Tom Eastep
|
da7516d401
|
Update config files and manpages for BLACKLISTSECTION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-06 12:05:07 -08:00 |
|
Tom Eastep
|
755ed9859b
|
Merge branch '4.4.25' of ssh://shorewall.git.sourceforge.net/gitroot/shorewall/shorewall
|
2011-11-06 06:16:43 -08:00 |
|
Roberto C. Sanchez
|
cf8c30904d
|
Add support for a "status" command to the Debian init scripts
(cherry picked from commit d36a2030ea )
|
2011-11-06 09:10:59 -05:00 |
|
Tom Eastep
|
38d1a2ada9
|
Add DropSmurfs and TCPFlags to the IPv6 actions.std file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-05 07:54:21 -07:00 |
|
Tom Eastep
|
d883e45f83
|
Correct 'start -f' with AUTOMAKE=Yes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-05 07:54:05 -07:00 |
|
Tom Eastep
|
e236be37db
|
Include the rawpost table in dump output
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-05 07:52:40 -07:00 |
|
Tom Eastep
|
8b8140cc9f
|
Add 'Basic Filter' capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-11-01 06:34:57 -07:00 |
|
Tom Eastep
|
3aac252645
|
Cleanup of IPv6 config files and manpages
- Add BLACKLIST section to IPv6 rules files.
- Add USE_DEFAULT_RT to the shorewall6.conf files and to the manpage.
|
2011-10-26 05:59:27 -07:00 |
|
Tom Eastep
|
54ba4ed879
|
Add MARK column to route_rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-23 07:56:53 -07:00 |
|
Tom Eastep
|
bf6ea13898
|
Update .service files with patch from Jonathan Underwood
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-12 06:13:15 -07:00 |
|
Tom Eastep
|
a077a9821d
|
Implement rate estimation
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-11 15:27:24 -07:00 |
|
Tom Eastep
|
e728d663f9
|
Implement IPTABLES_S capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-10-01 13:54:52 -07:00 |
|
Tom Eastep
|
76707d29ba
|
Make find_first_interface_address() more lenient on IPv6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-23 14:44:01 -07:00 |
|
Tom Eastep
|
caddd65412
|
Rename condition->switch and add more documentation.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-23 12:33:55 -07:00 |
|
Tom Eastep
|
75b4540d26
|
Add support for condition match in the rules file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-21 15:20:50 -07:00 |
|
Tom Eastep
|
d005536fcc
|
Merge branch 'master' of ssh://shorewall.git.sourceforge.net/gitroot/shorewall/shorewall
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-20 16:20:34 -07:00 |
|
Tom Eastep
|
2749857eb2
|
Support 'shorewall6 show rawpost'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-18 06:57:57 -07:00 |
|
Tom Eastep
|
895d2f34c5
|
Externalize stateless NAT for IPv6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-15 14:27:05 -07:00 |
|
Tom Eastep
|
e59bb25225
|
Cosmetic change
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-13 11:32:25 -07:00 |
|
Tom Eastep
|
8fe6425690
|
Correct DONT_LOAD
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-13 07:42:26 -07:00 |
|
Tom Eastep
|
149e697d71
|
Clarify routeback vs routefilter/sfilter in interfaces manpages.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-07 11:12:43 -07:00 |
|
Tom Eastep
|
2285dce4d1
|
Fix debugging of ipv6 ruleset
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-03 13:58:05 -07:00 |
|
Tom Eastep
|
058b746f57
|
Use /sys/module/ to speed up module loading
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-09-03 11:49:31 -07:00 |
|
Tom Eastep
|
bcb5d76c2f
|
Remove QUOTA_MATCH code from Shorewall.6 lib.cli
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-26 12:56:51 -07:00 |
|
Tom Eastep
|
971adc3d5b
|
Add support for serviced in the installers
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-23 14:07:44 -07:00 |
|
Tom Eastep
|
33afe26a19
|
Add Redhat/Fedora init scripts from Jonathan Underwood
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-22 09:05:40 -07:00 |
|
Tom Eastep
|
4e15786156
|
Add copyright statements to the .service files
|
2011-08-22 06:53:04 -07:00 |
|
Tom Eastep
|
e6a6a1a609
|
Add .service files for systemd
|
2011-08-22 06:27:23 -07:00 |
|
Tom Eastep
|
24aacd67e6
|
Improve lockfile arguments
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-21 11:28:45 -07:00 |
|
Tom Eastep
|
56addf3d4c
|
Remove stale lock files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-21 10:53:24 -07:00 |
|
Tom Eastep
|
2963acee80
|
Remove stale lock files
|
2011-08-21 10:21:58 -07:00 |
|
Tom Eastep
|
bc706324e9
|
Add an ALL section to the rules files.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-15 15:32:24 -07:00 |
|
Tom Eastep
|
0b2a8b12c7
|
Implement Stateless NAT support.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-14 12:01:17 -07:00 |
|
Tom Eastep
|
97121116a3
|
Add rawpost table detection
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-13 11:14:29 -07:00 |
|
Tom Eastep
|
4824c9b8ff
|
Add QUOTA_MATCH capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-08 14:37:47 -07:00 |
|
Tom Eastep
|
35457f4e95
|
Remove she-bang from lib.*
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-03 07:54:46 -07:00 |
|
Tom Eastep
|
679de4ccf6
|
Apply Orion Poplawski's 'qtnoin' patch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-02 16:51:49 -07:00 |
|
Tom Eastep
|
f675513383
|
Make 'build' work on a Mac
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 10:57:32 -07:00 |
|
Tom Eastep
|
a992ec594a
|
Accomodate kernel version 3.0
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-27 17:03:27 -07:00 |
|
Tom Eastep
|
9661b445f2
|
Make install/uninstall files version independent
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-13 07:29:47 -07:00 |
|
Tom Eastep
|
b70666eaf6
|
Move .spec files to release/
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-08 10:07:08 -07:00 |
|
Tom Eastep
|
f977761980
|
Add modules.ipset to modules INCLUDEs.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-05 15:57:24 -07:00 |
|
Tom Eastep
|
cf5613441d
|
Correct loading of xt_ipset
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-05 15:57:14 -07:00 |
|
Tom Eastep
|
fb9e3a84c5
|
Correct check for new ipset match syntax
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-05 15:56:52 -07:00 |
|
Tom Eastep
|
95acabe97e
|
Make load and reload use the .conf file in the CWD
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-05 15:56:38 -07:00 |
|
Tom Eastep
|
1c199a2644
|
Add semicolons in new actions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 14:59:07 -07:00 |
|
Tom Eastep
|
20cee7649e
|
Change quotes in action.Broadcast
|
2011-07-04 13:32:32 -07:00 |
|
Tom Eastep
|
fd44a53608
|
Correct Shorewall6 .spec file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 13:22:27 -07:00 |
|
Tom Eastep
|
a355141f40
|
Correct typo in .spec files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 13:13:52 -07:00 |
|
Tom Eastep
|
87870ad121
|
Add new actions to the .spec file
|
2011-07-04 13:01:49 -07:00 |
|
Tom Eastep
|
e1d8d71348
|
Version to 4.4.22 Beta 1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 09:36:54 -07:00 |
|
Tom Eastep
|
cb8d9e8e14
|
Update IPv6 standard default actions to use new parameterized actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 08:01:18 -07:00 |
|
Tom Eastep
|
caa0a12e8c
|
Implement parameterized default actions for IPv6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 07:52:18 -07:00 |
|
Tom Eastep
|
901b71a85c
|
Add new IPv6 Standard Actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 07:51:22 -07:00 |
|
Tom Eastep
|
610e742ab5
|
Add IPv6 action.Broadcast
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-04 07:00:58 -07:00 |
|
Tom Eastep
|
bd1d7d6f92
|
Don't quote the empty setting of LOGLIMIT
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-03 15:55:45 -07:00 |
|
Tom Eastep
|
f96c32634c
|
Make config file quoting more consistent with update
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-03 15:55:27 -07:00 |
|
Tom Eastep
|
3e8c1f4e3c
|
Add undocumented -c option to show and dump
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-29 11:48:23 -07:00 |
|
Tom Eastep
|
cbeebb6bf8
|
Bump version to 4.4.21.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-29 11:36:04 -07:00 |
|
Tom Eastep
|
fe2ef23f04
|
Correct install.sh
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-24 21:16:55 -07:00 |
|
Tom Eastep
|
f4acb5fa2f
|
Install annotated and un-annotated config files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-24 15:13:40 -07:00 |
|
Tom Eastep
|
6f68ed5508
|
Initiate 4.4.21 RC 1
|
2011-06-23 16:23:52 -07:00 |
|
Tom Eastep
|
de7d95e7ff
|
Rename 'ipset v4' -> 'ipset v5'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-23 06:36:35 -07:00 |
|
Tom Eastep
|
04d551d8ca
|
Detect ipset V4 and use its syntax
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-22 16:43:42 -07:00 |
|
Tom Eastep
|
7b2cbf2449
|
Make 'show dynamic <zone>' work correctly with new ipset program
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-20 17:22:04 -07:00 |
|
Tom Eastep
|
44cbfd8f27
|
Correct defects found while unit testing IPv6 Dynamic Zones
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-20 13:33:25 -07:00 |
|
Tom Eastep
|
7753f798b0
|
Bump Version to Beta 3
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-19 10:09:53 -07:00 |
|
Tom Eastep
|
2769b09f64
|
Correct typeos in shorewall and shorwall6
|
2011-06-19 08:39:44 -07:00 |
|
Tom Eastep
|
4916610033
|
Rename upgrade => update
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-19 07:14:27 -07:00 |
|
Tom Eastep
|
df2f7ec6a5
|
Implement 'upgrade' and delete the '-u' and '-a' options of 'check'.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-18 17:39:44 -07:00 |
|
Tom Eastep
|
c7be1f1b38
|
Remove silly "#LAST LINE" from shorewall6.conf
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-18 13:14:55 -07:00 |
|
Tom Eastep
|
6f2cc31dde
|
Implement .conf file upgrade
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-18 13:03:55 -07:00 |
|
Tom Eastep
|
e5d8be5aa5
|
Bump version to Beta 2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-18 11:23:43 -07:00 |
|
Tom Eastep
|
10ae91b600
|
Delete deprecated options from the .conf files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-12 13:46:26 -07:00 |
|
Tom Eastep
|
8780aff7f2
|
Rename PLAIN->ANNOTATED
|
2011-06-12 09:45:50 -07:00 |
|
Tom Eastep
|
a0c5647c2a
|
Re-add IPv6 ipset support
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-12 06:22:18 -07:00 |
|
Tom Eastep
|
0e839f3d7b
|
Initiate 4.4.21
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 09:54:35 -07:00 |
|
Tom Eastep
|
9fb2ab718c
|
Have AUTOMAKE follow CONFIG_PATH
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-07 08:51:36 -07:00 |
|
Tom Eastep
|
642319d706
|
Change annotated documentation default
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 15:40:21 -07:00 |
|
Tom Eastep
|
cfb3d6a801
|
Merge branch '4.4.20'
|
2011-06-06 14:09:26 -07:00 |
|
Tom Eastep
|
6136e986cf
|
Update version to 4.4.20.1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 14:08:25 -07:00 |
|
Tom Eastep
|
447d0f0b2d
|
Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 09:46:52 -07:00 |
|
Tom Eastep
|
c42c6864b4
|
Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 09:46:22 -07:00 |
|
Tom Eastep
|
2803d3ee0b
|
Merge branch '4.4.20'
|
2011-06-06 07:02:57 -07:00 |
|
Tom Eastep
|
c2e78bfaf8
|
Correct address of the FSF
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-06 06:55:40 -07:00 |
|
Tom Eastep
|
1e883c2fdf
|
Merge branch '4.4.20'
|
2011-06-02 06:47:09 -07:00 |
|
Tom Eastep
|
086a99ea24
|
Don't initialize PLAIN
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-06-02 06:23:57 -07:00 |
|
Tom Eastep
|
468ff6efab
|
First cut at IPSET/Dynamic-zone support in Shorewall6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-05-31 11:23:43 -07:00 |
|
Tom Eastep
|
8df470b5f5
|
Version to 4.4.20
|
2011-05-31 09:30:18 -07:00 |
|
Tom Eastep
|
2dec3a8ecb
|
Correct handling of AUDIT_TARGET is both cli libraries.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-05-30 11:39:21 -07:00 |
|
Tom Eastep
|
7c8191ddae
|
Remove a pushd from the Shorewall6 installer
|
2011-05-30 08:43:34 -07:00 |
|
Tom Eastep
|
7b560eefe4
|
Allow compound options in the installers
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-05-30 08:15:59 -07:00 |
|
Tom Eastep
|
a71136fd5a
|
Rework configuration files for Shorewall and Shorewall6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-05-29 14:34:18 -07:00 |
|
Tom Eastep
|
316b2b8e71
|
Add MACLIST_DISPOSITION shorewall6.conf manpage
|
2011-05-28 20:01:54 -07:00 |
|
Tom Eastep
|
60d9f48f15
|
Add MACLIST_* to shorewall6.conf
|
2011-05-28 19:52:39 -07:00 |
|
Tom Eastep
|
c81b4b0aea
|
Add LOGRATE to shorewall6.conf
|
2011-05-28 19:48:46 -07:00 |
|
Tom Eastep
|
22278188dd
|
Add LOGBURST to shorewall6.conf
|
2011-05-28 19:46:47 -07:00 |
|
Tom Eastep
|
6a37fa89e6
|
Remove duplicate RESTOREFILE
|
2011-05-28 19:43:45 -07:00 |
|
Tom Eastep
|
bc4f6eecce
|
Install shorewall6.conf.default
|
2011-05-28 16:02:31 -07:00 |
|
Tom Eastep
|
839909e8ea
|
Remove LOCKFILE from shorewall6.conf
|
2011-05-28 15:15:54 -07:00 |
|