Tom Eastep
|
f0d101605b
|
Don't try to combine nat chains that include '-s'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-02-01 14:24:07 -08:00 |
|
Tom Eastep
|
1981372c94
|
Make search for "-j ACCEPT" a little tighter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-31 08:27:30 -08:00 |
|
Tom Eastep
|
f2709dd525
|
Correct release notes to match implementation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-30 20:31:39 -08:00 |
|
Tom Eastep
|
3d39a47582
|
Set $have_ipsec after completing parse of the hosts file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-30 07:26:35 -08:00 |
|
Tom Eastep
|
659f774451
|
Sort %detect_capability for easier verification.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-29 13:09:53 -08:00 |
|
Tom Eastep
|
9d2decd26d
|
Modify determine_capabilities to use detect_capability()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-29 10:38:22 -08:00 |
|
Tom Eastep
|
b8ec2be516
|
Clean up handling of %detect_capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-28 16:39:45 -08:00 |
|
Tom Eastep
|
ecc7861115
|
Validate LOAD_HELPERS_ONLY before detecting capabilities.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-28 08:05:24 -08:00 |
|
Tom Eastep
|
ebd847ef70
|
Don't display capabilties if they have not been determined
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-28 08:04:54 -08:00 |
|
Tom Eastep
|
05f2bb4b3a
|
Correction to last patch.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 17:52:27 -08:00 |
|
Tom Eastep
|
103a1660bc
|
Update release notes for RC 1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 12:57:47 -08:00 |
|
Tom Eastep
|
9d25318d80
|
Fix detection of HASHLIMIT_MATCH on old kernels.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 12:53:31 -08:00 |
|
Tom Eastep
|
be117f6638
|
Remove traffic shaping modules from 'helpers'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 10:37:42 -08:00 |
|
Tom Eastep
|
2069855e44
|
Restore module loader to lib.base (it is needed by shorecap).
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 10:09:12 -08:00 |
|
Tom Eastep
|
846715b009
|
Remove module loading code from lib.base
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 09:58:14 -08:00 |
|
Tom Eastep
|
54456de888
|
Update module versions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 09:01:00 -08:00 |
|
Tom Eastep
|
c05c1a6f50
|
Update version to 4.4.7 RC1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-27 06:58:44 -08:00 |
|
Tom Eastep
|
1556002b54
|
A couple of tweaks to the LOAD_HELPERS_ONLY optimization change.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-25 15:59:31 -08:00 |
|
Tom Eastep
|
fb007bc1c7
|
Bump version to Beta 4
|
2010-01-25 12:25:01 -08:00 |
|
Tom Eastep
|
9408a114c6
|
Don't load unused modules when LOAD_HELPERS_ONLY=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-25 10:50:49 -08:00 |
|
Tom Eastep
|
d933aa602b
|
Eliminate 'ORIGINAL_POLICY_MATCH'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-25 08:13:22 -08:00 |
|
Tom Eastep
|
90b68a05de
|
Don't export %capabilities
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-25 07:56:16 -08:00 |
|
Tom Eastep
|
bfdc6719c1
|
Fix DropBcasts()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-24 12:16:15 -08:00 |
|
Tom Eastep
|
e14d48c2cf
|
Bump version to 4.4.7-Beta3
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-22 16:46:29 -08:00 |
|
Tom Eastep
|
0d63182ab4
|
Fix ambiguous syntax in Config.pm
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-22 16:44:45 -08:00 |
|
Tom Eastep
|
199a50e1c7
|
Update version to 4.4.7 Beta 2
Add problems corrected to the release notes.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-22 10:35:27 -08:00 |
|
Tom Eastep
|
8def4d03c3
|
Document LOAD_HELPERS_ONLY=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 20:17:25 -08:00 |
|
Tom Eastep
|
8f85c75264
|
Implement LOAD_HELPERS_ONLY for IPv6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 15:49:44 -08:00 |
|
Tom Eastep
|
efc43b1b24
|
Add implementation of LOAD_HELPERS_ONLY
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 15:49:35 -08:00 |
|
Tom Eastep
|
a248acb4d4
|
Add LOAD_HELPERS_ONLY Option
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 15:49:23 -08:00 |
|
Tom Eastep
|
4303ad0a3e
|
Add Module Helpers File
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 15:48:24 -08:00 |
|
Tom Eastep
|
10fe25050f
|
Add TC_PRIOMAP fix to change log
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 10:39:40 -08:00 |
|
Tom Eastep
|
a7d4207bf5
|
Add TC_PRIOMAP to shorewall*.conf
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-21 10:38:32 -08:00 |
|
Tom Eastep
|
6b9afd6a82
|
Remove "-common" from installer messages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-19 08:28:08 -08:00 |
|
Tom Eastep
|
9788e057bf
|
Correct filenames in install.sh -- Take 2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-18 09:29:14 -08:00 |
|
Tom Eastep
|
1716995d75
|
Correct filenames in install.sh
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-18 09:20:09 -08:00 |
|
Tom Eastep
|
5cc2edf15a
|
Add the new tc files to the repository
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-18 09:03:05 -08:00 |
|
Tom Eastep
|
8798d3cdb4
|
Install tcinterfaces and tcpri
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-18 07:39:36 -08:00 |
|
Tom Eastep
|
4453bb7dc8
|
More updates from 4.5
|
2010-01-17 16:18:44 -08:00 |
|
Tom Eastep
|
eb790c6d89
|
Add IPMARK and TPROXY modules to load list
|
2010-01-17 15:51:19 -08:00 |
|
Tom Eastep
|
e119037dea
|
Make 'is_isable()' work with 'lo'
|
2010-01-17 15:38:20 -08:00 |
|
Tom Eastep
|
f072c10b18
|
Set version to 4.4.7 Beta1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-17 09:10:48 -08:00 |
|
Tom Eastep
|
957de4b057
|
Add new options to shorewall[6].conf
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-17 08:50:32 -08:00 |
|
Tom Eastep
|
146a738e4c
|
Document TPROXY
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-17 08:20:15 -08:00 |
|
Tom Eastep
|
f4102417ff
|
Shorewall::Config changes for TPROXY from 4.5
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-17 08:15:14 -08:00 |
|
Tom Eastep
|
07cdb8ca82
|
Backport TPROXY from 4.5
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-17 08:12:44 -08:00 |
|
Tom Eastep
|
47007c5dbd
|
Allow protocol to be expressed in octal or hex
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-16 14:20:47 -08:00 |
|
Tom Eastep
|
aad8ea837a
|
Allow port numbers to be specified in Hex
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-16 14:00:47 -08:00 |
|
Tom Eastep
|
5ec7759d81
|
Don't pass an undefined value to fatal_error when numeric conversion fails.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-16 12:35:18 -08:00 |
|
Tom Eastep
|
fddb85189e
|
Update release documents for functionality backported from 4.5.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-01-16 11:32:50 -08:00 |
|