Tom Eastep
|
5b2f960db3
|
Disallow :P in CLASSIFY rules and complain if :F is used when the SOURCE or DEST is $FW.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-30 07:22:14 -08:00 |
|
Tom Eastep
|
ce735e9415
|
Allow a chain designator in CLASSIFY rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-22 15:41:16 -08:00 |
|
Tom Eastep
|
c03fe0a076
|
Implement USE_LOGICAL_NAMES.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-20 16:03:56 -08:00 |
|
Tom Eastep
|
d4957696d1
|
Update man pages and sample files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-05 17:45:09 -08:00 |
|
Tom Eastep
|
320cc822fe
|
Flesh out CT description in the man pages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-05 13:51:18 -08:00 |
|
Tom Eastep
|
f56b56a59f
|
Update 'notrack' man pages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-05 06:56:23 -08:00 |
|
Tom Eastep
|
6949135c11
|
Document enable/disable in the manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-01 13:04:53 -08:00 |
|
Tom Eastep
|
8c6914d1a2
|
Don't deprecate 'optional' for shared providers
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-01 11:23:22 -08:00 |
|
Tom Eastep
|
3110f7c74a
|
Add enable/disable commands to the CLIs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-12-01 10:25:51 -08:00 |
|
Tom Eastep
|
0f02b497f6
|
Document optimize 16 in the manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-24 11:11:59 -08:00 |
|
Tom Eastep
|
4d30811794
|
Implement 'show marks'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-20 12:29:17 -08:00 |
|
Tom Eastep
|
86c51f24d9
|
Deprecate the old mark layout options.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-19 17:14:05 -08:00 |
|
Tom Eastep
|
9988f744ff
|
Add mark layout options to shorewall.conf manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-19 15:55:45 -08:00 |
|
Tom Eastep
|
83d7cfa76a
|
Update documentation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-19 15:18:43 -08:00 |
|
Tom Eastep
|
83d373c0aa
|
More documentation cleanup.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-10 06:52:14 -08:00 |
|
Tom Eastep
|
7ebf5a4284
|
Correct links in shorewall.conf manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-09 09:56:59 -08:00 |
|
Tom Eastep
|
d053faadde
|
Allow convertion of a legacy blacklist configuration
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-08 12:59:40 -08:00 |
|
Tom Eastep
|
6108a9cad8
|
Delete BLACKLISTSECTION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-06 14:46:14 -08:00 |
|
Tom Eastep
|
da7516d401
|
Update config files and manpages for BLACKLISTSECTION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-06 12:05:07 -08:00 |
|
Tom Eastep
|
1091c24348
|
Implement the BLACKLISTSECTION option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-06 08:43:38 -08:00 |
|
Tom Eastep
|
a842fad629
|
Mention that 'ignore' exempts the inteface from hairpin filtering.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-04 13:49:23 -07:00 |
|
Tom Eastep
|
aed595f1d8
|
Document the 'ignore' interface option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-04 08:51:56 -07:00 |
|
Tom Eastep
|
54ba4ed879
|
Add MARK column to route_rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-23 07:56:53 -07:00 |
|
Tom Eastep
|
15915799b9
|
Document new IN-BANDWIDTH handling
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-18 05:53:31 -07:00 |
|
Tom Eastep
|
6d56a8aa45
|
Merge branch '4.4.24'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-10 06:57:05 -07:00 |
|
Tom Eastep
|
a12a4a5a89
|
Add '6in4' as a synonym for '6to4'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-10 06:54:31 -07:00 |
|
Tom Eastep
|
668926c2a6
|
Add BALANCE_TABLE.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-09 09:00:14 -07:00 |
|
Tom Eastep
|
835a056eb8
|
Implement BLACKLIST section in the rules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-03 16:02:01 -07:00 |
|
Tom Eastep
|
0a5d5821ec
|
Support additional forms of column/value pair specification
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-02 11:45:55 -07:00 |
|
Tom Eastep
|
2b7515f434
|
Refer manpage readers to the 'Pairs' information
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-26 10:16:52 -07:00 |
|
Tom Eastep
|
da5b6b99d4
|
Implement TTL support in tcrules.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-24 16:17:52 -07:00 |
|
Tom Eastep
|
dbf5f17b41
|
More tweaks to switch implementation.
1) Switch names may be 30 characters long.
2) Switch settings are retained over restart.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-24 07:34:58 -07:00 |
|
Tom Eastep
|
caddd65412
|
Rename condition->switch and add more documentation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-23 12:33:55 -07:00 |
|
Tom Eastep
|
75b4540d26
|
Add support for condition match in the rules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-21 15:20:50 -07:00 |
|
Tom Eastep
|
379d1d3201
|
Document how to use IPv6 netmap
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-18 10:56:11 -07:00 |
|
Tom Eastep
|
6b482cab88
|
Modify netmap manpage to reflect releasing the new functionality in 4.4.23.2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-12 17:01:47 -07:00 |
|
Tom Eastep
|
fb6d4ffaf9
|
Merge branch '4.4.23'
|
2011-09-10 08:34:45 -07:00 |
|
Tom Eastep
|
a3f6b9292e
|
Change "see above" to "see below" in routefilter description
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-07 16:34:42 -07:00 |
|
Tom Eastep
|
d3ed864daa
|
Clarify routeback vs routefilter/sfilter in interfaces manpages.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-07 11:13:26 -07:00 |
|
Tom Eastep
|
149e697d71
|
Clarify routeback vs routefilter/sfilter in interfaces manpages.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-07 11:12:43 -07:00 |
|
Tom Eastep
|
5015aade0c
|
Document change to netmap
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-05 12:59:54 -07:00 |
|
Tom Eastep
|
43260e27fb
|
Correct netmap manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-05 12:41:57 -07:00 |
|
Tom Eastep
|
bc706324e9
|
Add an ALL section to the rules files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-15 15:32:24 -07:00 |
|
Tom Eastep
|
0b2a8b12c7
|
Implement Stateless NAT support.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-14 12:01:17 -07:00 |
|
Tom Eastep
|
18e3dd40e6
|
Add an IPv6 ipset manpage and clarify +[...]
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-26 13:15:10 -07:00 |
|
Tom Eastep
|
567993292f
|
Some efficiency changes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 17:48:14 -07:00 |
|
Tom Eastep
|
f8be76f471
|
Make LOGMARK work without a parameter.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-19 11:57:12 -07:00 |
|
Tom Eastep
|
8b56e16bf9
|
Fix LOGMARK
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-19 06:54:41 -07:00 |
|
Tom Eastep
|
3f903fe3f1
|
Allow IPv6 Address as the third argument to TPROXY
- also update the manpages to describe TPROXY
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-07 06:43:16 -07:00 |
|
Tom Eastep
|
dedbbf2292
|
Replace FILTER_LOG_LEVEL with SFILTER_LOG_LEVEL in the .conf manpages
|
2011-06-26 11:19:57 -07:00 |
|