7990 Commits

Author	SHA1	Message	Date
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	ddefde2d10	Correct handling of address variables in DNAT rule. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 08:30:11 -07:00
Tom Eastep	2beeedd8fe	Remove incorrect '+' info from shorewall-interfaces(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:19:00 -07:00
Tom Eastep	1a2647618e	Allow runtime address variables as the server IP in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:18:16 -07:00
Tom Eastep	72293883dd	Tabify the Zones module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 11:28:14 -07:00
Tom Eastep	c31397532c	Verify that parent and child zones have a common interface ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 09:24:05 -07:00
Tom Eastep	d0861e813b	Make Shorewall's handling of '+' consistent with that of iptables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 08:22:57 -07:00
Tom Eastep	da62bd2b32	Use a hash slice in recently-added code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:34 -07:00
Tom Eastep	a83c19cc33	Adjust some default values in shorewall.conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-10 15:48:16 -07:00
Tom Eastep	a504820d19	Correct optimize level 8 handling of policy and policychain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 16:56:30 -07:00
Tom Eastep	4c2c1bcdf1	Export CONFDIR and SHAREDIR to the generated script. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-06 13:42:01 -07:00
Tom Eastep	f2ee8013fc	Update the providers manpage re balanced IPv6 routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-05 10:12:42 -07:00
Tom Eastep	657215f9b5	Add sample enabled and disabled scripts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:50:49 -07:00
Tom Eastep	5589ab76d9	Add arguments to the enabled and disabled user exits ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:44:15 -07:00
Tom Eastep	6425e5ae5d	Remove superfluous white space in the generated script ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-02 14:09:05 -07:00
Tom Eastep	8521c6f750	Merge branch '5.1.5'	2017-08-02 14:02:03 -07:00
Tom Eastep	80e6cd8a2f	Add enabled and disabled user exits ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-29 15:15:57 -07:00
Tom Eastep	69a0061d0f	Correct handling of MAC addresses in the accounting file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-27 14:55:19 -07:00
Tom Eastep	5a24953e6c	Merge branch '5.1.5'	2017-07-27 09:14:50 -07:00
Tom Eastep	eea3cca90c	Correct handling of USER/GROUP in the OUTPUT accounting section ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-27 09:01:46 -07:00
Tom Eastep	a420ef04d9	Correct tcfilter source port handling when BASIC_FILTERS=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-26 16:48:53 -07:00
Tom Eastep	e573436b12	Correct tcfilter source port handling when BASIC_FILTERS=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-23 12:14:57 -07:00
Tom Eastep	b9b7baf98d	Merge branch '5.1.5'	2017-07-20 10:37:53 -07:00
Tom Eastep	922bd9eeca	Implement SPARSE=Very ... - Only installs the .conf file. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-09 16:18:09 -07:00
Tom Eastep	2d0cb5c2d8	Process the snat file if the masq file is empty ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-07-06 09:09:52 -07:00
Tom Eastep	9d160d4342	Add RESTORE_DEFAULT_ROUTE to shorewall6.conf samples ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-27 15:50:56 -07:00
Tom Eastep	1301848315	Change .conf files to specify USE_NFLOG_SIZE=No ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-26 10:46:16 -07:00
Tom Eastep	f050fc6e05	Avoid issues with Perl 5.30 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 20:57:48 -07:00
Tom Eastep	61b6898782	Add dropBcasts action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 18:36:54 -07:00
Tom Eastep	aee8c14ea6	Correct update setting of USE_NFLOG_SIZE ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 17:10:44 -07:00
Tom Eastep	ff2323b249	Add the USE_NFLOG_SIZE option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 16:54:14 -07:00
Tom Eastep	b4a06e9656	NFLOG_SIZE capability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 13:44:26 -07:00
Tom Eastep	4122021344	Improve editing of port numbers/service names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 07:44:23 -07:00
Tom Eastep	71d50e0217	Use --nflog-size rather than --nflog-range ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-25 07:43:39 -07:00
Tom Eastep	1b6f15d577	Correct multiple fallback providers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-23 07:41:23 -07:00
Tom Eastep	7515520b46	Don't use symlinks for shorewall6 manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-22 13:57:00 -07:00
Tom Eastep	2f5687c65a	Don't generate multihop routes unnecessarily ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-18 09:37:41 -07:00
Tom Eastep	66d1fbd3aa	Clean up shorewall[6].conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 10:39:46 -07:00
Tom Eastep	c410459e27	Correct install of section 5 manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 10:30:49 -07:00
Tom Eastep	987e54cd54	Move shorewall6-proxyndp.xml to Shorewall/manpages/shorewall-proxyndp.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-17 09:07:28 -07:00
Tom Eastep	42a46d42b6	Centralize the complete list of manpages in shorewall(8) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-16 17:11:43 -07:00
Tom Eastep	d8ef934f24	Consolidate manpages between Shorewall and Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-16 15:01:41 -07:00
Tom Eastep	62a60ad995	Add comments around functions moved from IPAddrs.pm to Chains.pm. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-14 12:26:22 -07:00
Tom Eastep	b1ba05db2b	Correct handling of port ranges and port variables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 17:07:55 -07:00
Tom Eastep	57f7cb4f3c	Runtime Port Variables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 11:55:56 -07:00
Tom Eastep	4cf60258af	Correct a runtime error with NFQUEUE. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-12 11:07:54 -07:00
Tom Eastep	1061644ac7	Clean up links in the manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-06-08 15:43:59 -07:00
Tom Eastep	4a262c0e1b	Add FIN action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-31 08:28:27 -07:00
Tom Eastep	29ffb7eb4b	Merge branch '5.1.4'	2017-05-31 08:23:07 -07:00
Tom Eastep	a775fdcb7c	Remove stutter from the .conf manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-31 08:21:45 -07:00
Tom Eastep	12a32d3a6b	Update LOGFORMAT documentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-26 07:33:34 -07:00
Tom Eastep	45d96a5d64	Clean up the introductory part of shorewall-rules.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-19 08:02:42 -07:00
Tom Eastep	f21d6de4d6	Clean up the introductory part of shorewall-rules.xml ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-17 15:28:51 -07:00
Tom Eastep	965a8e8f68	Minor cleanup of the Config module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-15 09:29:12 -07:00
Tom Eastep	eb26a467e9	Add snat and mangle to %config_files ... - Tabify initialization of %config_files Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-12 08:37:54 -07:00
Tom Eastep	bb70a3637b	Add PERL_HASH_SEED option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-02 07:51:37 -07:00
Tom Eastep	6c20cc7c4f	Inline the start_command::do_it() function in lib.cli-std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-05-01 13:51:53 -07:00
Tom Eastep	d4e05f6163	Correct handling of IPv6 tunnel-src and tunnel-dst ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-23 08:36:22 -07:00
Tom Eastep	6201f37913	Clarify <filename> in the generated script's header ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-18 16:45:17 -07:00
Tom Eastep	7ee44d6b4b	Correct a typo in the generated script's header syntax description ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-18 16:31:51 -07:00
Tom Eastep	363b8f9802	Correct validation of string interface options. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-13 06:48:14 -07:00
Tom Eastep	00d4724fd8	Some cleanup of the Chains module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-04-05 20:14:13 -07:00
Tom Eastep	a46f19899b	Correct typo in links to the logging article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-27 16:12:56 -07:00
Tom Eastep	d2392c3a9b	Add IPv6 UPnP Support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-24 09:54:36 -07:00
Tom Eastep	0763b27b0b	Correct a comment ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 15:59:55 -07:00
Tom Eastep	8b90827611	Minor cleanup of split_columns() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 10:18:07 -07:00
Tom Eastep	8507c97b5a	Clean up column/value pair editing. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-22 09:46:52 -07:00
Tom Eastep	a6306f2c08	?reset action param now sets parmsmodified. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-18 12:53:05 -07:00
Tom Eastep	a79dc194a4	Re-factor the directive message change ... - results in much more compact code - Document change in the config basics doc Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-18 11:42:53 -07:00
Tom Eastep	bdcf93f92c	Report the call site when issuing messages from an action. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-17 17:08:19 -07:00
Tom Eastep	6b84727886	Delete useless blank line ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-17 13:26:07 -07:00
Tom Eastep	5f445d9c2b	Merge branch '5.1.3'	2017-03-16 14:14:20 -07:00
Tom Eastep	31bd10ffdd	Correct two-interface sample snat file ... - s/92/192/ Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 21:18:23 -07:00
Tom Eastep	c3303067fc	Correct all+ handling in the policy file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 11:20:37 -07:00
Tom Eastep	55cf06d0a8	Correct all+ handling in the policy file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-15 10:09:53 -07:00
Tom Eastep	158f6305b1	Correct install fix ... - Also remove extra logic from action.Broadcast Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:39:25 -07:00
Tom Eastep	6407520a35	Add warning messages to the deprecated actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:32:28 -07:00
Tom Eastep	54336eaa80	Delete IPv6 actions that are now handled by their IPv4 counterparts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 14:24:17 -07:00
Tom Eastep	5b85627fb8	Merge branch '5.1.3' ... Conflicts: Shorewall/Perl/Shorewall/Config.pm Shorewall6/Actions/action.Multicast	2017-03-14 14:16:47 -07:00
Tom Eastep	a00d7217e3	Correct last commit ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 13:58:59 -07:00
Tom Eastep	54ef4e4ced	Delete deprecated actions during install ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 13:46:24 -07:00
Tom Eastep	a447d726fa	Revert change which screwed up ?begin perl ... ?end perl line numbering ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-14 12:44:33 -07:00
Tom Eastep	fe29adbd66	Correct use of $family in combined actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 16:52:16 -07:00
Tom Eastep	4dc6be6b3b	Deprecate A_AllowICMPs ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 15:09:07 -07:00
Tom Eastep	6ebc8f4266	Merge branch '5.1.3'	2017-03-13 14:55:23 -07:00
Tom Eastep	c5c4211081	Unify actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 14:54:25 -07:00
Tom Eastep	4010f9bce4	Add multicast to the Deprecated A_Drop and A_Reject actions ... - Move A_Drop to deprecated/ directory Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 14:18:23 -07:00
Tom Eastep	02bb717d7d	Quote SMURF_LOG_LEVEL setting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:21:13 -07:00
Tom Eastep	046998ed84	Tabification of new actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:19:35 -07:00
Tom Eastep	24a014655b	Quote all _DEFAULT settings in the sample .conf files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 11:00:29 -07:00
Tom Eastep	0b8945da8e	Correctly handle expansion of option names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 10:20:15 -07:00
Tom Eastep	da363880a9	Always quote the LEVEL and DEFAULT settings when updating ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-13 09:51:58 -07:00
Tom Eastep	037fe490f3	Process config options in file order during update. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-12 17:09:41 -07:00
Tom Eastep	b13014c9ab	Expand variables in .conf except when upgrading ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-11 11:21:07 -08:00
Tom Eastep	76aef6cb04	Correct generation of '! --syn' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-11 08:43:04 -08:00
Tom Eastep	4c72b3ee58	Make sure that $LOG_LEVEL is defined ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-10 11:06:23 -08:00
Tom Eastep	d9071c5308	Correct $LOG_LEVEL expansion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-10 10:24:24 -08:00
Tom Eastep	3d8d5aa469	quote $LOG_LEVEL in shorewall[6].conf files ... - Delete AllowICMPs from IPv4 policy action settings Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-08 14:16:24 -08:00
Tom Eastep	49811d24fa	Correct convertion of tcrules->mangle when a writable mangle exists ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 15:21:45 -08:00
Tom Eastep	fe4aaee1b4	Fix typos in action.dropNotSyn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 14:37:08 -08:00
Tom Eastep	0ec7bc846e	Correct logging in inline policy actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 13:58:14 -08:00
Tom Eastep	dbcd4d9d16	Correct typo in action.AllowICMPs ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 13:57:05 -08:00
Tom Eastep	5a996cbda7	Change AllowICMPs to an inline action ... Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/actions.std	2017-03-07 13:56:44 -08:00
Tom Eastep	6019adaae5	Change macro.ICMPs to an inline action ... Signed-off-by: Tom Eastep <teastep@shorewall.net> Conflicts: Shorewall/actions.std	2017-03-07 13:54:52 -08:00
Tom Eastep	4f869c3506	More manpage updates for tcp:!syn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 11:13:58 -08:00
Tom Eastep	e3c2874b21	Modify dropNotSyn to use {proto=6:!syn} ... - also make the same change in the rejNotSyn audited case	2017-03-07 11:00:39 -08:00
Tom Eastep	e8a0142480	Document tcp:!syn support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:48:24 -08:00
Tom Eastep	a4768776f7	Modify rejNotSyn to use new/corrected features ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:34:15 -08:00
Tom Eastep	8e000b158e	Correct the handling of tcp-reset ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:33:51 -08:00
Tom Eastep	f1d1ab6411	Implement tcp:!syn in PROTO column ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-07 10:33:20 -08:00
Tom Eastep	cd103bb715	Correct rejNotSyn ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 16:01:31 -08:00
Tom Eastep	5f1370f1b4	Clear the firewall on Debian systemd 'stop' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 11:22:55 -08:00
Tom Eastep	dc53fa2665	Correct file/line from ?error ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-06 11:02:06 -08:00
Tom Eastep	71d9a03697	Update shorewall[6]-rules. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 14:29:57 -08:00
Tom Eastep	137d4bcc90	Alter logging behavior of Limit ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 13:03:57 -08:00
Tom Eastep	356d3fa2dd	Correct new directives with respect to omitting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 12:09:54 -08:00
Tom Eastep	80d93235b5	Eliminate builtin actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 12:09:33 -08:00
Tom Eastep	c1e7fce1c5	Report the file/line where action invoked ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-05 09:29:00 -08:00
Tom Eastep	63ec936f21	Remove determinism sorts	2017-03-04 19:05:33 -08:00
Tom Eastep	dabe0bd205	Set PERL_HASH_SEED to make compilation deterministic. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-04 18:48:48 -08:00
Tom Eastep	63cf7dd699	Revert "Move $test to the config module." ... This reverts commit 876d76b294.	2017-03-04 18:45:40 -08:00
Matt Darfeuille	0b3a32b365	Change the preferred way to remove sysvinit script ... - Correct typo in command - Correct spacing Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-04 09:03:59 -08:00
Tom Eastep	a7d45e9566	Restore logging to the BLACKLIST action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-03 10:14:30 -08:00
Tom Eastep	876d76b294	Move $test to the config module. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 11:42:07 -08:00
Tom Eastep	9075a6dd7a	Copy libs and footer when compiling for test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 10:49:49 -08:00
Tom Eastep	61f5e3531c	Rename action.allowUPnP to action.allowinUPnP ... - Allows 'show action allowinUPnP' to work correctly. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-03-02 10:05:31 -08:00
Matt Darfeuille	7ffe8e4e4b	shorewall: Document the -p option in installer ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-23 09:33:35 -08:00
Matt Darfeuille	06c6a017d5	Use a specific parameter file for systemd script ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:56:25 -08:00
Matt Darfeuille	75fd8ccb37	Use a specific parameter file for sysvinit script ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:56:21 -08:00
Matt Darfeuille	8c7e6fddfd	Use a common uninstaller for Sw and Sw6 ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:56:11 -08:00
Matt Darfeuille	783e438b4a	Be more verbose while uninstalling Shorewall ... - Remove version file as a file and not as a directory. Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:56:00 -08:00
Matt Darfeuille	27a620347a	shorewall: Fail if Shorewall-core is not installed ... Shorewall-core's version file resides in ${SHAREDIR}/shorewall. Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:55:56 -08:00
Matt Darfeuille	a496edef54	Use a function to fail on fatal error ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:55:50 -08:00
Matt Darfeuille	22b044f350	shorewall: Use a function to install file ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:55:41 -08:00
Matt Darfeuille	c58efe7698	Unify the uninstallers ... - Clean up code - Use the .service suffix Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:55:36 -08:00
Matt Darfeuille	f48b2e715f	Unify the installers ... - Clean up code Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:55:31 -08:00
Matt Darfeuille	f6f7e691d0	Fail if the rc file can not be loaded ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:54:40 -08:00
Matt Darfeuille	a9048b63f2	Correct typos ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:54:36 -08:00
Matt Darfeuille	bc1df90829	Group comment lines with corresponding command ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:54:33 -08:00
Matt Darfeuille	09462cf92b	Use 4 octal digits as numeric mode in installers ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:54:29 -08:00
Matt Darfeuille	315d4c39b8	Create and set directory mode using a function ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:54:04 -08:00
Matt Darfeuille	42554f8f31	Add cant_autostart() to the installers's library ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:53:59 -08:00
Matt Darfeuille	f0debcb6fb	Copy only required libraries to run Shorewall ... Copy only libraries that are required by Shorewall to operate properly. Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:53:54 -08:00
Matt Darfeuille	20cc56f2f1	Load uninstallers's common functions ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 17:53:39 -08:00
Matt Darfeuille	4e771083c7	Load installers's common functions ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 16:42:38 -08:00
Matt Darfeuille	a6eebc8ecf	Replace product names by product vars ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-22 16:40:41 -08:00
Tom Eastep	6966270822	Allow 'show action' on buitin actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-19 13:43:23 -08:00
Tom Eastep	118e4f73c9	Correct validation of LOG_LEVEL ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-19 10:25:44 -08:00
Tom Eastep	10b39f3855	Correct typo (allowMast -> allowMcast) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-19 10:25:27 -08:00
Tom Eastep	a71b61c238	Delete the deprecated macros and actions during install ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-15 10:16:53 -08:00
Tom Eastep	944888c04f	Handle broadcast and muticast separately ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-15 10:16:20 -08:00
Tom Eastep	48d301b2cf	Rename the policy LIMIT column to RATE ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-12 10:17:43 -08:00
Tom Eastep	735919d8d3	Add LOG_LEVEL option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-12 09:52:55 -08:00
Tom Eastep	b4561e97c8	Deprecate Drop and Reject in actions.std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-12 09:28:38 -08:00
Tom Eastep	66a63a4da5	Fix instances of $LOGrmation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-12 08:33:56 -08:00
Tom Eastep	8c9fb501fd	Adjust .conf files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-11 13:41:28 -08:00
Tom Eastep	977fa81d46	Make 'none' case-insensitive in policy action specifications ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-10 11:43:51 -08:00
Tom Eastep	09fda9eb6c	Manpage updates: ... - interfaces: Clarify the 'bridge' option - rtrules: Warn about similar rules with same priority	2017-02-10 11:43:04 -08:00
Tom Eastep	7e984af094	Some cleanup of policy actions ... - Allow '+' in policy file action list Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-07 13:19:53 -08:00
Tom Eastep	af8d4e32c2	Replace 'info' with '$LOG' in the sample policy files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-07 08:27:19 -08:00
Tom Eastep	ca33a7ef65	Fix Sample .conf files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 18:28:05 -08:00
Tom Eastep	e91f414223	Document policy action changes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 17:09:23 -08:00
Tom Eastep	5cd2f26b51	Correct shorewall.conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 14:46:10 -08:00
Tom Eastep	dab9e1d7c4	Assume no default actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 14:45:43 -08:00
Tom Eastep	b9471a2499	Correct parsing of the POLICY column ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 14:15:24 -08:00
Tom Eastep	95ffada759	Change sample IPv4 default actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 13:47:02 -08:00
Tom Eastep	b2553fb008	Another change to allow builtin actions as default actions. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 13:25:10 -08:00
Tom Eastep	8bc70674f3	Make DropDNSrep an inline action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 11:21:56 -08:00
Tom Eastep	cecb8a1950	Deprecate the Drop and Reject actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 10:52:31 -08:00
Tom Eastep	079d862bb3	Document default-action lists ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 10:51:57 -08:00
Tom Eastep	92133e5a6b	Default-action lists ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-06 10:11:48 -08:00
Tom Eastep	686ca9d3a3	Allow builtin actions in xxx_DEFAULT settings. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-02-05 15:21:57 -08:00
Tom Eastep	70a395892f	Make BLACKLIST work correctly in the blrules file ... - Add the 'section' action option Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 15:03:02 -08:00
Tom Eastep	d2d11df4f6	Make action.BLACKLIST behave correctly in the blrules file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 13:35:10 -08:00
Tom Eastep	b985654600	Correct typo in heading of Reject and Drop actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 11:54:40 -08:00
Tom Eastep	62ff6d3fa5	Remove obsolete macros ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 09:26:19 -08:00
Tom Eastep	2bbb5c8c1e	Add hack to distinguish between the BLACKLIST macro and action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 09:23:26 -08:00
Tom Eastep	33b4ee4d31	Don't quote variable values in ERROR/WARNING/INFO directives ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-23 09:00:18 -08:00
Tom Eastep	d111e4f186	Handle built-in actions in 'show action' ... - Remove a couple of non-actions from IPv4 actions.std Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-22 15:40:36 -08:00
Tom Eastep	634c8debda	Use ?REQUIRE in several actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-22 14:59:37 -08:00
Tom Eastep	71dd5d016b	Add ?REQUIRE compiler directive ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-22 14:48:18 -08:00
Tom Eastep	6b408869d2	Correct the synopsis in two action files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-22 11:47:12 -08:00
Tom Eastep	edf08bf408	Cosmetic change in compiler() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-21 19:47:50 -08:00
Tom Eastep	9c3a82f628	Add BLACKLIST action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-19 14:08:15 -08:00
Tom Eastep	e6933f4c8d	Add BLACKLIST policy ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-18 10:55:15 -08:00
Tom Eastep	cc3b8793e0	Make BALANCE_PROVIDERS default the setting of USE_DEFAULT_RT ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-17 15:02:16 -08:00
Tom Eastep	ac5fd195ec	Correct provider/routefilter check wrt optional interfaces ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-17 09:34:13 -08:00
Tom Eastep	45b9ddf188	Add BALANCE_PROVIDERS option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-17 08:58:09 -08:00
Tom Eastep	2d16fac9ed	Revert "Implement USE_DEFAULT_RT=Exact" ... This reverts commit 2ca1ae734a.	2017-01-17 08:25:33 -08:00
Tom Eastep	f23970b4f7	Include LOG_MARTIANS in test for setting log_martians with routefilter ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-14 13:03:24 -08:00
Tom Eastep	04112647d3	Correct provider/routefilter checking ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-14 12:40:39 -08:00
Tom Eastep	2ca1ae734a	Implement USE_DEFAULT_RT=Exact ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-14 08:14:08 -08:00
Tom Eastep	64c249a174	Set logmartians along with routefilter. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-11 15:53:55 -08:00
Tom Eastep	0019ca53e5	Include ROUTE_FILTER in routefilter/provider checks ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-11 15:39:13 -08:00
Tom Eastep	0d2a5089a9	Merge branch '5.1.0'	2017-01-11 12:29:57 -08:00
Tom Eastep	50d09e76cb	Catch 'routefilter' with provider interfaces. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-11 11:47:10 -08:00
Tom Eastep	73772efb85	Correct typo in shorewall-interfaces(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-11 11:20:07 -08:00
Tom Eastep	568f461763	Propogate PAGER to -lite systems ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-11 11:18:57 -08:00
Tom Eastep	cb150f9c09	Allow compact IPv6 addresses in IP6TABLES() rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-07 10:01:03 -08:00
Tom Eastep	19ce2093d8	Correct splitting of IP(6)TABLES options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-07 10:00:37 -08:00
Tom Eastep	b8c322a05f	Ignore SUBSYSLOCK when $SERVICEDIR is non-empty ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-06 15:50:26 -08:00
Tom Eastep	f68d3fd9fa	Revert "Remove SUBSYSLOCK" ... This reverts commit 386b137e9b.	2017-01-06 09:49:40 -08:00
Tom Eastep	386b137e9b	Remove SUBSYSLOCK ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-05 10:03:03 -08:00
Tom Eastep	ce68f84d9d	Remove Makefile from Shorewall[6][-lite] ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-05 08:22:02 -08:00
Tom Eastep	5aed31d37a	Restore SUBSYSLOCK setting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-04 19:39:08 -08:00
Tom Eastep	0b3d1b1d36	Revert code that assumed no CLI symlinks ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-01-04 17:12:20 -08:00
Tom Eastep	2f9ef4dda7	Update kernel module files ... - Include additional nat modules Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-30 10:56:16 -08:00
Tom Eastep	5174fe0161	Avoid echo options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-28 11:09:08 -08:00
Tom Eastep	65bf33bcf3	Correct handling of safe-restart with SAVE_IPSETS ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-27 16:29:01 -08:00
Tom Eastep	638c7c5bca	Implement NETMAP_TARGET capability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-27 08:26:51 -08:00
Tom Eastep	c4bbb46e3f	Eliminate rawpost table support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-26 14:20:08 -08:00
Tom Eastep	c9f45277b8	Move the action files to their own directory ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-23 09:05:37 -08:00
Tom Eastep	541291b729	Add do_condition() call in process_mangle_rule1() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-21 08:46:16 -08:00
Tom Eastep	9dcac6012b	Remove redundent test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-20 14:41:29 -08:00
Tom Eastep	4af278338f	Correct intra-zone handling in policies ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-19 09:11:41 -08:00
Matt Darfeuille	b33d853703	shorewall: Don't set the 'file' var needlessly ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-19 08:14:48 -08:00
Matt Darfeuille	30331fecda	shorewall: Don't set the 'file' var needlessly ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-19 08:14:48 -08:00
Tom Eastep	a9583aaf3a	Correct merge compatibility change ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 19:00:37 -08:00
Tom Eastep	c2c2dc0b22	Exercise care when merging rules including -m multiport ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 18:39:19 -08:00
Tom Eastep	e3951cb5a3	Re-add volume 8 manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 16:16:50 -08:00
Matt Darfeuille	bac6848362	shorewall: Correct the filepath of .shorewallrc ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 12:14:25 -08:00
Matt Darfeuille	fa8e92cbd3	shorewall: Correct the filepath of .shorewallrc ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 12:14:24 -08:00
Matt Darfeuille	f502e5b2e3	shorewall: Correct displaying of shorewall version ... Add the Product name variable to properly display the product name when the '-v' option is passed to the script. Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 12:14:24 -08:00
Tom Eastep	154395c20f	Create symbolic links for the CLI programs ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-18 11:48:05 -08:00
Tom Eastep	095c9212f4	Fatal error for empty action file ... - Issue error if a file with the name of the action exists on the CONFIG_PATH Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-12 16:31:46 -08:00
Tom Eastep	08c6b80e1e	Correct typo in the snat manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-11 14:32:27 -08:00
Tom Eastep	cb7ab3908a	SOURCE/DEST changes in the mangle manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-11 14:06:59 -08:00
Tom Eastep	b756c63b1e	More SOURCE/DEST manpage updates ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-10 14:41:08 -08:00
Tom Eastep	eea9882953	Implement CPU Fanout for NFQUEUE. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-09 10:46:39 -08:00
Tom Eastep	cc937ffaba	NFQUEUE should be non-terminating ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-09 09:49:23 -08:00
Tom Eastep	5ea3334a66	Support a richer SOURCE and DEST syntax ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-09 09:43:10 -08:00
Tom Eastep	a2e040998b	Move shorewall(8) to shorewall.core ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-04 18:03:18 -08:00
Tom Eastep	53adfbe863	Normalize parameters by removing trailing omitted args ... - Avoids needless duplicate action chains	2016-12-03 11:34:02 -08:00
Tom Eastep	4a0a906510	Correct progress message in optimize_level4() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-03 08:28:14 -08:00
Tom Eastep	7ceb0228e9	Merge branch 'master' into 5.1.0	2016-12-02 15:27:16 -08:00
Tom Eastep	f537e3e15c	Fix optimization bug in merge_rules() ... - Reset the simple member if a unique option is merged Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-02 14:47:03 -08:00
Tom Eastep	5ae062317f	Merge branch 'master' into 5.1.0	2016-12-01 19:35:14 -08:00
Tom Eastep	a1981823f4	Correct typo (syntax error!) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-12-01 15:21:25 -08:00
Tom Eastep	77e83f0afd	Eliminate the CHAIN_SCRIPTS option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-29 16:33:23 -08:00
Tom Eastep	a45fe692cc	Add a SWITCH column to the mangle files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-29 16:13:44 -08:00
Tom Eastep	799b17210c	Enhanced syntax for SOURCE and DEST columns in the rules file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-25 15:10:14 -08:00
Tom Eastep	01306e1230	Try another approach to the RCP_/RSH_COMMAND formatting issue ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-23 14:48:28 -08:00
Tom Eastep	963dea54c5	Modify update defaults for LOGPREFIX and LOGLIMIT ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-23 14:30:07 -08:00
Tom Eastep	fbbcc812a1	Remove archaic LAST LINE comments from sample .conf files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-23 14:17:28 -08:00
Tom Eastep	87870ac46e	Clean up formatting of the RCP_/RSH_COMMAND manpage descriptions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-23 14:08:13 -08:00
Tom Eastep	d895a5d67c	Correct version in IPv4 universal shorewall.conf ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-22 09:28:44 -08:00
Tom Eastep	c561f8eb03	Default shorewall.conf changes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-22 08:57:47 -08:00
Tom Eastep	38c9165c39	More shorewall(8) documentation updates ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-21 13:57:06 -08:00
Tom Eastep	bd2df4836d	Break lib.base into two libraries ... - Allows separation of default product determination and establishment of the product environment Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-21 13:25:57 -08:00
Tom Eastep	875c352473	Unify the CLI ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-21 10:00:55 -08:00
Tom Eastep	dae060bbb4	Update shorewall(8) for single CLI ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-20 13:03:13 -08:00
Tom Eastep	ccab75e69a	Avoid unnecessary change in the generated script ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-20 09:17:39 -08:00
Tom Eastep	de553e7b18	Add the -l option ... - Update shorewall(8) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-20 09:16:16 -08:00
Tom Eastep	36517cdb1e	Rename setup_environment to setup_product_environment ... - Default to first detected product - Verify that specified product is installed Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-20 08:48:18 -08:00
Tom Eastep	bb5c3a50f5	Avoid unnecessary change in the generated script ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-19 21:39:49 -08:00
Tom Eastep	8b99fe20b5	Pave the way for unifying the CLI ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-19 21:17:35 -08:00
Tom Eastep	137b051e52	Centralize setting of product-dependent g_* variables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-19 17:17:03 -08:00
Tom Eastep	9eb390403b	Implement -p option to disable PAGER ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-17 10:58:10 -08:00
Tom Eastep	88284ed568	Delete version from the heading of compiler.pl ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-16 13:03:00 -08:00
Tom Eastep	481afef2c3	Don't insist that route deletion succeeds ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-12 08:38:09 -08:00
Tom Eastep	6b38b3a515	Revert "More IPv6 routing cleanup" ... This reverts commit 1e7f63834c.	2016-11-12 08:25:38 -08:00
Tom Eastep	80951d23c2	add/delete multi-nexthop IPv6 routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-12 08:24:46 -08:00
Tom Eastep	1e7f63834c	More IPv6 routing cleanup ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-09 10:34:19 -08:00
Tom Eastep	74b94f71f8	Always return $omitting from process_compiler_directive() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-09 08:07:17 -08:00
Tom Eastep	ef4ab62dd3	Disable directive callbacks after file conversion. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-09 07:47:19 -08:00
Tom Eastep	42c1c2a205	Don't copy link-level address routes into provider tables. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-08 14:42:44 -08:00
Tom Eastep	6095d05af9	Update manpages for 'update' improvements ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-07 13:50:11 -08:00
Tom Eastep	d989241712	Retain shell variables during routestopped and blacklist conversions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-07 11:26:17 -08:00
Tom Eastep	652bc75448	Omit Shorewall version from converted files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-07 11:12:36 -08:00
Tom Eastep	d105da3964	Preserve shell variables when converting tos->mangle ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-06 17:25:35 -08:00
Tom Eastep	c5b393a074	Preserve shell variables when converting tcrules->mangle ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-06 17:25:01 -08:00
Tom Eastep	1b82dedb77	Preserve shell variables when converting masq -> snat ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-06 13:53:05 -08:00
Tom Eastep	6398756647	Add a routine to split the raw current line image ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-06 08:44:24 -08:00
Tom Eastep	daa2440d9a	Ensure that $directive_callback->() gets an unaltered image ... - pass omitted lines to that function as well Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-06 08:03:31 -08:00
Tom Eastep	ffe1e1d335	Fix typo in the two-interface sample snat file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-04 08:36:24 -07:00
Tom Eastep	8441ac5c5f	Handle another issue with ADD_SNAT_ALIASES=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-03 15:06:38 -07:00
Tom Eastep	01a6881f4f	Catch total lack of address/port in SNAT argument ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 19:30:55 -07:00
Tom Eastep	f917670fbd	Tighten editing of SNAT/MASQ port ranges. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 19:30:18 -07:00
Tom Eastep	c376740329	Detect degenerate addr:port[-range] in SNAT rules. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 15:28:00 -07:00
Tom Eastep	4169520d63	Handle exceptionrule correctly with MASQUERADE. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 14:36:51 -07:00
Tom Eastep	53d97bbcc8	Correct handling of masquerade port range when ADD_SNAT_ALIASES=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 12:28:00 -07:00
Tom Eastep	9ae36e1989	Correct error message when multiple SNAT addresses are present. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 12:27:32 -07:00
Tom Eastep	60619fb3cb	Correct part of a recent patch to Nat.pm ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-02 09:00:19 -07:00
Tom Eastep	41ecee356b	Correct earlier faulty patch to Nat.pm. ... - Similar Rules.pm patch was okay. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 19:39:52 -07:00
Tom Eastep	e188bde6c4	Fix additional masq/snat issues. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 18:42:16 -07:00
Tom Eastep	6e08717089	Formatting changes to snat files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 17:11:43 -07:00
Tom Eastep	d37967f32f	Replace --to-ports <ports> with --to-source :<ports> ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 16:52:08 -07:00
Tom Eastep	10c1ad245a	Handle omitted port[-range] in SNAT correctly. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 12:59:44 -07:00
Tom Eastep	032a16eb43	Detect incorrect port-range separator in SNAT(...) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-11-01 11:28:19 -07:00
Tom Eastep	a89d8b3af4	Fix Shorewall installer re: snat file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-31 16:13:48 -07:00
Tom Eastep	3f68814a38	Disallow more than one address[-range] in SNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-31 15:15:35 -07:00
Tom Eastep	95a1e65016	Clear target modifiers in interface loop ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-30 16:25:17 -07:00
Tom Eastep	282253022e	Correct handling of address variables out of the Providers module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-29 14:59:34 -07:00
Tom Eastep	4d77d673e8	Be sure NAT is enabled before processing an snat file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-28 09:30:17 -07:00
Tom Eastep	e4e424bbdc	Disallow '+' in inline SNAT action bodies ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-28 08:58:47 -07:00
Tom Eastep	71fb1a8cbd	Correct error message ( s/\*/+/ ) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-27 14:32:43 -07:00
Tom Eastep	46c8147521	Deprecate INLINE_MATCHES=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-27 13:55:11 -07:00
Tom Eastep	de3b05ea41	Correctly translate +INLINE(...) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-27 12:21:07 -07:00
Tom Eastep	ae9b57d854	Correct NONAT translation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-26 16:06:28 -07:00
Tom Eastep	579910fdb8	Fix MASQUERADE+ Handling ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-26 14:40:16 -07:00
Tom Eastep	21877d5fcb	Force a reload when enabling an interface whose IP address has changed ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-26 13:39:50 -07:00
Tom Eastep	0b9387f09c	Force address Detection on optional interfaces ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-25 14:42:03 -07:00
Tom Eastep	fdfd8b919b	Merge branch '5.0.13'	2016-10-24 12:52:01 -07:00
Tom Eastep	3d3ae81bce	Restore old wording for Version 4 ipset creation message ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 12:51:43 -07:00
Tom Eastep	3b6b89336e	Eliminate superfluous test ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 11:57:56 -07:00
Tom Eastep	fc0ad7cd2e	Be sure that the 'restriction' member exists for the FORWARD chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 11:37:40 -07:00
Tom Eastep	c9b1b7684c	Correct handling of dest IPSET. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 09:06:05 -07:00
Tom Eastep	b8ec460a1a	Correct grammar in the ipset creation message ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 08:49:51 -07:00
Tom Eastep	46b8e2e957	Avoid exception when validating 'occurs' in TC ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-24 08:14:12 -07:00
Tom Eastep	0ed813972b	Auto-create ipsets used in tcfilters ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-23 16:44:07 -07:00
Tom Eastep	f9cfde91e5	Correctly handle ipset in tcfilter DEST ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-23 16:43:49 -07:00
Tom Eastep	3df488e710	Correct handling of ipsets in tcfilters ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-23 16:28:36 -07:00
Tom Eastep	0efc7a4899	Correct restriction and chain number handling in the mangle files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-23 15:36:04 -07:00
Tom Eastep	d241421630	Merge branch '5.0.13'	2016-10-23 08:34:47 -07:00
Tom Eastep	e0203bca87	Correct nill address check in handling of 'origdest=detect' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-23 08:34:24 -07:00
Tom Eastep	3874bb9fa6	Delete duplicate line of code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-22 15:41:26 -07:00
Tom Eastep	13a321726c	Fix typo ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-21 09:22:30 -07:00
Tom Eastep	b160845713	Avoid compiler crash when LOAD_HELPERS_ONLY=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-20 15:22:43 -07:00
Tom Eastep	71566f0ab0	Avoid compiler crash when LOAD_HELPERS_ONLY=Yes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-20 14:54:01 -07:00
Tom Eastep	e4169ede4a	Merge branch '5.0.13'	2016-10-20 13:29:05 -07:00
Tom Eastep	b44628ddc8	Only specify 'counters' to ipset of IPSET_MATCH_COUNTERS is present ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-20 09:07:36 -07:00
Tom Eastep	0e7d5f3972	Support '+' in SNAT action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 16:00:36 -07:00
Tom Eastep	5b5f91f75f	SNAT option documentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 15:32:22 -07:00
Tom Eastep	ab496987e0	Prevent 'nat' and 'mangle' being specified together ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 15:32:05 -07:00
Tom Eastep	c92ebc3908	Make merge_inline_source_dest() a little safer ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 14:32:56 -07:00
Tom Eastep	bc3573fcbc	Correct handling of interface lists in masq->snat conversion ... - Also restore logic for ADD_SNAT_ALIASES - Correct some interface-list errors in snat processing - Restore whitespace after '--to-source' Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 14:19:09 -07:00
Tom Eastep	6b7beaadaf	Merge branch '5.0.13'	2016-10-18 10:16:58 -07:00
Tom Eastep	31b6e9e299	Fix another DEST bug in mangle inline action handling :-( ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 10:15:43 -07:00
Tom Eastep	d52a4b1c9d	Implement SNAT actions and inlines ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-18 10:09:07 -07:00
Tom Eastep	9796af5d80	Merge branch '5.0.13'	2016-10-17 10:16:30 -07:00
Tom Eastep	9fc56bb896	Correct typo in process_mangle_inline() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-17 09:29:32 -07:00
Tom Eastep	f3dd77a3f1	Merge branch '5.0.13'	2016-10-16 16:36:08 -07:00
Tom Eastep	2c191bf595	Correct .conf manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 15:07:34 -07:00
Tom Eastep	4bb942f1f9	Restrict hypen as range separator to use with integers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 13:29:00 -07:00
Tom Eastep	05dbfbb988	Restrict hypen as range separator to use with integers ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 13:26:44 -07:00
Tom Eastep	69a7c78179	Merge branch '5.0.13'	2016-10-16 12:28:01 -07:00
Tom Eastep	04051454bf	Reverse bad ECN handling patch ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 12:27:45 -07:00
Tom Eastep	2ca86d9abd	Merge branch '5.0.13'	2016-10-16 10:22:12 -07:00
Tom Eastep	e6f3d429a1	Renew timeout on matched dbl entries ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 09:42:45 -07:00
Tom Eastep	1ca91d7ddc	Correct handling of ECN file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 08:41:19 -07:00
Tom Eastep	fad9dce3e6	Correct handling of ECN file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-16 08:33:01 -07:00
Tom Eastep	342f4ee0f2	Add the --exits option to ADD with timeout ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-15 16:43:44 -07:00
Tom Eastep	047b5ca6d5	Add the --exits option to ADD with timeout ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-15 16:43:04 -07:00
Tom Eastep	86c4333f8f	Correct the shorewall-snat(5) examples ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-15 14:58:49 -07:00
Tom Eastep	e1de1f0527	Convert Sample masq files to equivalent snat files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-15 12:43:42 -07:00
Tom Eastep	43fdddb438	Add 'snat' config file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-15 11:38:52 -07:00
Tom Eastep	44477d97ac	Move Masq file processing to the Rules module ... - This will enable supporting actions in the new snat file Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-14 12:42:58 -07:00
Tom Eastep	b5906812a2	Accept '-' as the separator in a port range. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-14 10:10:03 -07:00
Tom Eastep	b80d4c2320	Don't allow shell meta characters in interface names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-11 17:01:45 -07:00
Tom Eastep	d5aaa66e0b	Detect bad characters in interface names ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-11 10:56:41 -07:00
Tom Eastep	49fae96b09	Update the manpages for 'blacklist' verbosity ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-10 19:45:42 -07:00
Tom Eastep	8c522a5c4d	Correct typo in lib.private ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-09 10:58:29 -07:00
Tom Eastep	abf57a4d1f	Correct indentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-09 09:29:04 -07:00
Tom Eastep	3058f2fb84	Delete code supporting old kernel/iproute2 IPv6 restrictions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-07 11:02:36 -07:00
Tom Eastep	b5e7e41708	Correct NFQUEUE! manpage description ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-07 05:50:24 -07:00
Tom Eastep	eb6ae5e186	Correct handling of DYNAMIC_BLACKLIST options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-05 16:56:29 -07:00
Tom Eastep	941604ad01	Correct issue with updating DBL timeout ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-05 15:41:40 -07:00
Tom Eastep	14e8568d9e	Add the FIREWALL .conf option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-05 15:03:54 -07:00
Tom Eastep	ca7ca4bdfe	Add a 'timeout' option to DYNAMIC_BLACKLIST ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-05 12:56:47 -07:00
Tom Eastep	8d731c81e4	Add 'disconnect' option to ipset-based dynamic blacklisting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-04 09:09:45 -07:00
Tom Eastep	6ad7d47eb6	Correct DYNAMIC_BLACKLISTING documentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-03 08:19:19 -07:00
Tom Eastep	ed48eed0c6	Change order of options in .conf files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-10-02 15:14:31 -07:00
Tom Eastep	97186e5402	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2016-10-02 14:04:02 -07:00
Roberto C. Sánchez	64ab43f14f	Fix typos	2016-10-02 17:01:46 -04:00
Tom Eastep	72dbb4c3c3	Handle persistent provider enable/disable correctly ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-30 16:01:04 -07:00
Tom Eastep	bc591ccee4	Don't assume that statistically balanced providers are optional ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-30 14:01:16 -07:00
Tom Eastep	f989c2f5f6	Document 'persistent' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-30 11:34:57 -07:00
Tom Eastep	156313edd2	Correctly handle down persistent interface during 'disable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-27 11:47:37 -07:00
Tom Eastep	35bd1db7fb	Handle Down or missing interfaces in 'delete_gateway()' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-27 11:43:26 -07:00
Tom Eastep	792b3b696c	Add ZERO_MARKS option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-26 16:04:26 -07:00
Tom Eastep	3f8ddb11ab	Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code	2016-09-25 08:00:43 -07:00
Tom Eastep	fa9ee6d69e	Clear packet marks in PREROUTING and OUTPUT ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-24 15:46:04 -07:00
Tom Eastep	ef4b1c2030	Add a TIME Columns section to the config file basics doc ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-22 15:45:18 -07:00
Tom Eastep	8065e62f12	Support for the 'contiguous' option in TIME columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-22 14:22:11 -07:00
Tom Eastep	e81a4788c6	Implement DEFAULT_PAGER in shorewallrc ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-21 10:20:48 -07:00
Tom Eastep	d854185c56	Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code	2016-09-20 08:47:07 -07:00
Tom Eastep	afc212495f	Make POSTROUTING the default chain for CHECKSUM ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-18 08:57:49 -07:00
Tom Eastep	059b1c6c8c	Remove superfluous logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-13 11:13:19 -07:00
Tom Eastep	2f75901068	Restore 'use Shorewall::Config(shorewall)' in embedded Perl handling ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-13 09:29:51 -07:00
Tom Eastep	8bb7c2363b	Support '+' after a zone list in the policy files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-10 10:06:38 -07:00
Tom Eastep	7e32a10176	Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code	2016-09-10 08:48:48 -07:00
Tom Eastep	2c90a8bfb5	Allow zone lists in the SOURCE and DEST columns of the policy files ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-10 08:47:48 -07:00
Tom Eastep	5ea91f21f4	Correct the mangle manpage ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-09-05 19:20:25 -07:00
Tom Eastep	bb8af36d3f	Minor cleanup in the Rules module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-31 13:01:49 -07:00
Tom Eastep	4ec2c2087d	Delete obsolete comments ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-29 12:40:28 -07:00
Tom Eastep	a05b957498	Corrections in the shorewall[6].conf manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-15 10:24:23 -07:00
Tom Eastep	31d35e0cbd	Minor cleanup of the Chains module ... - Correct typos - Correct 'P' trace entries - Add parens and comments to calls Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-15 09:22:11 -07:00
Tom Eastep	bcacce7ed0	Rename a variable to avoid confusion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-14 15:45:24 -07:00
Tom Eastep	646c20491a	Fix indentation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-14 15:45:00 -07:00
Tom Eastep	fa1173baaa	Correct typo in a comment ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-14 10:24:29 -07:00
Tom Eastep	72e21be89d	Add a handle back to the flow classifier ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-04 11:03:36 -07:00
Tom Eastep	1b1e2c58f9	Allow optional provider interfaces to match a wildcard ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-08-02 15:44:19 -07:00
Tom Eastep	decf9d3b3e	Correct comment formatting in 'trace' output ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-07-30 09:03:19 -07:00
Tom Eastep	a05623f49e	Don't delete duplicate COUNT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-07-30 08:24:53 -07:00
Tom Eastep	0b9cd93769	Default DSCP rules to the POSTROUTING chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-07-27 13:59:15 -07:00
Tom Eastep	372359839b	Add 'comment' to alternative input ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-07-24 15:08:55 -07:00
Tom Eastep	4a6338d857	Correct/complete Scott Sumate's LOGFILE enhancement ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-07-15 14:25:02 -07:00
Roberto C. Sánchez	76b2b0de78	Debian init script: fix name of force-reload target (Closes: #830110)	2016-07-06 08:43:21 -04:00
Roberto C. Sánchez	7c9876241c	Debian init scripts: add run-level 1 to Default-Stop specification	2016-07-04 17:37:00 -04:00
Roberto C. Sánchez	8b36c2c1cf	Debian init scripts: more accurately describe what action is being taken	2016-07-04 13:34:33 -04:00
Tom Eastep	a02c745a83	Avoid silly duplicate rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-30 17:49:43 -07:00
Tom Eastep	47557aa4f7	Correct additional issues with 'update' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-18 10:24:52 -07:00
Tom Eastep	93ee4432de	Allow <user>: in USER columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-18 09:44:35 -07:00
Tom Eastep	8c543ca6f8	Transfer permissions during file updates ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-16 16:04:32 -07:00
Tom Eastep	e71fb3249a	Add 'dbl' interface option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-15 16:35:41 -07:00
Tom Eastep	ea56d4ed19	Make ipset-based dynamic blacklisting work in the FORWARD chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-13 15:02:12 -07:00
Tom Eastep	c65721a139	Correct a warning message ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-13 12:21:16 -07:00
Tom Eastep	f979ccb16d	Merge branch '5.0.9'	2016-06-09 14:47:44 -07:00
Tom Eastep	24b396bc67	Avoid run-time Perl diagnostic when validating a null log level ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-09 09:12:13 -07:00
Tom Eastep	cd0837beb5	Avoid run-time Perl diagnostic when validating a null log level ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-09 09:00:12 -07:00
Tom Eastep	4869f61a25	'allow' now works with ipset-based dynamic blacklisting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-09 08:44:25 -07:00
Matt Darfeuille	cd4e9654d8	(Fwd) [Shorewall-users] Shorewall-lite on OpenWRT ... ------- Forwarded message follows ------- From: istvan@istvan.org To: shorewall-users@lists.sourceforge.net Date sent: Thu, 19 May 2016 09:10:21 +0200 Subject: [Shorewall-users] Shorewall-lite on OpenWRT Send reply to: Shorewall Users <shorewall-users@lists.sourceforge.net> <mailto:shorewall-users-request@lists.sourceforge.net?subject=unsubscribe> <mailto:shorewall-users-request@lists.sourceforge.net?subject=subscribe> Hi there, I use Shorewall on an OpenWRT distribution and I experience 2 problems. I have solved them myself and report them here to help others with it. Shorewall version: shorewall[6]-lite 5.0.4 OpenWRT version: Chaos Calmer 15.05, r46767 Problem 1: Shorewall uses the lock utility from openwrt. I believe it is used in the wrong way. File lib.common line 775 First it passes arguments which the utility doesn't use/know. The util accepts them dumbly and continues to create a lockfile. It has no time-out functionality. I do not know the meaning of the r1 argument. Second the mutex_off simply deletes the lockfile by using the utility rm. This way a stale lock process keeps running. After a while the router is running a high number of stale processes which has impact on the load of the router. The correct way is to use "lock -u /lib/shorewall-lite/lock". This way the lockfile will be removed and the process will be terminated accordingly. To make it work for me, I no more let shorewall use the lock utility by using an ugly hack. Problem 2: An fgrep on the output of the type utility is wrongly coded. The output of the type command probably has been changed. File lib.cli line 4343 It is coded: "if type $1 2> /dev/null | fgrep -q 'is a function'; then" To make it work for me, it should be coded: "if type $1 2> /dev/null | fgrep -q 'is a shell function'; then" With regards, Stefan ------- End of forwarded message ------- Tom, attached as code.patch, are the patches that I believe will correct those issues In addition to those patches I've also added 3 patches: - Patch 1 will emulate the -p flag of the ps utility which is not available on openwrt. - The last two patches will add "file" to the progress message of SYSCONFFILE to make it more consistent among the installers. In shorewall-init/install.sh the else clause between the line 586 and 597 will only work for a sysvinit script. Should I make it also work for a systemd service script or can't we simply remove that else clause? In the compiled firewall script the comments before and after the functions imported from lib.common have two slashes in the path: $ grep -H lib.common firewall firewall:# Functions imported from /usr/share/shorewall//lib.common firewall:# End of imports from /usr/share/shorewall//lib.common -Matt -------------- Enclosure number 1 ---------------- >From 6ff651108df33ab8be4562caef03a8582e9eac5e Mon Sep 17 00:00:00 2001 From: Matt Darfeuille <matdarf@gmail.com> Date: Tue, 24 May 2016 13:10:28 +0200 Subject: [PATCH 1/8] Emulate 'ps -p' using grep to work on openwrt Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-08 15:40:36 -07:00
Tom Eastep	cd01df4200	Allow more than 9 interfaces with Simple TC ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-06-07 14:43:37 -07:00
Tom Eastep	7798c52a19	Fix DOCKER=Yes when docker0 is defined and Docker isn't started. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-22 17:50:51 -07:00
Tom Eastep	82169a0bfd	Use 'date' format for compiletime rather than localtime format ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-07 13:48:16 -07:00
Tom Eastep	d4df67966d	Turn on AUTOMAKE in the sample configurations ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-06 08:46:11 -07:00
Tom Eastep	f16bb887f3	Report versions as Shorewall's rather than Shorewall6's ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-05 15:41:46 -07:00
Tom Eastep	64fb662bb1	Verify Shorewall6 version when compiling for IPv6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-05 15:22:47 -07:00
Tom Eastep	ce20e5592b	Cross-check core and standard versions during compilation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-05 13:53:26 -07:00
Tom Eastep	590243a787	Add NFLOG as a supported mangle action ... - Also document nflog-parameters - Correct range of nflog groups Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-03 11:27:34 -07:00
Tom Eastep	9dd0346987	Apply Paul Gear's patch for Ubuntu 16.04 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-05-02 07:25:37 -07:00
Tom Eastep	ccfa181a6d	Tweak compile_info_command() ... - Fix comment - use $globals{VERSION} for the version number Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-30 14:12:34 -07:00
Tom Eastep	b7de785396	Correct typo in manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-30 08:34:43 -07:00
Tom Eastep	24d40f4cc2	Add VERBOSE_MESSAGES option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-30 08:00:56 -07:00
Tom Eastep	244f2cefe5	Update comment describing info_command() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-29 15:42:48 -07:00
Tom Eastep	41923cb80e	Improve compile time/date implementation ... - Rename the command from 'date' to 'info' - Return the complete date/time/version string in the command Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-29 12:31:17 -07:00
Tom Eastep	2a40012fc4	Include compile time and date in the output of 'shorewall status' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-27 16:25:21 -07:00
Matt Darfeuille	05a15c6f8b	patches and request ... Tom, Some patches for the trunk repo(fixes.patch): Patch1: Fix a typo in the path being printed for the standard actions file. Patch2: Will only install the shorewall's manpages if the variable MANDIR is none-empty(I did it only for the sake of completeness)! Patch3: Will only install the shorewall-lite's manpages if the variable MANDIR is none-empty. Patch4: Correct multiple product name's typos in shorewall-init/install.sh. Patch5: Remove ~/.shorewallrc when shorewall-core is uninstalled. And two other patches for the release repo(changelog-1.patch): Patch1: Changed restart to reload for the line: 'Update DHCP article(refresh -> restart). Patch2: Rephrased the line for the newly added ?WARNING and ?INFO directives. Request: Could the date of the compiled firewall script also be displayed when 'shorewall status' is executed? -Matt -------------- Enclosure number 2 ---------------- >From a5ae24bbe9b25aefdbcc4d7c8e5d013a36b03078 Mon Sep 17 00:00:00 2001 From: Matt Darfeuille <matdarf@gmail.com> Date: Sat, 23 Apr 2016 14:44:19 +0200 Subject: [PATCH 1/5] Fix typo in printed path for standard actions file Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-27 15:07:44 -07:00
Tom Eastep	a92d10f19c	Merge branch '5.0.8'	2016-04-27 10:23:51 -07:00
Tom Eastep	47edfaf093	Create standard error messages in the CLI ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-27 10:13:24 -07:00
Tom Eastep	f6b7eb4ea0	Correct handling of persistent provider with no IP address ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-25 12:27:00 -07:00
Tom Eastep	800c06e8c9	Rename lib.core to lib.runtime ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-21 08:12:41 -07:00
Tom Eastep	f16e3f1fbe	Issue warning when enable/disable won't work correctly ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-19 10:42:50 -07:00
Tom Eastep	71bd7a4647	Update the STARTUP_LOG description in shorewall[6].conf ... - Update list of commands Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-19 07:49:37 -07:00
Tom Eastep	f9bbca8b05	Expand the list of commands that write to STARTUP_LOG ... - add the safe-* commands Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-18 14:16:13 -07:00
Tom Eastep	0faf3b6db1	Send INFO messages to STDERR rather than STDOUT	2016-04-18 13:59:29 -07:00
Tom Eastep	3253c882e9	Merge branch '5.0.8'	2016-04-18 12:36:28 -07:00
Tom Eastep	5212dba7cb	Add an ESTABLISHED,RELATED rule for docker0 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-18 10:13:05 -07:00
Tom Eastep	35a22eedac	Reword error message when tcclass MARK is too large ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-18 10:06:04 -07:00
Tom Eastep	2b7ef0fe32	Update the tcclasses manpage to discuss fw mark filter priority ... - Also correct default priorities for tos= and tcp-ack Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-18 09:18:48 -07:00
Tom Eastep	b53de922d1	Catch 0 in the MARK column of the tcclasses file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-18 08:50:10 -07:00
Matt Darfeuille	365ffaf645	questions ... On 17 Apr 2016 at 7:45, Tom Eastep wrote: > On 04/17/2016 06:23 AM, Matt Darfeuille wrote: > > >> Tom, I neglected the git part of that request!(sorry): > >> > >> Could changes be also made in the git code repo that take for account > >> case insensitive system?: > >> > >> What I suggest doing is using the deprecated extension when the case > >> of a file is changed in the code so git wouldn't show 'Modified: ...' > >> and simply modifying shorewall/install.sh to strip the file from the > >> deprecated extension and then copying it to the deprecated directory. > >> > >> In other words: when changing the case of a file tracked by git could > >> case-insensitivity platform be taken in to account? > >> > >> -Matt > >> > >> P.S. I'll test SW_LOGGERTAG tomorrow!!!:) > > > > Or do you have a better solution, if no, I could do the changes to > > shorewall/install.sh!? > > Sure -- go ahead. We'll do it in the master branch, though, since I've > now created a 5.0.8 branch for the upcoming release. > > > > > You might want to apply the attached patch to changelog.txt in the > > release repo! > > > > Applied -- thanks! > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > Attached as case.patch are 3 patches: 1 and 2 simply rename the deprecated files(adding .deprecated) Patch 3 will modify Shorewall/install.sh to reflect the new naming scheme! I didn't have the time to test SW_LOGGERTAG but will do so in the coming days!!!:) -Matt -------------- Enclosure number 1 ---------------- From 2ecd761b414af61c5854d6427fb9ec8ab1365c7b Mon Sep 17 00:00:00 2001 From: Matt Darfeuille <matdarf@gmail.com> Date: Sun, 17 Apr 2016 18:34:40 +0200 Subject: [PATCH 1/3] Rename macro.SNMPTrap to macro.SNMPTrap.deprecated Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-17 13:50:17 -07:00
Tom Eastep	ae852b513d	Correct indentation issue ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-17 10:23:18 -07:00
Tom Eastep	9611b588e3	Use a uniform format for log timestamps ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-16 09:52:35 -07:00
Tom Eastep	eb95532248	Enable compiler logging on reload and restart ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-16 09:52:17 -07:00
Tom Eastep	fb8dbcf44b	Use a uniform format for log timestamps ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-16 09:49:38 -07:00
Tom Eastep	62a14aab28	Enable compiler logging on reload and restart ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-16 09:37:42 -07:00
Tom Eastep	335f2968f8	Implement ?INFO and ?WARNING ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-16 09:20:09 -07:00
Tom Eastep	32f888a7d4	Add an ENVIRONMENT section to the CLI manpages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-15 15:41:55 -07:00
Tom Eastep	c725372639	Correct logging of 'reloaded' message ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-15 14:46:21 -07:00
Tom Eastep	524838ae47	Implement $SW_LOGGERTAG ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-15 14:29:51 -07:00
Tom Eastep	6aa0ecae4f	Re-factor the code for saving/loading ipsets ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-14 15:15:47 -07:00
Tom Eastep	434e042494	Add the deprecated/ directories to the CONFIG_PATH ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-14 14:17:06 -07:00
Tom Eastep	9fa0df2fd1	Move the code that generates zap_ipsets() to after save_ipsets() generation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-14 09:56:48 -07:00
Tom Eastep	074655d1bd	Fix AUTOMAKE and the start command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-14 09:43:21 -07:00
Tom Eastep	216bc715e8	Clean up V4/V5 ipset enforcement ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-14 09:00:38 -07:00
Tom Eastep	dbd42e1d5d	More ipset fixes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-12 16:29:13 -07:00
Tuomo Soini	772f88b1fd	action.A_Reject: improve comment text ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-12 13:17:56 +03:00
Tuomo Soini	3e0b8c60a2	Reverse the order of ICMP and Broadcast checking in the default actions ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-12 10:12:29 +03:00
Tom Eastep	16afd880b2	Reverse the order of ICMP and Broadcast checking in the default actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 11:16:46 -07:00
Tom Eastep	76a5841fcd	Reverse the order of Broadcast and ICMP checking in the default actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 10:47:11 -07:00
Tom Eastep	9758e8cdc5	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2016-04-11 10:41:44 -07:00
Tom Eastep	2cf3706864	Correct handling of a zone with two interfaces ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 10:32:26 -07:00
Tom Eastep	3028dafbac	Correct DBL 'src-dst' handling ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 09:13:17 -07:00
Tom Eastep	16a31c3d29	Make MINIUPNPD work with DOCKER ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 09:02:44 -07:00
Tom Eastep	d3f377e915	Don't double-save the dynamic blacklisting ipset ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-11 08:37:39 -07:00
Tuomo Soini	54a5748395	macros: RedisCluster and RedisSentinel ... http://redis.io/topics/sentinel Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-11 14:39:21 +03:00
Tom Eastep	6c00f72f44	Create ipsets with the 'counters' option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-10 18:09:41 -07:00
Tom Eastep	deaaecdf1c	Add 'nodbl' interface option. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-10 16:09:39 -07:00
Tom Eastep	05e4049174	Ipset-based blacklisting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-10 16:07:56 -07:00
Tom Eastep	ef10515a42	Correct FASTACCEPT description ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-10 07:20:45 -07:00
Tom Eastep	5db6cb1b7d	Correct load_ipsets() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-09 16:07:10 -07:00
Tom Eastep	76c8917aa7	Add a sixth parameter to Drop and Reject ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-08 09:10:45 -07:00
Tom Eastep	be58d530c4	Document 'logjump' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-08 09:09:59 -07:00
Tom Eastep	321476fd51	Tweak terminating() implementation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-08 08:24:57 -07:00
Tom Eastep	bd6b32eb25	Add a progress message for REJECT_ACTION processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-07 10:30:54 -07:00
Tom Eastep	4fdf54eca1	Tweak process_reject_action() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-07 10:02:48 -07:00
Tom Eastep	70bbd21b35	Ensure that the REJECT_ACTION is terminating ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-07 09:34:38 -07:00
Tom Eastep	87a9b95f73	Catch case where a transformed rule jumps to its own chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-07 08:58:50 -07:00
Tom Eastep	ecd7261365	Use -g when target is a terminating chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-07 08:48:36 -07:00
Tom Eastep	293cd1d66a	Always go to the reject chain rather than jump to it ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-06 09:14:06 -07:00
Tom Eastep	436b5d89ce	Correct comment ... - The chain will only exist if logging wasn't specified for the same disposition. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-06 08:50:29 -07:00
Tom Eastep	26795cf082	Correct setup of $usedactions{A_REJECT} ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-06 08:18:36 -07:00
Tom Eastep	95e4071f34	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2016-04-06 07:42:46 -07:00
Tuomo Soini	20179a5c9d	remove completely false README.txt ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-06 10:23:58 +03:00
Tom Eastep	b7e6893f7d	Restore DropUPnP behavior in Reject ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-05 20:00:15 -07:00
Tom Eastep	3ac3ae279f	Add A_REJECT action ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-05 16:38:39 -07:00
Tom Eastep	54843c617d	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2016-04-05 11:46:42 -07:00
Tom Eastep	e9467326f3	Allow allow REJECT to take a parameter ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-05 11:20:44 -07:00
Tuomo Soini	80bf77e8a8	modules.xtables: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:31:36 +03:00
Tuomo Soini	1e5ebee799	modules.tc: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:31:36 +03:00
Tuomo Soini	74fe7b302e	modules.ipset: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:31:36 +03:00
Tuomo Soini	d70e18535b	modules.extensions: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:31:36 +03:00
Tuomo Soini	64a6b36918	modules.essential: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:31:36 +03:00
Tuomo Soini	2962809243	action.Untracked: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	23a91d7c26	action.template: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	30b2b2dcb4	action.TCPFlags: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	46a86cfa58	action.SetEvent: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	ad2dfd9eaf	action.RST: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	001aabf72c	action.ResetEvent: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	7052819a9c	action.Related: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	2b1244c110	action.Reject: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	94803b63b1	action.NotSyn: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	5f33cb5d0a	action.New: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	deda26c790	action.mangletemplate: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	f9f349a148	action.Invalid: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	2842e897c9	action.IfEvent: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	de44a16094	action.GlusterFS: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	6560e74c2c	action.Established: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	f7ddf3008d	action.DropSmurfs: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	cb608172d3	action.dropInvalid: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	f806010521	action.Drop: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	205254e043	action.DNSAmp: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	a7efa12fff	action.Broadcast: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	95c4f2d7f6	action.AutoBLL: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	89189f7836	action.AutoBL: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	c2e3156e5c	action.A_Reject: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	ffe9f88c07	action.allowInvalid: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tuomo Soini	e4c9c83e2b	action.A_Drop: reformat to new header style ... Signed-off-by: Tuomo Soini <tis@foobar.fi>	2016-04-05 20:13:55 +03:00
Tom Eastep	77a93d10a4	Don't pass an argument to DropUPnP out of Drop and Reject ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-04 15:55:48 -07:00
Tom Eastep	75df718865	Reword comment in push_action_params() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-04 09:41:28 -07:00
Tom Eastep	ae8e2f70ea	Efficiency change to known_interface() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-03 17:34:02 -07:00
Tom Eastep	39f5b77e5f	Fix known_interface() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-03 16:31:45 -07:00
Tom Eastep	cb5a2519f3	Keep hyphens in @chain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-03 16:30:31 -07:00
Tom Eastep	4151f7c504	Revert change to log_[i]rule_limit ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-03 16:29:52 -07:00
Tom Eastep	054837aeea	Use the real chain name in log messages ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-03 13:04:25 -07:00
Tom Eastep	b637d303b9	Correct use of a physical interface name in the hosts file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-02 17:27:20 -07:00
Tom Eastep	0dbf42424d	Make physical name a synonym for the correcponding logical name. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-02 10:04:05 -07:00
Tom Eastep	f22e8d6d55	Allow physical interface to work in the ecn file. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-01 15:10:49 -07:00
Tom Eastep	d98305c6f4	Correct default for MINIUPNOD ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-01 12:20:42 -07:00
Tom Eastep	3cbfdadb32	Merge branch '5.0.7'	2016-04-01 09:46:53 -07:00
Tom Eastep	81d76e3817	Document + in the MODULESDIR setting. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-01 09:43:06 -07:00
Tom Eastep	df1b1f6768	Add MINIUPNPD option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-04-01 08:57:08 -07:00
Tom Eastep	3881b38e02	Fix similar INTERFACE column issue in the nat and netmap files. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-31 14:16:43 -07:00
Tom Eastep	8a8f3b6f59	Merge branch '5.0.7'	2016-03-31 12:55:16 -07:00
Tom Eastep	b9bed00123	Correct handling of a physical name in a masq rule ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-31 12:52:30 -07:00
Tom Eastep	38aa7797c4	Allow protocol and user lists in actions and macros ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-30 08:34:42 -07:00
Tom Eastep	404540ffe1	Merge branch '5.0.7'	2016-03-30 08:17:19 -07:00
Tom Eastep	dd3c0daa08	Handle inline matches correctly in the mangle file ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-29 13:33:47 -07:00
Tom Eastep	4fddfcfba0	More complete fix for inline matches ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-29 13:15:01 -07:00
Tom Eastep	421d5f6043	Move Raw matches to last. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-29 09:31:27 -07:00
Tom Eastep	382ab380a2	Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code	2016-03-29 07:36:49 -07:00
Tuomo Soini	2342c7cd9c	Perl/Shorewall/Chains.pm: Fix warning with older perl	2016-03-29 09:58:33 +03:00
Tom Eastep	66ae4975b2	Allow :R with DIVERT ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-28 15:52:49 -07:00
Tom Eastep	5b7a9db170	Correct clearing of inline matches ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-28 15:48:59 -07:00
Roberto C. Sánchez	899a317c95	Fix typos	2016-03-26 22:25:30 -04:00
Tom Eastep	ad87d94e33	Small efficiency change ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-26 13:12:33 -07:00
Tom Eastep	f86abf9552	Eliminate @columnstack -- simple save the columns array on the call stack. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2016-03-22 10:49:40 -07:00