14985 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tom Eastep	5e1cf17ebc	DOCKER-INGRESS support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-17 10:57:29 -07:00
Tom Eastep	85a7ec6fe5	Correct module loading in the compiler ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-14 15:08:38 -07:00
Tom Eastep	fb831e3128	Remove empty/useless ipsets tmp file in Shorewall-init ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:56:24 -07:00
Tom Eastep	2ed11c7e15	Default ADD_IP_ALIASES to 'No' in Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:55:53 -07:00
Tom Eastep	ef1353790e	Correct VLSM editing in the 'ipcalc' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:41 -07:00
Tom Eastep	4f79d2e82b	Move and simplify handling of nat columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:04 -07:00
Tom Eastep	e6a2ba78a4	Correct handling of DEST column during action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 10:05:37 -07:00
Tom Eastep	41ea3bdeda	Modify the Event actions to handle NAT rules ... - Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:47:12 -07:00
Tom Eastep	1065c2951b	Allow NAT targets to be passed to the Event actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:46:03 -07:00
Tom Eastep	3b373f3f21	Correct handling of ipsets in the DEST column of the snat file ... - Also corrected handling of exclusion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-06 11:30:42 -07:00
Tom Eastep	0c05ab3bff	Correct typo in shorewall-snat(5) ... - missing ':' in IPv4 Example 4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-05 10:29:19 -07:00
Tom Eastep	ef3a33e3f4	Merge branch '5.1.6' ... # Conflicts: # Shorewall-core/lib.common Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-30 15:02:23 -07:00
Tom Eastep	8a78fb6e77	Correct -p check for the conntrack utility's availability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-29 09:06:36 -07:00
Tom Eastep	b54a691110	Improve dynamic gateway detection ... - Use provider's routing table, if any Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 15:04:47 -07:00
Tom Eastep	90f33dd436	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:48:14 -07:00
Tom Eastep	b7aef24d7c	Delete useless line of code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:18:29 -07:00
Tom Eastep	6f475cde3f	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 10:19:25 -07:00
Tom Eastep	6053a40af0	Apply Tuomo Soini's loadmodule patch ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 09:20:50 -07:00
Tom Eastep	7e4dba7623	Revert "Correct check for module already loaded" ... This reverts commit 2e98d4375b.	2017-08-23 08:01:25 -07:00
Tom Eastep	3d322d31b7	Add UDP rule to macro.RDP ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-22 08:07:32 -07:00
Tom Eastep	34e4fffd7d	Module suffix changes ... - Re-order default list in the compiler to match lib.common - MODULE_SUFFIX="ko ko.xz" in standard .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 12:44:23 -07:00
Tom Eastep	2e98d4375b	Correct check for module already loaded ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 10:27:29 -07:00
Tom Eastep	419ff8903b	Invert logic in Shorewall::Chains::delete_reference() - better readability ... - similar change in Shorewall::Chains::adjust_reference_counts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:25:27 -07:00
Tom Eastep	390ac30be8	Remove a superfluous line of code from Shorewall::Chains::format_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:12:54 -07:00
Tom Eastep	8cb98f16ea	Add a comment in Shorewall::Chains::optimize_level8() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 08:08:24 -07:00
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	d8eca457de	Correct typo in the Aliased Interfaces article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 08:24:44 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	0603f8e355	Serialize start of IPv4 and IPv6 under systemd ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 12:48:18 -07:00
Tom Eastep	ddefde2d10	Correct handling of address variables in DNAT rule. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 08:30:11 -07:00
Tom Eastep	2beeedd8fe	Remove incorrect '+' info from shorewall-interfaces(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:19:00 -07:00
Tom Eastep	1a2647618e	Allow runtime address variables as the server IP in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:18:16 -07:00
Tom Eastep	72293883dd	Tabify the Zones module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 11:28:14 -07:00
Tom Eastep	c31397532c	Verify that parent and child zones have a common interface ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 09:24:05 -07:00
Tom Eastep	d0861e813b	Make Shorewall's handling of '+' consistent with that of iptables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 08:22:57 -07:00
Tom Eastep	5d5bef105a	Remove reference to swping from the shorewall-init article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:58 -07:00
Tom Eastep	da62bd2b32	Use a hash slice in recently-added code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:34 -07:00
Tom Eastep	a83c19cc33	Adjust some default values in shorewall.conf(5) ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-10 15:48:16 -07:00
Tom Eastep	96a33395e8	Correct typo in the Squid document ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-09 15:42:19 -07:00
Tom Eastep	dabe8abe52	Add 'action' to the conntrack columns for alternate input ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-09 12:41:45 -07:00
Tom Eastep	a504820d19	Correct optimize level 8 handling of policy and policychain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 16:56:30 -07:00
Matt Darfeuille	8db4265ccc	docs: Clarify path for locating Shorewall files ... Signed-off-by: Matt Darfeuille <matdarf@gmail.com> Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 13:48:47 -07:00
Tom Eastep	4c2c1bcdf1	Export CONFDIR and SHAREDIR to the generated script. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-06 13:42:01 -07:00
Tom Eastep	f2ee8013fc	Update the providers manpage re balanced IPv6 routes ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-05 10:12:42 -07:00
Tom Eastep	56c8f70b52	Describe the parameters passed to the enable and disable extension scripts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-04 12:38:14 -07:00
Tom Eastep	657215f9b5	Add sample enabled and disabled scripts ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:50:49 -07:00
Tom Eastep	5589ab76d9	Add arguments to the enabled and disabled user exits ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-03 12:44:15 -07:00
Tom Eastep	ec0e6763e4	add 'enabled' and 'disabled' to the Extension Script Article ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-02 15:44:48 -07:00
Tom Eastep	6425e5ae5d	Remove superfluous white space in the generated script ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-02 14:09:05 -07:00