298 Commits

Author	SHA1	Message	Date
Tom Eastep	89201bd294	Add TC connmark support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-07-07 16:44:20 -07:00
Tom Eastep	d643f57bc1	Add the -D option to shorewall usage output ... - Also delete an incorrect -D description in shorewall(8) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-30 14:56:41 -07:00
Tom Eastep	3f5bdfd705	Process the firewall.conf file when running shorewall[6]-lite ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-25 13:32:36 -07:00
Tom Eastep	c9512dfaf8	Make 'show actions' more robust ... - Show all lines, including continuation and compiler directives - Show both actions and actions.std entries - The actions file need not reside in /etc/shorewall[6] but may be in any directory on the CONFIG_PATH Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-25 11:28:08 -07:00
Tom Eastep	3390897a45	Remove duplicates from the output of 'show actions' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-15 13:13:34 -07:00
Tom Eastep	117e9ba5bd	Change kern.err to daemon.err in logger params ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-13 14:29:48 -07:00
Tom Eastep	aa47554604	Add 'noupdate' DYNAMIC_BLACKLIST option ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-06 10:14:32 -07:00
Tom Eastep	07160c5ed1	Add 'blacklist!' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-06 10:13:46 -07:00
Tom Eastep	527533ecb6	Add 'log' option to DYNAMIC_BLACKLIST ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-03 14:28:08 -07:00
Tom Eastep	2646ec79a5	Read the params file when processing an 'allow' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-06-03 11:39:42 -07:00
Tom Eastep	eb5bc3d8a4	Create DBL ipset with 'timeout 0' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-05-31 12:37:42 -07:00
Tuomo Soini	be924ff765	Fix http links to point to current project website ... Also removes deprecated Shorewall6/configfiles/masq Signed-off-by: Tuomo Soini <tis@foobar.fi> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-03-27 14:24:37 -07:00
Tom Eastep	d24179173f	Remove obsolete 'load' command from help text ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-03-08 13:19:46 -07:00
Tom Eastep	b52a330f41	Replace trace, debug and nolock with options ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2020-03-07 17:48:10 -08:00
Matt Darfeuille	53495ec0a8	Point exclusively to shorewall.org ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2019-03-25 11:35:00 -07:00
Tom Eastep	aa94772fc6	Merge branch '5.2.0'	2018-08-06 08:08:39 -07:00
Matt Darfeuille	732ae3ce19	Ipcalc: Fail when missing arguments ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-08-05 10:26:17 -07:00
Tom Eastep	82e84f724d	Use -h rather than -L for checking a symlink ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-08-01 13:58:35 -07:00
Tom Eastep	d829093caa	Use -h rather than -L for checking a symlink ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-07-26 13:57:10 -07:00
Matt Darfeuille	6e32f052c8	Use proper function name on fatal error ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-06-23 09:01:49 -07:00
Tom Eastep	2039f38faf	Fix 'show saves' when there are no saves ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-05-05 13:27:37 -07:00
Matt Darfeuille	bb89d509ea	Ipdecimal: Correct error when missing arguments ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-04-27 14:08:00 -07:00
Tom Eastep	16bb41db15	Document 'getcaps', 'getrc' and 'show rc' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-03-27 09:54:32 -07:00
Matt Darfeuille	299ea2b41f	Update version to 5.2 ... - Remove unneeded punctuation marks Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-03-24 09:53:02 -07:00
Matt Darfeuille	9b5468cd4a	Add and document the show rc command ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-03-18 17:36:44 -07:00
Matt Darfeuille	47a59cdd7c	Add and document the remote-getcaps command ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-03-18 17:36:38 -07:00
Matt Darfeuille	676ca872d6	Add and document the remote-getrc command ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-03-18 17:36:33 -07:00
Tom Eastep	9e002a7689	Be sure that mutex is released when exiting ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-28 13:38:30 -08:00
Tom Eastep	8bc97bcd35	Replace ${VARDIR}/firewall with $g_firewall in CLI ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-23 12:40:14 -08:00
Tom Eastep	9a83365986	Remove the USEPKTTYPE capability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-16 11:20:00 -08:00
Tom Eastep	8056b6fd85	Create the 'show saves' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-15 12:42:55 -08:00
Tom Eastep	3903fe5fd9	Remove the 'refresh' command ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-07 12:38:24 -08:00
Tom Eastep	2e4af68b98	Always report IPSET_MATCH in 'show capabilities' output. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-02-06 13:41:28 -08:00
Tom Eastep	a9a379c5a5	Implement INPUT SNAT ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-22 16:37:38 -08:00
Tom Eastep	92ce1beddc	Move read_yesno_with_timeout() to lib.cli-std ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-20 14:26:13 -08:00
Tom Eastep	4d6bf8564e	Avoid unnecessary variable expansion ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-20 14:25:42 -08:00
Tom Eastep	eaccf033c6	Update copyrights for 2018 ... - Update some header versions to 5.1 Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-07 14:24:01 -08:00
Tom Eastep	196a56ea3c	Permit when firewall stopped when using an ipset for dynamic BL ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 13:26:32 -08:00
Tom Eastep	2c3f121835	Don't call setup_dbl() unconditionally ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 13:11:31 -08:00
Tom Eastep	c8774110c6	Correct typo (rootonly => root_only) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2018-01-02 11:51:42 -08:00
Tom Eastep	6b5889177b	Correct startup_error() inadvertent change ... - Switch ensure_root() back to calling startup_error() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-30 09:24:21 -08:00
Tom Eastep	d8a22d13dd	Allow non-root to run many 'show' commands ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-12-28 10:49:09 -08:00
Tom Eastep	c907748b52	Correct typo in 'dump' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-11-30 14:31:33 -08:00
Tom Eastep	f1975ae9b0	More robust detection of empty SPD entries. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-15 08:26:27 -07:00
Tom Eastep	7b9f7c095d	Don't dump SPD entries for the other address family ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-14 13:39:00 -07:00
Tom Eastep	108b169d8d	Treat LOG_TARGET like all other capabilities ... - Previous implementation could generate unworkable script when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-06 08:01:52 -07:00
Tom Eastep	a9fbaa57ed	Pass -$g_family to 'ip xfrm' commands ... - This currently doesn't work correctly, but maybe it will in the future Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-06 08:00:29 -07:00
Tom Eastep	317f12041b	Strengthen the test for empty SPD entries ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-30 15:43:17 -07:00
Tom Eastep	ef1353790e	Correct VLSM editing in the 'ipcalc' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:41 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00