Tom Eastep
|
d64edf3470
|
Clone a small function
|
2011-01-01 11:19:53 -08:00 |
|
Tom Eastep
|
8f0d0ac5a7
|
Use external representation in recursive call message
|
2011-01-01 09:18:10 -08:00 |
|
Tom Eastep
|
d71c11791f
|
Report normalized action names in recursive call message
|
2011-01-01 09:06:11 -08:00 |
|
Tom Eastep
|
4da682365d
|
Restore ability to detect recursive action invocations
|
2011-01-01 08:58:00 -08:00 |
|
Tom Eastep
|
ed3b336a81
|
Correct prototype
|
2011-01-01 06:55:10 -08:00 |
|
Tom Eastep
|
fc2d76aa7a
|
Move a function; don't export %policy_actions
|
2010-12-31 16:58:06 -08:00 |
|
Tom Eastep
|
e1b4e345fb
|
Add Eclipse files to project
|
2010-12-31 15:19:56 -08:00 |
|
Tom Eastep
|
8e6fdceeb5
|
Back out useless change
|
2010-12-31 14:30:31 -08:00 |
|
Tom Eastep
|
b36ad0d065
|
Change several more compiler progress messages
|
2010-12-31 14:19:31 -08:00 |
|
Tom Eastep
|
f8e04b4110
|
Change a couple of compiler progress messages
|
2010-12-31 14:12:57 -08:00 |
|
Tom Eastep
|
e0d2eb997d
|
Restore the name 'process_rule1'
|
2010-12-31 12:41:01 -08:00 |
|
Tom Eastep
|
1bdaf862d3
|
Populate %targets out of new_action()
|
2010-12-31 10:36:07 -08:00 |
|
Tom Eastep
|
6c14c76ab5
|
Another comment
|
2010-12-31 08:37:56 -08:00 |
|
Tom Eastep
|
aa6754cb40
|
Add a comment
|
2010-12-31 07:51:15 -08:00 |
|
Tom Eastep
|
d4d1bb7b41
|
Bump version of the Zones module
|
2010-12-30 13:14:07 -08:00 |
|
Tom Eastep
|
33ff6db6bc
|
Whitespace changes
|
2010-12-30 12:25:22 -08:00 |
|
Tom Eastep
|
cd7f94dbdb
|
Merge branch 'master' into 4.4.16
|
2010-12-30 10:37:15 -08:00 |
|
Tom Eastep
|
746c2a5163
|
Correct comment about the action member of the chain structure
|
2010-12-30 10:36:03 -08:00 |
|
Tom Eastep
|
cb751bd225
|
Remove extraneous change log entries
|
2010-12-30 10:02:39 -08:00 |
|
Tom Eastep
|
91227b6d13
|
Don't log jumps to NAT actions
|
2010-12-30 09:56:44 -08:00 |
|
Tom Eastep
|
d8541e4a58
|
Update problems corrected
|
2010-12-30 08:05:04 -08:00 |
|
Tom Eastep
|
e3d1032ab3
|
Set version to Beta 8
|
2010-12-30 07:32:30 -08:00 |
|
Tom Eastep
|
3c4cddeeeb
|
Eliminate process_action3()
|
2010-12-30 06:56:21 -08:00 |
|
Tom Eastep
|
d767d9fea3
|
Better Editing of BLACKLIST_DISPOSITION
|
2010-12-29 18:43:14 -08:00 |
|
Tom Eastep
|
1c55143524
|
Allow parameterized Limit to use log tags
|
2010-12-29 12:20:18 -08:00 |
|
Tom Eastep
|
230d284980
|
Correct a couple of comments
|
2010-12-29 11:36:59 -08:00 |
|
Tom Eastep
|
b7d936dd8e
|
Merge levels in process_action2()
|
2010-12-29 08:23:44 -08:00 |
|
Tom Eastep
|
a4bf11c7d5
|
Some cosmetic cleanup
|
2010-12-28 17:18:43 -08:00 |
|
Tom Eastep
|
d90d56161c
|
Improve readability
|
2010-12-28 16:42:28 -08:00 |
|
Tom Eastep
|
7d41e4b38c
|
Restore level merge behavior with nested actions
|
2010-12-28 16:04:55 -08:00 |
|
Tom Eastep
|
17ed14a895
|
Update comments in the Rules module
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-28 16:02:10 -08:00 |
|
Tom Eastep
|
17a3ca62d5
|
Eliminate the Actions module
|
2010-12-28 13:51:45 -08:00 |
|
Tom Eastep
|
3d4aaad0eb
|
Remove a couple of superfluous tests
|
2010-12-28 12:53:16 -08:00 |
|
Tom Eastep
|
4a8f724f9b
|
Handle duplicate chain name for action chain
|
2010-12-28 12:18:42 -08:00 |
|
Tom Eastep
|
50a3b76e40
|
Rename a variable; reformat an error message
|
2010-12-28 07:49:35 -08:00 |
|
Tom Eastep
|
cc30fc4dbb
|
Eliminate max nest level on actions
|
2010-12-27 17:16:34 -08:00 |
|
Tom Eastep
|
0c3ed598ca
|
Improve diagnostic
|
2010-12-27 17:02:06 -08:00 |
|
Tom Eastep
|
297df02047
|
Catch loops in action invocation graph
|
2010-12-27 16:41:53 -08:00 |
|
Tom Eastep
|
6a1487d628
|
Correct existing optimization issue
|
2010-12-27 12:31:34 -08:00 |
|
Tom Eastep
|
215c05d12b
|
Add some comments -- fix logging with NAT actions
|
2010-12-27 09:05:44 -08:00 |
|
Tom Eastep
|
d5ac12a8ff
|
Bump version to RC 1
|
2010-12-27 07:49:52 -08:00 |
|
Tom Eastep
|
311797e0bf
|
Create nat chain during pre-processing of nat action
|
2010-12-27 07:47:16 -08:00 |
|
Tom Eastep
|
79cbfd0126
|
Allow '--' to specify '-' as an action parameter
|
2010-12-26 17:03:05 -08:00 |
|
Tom Eastep
|
4111432a52
|
Implement optional action parameters
|
2010-12-26 16:13:53 -08:00 |
|
Tom Eastep
|
d8bcbffb88
|
Dead code removal
|
2010-12-26 12:08:10 -08:00 |
|
Tom Eastep
|
d1d9518c42
|
Move process_action2()
|
2010-12-26 11:44:15 -08:00 |
|
Tom Eastep
|
088480e5d9
|
Fix a couple of bugs
|
2010-12-26 11:34:58 -08:00 |
|
Tom Eastep
|
8f9d5a967b
|
Simplify variable substitution
|
2010-12-26 11:07:00 -08:00 |
|
Tom Eastep
|
d4d285af39
|
Revert version to Beta 7
|
2010-12-26 09:01:15 -08:00 |
|
Tom Eastep
|
4fdec73808
|
Fix target of <action(params)>
|
2010-12-26 07:58:20 -08:00 |
|
Tom Eastep
|
758a50fa84
|
Extantiate params during module processing
|
2010-12-25 14:48:14 -08:00 |
|
Tom Eastep
|
bdc3ca16a4
|
Finish revision of action processing
|
2010-12-25 14:28:57 -08:00 |
|
Tom Eastep
|
8218cb3444
|
Pass normalized action name to process_rule_common()
|
2010-12-25 10:15:08 -08:00 |
|
Tom Eastep
|
39f4f03b60
|
Segregate process_action1() from process_actions1()
|
2010-12-25 08:21:32 -08:00 |
|
Tom Eastep
|
1285b73d52
|
Simplify detection of action self-invocation
|
2010-12-25 08:10:23 -08:00 |
|
Tom Eastep
|
6240d41754
|
Add new progress message
|
2010-12-25 07:41:18 -08:00 |
|
Tom Eastep
|
ce8f33b623
|
Add a comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-23 15:38:47 -08:00 |
|
Tom Eastep
|
5e642a1406
|
Update a comment
|
2010-12-23 15:34:07 -08:00 |
|
Tom Eastep
|
b100991cfa
|
Add a couple of comments; move a declaration; simplify a statement
|
2010-12-23 14:17:22 -08:00 |
|
Tom Eastep
|
8ad7300165
|
Fix NONAT and NATONLY rules in an action
|
2010-12-23 07:49:20 -08:00 |
|
Tom Eastep
|
37a383ea4d
|
Used normalized names in requires list
|
2010-12-22 16:57:59 -08:00 |
|
Tom Eastep
|
a51eac91b0
|
Add documentation for parameterized actions
|
2010-12-22 15:09:54 -08:00 |
|
Tom Eastep
|
c6e35be8bc
|
Update version to RC 1
|
2010-12-22 14:37:10 -08:00 |
|
Tom Eastep
|
350f20fc7e
|
Add a comment
|
2010-12-22 14:35:19 -08:00 |
|
Tom Eastep
|
e8de4ce563
|
Add an <action> member to the chain table
|
2010-12-22 10:59:02 -08:00 |
|
Tom Eastep
|
e52feb7da7
|
Fix another bug
|
2010-12-21 17:50:35 -08:00 |
|
Tom Eastep
|
f3abf56cac
|
Restore proper NAT in action handling
|
2010-12-21 15:20:19 -08:00 |
|
Tom Eastep
|
b8d5e09b58
|
Put a couple of routines back in the Rules module
|
2010-12-21 14:57:46 -08:00 |
|
Tom Eastep
|
7052738cd0
|
Remove param manipulation routines for now
|
2010-12-21 13:38:10 -08:00 |
|
Tom Eastep
|
ffbcd1b1fe
|
Catch an action that invokes itself
|
2010-12-21 13:20:44 -08:00 |
|
Tom Eastep
|
ac42fddbce
|
Finish (unpublished) parameterized actions
|
2010-12-21 12:29:52 -08:00 |
|
Tom Eastep
|
6263689c3e
|
Allow Limit to accept parameters
|
2010-12-21 11:38:54 -08:00 |
|
Tom Eastep
|
7989f5094e
|
Implement a better solution to down shared gateways
|
2010-12-21 11:15:41 -08:00 |
|
Tom Eastep
|
25e93b4df3
|
Change dummy MAC address.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-21 09:22:58 -08:00 |
|
Tom Eastep
|
242a9f5a98
|
Remove trailing whitespace
|
2010-12-20 15:16:20 -08:00 |
|
Tom Eastep
|
ef9caf3588
|
Update module versions
|
2010-12-20 15:10:23 -08:00 |
|
Tom Eastep
|
7b8522f756
|
Supply dummy MAC for unreachable gateway
|
2010-12-20 15:07:53 -08:00 |
|
Tom Eastep
|
c63bb70585
|
Bump version to Beta 6
|
2010-12-20 13:17:35 -08:00 |
|
Tom Eastep
|
708e7672a3
|
More wildcard optimization
|
2010-12-20 13:00:48 -08:00 |
|
Tom Eastep
|
7061997324
|
Optimize wildcard resolution.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-20 12:22:26 -08:00 |
|
Tom Eastep
|
ebbf381e27
|
Rename %logactionchains -> %usedactions
|
2010-12-20 10:32:04 -08:00 |
|
Tom Eastep
|
8c8e4d1654
|
Unconditionally cache interface lookup results
|
2010-12-20 10:31:14 -08:00 |
|
Tom Eastep
|
7a1a303265
|
Unconditionally cache the result of wildcard lookups
|
2010-12-20 10:07:19 -08:00 |
|
Tom Eastep
|
433b3fbd87
|
Add some insurance against wildcard interfaces
|
2010-12-20 08:45:10 -08:00 |
|
Tom Eastep
|
b56b81ef74
|
Elmininate export of %usedactions
|
2010-12-19 18:18:37 -08:00 |
|
Tom Eastep
|
262b4044f8
|
Fix more physical name issues
|
2010-12-19 16:38:24 -08:00 |
|
Tom Eastep
|
44f001388a
|
Only call normalized_action_name() when needed
|
2010-12-19 13:32:08 -08:00 |
|
Tom Eastep
|
7be3ed33d5
|
Fix undef access out of notrack file
|
2010-12-19 13:30:02 -08:00 |
|
Tom Eastep
|
c302e82233
|
Disallow wildcard interfaces in additional contexts
|
2010-12-19 10:46:35 -08:00 |
|
Tom Eastep
|
54c57e3bc7
|
Disallow wildcard interfaces in additional contexts
|
2010-12-19 10:43:03 -08:00 |
|
Tom Eastep
|
55452c6e59
|
Disallow wildcards in the proxyarp file
|
2010-12-19 08:55:03 -08:00 |
|
Tom Eastep
|
8526dafc5d
|
Don't allow interface that is identical to the root of a wildcard
|
2010-12-19 08:10:41 -08:00 |
|
Tom Eastep
|
45faba0b7c
|
Enable parameters for actions
|
2010-12-18 16:29:29 -08:00 |
|
Tom Eastep
|
4b22bbd90d
|
Add logic for parameterized actions
|
2010-12-18 16:16:29 -08:00 |
|
Tom Eastep
|
4573b5ba8e
|
Generate normalized name in process_rule_common()
|
2010-12-18 13:32:53 -08:00 |
|
Tom Eastep
|
21166e07f3
|
Add action normalization routines
|
2010-12-18 12:31:37 -08:00 |
|
Tom Eastep
|
c659f05491
|
Make generate_matrix locals more obvious
|
2010-12-17 20:16:09 -08:00 |
|
Tom Eastep
|
b9a086c7f2
|
Fix fly-speck in prog.header
|
2010-12-16 09:55:31 -08:00 |
|
Tom Eastep
|
9d0bff62fa
|
Finish code re-org
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-15 12:57:55 -08:00 |
|
Tom Eastep
|
92894a7482
|
Step 1 of module re-org
|
2010-12-15 11:57:51 -08:00 |
|
Tom Eastep
|
880a94e42f
|
Update documentation regarding Hack removal
|
2010-12-14 11:19:17 -08:00 |
|
Tom Eastep
|
999ef7105b
|
Eliminate process_macro1() and process_action1()
They are replaced with process_macro() and process_rule_common() respectively.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-14 08:55:30 -08:00 |
|
Tom Eastep
|
94faafd662
|
Reorg export list
|
2010-12-13 21:05:21 -08:00 |
|
Tom Eastep
|
9e684a80c1
|
Move more code from Rules.pm to Actions.pm
|
2010-12-13 17:54:53 -08:00 |
|
Tom Eastep
|
5b0d8922e7
|
Consolidate definitions of rule exception command handling
|
2010-12-13 17:29:22 -08:00 |
|
Tom Eastep
|
0ec68c7407
|
Prune the Actions.pm export list
|
2010-12-13 16:55:00 -08:00 |
|
Tom Eastep
|
09bb5bb9b3
|
Use $macro_commands when splitting action file records
|
2010-12-13 16:46:40 -08:00 |
|
Tom Eastep
|
c18154cedc
|
NAT in Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-13 08:26:24 -08:00 |
|
Tom Eastep
|
ff402dcf09
|
Add a comment to the params for process_rule_common()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 13:02:27 -08:00 |
|
Tom Eastep
|
2e7dd0de97
|
Use process_rule_common() to process entries in action files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:55:32 -08:00 |
|
Tom Eastep
|
444a38ae2e
|
Add a chain reference argument to process_rule_common()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:22:12 -08:00 |
|
Tom Eastep
|
dfa47cc300
|
Implement format-2 Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-12 12:09:48 -08:00 |
|
Tom Eastep
|
1bbe95ead8
|
Allow wide macros in actions
|
2010-12-12 10:14:47 -08:00 |
|
Tom Eastep
|
acbbdc1690
|
Bump version in the Proxyarp module
|
2010-12-12 08:56:12 -08:00 |
|
Tom Eastep
|
13c4d21762
|
Replace a couple of lists of scalars with arrays; document move of process_rules1()
|
2010-12-12 07:29:46 -08:00 |
|
Tom Eastep
|
138e49276d
|
Rename process_rule1() to process_rule_common()
|
2010-12-11 17:19:43 -08:00 |
|
Tom Eastep
|
7b86c699b6
|
Move process_rule1() from Rules.pm to Actions.pm
|
2010-12-11 17:16:50 -08:00 |
|
Tom Eastep
|
48b00d719e
|
Complete Proxy NDP implementation
|
2010-12-11 10:04:07 -08:00 |
|
Tom Eastep
|
147e4da223
|
Ensure that interfaces listed in the tcinterfaces file are known
|
2010-12-11 07:39:16 -08:00 |
|
Tom Eastep
|
0344cdb294
|
Correct handling of proxyndp
|
2010-12-11 07:10:50 -08:00 |
|
Tom Eastep
|
1f4b218cde
|
Ensure that interfaces listed in the proxyarp (proxyndp) file are known
|
2010-12-11 07:10:23 -08:00 |
|
Tom Eastep
|
caa4a54e38
|
Implement IPv6 proxyndp
|
2010-12-10 19:06:44 -08:00 |
|
Tom Eastep
|
0a4e098c69
|
Fix broken logical naming in Proxy ARP
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-10 07:52:54 -08:00 |
|
Tom Eastep
|
fc6dbb3d56
|
Bump version to Beta 4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-10 06:53:36 -08:00 |
|
Tom Eastep
|
b9ee064284
|
Update version to Beta 4
|
2010-12-04 11:40:34 -08:00 |
|
Tom Eastep
|
19f40ab721
|
Bump version to Beta 3
|
2010-12-03 13:43:46 -08:00 |
|
Tom Eastep
|
2e35ad0a1b
|
Fix params parsing on older distros
|
2010-12-03 13:40:11 -08:00 |
|
Tom Eastep
|
5458d9367f
|
Bump version and document bug catcher
|
2010-12-03 09:17:26 -08:00 |
|
Tom Eastep
|
8ce1755f8e
|
Add bug-catcher to get_params()
|
2010-12-03 08:05:11 -08:00 |
|
Tom Eastep
|
04537b8f2d
|
Add some comments
|
2010-12-02 16:10:35 -08:00 |
|
Tom Eastep
|
4cd77bf9aa
|
Correct handling of params file opens.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-12-02 10:14:45 -08:00 |
|
Tom Eastep
|
ec75c8aa86
|
Redirect params output to stderr
|
2010-12-01 15:04:33 -08:00 |
|
Tom Eastep
|
f68bfde86f
|
Continue to fine-tune params processing
|
2010-12-01 13:57:16 -08:00 |
|
Tom Eastep
|
d33491d6c6
|
Continue to enhance params procesing
|
2010-12-01 13:18:10 -08:00 |
|
Tom Eastep
|
49cdc5d9eb
|
Make new get_params work with bash
|
2010-12-01 10:41:49 -08:00 |
|
Tom Eastep
|
22580c5be0
|
More parameter processing improvements
|
2010-12-01 10:11:02 -08:00 |
|
Tom Eastep
|
b224eb80d5
|
Omit warning message
|
2010-12-01 09:21:23 -08:00 |
|
Tom Eastep
|
cdb75bfd96
|
Better solution to multi-line exported symbols issue
|
2010-12-01 09:14:09 -08:00 |
|
Tom Eastep
|
5761bfd7d1
|
Document change to params processing
|
2010-12-01 08:16:41 -08:00 |
|
Tom Eastep
|
cae5ddc7e0
|
Initiate 4.4.16
|
2010-11-30 17:30:11 -08:00 |
|
Tom Eastep
|
6dc65e2811
|
Update Rules.pm version
|
2010-11-28 19:21:31 -08:00 |
|
Tom Eastep
|
81cc39049c
|
Cosmetic change
|
2010-11-28 09:22:03 -08:00 |
|
Tom Eastep
|
f45af8ff0a
|
Localize $current_params
|
2010-11-28 09:14:52 -08:00 |
|
Tom Eastep
|
ecb71f7791
|
Eliminate @param_stack
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2010-11-28 08:06:58 -08:00 |
|
Tom Eastep
|
4db68697b2
|
Fix root cause of macro.JAP failure
|
2010-11-28 07:42:12 -08:00 |
|
Tom Eastep
|
3a8634934a
|
Correct macro.JAP
|
2010-11-28 07:05:18 -08:00 |
|
Tom Eastep
|
b771ce2925
|
Clarify 'switch' in the Fool's firewall article
|
2010-11-27 10:28:44 -08:00 |
|
Tom Eastep
|
1ae9a3185a
|
Disallow standard providers in the routes file
|
2010-11-26 16:41:30 -08:00 |
|
Tom Eastep
|
053da3a2c0
|
Fix undefined value on HEADER_MATCH
|
2010-11-26 16:41:07 -08:00 |
|
Tom Eastep
|
d5fc0150d0
|
Set version to 4.4.15
|
2010-11-26 09:49:40 -08:00 |
|