15083 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tom Eastep	c518cfaa4a	Allow address variables to work correctly with the 'clear' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-03 08:58:28 -08:00
Tom Eastep	196a56ea3c	Permit when firewall stopped when using an ipset for dynamic BL ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 13:26:32 -08:00
Tom Eastep	2c3f121835	Don't call setup_dbl() unconditionally ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 13:11:31 -08:00
Tom Eastep	18ba5c7311	Don't verify 'conntrack' utility for 'remote-' commands ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 11:52:35 -08:00
Tom Eastep	c8774110c6	Correct typo (rootonly => root_only) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 11:51:42 -08:00
Tom Eastep	1479e955d4	Add FAQ 106 (startup at boot on Debian) ... - mention reload as a faster alternative to restart Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 08:52:12 -08:00
Tom Eastep	09980cc75e	Use split() in uptodate() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 15:59:28 -08:00
Tom Eastep	e0a757ea03	Quit find after finding the first newer file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 14:15:45 -08:00
Tom Eastep	550003f0f4	Only look at regular files when running 'find' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 14:09:51 -08:00
Tom Eastep	4f50303318	Merge branch '5.1.10' ... # Conflicts: # Shorewall/lib.cli-std	2017-12-31 14:06:52 -08:00
Tom Eastep	5053999442	Don't run 'find' in the PWD ... - Also remove -mindepth so as to catch deletions in the directories Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-31 13:33:16 -08:00
Tom Eastep	6b5889177b	Correct startup_error() inadvertent change ... - Switch ensure_root() back to calling startup_error() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 09:24:21 -08:00
Tom Eastep	71f8bad300	Tweak Shared Config doc ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:44:49 -08:00
Tom Eastep	377c9f5708	Only search files in each CONFIG_PATH directory - no recursion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:44:05 -08:00
Tom Eastep	45a164733b	Fix breakage of ipp2p ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 08:38:14 -08:00
Tom Eastep	6f82bfe7d1	Handle PROTO '-' in conntrack file processing. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:54:15 -08:00
Tom Eastep	4e5b98d3d9	Only search files in each CONFIG_PATH directory - no recursion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:42:09 -08:00
Tom Eastep	078c781dfa	Allow override of :syn assumption in CT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 15:15:33 -08:00
Tom Eastep	46f68c6dcb	Move adjustment of the protocol in process_conntrack_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 13:51:33 -08:00
Tom Eastep	b42678269c	Revert "Add :syn to each TCP entry in the conntrack file" ... This reverts commit f861f8da35.	2017-12-29 13:08:27 -08:00
Tom Eastep	9bd10c0c00	Call fatal_error (not startup_error) when non-root does default compile ... - Also reword the message	2017-12-29 12:49:43 -08:00
Tom Eastep	f861f8da35	Add :syn to each TCP entry in the conntrack file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-29 12:38:58 -08:00
Tom Eastep	9e3cb27d0a	Use the synchain name in log messages rather than the base chain name ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 14:13:50 -08:00
Tom Eastep	5b97800901	Tweak Shared Config doc ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 13:26:39 -08:00
Tom Eastep	d8a22d13dd	Allow non-root to run many 'show' commands ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 10:49:09 -08:00
Tom Eastep	675e41e6a6	Merge branch 'master' into 5.1.10	2017-12-27 11:15:25 -08:00
Tom Eastep	28f6379956	Fix broken links in the blacklisting article ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 16:57:44 -08:00
Tom Eastep	c9b58e203b	Fix broken links in the blacklisting article ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 16:56:37 -08:00
Tom Eastep	9afe8daae0	Merge branch '5.1.10' ... # Conflicts: # Shorewall-core/install.sh # Shorewall/install.sh	2017-12-26 15:45:20 -08:00
Tom Eastep	43adcd26a1	Make the /etc and the configfiles .conf files the same ... Signed-off-by: Tom Eastep <teastep@shorewall.net> # Conflicts: # Shorewall/install.sh	2017-12-26 15:39:26 -08:00
Tom Eastep	65371437b5	Correct installer for case where SHAREDIR != /usr/share/ ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 15:36:38 -08:00
Tom Eastep	cc2022e172	Correct installer for case where SHAREDIR != /usr/share/ ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 15:00:15 -08:00
Tom Eastep	f2a565729f	Replace $PRODUCT with ${PRODUCT} ... - Also correct one incidence of PRODUCT that should have been $PRODUCT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 14:00:00 -08:00
Tom Eastep	ea8b2a803a	Make the /etc and the configfiles .conf files the same ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 11:48:33 -08:00
Tom Eastep	16832149ca	Remove unneeded modification of $CONFDIR/$PRODUCT/$PRODUCT.conf ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 11:35:56 -08:00
Tom Eastep	7edf4918d7	Remove leading ":" from CONFIG_PATH in active shorewall[6].conf ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-26 10:27:19 -08:00
Tom Eastep	d3a1dc1e2a	Delete superfluous semicolon. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-25 08:45:42 -08:00
Matt Darfeuille	f68f47d01b	Init: Fix when to compile the firewall on Debian ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-25 08:37:00 -08:00
Tom Eastep	b1d1fa862a	Add comment noting that the 'physwild' interface member is currently unused ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:58:16 -08:00
Tom Eastep	24acf25451	Delete unused find_interfaces_by_option1() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:53:16 -08:00
Tom Eastep	229c47ac6c	Don't delete options that are to be ignored from %options ... - specifying some options can have side-effects that cause $interfaceref->{options}{$option} to be accessed Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:47:22 -08:00
Tom Eastep	38de9c1732	Make wildcard/option checks order-independent WRT the options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-23 10:24:08 -08:00
Tom Eastep	17f4fd7cd2	Initialize $physwild to $wildcard ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 15:42:16 -08:00
Tom Eastep	cfd02c1bb6	More $minroot changes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:58:38 -08:00
Tom Eastep	02caeb5aa0	Remove sourceroute=0 from IPv6 Universal interface options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:44:11 -08:00
Tom Eastep	19b7601c72	Improve handling of wildcard interfaces and options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 13:43:45 -08:00
Tom Eastep	5a8e9cd0a3	Correct $minroot logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-22 09:08:27 -08:00
Tom Eastep	b5a6067588	Describe default interval and decay for rate estimator policing filters ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-20 09:04:52 -08:00
Tom Eastep	45468af2d2	Correct ingress policing for later releases of iproute2 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-18 11:52:19 -08:00
Tom Eastep	6c018f478c	Avoid unnecessary recompilation by Shorewall-init ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-18 10:25:56 -08:00