af77eb08bc
Back out IPSEC accounting rules
2010-08-19 15:13:01 -07:00
2a9bbbfe62
Eliminate an ugly 'our' variable.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 12:00:52 -07:00
676da7a2f1
More reorganization of process_rule()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 11:53:26 -07:00
d997ef1653
First cut at IPSEC support in the accounting file.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-19 11:46:26 -07:00
4322d7b2af
Zone exclusion
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 16:10:58 -07:00
4460b49842
Complete Zone list Support
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 14:38:53 -07:00
fafb0dea73
Update version to 4.4.13-Beta1
2010-08-18 12:40:34 -07:00
66d4379962
Reorder sections of the Release Notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 12:22:42 -07:00
255cd6cf9c
Implement zone lists in rules file entries
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-18 12:18:58 -07:00
7a17b65368
Allow simple zone lists in rules
2010-08-18 07:26:38 -07:00
baf8e21a80
Add reference to manual chains article for the compile extension
2010-08-17 09:23:43 -07:00
12aecdef37
Use '&' trick to avoid prototype matching
2010-08-17 09:17:25 -07:00
a0dffa787d
Add an assertion
2010-08-16 19:17:44 -07:00
2919c48ba0
Avoid forward reference to ensure_chain()
2010-08-16 13:25:01 -07:00
00837ed503
Add Shorewall::Chains::find_chain()
2010-08-16 13:12:12 -07:00
633eba6c90
Set version to 4.4.12
2010-08-15 08:50:45 -07:00
42362ea318
Document fix for AUTOMAKE
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-14 07:55:45 -07:00
72b8393c3a
Fix AUTOMAKE=Yes
2010-08-14 07:32:53 -07:00
bc19a80ac4
Correct FAQ 2 for Shorewall-lite
2010-08-14 07:14:52 -07:00
1510e111c4
Fix typo in conf basics doc
2010-08-13 20:27:14 -07:00
b7f638ddb3
Document status command change
4.4.12-RC1
2010-08-12 19:46:57 -07:00
7281c9166e
Record the config directory in the state file
2010-08-12 17:54:07 -07:00
36054b7784
Add additional vserver notes in rules manpages
2010-08-12 17:52:22 -07:00
e35e9d2c99
Clarify nesting of vserver zones
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-12 15:26:30 -07:00
15eec24672
Simplify logic for generating all parent zones
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-12 15:15:19 -07:00
7168257152
Document port range editing fix.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-12 11:52:43 -07:00
49053afdcb
Fix port range validate issue
2010-08-12 09:49:26 -07:00
92eed0d23c
Document fix for any bug
2010-08-12 07:35:45 -07:00
69eaf84078
Fix bug with 'any'
2010-08-12 07:31:37 -07:00
aa00acc310
Correct typo in release notes
2010-08-11 16:09:12 -07:00
000873575e
Update Shorewall Lite Doc
2010-08-11 15:59:24 -07:00
e0780b9a84
Rename the first column of the masq file for clarity
2010-08-11 15:34:27 -07:00
965ad7ced1
Minor tweaks to the IPAddrs module
2010-08-11 11:46:26 -07:00
0234564a1b
Add destination IP blacklisting
2010-08-10 17:33:50 -07:00
d9cbbea36a
Delete extra item in enhancement list
2010-08-07 14:06:20 -07:00
da91ef8d2c
Fix typo in install.sh
2010-08-07 10:56:15 -07:00
1a4d84d502
Document fix to install.sh
2010-08-07 09:34:19 -07:00
8d4498c9b8
Update Version to 4.4.12 RC 1
2010-08-06 19:31:36 -07:00
59829565f5
Add COMPLETE to release notes
2010-08-06 19:30:33 -07:00
0f02ee2628
Fix issue with set match generation
4.4.12-Beta4
2010-08-06 10:17:54 -07:00
1efa50e6fa
Try to make the masq manpage more obvious
2010-08-05 16:50:48 -07:00
364ad41cf5
Add support for new ipset match syntax
2010-08-03 21:06:17 -07:00
2774ee1bd6
Make 'icmp' a synonym for 'ipv6-icmp' in IPv6 compilations
2010-08-02 08:04:55 -07:00
c0dcb0edbf
Tweak Universal .conf files
2010-08-02 06:40:45 -07:00
e31f80dce6
Fix Universal interfaces to include 'optional
2010-08-01 16:27:31 -07:00
3ce8ff5741
Bump version to Beta 4
2010-08-01 16:10:32 -07:00
f75c5809b5
Advocate use of 'ip' to examine routing tables
2010-08-01 11:56:06 -07:00
967629569b
Taylor Universal config to work with Shorewall-init and streamline ruleset
...
- Make interface 'all' optional and set REQUIRE_INTERFACE=Yes
- Add COMPLETE option
- Set FASTACCEPT in Universal samples
- Reset SUBSYSLOCK in Universal samples
Signed-off-by: Tom Eastep <teastep@shorewall.net >
2010-08-01 08:36:56 -07:00
a88e2afa69
Tweak the Universal documentation
2010-07-31 18:43:54 -07:00
c6404f1a74
Reword last title in Universal ruleset doc
2010-07-31 14:51:52 -07:00