15105 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tom Eastep	baa791a1e3	Handle SELinux getattr denials in open() processing ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-26 16:41:50 -07:00
Tom Eastep	8b4b965f63	Remove unnecessary disable/enable of script generation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 14:36:30 -07:00
Tom Eastep	8ee2d6246c	Update a comment in the compiler ... - get_configuration() also processes the shorewallrc file(s) Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-21 12:32:34 -07:00
Tom Eastep	a7be3dfece	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:13 -07:00
Tom Eastep	846e8c4ece	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:29:08 -07:00
Tom Eastep	e2bf7e6584	Align progress messages produced by 'reenable' ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:28:09 -07:00
Tom Eastep	ff3994f6a1	Correct reenable logic ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 13:17:50 -07:00
Tom Eastep	494ec9c59c	Avoid extra comparison in reload_command() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:49:11 -07:00
Tom Eastep	1cde92e8f3	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:43:44 -07:00
Tom Eastep	721a1e3b33	Initialize g_dockeringress ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 10:39:52 -07:00
Tom Eastep	84fa774cb7	Change copyright dates in lib.runtime ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-19 09:03:00 -07:00
Tom Eastep	c39bc7b65f	Update version of lib.*installer ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 13:09:35 -07:00
Tom Eastep	2548e8741d	Update version and copyright dates in lib.common ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 13:07:37 -07:00
Tom Eastep	0a31fba6bb	Update version and copyright dates in lib.core ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 13:00:50 -07:00
Tom Eastep	9701c9c522	Update version and copyright dates in lib.base ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 12:57:02 -07:00
Tom Eastep	973d352209	Update shorewall script ... - Update copyright dates - Add a comment about PRODUCT setting Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 12:51:27 -07:00
Tom Eastep	91e59c2ed4	Remove the Lite Makefiles ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 11:56:04 -07:00
Tom Eastep	be5aabcbfb	Correct typo in Chains.pm ... &g_dockeringress -> $g_dockeringress Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:14:22 -07:00
Tom Eastep	a8937e6bc8	Correct harmless typo ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 10:06:41 -07:00
Tom Eastep	e91bd9a0e9	Remove useless/empty .tmp file when SAVE_IPSETS is set ... - Add SAVE_IPSETS support to the Redhat/Fedora sysv init script Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-18 09:28:43 -07:00
Tom Eastep	5e1cf17ebc	DOCKER-INGRESS support ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-17 10:57:29 -07:00
Tom Eastep	85a7ec6fe5	Correct module loading in the compiler ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-14 15:08:38 -07:00
Tom Eastep	fb831e3128	Remove empty/useless ipsets tmp file in Shorewall-init ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:56:24 -07:00
Tom Eastep	2ed11c7e15	Default ADD_IP_ALIASES to 'No' in Shorewall6 ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 11:55:53 -07:00
Tom Eastep	ef1353790e	Correct VLSM editing in the 'ipcalc' command. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:41 -07:00
Tom Eastep	4f79d2e82b	Move and simplify handling of nat columns ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-12 10:53:04 -07:00
Tom Eastep	e6a2ba78a4	Correct handling of DEST column during action invocation ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 10:05:37 -07:00
Tom Eastep	41ea3bdeda	Modify the Event actions to handle NAT rules ... - Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:47:12 -07:00
Tom Eastep	1065c2951b	Allow NAT targets to be passed to the Event actions ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-08 09:46:03 -07:00
Tom Eastep	3b373f3f21	Correct handling of ipsets in the DEST column of the snat file ... - Also corrected handling of exclusion Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-06 11:30:42 -07:00
Tom Eastep	0c05ab3bff	Correct typo in shorewall-snat(5) ... - missing ':' in IPv4 Example 4. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-09-05 10:29:19 -07:00
Tom Eastep	ef3a33e3f4	Merge branch '5.1.6' ... # Conflicts: # Shorewall-core/lib.common Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-30 15:02:23 -07:00
Tom Eastep	8a78fb6e77	Correct -p check for the conntrack utility's availability ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-29 09:06:36 -07:00
Tom Eastep	b54a691110	Improve dynamic gateway detection ... - Use provider's routing table, if any Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 15:04:47 -07:00
Tom Eastep	90f33dd436	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:48:14 -07:00
Tom Eastep	b7aef24d7c	Delete useless line of code ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 12:18:29 -07:00
Tom Eastep	6f475cde3f	Eliminate MODULE_SUFFIX ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 10:19:25 -07:00
Tom Eastep	6053a40af0	Apply Tuomo Soini's loadmodule patch ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-23 09:20:50 -07:00
Tom Eastep	7e4dba7623	Revert "Correct check for module already loaded" ... This reverts commit 2e98d4375b.	2017-08-23 08:01:25 -07:00
Tom Eastep	3d322d31b7	Add UDP rule to macro.RDP ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-22 08:07:32 -07:00
Tom Eastep	34e4fffd7d	Module suffix changes ... - Re-order default list in the compiler to match lib.common - MODULE_SUFFIX="ko ko.xz" in standard .conf files. Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 12:44:23 -07:00
Tom Eastep	2e98d4375b	Correct check for module already loaded ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-21 10:27:29 -07:00
Tom Eastep	419ff8903b	Invert logic in Shorewall::Chains::delete_reference() - better readability ... - similar change in Shorewall::Chains::adjust_reference_counts() Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:25:27 -07:00
Tom Eastep	390ac30be8	Remove a superfluous line of code from Shorewall::Chains::format_rule() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 12:12:54 -07:00
Tom Eastep	8cb98f16ea	Add a comment in Shorewall::Chains::optimize_level8() ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-19 08:08:24 -07:00
Tom Eastep	5a9f179e25	Allow port variables as the server port in DNAT rules ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 15:36:18 -07:00
Tom Eastep	d8eca457de	Correct typo in the Aliased Interfaces article. ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-16 08:24:44 -07:00
Tom Eastep	8641d53bd1	Use MUTEX_TIMEOUT for ip[6]tables --wait interval ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-15 14:02:08 -07:00
Tom Eastep	7e3521e221	RESTORE_WAIT_OPTION ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 18:56:40 -07:00
Tom Eastep	0603f8e355	Serialize start of IPv4 and IPv6 under systemd ... Signed-off-by: Tom Eastep <teastep@shorewall.net>	2017-08-13 12:48:18 -07:00