extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 14:48:51 +01:00
Code Issues Packages Projects Releases Wiki Activity
14,864 Commits 104 Branches 736 Tags 55 MiB
d2b3fa476a
Commit Graph

2060 Commits

Author SHA1 Message Date
Tom Eastep
2f545012a6 More documentation updates for -C 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 09:25:58 -08:00
Tom Eastep
7771e5d48f More ipset article tweaks 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-07 13:37:56 -07:00
Tom Eastep
0cd694370e Add nat link from Shorewall6 manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-07 12:21:44 -07:00
Tom Eastep
5fd7c573fc Clarify Shorewall-init SAVE_IPSETS setting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-07 11:41:57 -07:00
Tom Eastep
80c024c4aa Amplify the 4.6.4 SAVE_IPSETS changes in the ipset article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-07 09:52:15 -07:00
Tom Eastep
a72a1ef7a6 Update the install document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-05 13:30:28 -07:00
Tom Eastep
205dd6e250 Add FAQ 104 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-01 19:47:56 -07:00
Tom Eastep
2a463e06aa More documentation changes regarding SAVE_IPSETS. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-28 17:10:45 -07:00
Tom Eastep
b84a9e16e6 Correct typo in the config basics document 
- SOURCE/DEST example had extra colon

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-25 10:59:18 -07:00
Tom Eastep
540eff24aa Correctons to LOG_BACKEND implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-24 16:35:41 -07:00
Tom Eastep
580e00dabd Implement LOG_BACKEND option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-24 15:26:13 -07:00
Tom Eastep
a69cec5228 Add link to Events article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-23 07:09:56 -07:00
Tom Eastep
feb747260d Add /etc/shorewall/params to the multi-ISP LSM example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-03 06:59:37 -07:00
Tom Eastep
aaa561c831 Mention shell variable rules in the extension script article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-21 16:00:58 -07:00
Tom Eastep
aa6bd2819c Update the Build document 
- Add build46
- Mention shorewall-pkg.config

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-14 08:03:31 -07:00
Tom Eastep
cf33bac318 Revert most of last change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-10 12:15:08 -07:00
Tom Eastep
0005bb697b Describe a way to improve provider selection from the firewall 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-10 09:50:21 -07:00
Tom Eastep
c5549ff21e Update the Configuration File Basics document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-08-10 08:09:31 -07:00
Tom Eastep
8c0fe063a7 Another tweak to the FTP module documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-25 09:03:23 -07:00
Tom Eastep
dbf78d7dd0 Merge branch '4.6.2' 2014-07-25 09:02:48 -07:00
Tom Eastep
bea2b49eb0 More FTP module documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-25 08:38:46 -07:00
Tom Eastep
3b4012b60a Document FTP helpers on kernel 3.5 and later in the FTP document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-25 08:15:58 -07:00
Tom Eastep
21209504c5 Correct example from preceding commit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-23 10:47:11 -07:00
Tom Eastep
44a34ceb95 Add complex port-forwarding example to the aliased interfaces article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-23 10:36:34 -07:00
Tom Eastep
3e6f57e699 Correct link in the Multi-ISP document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-21 14:33:59 -07:00
Tom Eastep
0ec4cfd18d Fix incorrect link in the complex TC document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-16 15:39:37 -07:00
Tom Eastep
3e6e0b4a09 Amplify the route filtering problem in the multi-ISP document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-13 07:45:51 -07:00
Tom Eastep
a0ab9f6ab2 Update FAQ copyright 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-08 07:45:34 -07:00
Tom Eastep
c72265667f Add FAQ 103 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-06 08:51:42 -07:00
Tom Eastep
7082bf1971 Update Events.xml with stateful knocking example/description 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-01 06:43:20 -07:00
Tom Eastep
a0bb7ca018 Merge branch 'master' into 4.6.1 2014-06-13 07:02:51 -07:00
Roberto C. Sanchez
a8885844ae Fix typos 2014-06-13 07:25:54 -04:00
Tom Eastep
e6372a3e04 Merge branch 'master' into 4.6.1 2014-06-11 15:26:16 -07:00
Roberto C. Sanchez
41ab0d20c9 Update outdated links, thanks to Lee Brown 2014-06-11 16:57:33 -04:00
Tom Eastep
1892cbf218 Remove dest zone name in DNAT- rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-07 17:02:04 -07:00
Tom Eastep
c0c6bedb17 Fix the DNAT- rule shown in the port-knocking example. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-07 16:34:07 -07:00
Tom Eastep
9f9d9fd8d1 Eradicate usage of an interface name in the SOURCE column of the masq file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-02 07:35:02 -07:00
Tom Eastep
ec4fc4ee8f Add 4.6 to the Shorewall 4 document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-06-01 12:39:00 -07:00
Tom Eastep
0f6bd0e2af Update support guide with the current release information 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-22 15:47:44 -07:00
Tom Eastep
b088ea77cd Replace eth1 by eth2 in FAQ 2e 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-22 07:20:36 -07:00
Tom Eastep
2859b1aa6e Add bridge instructions to Shorewall FAQ 2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-19 14:18:25 -07:00
Tom Eastep
b79191caa5 Update migration issues document for 4.6.0 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-15 08:20:10 -07:00
Tom Eastep
22662212e3 Update FAQ 2 to avoid interface names in the SOURCE column 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-15 08:01:09 -07:00
Roberto C. Sanchez
ed9953adb8 Fix broken link 2014-05-06 14:18:37 -04:00
Tom Eastep
2ce28154d1 Update the troubleshooting doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-04-21 13:00:08 -07:00
Tom Eastep
afdcff10c9 Update copyright on the Packet handling article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-04-21 12:52:06 -07:00
Tom Eastep
77efea65de Add link from Multi-ISP to packet marking 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-04-20 09:01:00 -07:00
Tom Eastep
658f5c6674 Add 4.6 and update copyrights in two articles 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-18 07:29:30 -07:00
Tom Eastep
57637506ba Include tcrules entries for directing connections to a specific provider 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-18 07:29:02 -07:00
Tom Eastep
733a17470e Merge branch '4.5.21' 2014-03-05 09:25:26 -08:00
Tom Eastep
3ca3b8b552 Add caution about macros and non-standard ports. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-05 09:24:41 -08:00
Tom Eastep
c9d7370fb4 Merge branch '4.5.21' 
Conflicts:
	Shorewall/manpages/shorewall.conf.xml
	Shorewall6/manpages/shorewall6.conf.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-05 09:00:34 -08:00
Tom Eastep
3cfee0e43c Updates/corrections to beginner articles 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-03-05 08:57:21 -08:00
Tom Eastep
1bac919ea6 Show equivalent mangle rules in the Multi-ISP article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-27 15:58:51 -08:00
Tom Eastep
238aa68b28 Describe the mangle file in the config file basics article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-27 15:54:05 -08:00
Tom Eastep
3abaf124fa Updates to the manpage tables of contents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-26 10:30:18 -08:00
Tom Eastep
024758bdf6 Update copyright 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-25 13:51:33 -08:00
Tom Eastep
8bf76a5f36 Mention AUTOMAKE in the Introductory article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-25 13:27:24 -08:00
Tom Eastep
4a88a3b899 Correct typo in the introduction document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-25 13:21:40 -08:00
Tom Eastep
2e9342aef0 Make the CLI used dependent on the product installed. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-11 09:04:18 -08:00
Tom Eastep
3be3c57e65 Mention 'routeback' for vserver hosts entries. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-03 08:07:53 -08:00
Tom Eastep
dec088566b Merge branch '4.5.21' 2014-01-15 17:39:03 -08:00
Roberto C. Sanchez
240c42943b Cleanup some links in the Shorewall6 manpage listing that pointed to Shorewall manpages 2014-01-12 16:01:54 -05:00
Roberto C. Sanchez
6233f79989 Add links to the blrules documentation from the manpage listings 2014-01-11 08:14:56 -05:00
Tom Eastep
8b49641e07 Replace 'tcrules' with 'mangle' in the docs 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-28 17:31:51 -08:00
Tom Eastep
a1222d10cb change 'marks' file to 'mangle' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-28 10:03:23 -08:00
Tom Eastep
45f64aefd7 Change section level of the trunk/docs section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-27 18:17:33 -08:00
Tom Eastep
75515399e0 Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code 2013-12-24 13:59:52 -08:00
Tom Eastep
615d683848 Correct invalid links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-24 13:55:45 -08:00
Roberto C. Sanchez
d3977a7ad9 Fix typo in copyright date 2013-12-24 16:23:59 -05:00
Tom Eastep
b5295b2039 Add faq 102 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-24 11:30:22 -08:00
Roberto C. Sanchez
f4e2602c89 Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code 2013-12-24 09:59:47 -05:00
Roberto C. Sanchez
c80795102a Fix some broken links 2013-12-24 09:58:44 -05:00
Tom Eastep
670ecb203b Document postcompile 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-08 14:12:08 -08:00
Tom Eastep
8faf756113 Add note about non-ACCEPT fw->loc policy. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-08 08:33:58 -08:00
Tom Eastep
dac037b597 Clarify 'User exit' and correct description of how extension scripts are used. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-11-28 07:13:47 -08:00
Tom Eastep
4a014d4884 Documentation cleanup 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-11-04 10:50:38 -08:00
Tom Eastep
472ecc661f Fix broken link in netmap.html 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-11-04 10:49:53 -08:00
Tom Eastep
fc3ff30009 Correct the default queue value for NFLOG. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-24 07:55:12 -07:00
Tom Eastep
8fb1ce6810 Another network diagram tweak 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-21 07:03:53 -07:00
Tom Eastep
4cef6f9254 Make the DMZ object align with the Net object 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-14 10:01:21 -07:00
Tom Eastep
4fb80ca698 More tweaking object location 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-14 09:41:44 -07:00
Tom Eastep
1666a4639f Another minor tweak. 
- Move the cloud upward slightly.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-14 07:01:20 -07:00
Tom Eastep
9345219c11 Another tweak to the network diagram 
- Show the SMC zone nested in the Net zone
 2013-10-14 06:59:31 -07:00
Tom Eastep
589e048086 Update Multi-ISP example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-13 14:03:45 -07:00
Tom Eastep
b45c9bd0d2 Add SeaGL2013 Link 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-13 14:03:21 -07:00
Tom Eastep
9f80ad8fb3 Document push_/pop_/set_comment(). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-26 07:09:23 -07:00
Tom Eastep
56cb029ef4 Fix broken links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-19 08:14:26 -07:00
Tom Eastep
eb634fa769 Document SERVICEFILE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-18 16:02:14 -07:00
Tom Eastep
e0a222938a Merge branch '4.5.19' 2013-07-27 08:14:35 -07:00
Tom Eastep
36a4ef1676 Correct typo in action.IfEvent 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-25 06:10:11 -07:00
Tom Eastep
4edbad6849 Describe the need for LSM to provide failover. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-24 09:55:38 -07:00
Tom Eastep
765b748283 Documentation updates 
- Add meaningful IDs to some sections in Events.xml
- Correct typos in the accounting manpages

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-22 07:54:45 -07:00
Tom Eastep
7aa33c140d Add an AutoBL action with helper AutoBLL 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-17 10:19:18 -07:00
Tom Eastep
04c2a88d74 Add caution to the Events example on blacklisting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-15 14:30:31 -07:00
Tom Eastep
8c27b027fc Break <command> into <command>[<optionlist>] 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-14 08:44:01 -07:00
Tom Eastep
5ba8df81fb Further improve readability of the show event[s] commands. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-13 09:08:50 -07:00
Tom Eastep
3625d9eae7 Mention /proc/net/xt_recent/* in the Events document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 17:08:58 -07:00
Tom Eastep
51d5ec6b2b Make the output of 'show event[2] understandable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 16:07:22 -07:00
Tom Eastep
c7ad12177a Enhance description of events by mentioning xt_recent options. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 14:47:22 -07:00
Tom Eastep
d68b581f3b Update the packet marking document for the Event mark bit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 07:42:09 -07:00
Tom Eastep
501007d0ac Correct the Events article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 07:14:42 -07:00
Tom Eastep
9535a7d7df Rename 'Trigger' to 'Event' and document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-11 10:39:21 -07:00
Tom Eastep
43d4a8dcf8 Correct a FAQ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-08 14:19:47 -07:00
Tom Eastep
afd66157a5 Discontinue support for 4.4. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-03 10:27:59 -07:00
Tom Eastep
2f8c4e6ddc Clarify conditional variables in multi-ISP example. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-03 08:52:26 -07:00
Tom Eastep
52eb29d01e Remove incorrect statement from the Macro document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-06-15 06:51:59 -07:00
Tom Eastep
e405ab80bf Update Common Action doc for 'Auth' change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-05-29 08:40:43 -07:00
Tom Eastep
9b0b3d4b70 Correct ICMPV6 type name translation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-05-28 08:03:19 -07:00
Tom Eastep
1e6578c759 Correct example in the TPROXY documentaiton. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-05-17 13:36:09 -07:00
Tom Eastep
ea71f15b3d Delete SWPING from MultiISP doc. 2013-05-06 09:09:24 -07:00
Tom Eastep
82bfb5ac50 Document @caller. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-30 16:32:25 -07:00
Tom Eastep
b57fd9f2a9 Update TPROXY article to explain exclusion. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-26 08:42:23 -07:00
Tom Eastep
b6ceb96ebe Add 'initdone' to the config file list in the conf basics article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-22 07:57:18 -07:00
Tom Eastep
0d39d7542e Update the Actions document re: CHAIN_SCRIPTS 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-21 08:49:22 -07:00
Tom Eastep
c5d4a63afe Describe a more complex dmz squid solution 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-19 14:15:40 -07:00
Tom Eastep
a9ce4c20f0 Add routefilter=0,logmartians=0 to Squid routing solution 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-19 13:52:01 -07:00
Tom Eastep
64e7675f45 Add note about rate-estimators in FAQ 97a 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-03 07:28:23 -07:00
Tom Eastep
ee66a45e2e Correct comments in the Chains module. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-02 12:52:10 -07:00
Tom Eastep
190e43ff51 Correct typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-02 10:55:09 -07:00
Tom Eastep
2381b0fd8f Correct typo in FAQ 97a 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-30 08:41:57 -07:00
Tom Eastep
6e5f00062c Revert "Use 'replace' rather than 'add' for routes defined in the routes file." 
This reverts commit 215fd9e234.

Conflicts:

	Shorewall/Perl/Shorewall/Providers.pm
 2013-03-24 14:19:31 -07:00
Tom Eastep
1dfbc11cfa More cleanup of the Multi-ISP null routing section. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-24 09:24:57 -07:00
Tom Eastep
1701bd46fc Correct table entry in the Shorewall-init article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-22 14:54:18 -07:00
Tom Eastep
6ebe28040b Add Four to the list of authors 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-17 07:42:45 -07:00
Tom Eastep
1e866eac28 Implement the other forms of NULL routing. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-16 08:20:52 -07:00
Tom Eastep
d005ffa766 Update action tables in Shorewall-init article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-13 11:17:10 -07:00
Tom Eastep
a990ceecba Clarify ipsets WRT xtables-addons. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-08 08:18:00 -08:00
Tom Eastep
ec5e1b54c1 Correct COPY description in the multi-ISP document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-03-06 08:28:18 -08:00
Tom Eastep
c271d6753c Update FAQ copyright. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-20 09:12:55 -08:00
Tom Eastep
0c11a8e0aa Fix broken link. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-15 10:33:44 -08:00
Tom Eastep
f44e035a47 Fix load, reload and export WRT shorewallrc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-14 10:21:26 -08:00
Tom Eastep
2845ffb4bb Document perl_action_tcp_helper 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-14 09:35:31 -08:00
Tom Eastep
c68513672d Comments and documentation. 
- Removes the Actions-4.5 article

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-14 08:48:45 -08:00
Tom Eastep
394850e68e Document updates for IPv6 and Shorewall Lite 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-13 06:58:22 -08:00
Tom Eastep
8d0a80a7e2 Merge branch '4.5.13' 2013-02-11 06:40:11 -08:00
Tom Eastep
bda1e05d9a Mention the requirement for a params file in the Shorewall Lite article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-11 05:58:01 -08:00
Tom Eastep
83111a1126 Clarify the requirement for accessing $n in an action body 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-09 20:24:26 -08:00
Tom Eastep
eaa6d72a4f Allow parameters to be omitted in action invocations. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-09 07:07:01 -08:00
Tom Eastep
ca5a70aa6f Clarify the <variable> forms allowed in a ?SET directive. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-02 11:08:29 -08:00
Tom Eastep
a5d3b1f470 Remove requirement that matches and proto end with a space in perl helper API. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-01 12:29:30 -08:00
Tom Eastep
221f4909b5 Document perl_action_helper 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-29 09:12:04 -08:00
Tom Eastep
f403420926 Allow setting chain variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-19 10:52:11 -08:00
Tom Eastep
e76c0c8187 Correct IPV6 document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-17 15:58:52 -08:00
Tom Eastep
ed40415458 Add FAQ 101 (speed up start/restart) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-13 08:19:26 -08:00
Tom Eastep
af83989465 Update copyright dates. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-11 16:01:10 -08:00
Tom Eastep
975fb8992e Add warnings about line continuation vs. comments 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-09 08:00:59 -08:00
Tom Eastep
38657d9f98 Support for arptables. 
Signed-off-by: Tom Eastep <teastep@mint14.(none)>
 2013-01-04 09:17:57 -08:00
Tom Eastep
769125903d Update Traffic Shaping Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-29 12:17:26 -08:00
Tom Eastep
115081dda5 Tweak fq_codel documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-29 11:20:16 -08:00
Tom Eastep
bd563ae9b7 Merge branch '4.5.11' 
Conflicts:
	Shorewall/Perl/Shorewall/Config.pm
	Shorewall/Perl/Shorewall/Rules.pm

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-23 13:10:37 -08:00
Tom Eastep
4d2379f542 Implement update -D 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-23 10:50:31 -08:00
Tom Eastep
c9eccaf3b8 Implement ?COMMENT directive 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-23 10:49:32 -08:00
Tom Eastep
41b4485310 Implement ?COMMENT directive 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-22 15:47:03 -08:00
Tom Eastep
6c1369a5a8 Minor tweaks to the documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-22 09:51:51 -08:00
Tom Eastep
82f8b0295f Update the upgrade issues 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-22 09:05:24 -08:00
Tom Eastep
96b61ea05c Update documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-21 16:13:23 -08:00
Tom Eastep
7abebb72e4 Document Shorewall::Config::set_action_param(). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-21 15:13:51 -08:00
Tom Eastep
da0261cb91 Document @1, @2,...@n 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-20 09:46:24 -08:00
Tom Eastep
df7785f2e9 Implement user-defined address variables. 
- Also correct handling of ${0} & ${chain} in a SWITCH column.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-18 17:58:20 -08:00
Tom Eastep
2b9af94c59 Clean up the Embedded Perl section in the Actions documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-17 15:59:52 -08:00
Tom Eastep
e8720e9f78 Add a section Id to the Shorewall Variables section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 09:48:33 -08:00
Tom Eastep
6b758fd588 Describe use of BEGIN PERL .... END PERL in action bodies. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 09:06:29 -08:00
Tom Eastep
1dc0f8b170 Split the Shell Variables section into multiple sections. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 08:45:46 -08:00
Tom Eastep
10237e01b2 Document ?set and ?reset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-09 11:46:51 -08:00
Tom Eastep
56d7b6248b Begin Action Documentaiton Update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-05 19:07:42 -08:00
Tom Eastep
22aa06f497 Small change to the Actions document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-04 10:39:29 -08:00
Tom Eastep
172c1a5b44 Update the alternative column specification table. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-29 07:43:48 -08:00
Tom Eastep
d7096ae52e Back out default-action macros and document in-line actions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-27 10:53:18 -08:00
Tom Eastep
7673b1ac4b Support multiple parameters in macros. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-26 11:04:19 -08:00
Tom Eastep
dd0f42c462 Mention Macros as default actions in the Actions and Macros docs. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-25 12:09:41 -08:00
Tom Eastep
9a8cf60857 Recomment disabling route filtering on fallback interfaces. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-20 12:45:19 -08:00
Tom Eastep
a484cb848f Document TPROXY IPv6 gotcha. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-14 11:51:30 -08:00
Tom Eastep
0e7a4d56fd Mention IMPLICIT_CONTINUE in the bridge doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-04 07:07:19 -08:00
Tom Eastep
e11dac3fe2 Replace wireless router image in the 2012 Network diagram. 
- Correct a typo in the 4.4 upgrade issues

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-29 07:18:28 -07:00
Tom Eastep
d3c63a2d97 Merge branch '4.5.9' 
Conflicts:
	docs/MultiISP.xml
	docs/images/Network2012a.dia
	docs/images/Network2012a.png
 2012-10-28 12:45:51 -07:00
Tom Eastep
39c0991940 More updates to the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 12:34:27 -07:00
Tom Eastep
9e984b10f6 More updates to the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 12:10:06 -07:00
Tom Eastep
19048b6a18 Recover Network Diagram 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 09:06:48 -07:00
Tom Eastep
2fcbeb9ddf Update Multi-ISP doc with my current config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 20:43:13 -07:00
Tom Eastep
8397244fd6 Update Multi-ISP doc with my current config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 20:28:52 -07:00
Tom Eastep
ef3652fc98 Update migration issues document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 08:01:16 -07:00
Tom Eastep
b9139a4ec8 Add additional steps to creating a dump file. 
- Ubuntu Precise with 4.4.26.1 -- use bash
- ipsec-tools required if IPSEC-related issue

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 12:42:35 -07:00
Tom Eastep
1e7a196b3d correct a typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 12:41:29 -07:00
Tom Eastep
e177916c12 Implement statistical marking in the tcrules file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 07:10:26 -07:00
Paul Gear
b082ca2331 Spelling fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-12 16:50:55 -07:00
Tom Eastep
18f981d7cc Update formatting in Dynamic Zones doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-09 07:08:35 -07:00
Tom Eastep
1195661264 Document new Dynamic Zone implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-07 12:20:36 -07:00
Tom Eastep
e2eba9468d Update IPv6 doc with new syntax. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-27 14:30:26 -07:00
Tom Eastep
32f89fa24b Don't unconditionally detect helpers when LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-22 09:27:13 -07:00
Tom Eastep
97cdc390c3 Continue work on Internals document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-21 15:06:29 -07:00
Tom Eastep
4c906dc3d1 Add UDP conntrack FAQ 1j. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-21 07:28:37 -07:00
Tom Eastep
483374d356 Continue development of the Internals document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-17 07:52:18 -07:00
Tom Eastep
f8c2e129c9 Additional content in the Internals document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-16 15:47:29 -07:00
Tom Eastep
92ed56bbbc More content in the Internals doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-16 07:29:53 -07:00
Tom Eastep
0dd7ad7920 Re-organize Squid document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-08 08:08:16 -07:00
Tom Eastep
7235d4da11 Update manpage indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-03 20:25:15 -07:00
Tom Eastep
55e3b11a28 Pass both shorewallrc files to the compiler from lib.cli-std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-03 15:07:50 -07:00
Tom Eastep
c16dfc609d Documentation updates for VARLIB 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-02 15:43:52 -07:00
Tom Eastep
f5e1a42ac9 Update the Shorewall-Lite article 
- Mention shorewallrc
- Mention that /etc/shorewall/shorewall.conf is no longer read when the
  configuration directory has a shorewall.conf file.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-02 09:10:19 -07:00
Tom Eastep
9b05146a85 New documents (WIP) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-30 10:06:58 -07:00
Tom Eastep
899bce13c3 Some doc updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-27 13:22:05 -07:00
Tom Eastep
15fd345545 FAQ update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-25 09:06:37 -07:00
Tom Eastep
0423769f59 Update docs for info added/changed in 4.5.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-20 11:36:32 -07:00
Tom Eastep
1b7a7d0fdf Remove some more hard-coded directory names from the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-17 14:24:52 -07:00
Tom Eastep
fdc45a990d Arrange for HELPER to match in the RELATED section. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 15:44:19 -07:00
Tom Eastep
f1fbb95d48 Update documentation for content merged from the 4.5.8 (master) path 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 08:16:36 -07:00
Tom Eastep
8f71797a48 Update upgrade doc to mention both SHA and SHA1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-08 10:51:06 -07:00
Tom Eastep
88dabde9c9 Update upgrade-issues doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-07 09:10:21 -07:00
Tom Eastep
c007f847a0 Handle disabled helpers in pre-3.5 kernels. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-06 15:54:45 -07:00
Tom Eastep
6c97e13107 Use -j CT for helper detection, when available 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 11:36:03 -07:00
Tom Eastep
6fbb578ce6 Add Helpers Document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 07:28:13 -07:00
Tom Eastep
c2cd031285 Mention the conntrack file in the config basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-02 11:31:25 -07:00
Tom Eastep
735b7c2cf5 Add support for nfacct 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-28 11:21:16 -07:00
Tom Eastep
55519bd9ac Revise instructions for disabling iptables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-17 16:48:15 -07:00
Tom Eastep
620d8f1cd0 Add an Anti-spoofing document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-15 11:26:16 -07:00
Tom Eastep
aa652fda1b Add FAQ 99 
- Empty ruleset after boot even though Shorewall runs.
 2012-07-07 07:55:17 -07:00
Tom Eastep
66f3df4570 Correct typo in ISO 366O doc. 
- changed tcrules to rules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-07 07:38:27 -07:00
Tom Eastep
74f831a73e Improve the readability of the ?ELSIF example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:51:14 -07:00
Tom Eastep
f0b5ee4cdb Correct a typo in NewRelease.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:50:38 -07:00
Tom Eastep
0bf2753472 Re-implement conditional inclusion 
- Correct defects
- Add ?ELSIF support
- Allow Perl-compatible expressions in ?IF
 2012-06-27 15:15:44 -07:00
Tom Eastep
640d34cecd Remove old advice from the Aliased Interface Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-20 16:39:12 -07:00
Tom Eastep
d1627efe5a Add a complex QOS Example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-17 09:57:31 -07:00
Tom Eastep
6c47349689 Support 'red' queuing discipline 
- Also added 'ls' support for HFSC

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-13 14:29:13 -07:00
Tom Eastep
f92a9fa0d6 Update traffic shaping doc with linklayer options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 09:40:33 -07:00
Tom Eastep
4a51241c40 Merge branch '4.5.5' 2012-06-12 08:12:26 -07:00
Tom Eastep
b2c96970ee Add cls_basic to recommended TC modules in FAQ 67 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 08:11:17 -07:00
Tom Eastep
2e05b81443 Apply patch from Ronan Amicel 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-11 11:26:49 -07:00
Tom Eastep
5f051fc61b Unify document indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:31:31 -07:00
Tom Eastep
61d4363865 Update Netfilter overview with Raw and Rawpost tables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:30:39 -07:00
Tom Eastep
705744fd8c Convert Frequently-used Articles section into a table 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:36:32 -07:00
Tom Eastep
724f3cbd76 Unify documentation indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:22:14 -07:00
Tom Eastep
f86476a43c Remove SYSCONFDIR aliasing from Install.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:53 -07:00
Tom Eastep
1ed6769b14 Fix broken URL in logging doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:17 -07:00
Tom Eastep
5c7a4b579c Clarify CONFIG_PATH setting using -lite products 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 17:23:13 -07:00
Tom Eastep
ee467a4877 Allow embedded shell/Perl directives to have leading '?' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 07:32:43 -07:00
Tom Eastep
fc97f6d00e Implement LOG target option control. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-24 13:54:59 -07:00
Tom Eastep
ab2376d61d Document 15-cc limit. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-21 07:03:53 -07:00
Tom Eastep
73e5bb0374 Expand the GEOIP documentation to describe GEOIPDIR option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 09:40:00 -07:00
Tom Eastep
d8ec051114 Load the geoip cc's dynamically. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 08:59:59 -07:00
Tom Eastep
f0a3e1652a Bracket non-trivial cc lists with [...] 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-19 09:39:49 -07:00
Tom Eastep
cb72948739 Add Geoip match to config basics doc. Clarify variable search algorithm. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-18 07:27:33 -07:00
Tom Eastep
55c88e8e81 Replace curly brace enclosure with a preceding caret to avoid ambiguity. 
- {...} is used to enclose a set of column/value pairs and it is certain
  that the two will become confused.
 2012-05-17 15:26:16 -07:00
Tom Eastep
d1519345c4 Add TOC Link to ISO-3661.html; Correct typo in ISO-3661 page. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 12:26:02 -07:00
Tom Eastep
d220d3d9d5 Abandon action.GeoIP in favor of extended syntax in the SOURCE and DEST columns. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 10:44:02 -07:00
Tom Eastep
cc07e74532 Correct typo in TPROXY documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-16 15:56:19 -07:00
Tom Eastep
3d541f50c8 Use "(S)" consistently in column headings. 
- add synonyms so both the singular and plural forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 12:42:04 -07:00
Tom Eastep
bad8b9bddb Improve TPROXY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 11:39:15 -07:00
Tom Eastep
69d735ea0a Make TPROXY actually work! 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-10 11:19:23 -07:00
Tom Eastep
582d025f58 Add DIVERT action to tcrules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-09 09:41:58 -07:00