3892 Commits

Author	SHA1	Message	Date
Tom Eastep	ddb12fcad9	Add/correct comments ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:00:46 -07:00
Tom Eastep	42ce754961	Don't restore default routes when a fallback= provider is enabled ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 11:00:05 -07:00
Tom Eastep	5cd4d63bc5	Delete main default routes when a fallback provider is enabled ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:59:31 -07:00
Tom Eastep	5b567f2d8b	Correct delete_default_routes() in tables other than main ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:58:48 -07:00
Tom Eastep	39a3c72057	Warn when RESTORE_DEFAULT_ROUTE=Yes and a persistent provider is defined ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-11 10:58:09 -07:00
Tom Eastep	b47e633c38	Use 'route replace' rather than 'route add' to avoid persistence issues ... Previous failure case was: - disable interface - reload - enable interface Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-09 08:58:10 -07:00
Tom Eastep	1b55a37a28	Ensure that 'rule add' commands don't fail with persistent interfaces ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-08 08:53:53 -07:00
Tom Eastep	a97dcd23d0	Allow merging of rules that specify an IPSEC policy ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-07 13:17:43 -07:00
Tom Eastep	108b169d8d	Treat LOG_TARGET like all other capabilities ... - Previous implementation could generate unworkable script when LOAD_HELPERS_ONLY=Yes Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-10-06 08:01:52 -07:00
Tom Eastep	8469f983d8	Merge branch '5.1.7' ... # Conflicts: # Shorewall/Perl/prog.footer	2017-09-29 15:25:37 -07:00
Tom Eastep	f54acb665a	Correct handling of mark range in MARK target. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-29 14:44:33 -07:00
Tom Eastep	3d2e9eb93e	Improve the fix for SELinux "getattr" denials ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-28 15:16:50 -07:00
Tom Eastep	c6a939301f	Improve the fix for SELinux "getattr" denials ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-28 15:16:00 -07:00
Tom Eastep	1cb98254cc	Handle SELinux getattr denials in open() processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-26 16:42:54 -07:00
Tom Eastep	baa791a1e3	Handle SELinux getattr denials in open() processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-26 16:41:50 -07:00
Tom Eastep	8b4b965f63	Remove unnecessary disable/enable of script generation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 14:36:30 -07:00
Tom Eastep	8ee2d6246c	Update a comment in the compiler ... - get_configuration() also processes the shorewallrc file(s) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 12:32:34 -07:00
Tom Eastep	a7be3dfece	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:13 -07:00
Tom Eastep	846e8c4ece	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:08 -07:00
Tom Eastep	e2bf7e6584	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:28:09 -07:00
Tom Eastep	ff3994f6a1	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:17:50 -07:00
Tom Eastep	494ec9c59c	Avoid extra comparison in reload_command() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:49:11 -07:00
Tom Eastep	1cde92e8f3	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:43:44 -07:00
Tom Eastep	721a1e3b33	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:39:52 -07:00
Tom Eastep	84fa774cb7	Change copyright dates in lib.runtime ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 09:03:00 -07:00
Tom Eastep	be5aabcbfb	Correct typo in Chains.pm ... &g_dockeringress -> $g_dockeringress Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:14:22 -07:00
Tom Eastep	a8937e6bc8	Correct harmless typo ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:06:41 -07:00
Tom Eastep	5e1cf17ebc	DOCKER-INGRESS support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-17 10:57:29 -07:00
Tom Eastep	85a7ec6fe5	Correct module loading in the compiler ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-14 15:08:38 -07:00
Tom Eastep	2ed11c7e15	Default ADD_IP_ALIASES to 'No' in Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:55:53 -07:00
Tom Eastep	4f79d2e82b	Move and simplify handling of nat columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:04 -07:00
Tom Eastep	e6a2ba78a4	Correct handling of DEST column during action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 10:05:37 -07:00
Tom Eastep	1065c2951b	Allow NAT targets to be passed to the Event actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:46:03 -07:00
Tom Eastep	3b373f3f21	Correct handling of ipsets in the DEST column of the snat file ... - Also corrected handling of exclusion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-06 11:30:42 -07:00
Tom Eastep	b54a691110	Improve dynamic gateway detection ... - Use provider's routing table, if any Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 15:04:47 -07:00
Tom Eastep	90f33dd436	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:48:14 -07:00
Tom Eastep	34e4fffd7d	Module suffix changes ... - Re-order default list in the compiler to match lib.common - MODULE_SUFFIX="ko ko.xz" in standard .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 12:44:23 -07:00
Tom Eastep	419ff8903b	Invert logic in Shorewall::Chains::delete_reference() - better readability ... - similar change in Shorewall::Chains::adjust_reference_counts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:25:27 -07:00
Tom Eastep	390ac30be8	Remove a superfluous line of code from Shorewall::Chains::format_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:12:54 -07:00
Tom Eastep	8cb98f16ea	Add a comment in Shorewall::Chains::optimize_level8() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 08:08:24 -07:00
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	ddefde2d10	Correct handling of address variables in DNAT rule. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 08:30:11 -07:00
Tom Eastep	1a2647618e	Allow runtime address variables as the server IP in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 12:18:16 -07:00
Tom Eastep	72293883dd	Tabify the Zones module ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 11:28:14 -07:00
Tom Eastep	c31397532c	Verify that parent and child zones have a common interface ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 09:24:05 -07:00
Tom Eastep	d0861e813b	Make Shorewall's handling of '+' consistent with that of iptables ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-12 08:22:57 -07:00
Tom Eastep	da62bd2b32	Use a hash slice in recently-added code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-11 13:38:34 -07:00
Tom Eastep	a504820d19	Correct optimize level 8 handling of policy and policychain ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-07 16:56:30 -07:00