extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-08-03 20:36:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
15,014 Commits 104 Branches 736 Tags
c89b113a61a5681d24f9eeea87365196462741c4
Commit Graph

15014 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
a97dcd23d0 Allow merging of rules that specify an IPSEC policy 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.8-Beta1 		2017-10-07 13:17:43 -07:00
Tom Eastep
108b169d8d Treat LOG_TARGET like all other capabilities 
- Previous implementation could generate unworkable script when
  LOAD_HELPERS_ONLY=Yes

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:01:52 -07:00
Tom Eastep
a9fbaa57ed Pass -$g_family to 'ip xfrm' commands 
- This currently doesn't work correctly, but maybe it will in the future

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:00:29 -07:00
Tom Eastep
317f12041b Strengthen the test for empty SPD entries 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-30 15:43:17 -07:00
Tom Eastep
8469f983d8 Merge branch '5.1.7' 
# Conflicts:
#	Shorewall/Perl/prog.footer
 2017-09-29 15:25:37 -07:00
Tom Eastep
f54acb665a Correct handling of mark range in MARK target. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7.2 		2017-09-29 14:44:33 -07:00
Tom Eastep
3d2e9eb93e Improve the fix for SELinux "getattr" denials 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-28 15:16:50 -07:00
Tom Eastep
c6a939301f Improve the fix for SELinux "getattr" denials 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-28 15:16:00 -07:00
Tom Eastep
1cb98254cc Handle SELinux getattr denials in open() processing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-26 16:42:54 -07:00
Tom Eastep
baa791a1e3 Handle SELinux getattr denials in open() processing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-26 16:41:50 -07:00
Tom Eastep
8b4b965f63 Remove unnecessary disable/enable of script generation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-21 14:36:30 -07:00
Tom Eastep
8ee2d6246c Update a comment in the compiler 
- get_configuration() also processes the shorewallrc file(s)

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-21 12:32:34 -07:00
Tom Eastep
a7be3dfece Align progress messages produced by 'reenable' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7.1 		2017-09-19 13:29:13 -07:00
Tom Eastep
846e8c4ece Correct reenable logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:29:08 -07:00
Tom Eastep
e2bf7e6584 Align progress messages produced by 'reenable' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:28:09 -07:00
Tom Eastep
ff3994f6a1 Correct reenable logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:17:50 -07:00
Tom Eastep
494ec9c59c Avoid extra comparison in reload_command() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:49:11 -07:00
Tom Eastep
1cde92e8f3 Initialize g_dockeringress 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:43:44 -07:00
Tom Eastep
721a1e3b33 Initialize g_dockeringress 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:39:52 -07:00
Tom Eastep
84fa774cb7 Change copyright dates in lib.runtime 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 09:03:00 -07:00
Tom Eastep
c39bc7b65f Update version of lib.*installer 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:09:35 -07:00
Tom Eastep
2548e8741d Update version and copyright dates in lib.common 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:07:37 -07:00
Tom Eastep
0a31fba6bb Update version and copyright dates in lib.core 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:00:50 -07:00
Tom Eastep
9701c9c522 Update version and copyright dates in lib.base 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:57:02 -07:00
Tom Eastep
973d352209 Update shorewall script 
- Update copyright dates
- Add a comment about PRODUCT setting

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:51:27 -07:00
Tom Eastep
91e59c2ed4 Remove the Lite Makefiles 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 11:56:04 -07:00
Tom Eastep
be5aabcbfb Correct typo in Chains.pm 
&g_dockeringress -> $g_dockeringress

Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7-base 		2017-09-18 10:14:22 -07:00
Tom Eastep
a8937e6bc8 Correct harmless typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 10:06:41 -07:00
Tom Eastep
e91bd9a0e9 Remove useless/empty .tmp file when SAVE_IPSETS is set 
- Add SAVE_IPSETS support to the Redhat/Fedora sysv init script

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 09:28:43 -07:00
Tom Eastep
5e1cf17ebc DOCKER-INGRESS support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7-RC2 		2017-09-17 10:57:29 -07:00
Tom Eastep
85a7ec6fe5 Correct module loading in the compiler 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-14 15:08:38 -07:00
Tom Eastep
fb831e3128 Remove empty/useless ipsets tmp file in Shorewall-init 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7-RC1 		2017-09-12 11:56:24 -07:00
Tom Eastep
2ed11c7e15 Default ADD_IP_ALIASES to 'No' in Shorewall6 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 11:55:53 -07:00
Tom Eastep
ef1353790e Correct VLSM editing in the 'ipcalc' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:41 -07:00
Tom Eastep
4f79d2e82b Move and simplify handling of nat columns 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:04 -07:00
Tom Eastep
e6a2ba78a4 Correct handling of DEST column during action invocation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 10:05:37 -07:00
Tom Eastep
41ea3bdeda Modify the Event actions to handle NAT rules 
- Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 09:47:12 -07:00
Tom Eastep
1065c2951b Allow NAT targets to be passed to the Event actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 09:46:03 -07:00
Tom Eastep
3b373f3f21 Correct handling of ipsets in the DEST column of the snat file 
- Also corrected handling of exclusion

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-06 11:30:42 -07:00
Tom Eastep
0c05ab3bff Correct typo in shorewall-snat(5) 
- missing ':' in IPv4 Example 4.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-05 10:29:19 -07:00
Tom Eastep
ef3a33e3f4 Merge branch '5.1.6' 
# Conflicts:
#	Shorewall-core/lib.common

Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7-Beta2 		2017-08-30 15:02:23 -07:00
Tom Eastep
8a78fb6e77 Correct -p check for the conntrack utility's availability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.6.1 		2017-08-29 09:06:36 -07:00
Tom Eastep
b54a691110 Improve dynamic gateway detection 
- Use provider's routing table, if any

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 15:04:47 -07:00
Tom Eastep
90f33dd436 Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.7-Beta1 		2017-08-23 12:48:14 -07:00
Tom Eastep
b7aef24d7c Delete useless line of code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:18:29 -07:00
Tom Eastep
6f475cde3f Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 10:19:25 -07:00
Tom Eastep
6053a40af0 Apply Tuomo Soini's loadmodule patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 09:20:50 -07:00
Tom Eastep
7e4dba7623 Revert "Correct check for module already loaded" 
This reverts commit 2e98d4375b.
 2017-08-23 08:01:25 -07:00
Tom Eastep
3d322d31b7 Add UDP rule to macro.RDP 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
5.1.6-base 		2017-08-22 08:07:32 -07:00
Tom Eastep
34e4fffd7d Module suffix changes 
- Re-order default list in the compiler to match lib.common
- MODULE_SUFFIX="ko ko.xz" in standard .conf files.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 12:44:23 -07:00