extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-24 16:43:21 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,689 Commits 104 Branches 736 Tags 55 MiB
c94c3c5720
Commit Graph

8021 Commits

Author SHA1 Message Date
Tom Eastep
eeec6f2396
Update shorewall-snat(5) 
- Delete incorrect statement about a list of addresses in SNAT()
- Replace IPv4 Example 6 with one that uses the PROBABILITY column

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-24 11:19:46 -07:00
Tom Eastep
34c59dca32
Don't export interface_is_plain() 
- It was used in a superseded change

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-19 11:38:41 -07:00
Tom Eastep
9aa2a4b704
Use less obscure code to set $call_generate_all_acasts; 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-19 11:20:10 -07:00
Tom Eastep
d363809859
Complete the table documentation at the top of the file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-18 13:44:41 -07:00
Tom Eastep
6c4383b5ce
Add target file(s) 5.2.8-RC1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-17 14:47:53 -07:00
Tom Eastep
8c10c96844
Revert "Move ${SBINDIR}/shorewall6 to the Shorewall-core product" 
This reverts commit 1ca886abd7.
 2020-09-15 16:49:19 -07:00
Tom Eastep
126c5ccd53
Include administrative host name in status output 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-15 15:16:23 -07:00
Tom Eastep
1ca886abd7
Move ${SBINDIR}/shorewall6 to the Shorewall-core product 
- Default 'shorewall6' to 'shorewall6-lite' if that product is installed
  and 'shorewall6' is not.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-15 13:55:57 -07:00
Tom Eastep
ca78c0221c
Don't remote ${SBINDIR}/shorewall when uninstalling Shorewall 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-15 11:58:05 -07:00
Tom Eastep
e4c2122532
Eliminate duplicate function names between lib.cli and lib.cli-std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-15 11:45:45 -07:00
Tom Eastep
f16e666858
Redirect STDERR to STDOUT when using $PAGER 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-13 15:46:04 -07:00
Tom Eastep
b5f3294adb
Set SHOREWALL_SHELL=/sbin/sh if it isn't set and export or test 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-13 15:33:01 -07:00
Tom Eastep
8d4e79650e
Refactor ALL_ACASTS code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-11 15:58:59 -07:00
Tom Eastep
b253be8a69
Localize to IPv6 the effect of generating ALL_ACASTS during 'restore' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-11 14:35:17 -07:00
Tom Eastep
4385264dc3
Revert "Delete superfuous 'use' statements" 
This reverts commit fe7bb4abca.
 2020-09-11 13:43:14 -07:00
Tom Eastep
6cab1c3c8c
Generate ALL_ACASTS during 'restore' processing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-11 13:11:44 -07:00
Tom Eastep
fe7bb4abca
Delete superfuous 'use' statements 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-11 12:56:37 -07:00
Tom Eastep
63b477a4de
Clean up ALL_ACASTS generation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-10 15:59:33 -07:00
Tom Eastep
2166251b97
Correct physwild/wildcard usage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-10 15:59:16 -07:00
Tom Eastep
9e6aec7687
Correct usage of $physwild, replacing with $wildcard 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-10 13:20:20 -07:00
Tom Eastep
b154803f22
Rename 'noanycast' to 'omitanycast' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-10 09:59:45 -07:00
Tom Eastep
09449d4c67
Add target file(s) 5.2.8-Beta2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-09 12:44:17 -07:00
Tom Eastep
774be17a32
Expand the description of 'noanycast' in shorewall-interfaces(5) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-09 12:33:01 -07:00
Tom Eastep
6120eba8f9
Correct generation of code for 'noanycast' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-09 11:51:38 -07:00
Tom Eastep
6e8b25f126
Add target file(s) 5.2.8-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-07 15:07:57 -07:00
Tom Eastep
4253f23d6b
Add 'noanycast' interface option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-09-07 13:47:56 -07:00
Tom Eastep
0b80856eb6
Correct IPv6 ACK handling in Simple TC 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-08-01 17:10:00 -07:00
Tom Eastep
b3ebcc8025
Add target file(s) 5.2.7-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-13 09:57:30 -07:00
Tom Eastep
ac221348c0
Add an SPORT column to the tcpri file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-09 14:15:03 -07:00
Tom Eastep
4b3f9ae1e7
Clean up the connmark implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-07 18:23:39 -07:00
Tom Eastep
89201bd294
Add TC connmark support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-07 16:44:20 -07:00
Tom Eastep
b617c8d224
Rodrigo Araujo's tc connmark patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-07 14:28:21 -07:00
Tom Eastep
4469ddb861
Don't apply the deprecated directory more than once 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-06 15:38:28 -07:00
Tom Eastep
cd5409d633
Take care of '$LOG_LEVEL' during update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-06 15:38:01 -07:00
Tom Eastep
2f58d4e368
Don't create a zone forwarding chain for local zones 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-06 09:06:03 -07:00
Tom Eastep
628f5f0903
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2020-07-05 15:31:03 -07:00
Tom Eastep
ce73c783dc
Avoid Perl diagnostic when updating shorewall[6].conf 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-05 15:29:34 -07:00
Tom Eastep
e7318459f1
Avoid double colons in the CONFIG_PATH 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-05 15:27:47 -07:00
Tom Eastep
467d41f0cc
Merge branch '5.2.6' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-05 13:23:48 -07:00
Tom Eastep
b761a6eaa0
Call optimize_policy_chains() after doing other ruleset optimization 
- This insures that ACCEPT policy chains are optimized when EXPAND_POLICIES=No

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-04 10:40:43 -07:00
Tom Eastep
f8b7815375
Call optimize_policy_chains() after doing other ruleset optimization 
- This insures that ACCEPT policy chains are optimized when EXPAND_POLICIES=No

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-07-04 09:49:28 -07:00
Tom Eastep
d1c7b3d9da
Add target file(s) 5.2.6-RC1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-29 13:48:53 -07:00
Tom Eastep
3dc14e3575
Work around for Centos 7 iptables bug 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-29 11:27:14 -07:00
Tom Eastep
7ba6ac71e3
Delete blank line 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-28 20:41:21 -07:00
Tom Eastep
10aef23ab1
Correct handling of ";;+" in the snat file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-28 11:03:04 -07:00
Tom Eastep
e3f139bbdb
Add SPORT column to the snat file (FORMAT 2) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-27 14:50:23 -07:00
Tom Eastep
e4f24f41fd
Add target file(s) 5.2.6-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-27 10:25:51 -07:00
Tom Eastep
43ac903085
Correct action dport implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-26 16:55:39 -07:00
Tom Eastep
28b92dae32
Update version for PORT->DPORT snat column naming 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-26 15:34:16 -07:00
Tom Eastep
bac493c2c5
Merge branch '5.2.5' 2020-06-26 15:31:51 -07:00
Tom Eastep
3ed1cdec94
Rename the snat PORT column to DPORT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-26 14:44:00 -07:00
Tom Eastep
5cc626fa1d
Add target file(s) 5.2.5.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-21 11:42:30 -07:00
Tom Eastep
c234a1a0ec
Merge branch '5.2.5' 2020-06-20 10:02:53 -07:00
Tom Eastep
4c50f3b9bf
Correct typo in shorewall-providers(5). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-16 15:50:14 -07:00
Tom Eastep
e2aeed898d
Add the 'dport' option to the actions file(s) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-15 13:12:06 -07:00
Tom Eastep
2eb1c88555
Omit superfluous test 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-14 15:00:49 -07:00
Tom Eastep
117e9ba5bd
Change kern.err to daemon.err in logger params 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-13 14:29:48 -07:00
Tom Eastep
3ce04a8ef3
Add "zone name too long" error 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-12 12:57:31 -07:00
Tom Eastep
220e89755e
Omit STATE-orientated rules in wildcard policy chains 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-07 20:57:55 -07:00
Tom Eastep
fb14b0aafc
Update targetname files for 5.2.5-Beta2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 12:54:01 -07:00
Tom Eastep
54ab7cdeb5
Update blacklisting documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 12:23:32 -07:00
Tom Eastep
aa47554604
Add 'noupdate' DYNAMIC_BLACKLIST option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:14:32 -07:00
Tom Eastep
07160c5ed1
Add 'blacklist!' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:13:46 -07:00
Tom Eastep
527533ecb6
Add 'log' option to DYNAMIC_BLACKLIST 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 14:28:08 -07:00
Tom Eastep
4ac64a545c
Change log facility to 'daemon' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 13:49:10 -07:00
Tom Eastep
6612ea6b8c
Store the exported configuration paramaters in a named array 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 11:50:27 -07:00
Tom Eastep
ffb6ac178e
Shorten the disposition in ADD/DEL log messages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-01 09:36:00 -07:00
Tom Eastep
5af7dce96b
Merge branch 'master' of ssh://gitlab.com/shorewall/code 2020-05-31 14:03:23 -07:00
Tom Eastep
eb5bc3d8a4
Create DBL ipset with 'timeout 0' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-31 12:37:42 -07:00
Tom Eastep
67b421dc00
Correct a comment in the optimize level 8 code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-21 11:37:04 -07:00
Tom Eastep
5493a7e4a6
Merge branch '5.2.4' 2020-05-17 13:20:46 -07:00
Tom Eastep
1093f1ac32
Add target files 5.2.4.5 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-14 09:43:10 -07:00
Tom Eastep
7882c87afe
Allow AUTOMAKE to work with symbolic links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-14 09:22:44 -07:00
Tom Eastep
7343b19abc
Clarify the 'optional' interface option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-13 12:30:12 -07:00
Tom Eastep
f27ab4704c
Merge branch '5.2.4' 2020-04-30 11:18:18 -07:00
Tom Eastep
e5e8e6fbc0
Correct logic for deleting ipsets 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 13:07:04 -07:00
Tom Eastep
c11b647b1b
Fix defect which prevented dynamic blacklist ipsets from being created 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 12:34:41 -07:00
Tom Eastep
5706c5a860
Avoid hang during 'shorewall[6] start' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-29 12:33:50 -07:00
Tom Eastep
2bf9048057
Another Debian if_pre-down fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-24 16:47:42 -07:00
Tom Eastep
d618fd5812
Remove extraneous whitespace 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-23 20:31:07 -07:00
Tom Eastep
dddde56454
Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 
# Conflicts:
#	Shorewall-init/install.sh
#	Shorewall/Perl/Shorewall/Providers.pm

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-23 18:35:11 -07:00
Tom Eastep
0a9d2d9a33
Don't install script in if_down.d on Debian 
- Eliminates need for Debian-specific code in generated script

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-22 13:47:09 -07:00
Tom Eastep
39de88563f
Cleanup of Optimize 16 change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-21 13:02:56 -07:00
Tom Eastep
e14798b4a2
Make OPTIMIZE=16 an order of magnitude faster 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-21 13:02:34 -07:00
Tom Eastep
086f7a0e6d
Only destroy ipsets that will be restored 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-20 09:11:03 -07:00
Tom Eastep
057a2dec70
Correct typo with bad consequences 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 18:44:19 -07:00
Tom Eastep
cabadd4846
Honor 'wait=<seconds> when enabling an interface. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 14:31:12 -07:00
Tom Eastep
3c06be28be
Delete unnecessary check if IPv6 interface_is_usable() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-19 12:28:16 -07:00
Tom Eastep
381d55760b
Don't install ifupdown script in /etc/network/if-down.d on Debian 
- Network Manager sets PHASE=post-down when calling our updown script
  so we must process down commands in that phase.

- Modify the generated script to eliminate PHASE checks.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-18 11:42:32 -07:00
Tom Eastep
88a799b860
Allow IFUPDOWN=1 to work on Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-18 11:27:15 -07:00
Tom Eastep
15ca726c49
Add target files 5.2.4.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-17 17:56:06 -07:00
Tom Eastep
4e83d0788e
Rename valuesort() to sortchainsiftest() and remove keysort() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-11 13:42:41 -07:00
Tom Eastep
a49a9f9f9d
Sort specific hash keys and values if -t 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-07 11:12:16 -07:00
Tom Eastep
6dc99e77ae
Revert "Sort specific hash keys and values if -e" 
This reverts commit 5e648a9379.
 2020-04-07 11:09:27 -07:00
Tom Eastep
92b25d88b0
Revert "Add conditional sorts to find[_zone]_hosts_by_option()" 
This reverts commit 42a505c99d.
 2020-04-07 11:08:46 -07:00
Tom Eastep
42a505c99d
Add conditional sorts to find[_zone]_hosts_by_option() 
- Another case of different behavior by different Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 13:48:45 -07:00
Tom Eastep
5e648a9379
Sort specific hash keys and values if -e 
- Makes testing output consistent across Perl versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-06 10:57:35 -07:00
Tom Eastep
e49f31fb42
Don't compute sha1 hash when testing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-02 10:11:21 -07:00
Tom Eastep
3f0e4959a1
Revert "When exporting or testing, set all variables defined in the params file" 
This reverts commit f9003fab43.
 2020-04-01 12:55:41 -07:00
Tom Eastep
112c4dc38a
Revert "Temporarily disable fix for exported variables" 
This reverts commit 137cc48779.
 2020-04-01 12:55:14 -07:00