rule if no MACLIST_LOG_LEVEL
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6105 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 20:32:52 +00:00
teastep
7fe76f778c Fix MACLIST bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6104 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 19:53:13 +00:00
teastep
30c5dbf2f7 Fix syntax error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6102 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 15:38:37 +00:00
teastep
40471c1c1b Validate log levels and translate them to numeric values where appropriate
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6101 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 14:53:45 +00:00
teastep
246dcc716f Fix LOGALLNEW
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6097 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-24 00:16:53 +00:00
teastep
29f51b52b4 Fix dynamic zone problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6095 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 23:17:30 +00:00
teastep
92a4483f88 Make missing capabilties file error messages friendlier
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 20:44:24 +00:00
teastep
593828a24a Fix missing PATH in shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6090 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 20:24:28 +00:00
teastep
e722b6f581 Allow entries in shorewall.conf to be optional
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6089 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 19:49:02 +00:00
teastep
465570a673 Fix formatting oddity
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6087 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:28:07 +00:00
teastep
1fa2cb7904 Remove redundant test
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6086 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:26:20 +00:00
teastep
716d370e9b Fix syntax error in generated script; more maclist streamlining
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6085 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:20:54 +00:00
teastep
2b397ffc5d Streamline maclist broadcast handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6084 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 18:04:59 +00:00
teastep
37214c1d7d Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6081 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 17:26:17 +00:00
teastep
8476592a4f Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6080 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 17:19:12 +00:00
teastep
fd7301cc6c Add MAC verification run-time progress message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6078 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 14:33:37 +00:00
teastep
3a50a8a1be Allow 'optional' to work with 'maclist'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-23 14:14:46 +00:00
teastep
9b0b9a9ec5 Fix typo in maclist
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 23:21:34 +00:00
teastep
a116eb5235 Fix explicit intrazone policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6072 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 22:33:37 +00:00
teastep
c46b1a50d5 Remove release notes from shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6069 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 21:46:48 +00:00
teastep
680af9ed60 Make BLACKLISTNEWONLY=No and FASTACCEPT=Yes mutually exclusive
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6068 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 21:42:35 +00:00
teastep
c0e5fcf6c6 Fold IP_FORWARDING into the trivalue mechanism
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6067 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 19:45:27 +00:00
teastep
52f201b6b8 Allow default value for trivalued options
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6066 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 19:30:42 +00:00
teastep
d3556e4d40 Final fix for detectnets
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6064 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 18:24:09 +00:00
teastep
0a0a379bf5 Fix 'detectnets' one more time
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6063 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 15:43:03 +00:00
teastep
ffe223fdc6 Disallow ipsec options on non-ipsec zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6062 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-04-22 15:41:08 +00:00