extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-23 16:13:18 +01:00
Code Issues Packages Projects Releases Wiki Activity
2,141 Commits 104 Branches 736 Tags 55 MiB
c66159abee
Commit Graph

34 Commits

Author SHA1 Message Date
teastep
b66929a65e Large merge of function from EXPERIMENTAL to HEAD. 
1) Elimination of the "shorewall monitor" command.

2) The /etc/shorewall/ipsec and /etc/shorewall/zones file are combined into
a single /etc/shorewall/zones file. This is done in an upwardly-compatible
way so that current users can continue to use their existing files.

3) Support has been added for the arp_ignore interface option.

4) DROPINVALID has been removed from shorewall.conf. Behavior is as if
DROPINVALID=No was specified.

5) The 'nobogons' option and BOGON_LOG_LEVEL are removed.

6) Error and warning messages have been made easier to spot by using
capitalization (e.g., ERROR: and WARNING:).

7) The /etc/shorewall/policy file now contains a new connection policy and a
policy for ESTABLISHED packets. Useful for users of snort-inline who want to
pass all packets to the QUEUE target.

8) A new 'critical' option has been added to /etc/shorewall/routestopped.
Shorewall insures communication between the firewall and 'critical' hosts
throughout start, restart, stop and clear. Useful for diskless firewall's
with NFS-mounted file systems, LDAP servers, Crossbow, etc.

9) Macros. Macros are very similar to actions but are easier to use, allow
parameter substitution and are more efficient. Almost all of the standard
actions have been converted to macros in the EXPERIMENTAL branch.

10) The default value of ADD_IP_ALIASES in shorewall.conf is changed to No.

11) If you have 'make' installed on your firewall, then when you use
the '-f' option to 'shorewall start' (as happens when you reboot),
if your /etc/shorewall/ directory contains files that were modified
after Shorewall was last restarted then Shorewall is started using
the config files rather than using the saved configuration.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2409 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-25 23:08:09 +00:00
paulgear
7d89d6e17e Spelling correction 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2332 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-13 20:27:32 +00:00
paulgear
2a19eb8a5a Copy latest 2.4 version from Shorewall2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2264 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 05:55:29 +00:00
paulgear
90dd62e89e Copy latest 2.2 version from STABLE2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2263 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 05:45:05 +00:00
paulgear
921a7223d4 Copy latest 2.0 code from STABLE2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2262 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 04:45:32 +00:00
teastep
d711731678 Fix multiple excluded zone handling in DNAT/REDIRECT 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1181 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2004-03-04 15:24:59 +00:00
teastep
2e80e459bb RC1 and 'detectnets' option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1089 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2004-01-23 23:48:30 +00:00
teastep
64bd2c9035 One-to-one NAT and updated common.def 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@790 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-11-24 19:08:43 +00:00
teastep
b235cd19e1 Add arp_filter interface option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-08-08 20:55:06 +00:00
teastep
2ab4292383 Add comment to /etc/shorewall/interfaces 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@641 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-07-05 21:19:49 +00:00
teastep
5776740250 Implemented 'newnotsyn' interface option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@598 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-18 18:49:04 +00:00
teastep
027e5fcd0f Implemented 'newnotsyn' interface option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@596 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-18 18:37:37 +00:00
teastep
21cb22303f 1) Remove trailing white space. 
2) Improve detection of white space in comma-separated lists.
3) Fix a typo in the INSTALL file.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@464 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-23 14:10:37 +00:00
teastep
6cabdfae5d More 1.3.14 Changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@456 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-19 23:52:03 +00:00
teastep
5fe2bef29e Remove icmp.def; change versions to 1.4 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-15 00:09:44 +00:00
teastep
ef51c04d1d Shorewall 2.0.0 Alpha1 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@443 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-08 20:58:44 +00:00
teastep
8894cf869c Remove 'noping' from interfaces examples 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@424 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-29 15:57:11 +00:00
teastep
2fab4bd133 Remove obsolete 'ping' stuff from released 'interfaces' file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@407 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-21 02:00:16 +00:00
teastep
35a18313fc Add comments about 'lo' and 'fw->fw' in config files 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@335 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-11-23 18:40:29 +00:00
teastep
8c3af56566 Add TCP Flags Checking 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-11-10 21:34:20 +00:00
teastep
eef8a3dc72 Improve comments in interfaces file re: use of aliases 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@314 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-10-29 01:36:06 +00:00
teastep
d26c6a5e92 Extend 'maclist' to the hosts file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@309 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-10-23 01:22:48 +00:00
teastep
cd555022bf Add MAC verification 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-10-22 18:07:52 +00:00
teastep
8a8692cf9a More interfaces file comment updates 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@191 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-08-13 18:51:55 +00:00
teastep
6e5a9253e4 Document broadcast address list 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@190 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-08-13 15:49:52 +00:00
teastep
03f2460461 Couple of config file cleanups 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@170 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-08-02 20:58:52 +00:00
teastep
824e684ce6 Clean up config files based on input from the Documentation Group 
Correct zone file installation message


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@169 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-07-31 13:58:53 +00:00
teastep
409216ed72 Improve comments about 'proxyarp' option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@157 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-07-25 15:31:37 +00:00
teastep
c2b143cba0 Added 'proxyarp' interface option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@156 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-07-25 15:05:21 +00:00
teastep
f3d8676f16 Add comment to interfaces file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@155 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-07-24 15:09:04 +00:00
teastep
45e4750219 Add 'routestopped' file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@131 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-07-11 00:01:45 +00:00
teastep
5245e3b75a Final 1.3 Updates 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@41 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-05-30 12:55:47 +00:00
teastep
44170128c2 1.3 Beta 2 Snapshot 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@27 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-05-18 13:45:23 +00:00
teastep
7c78bb16a7 Initial revision 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@10 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-04-30 23:13:15 +00:00