holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

shorewall forget

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1298 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-04-30 03:29:07 +00:00
parent d97b771632
commit 93da1e7cca
4 changed files with 37 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall2/changelog.txt
View File

@ -33,3 +33,7 @@ Changes since 2.0.1
integration). integration).
16) Use modprobe if it is available. 16) Use modprobe if it is available.
17) Lots of fixes to 'save'
18) 'shorewall forget'

25
Shorewall2/help
View File

@ -116,6 +116,14 @@ drop)
See also \"help address\"" See also \"help address\""
;; ;;
forget)
echo "forget: forget
Deletes /var/lib/shorewall/save and /var/lib/shorewall/restore. Those
files are created by the 'shorewall save' command
See also \"help save\""
;;
help) help)
echo "help: help [<command> | host | address ] echo "help: help [<command> | host | address ]
Display helpful information about the shorewall commands." Display helpful information about the shorewall commands."
@ -185,16 +193,23 @@ restart)
If \"-q\" is specified, less detain is displayed making it easier to spot warnings" If \"-q\" is specified, less detain is displayed making it easier to spot warnings"
;; ;;
Restore) restore)
echo "restore: restore echo "restore: restore
Restore Shorewall to it's last state saved using the 'save' command Restore Shorewall to its last state saved using the 'save' command
Existing connections are maintained. Existing connections are maintained.
See also \"help save\" and \"help forget\""
;; ;;
save) save)
echo "save: save echo "save: save
The dynamic data is stored in /var/lib/shorewall/save The dynamic data is stored in /var/lib/shorewall/save. The state of the
Shorewall allow, drop, rejct and save implement dynamic blacklisting." firewall is stored in /var/lib/shorewall/restore for use by the 'shorewall restore'
and 'shorewall -f start' commands.
Shorewall allow, drop, rejct and save implement dynamic blacklisting.
See also \"help restore\" and \"help forget\""
;; ;;
show) show)
@ -225,7 +240,7 @@ start)
Start shorewall. Existing connections through shorewall managed Start shorewall. Existing connections through shorewall managed
interfaces are untouched. New connections will be allowed only interfaces are untouched. New connections will be allowed only
if they are allowed by the firewall rules or policies. if they are allowed by the firewall rules or policies.
If \"-q\" is specified, less detain is displayed making it easier to spot warnings" If \"-q\" is specified, less detain is displayed making it easier to spot warnings
If \"-f\" is specified, the last saved configuraton if any will be restored" If \"-f\" is specified, the last saved configuraton if any will be restored"
;; ;;

5
Shorewall2/releasenotes.txt
View File

@ -52,10 +52,11 @@ New Features:
(currently, the firewall is placed in the 'stopped' state). (currently, the firewall is placed in the 'stopped' state).
f) If you have previously saved the running configuration and want f) If you have previously saved the running configuration and want
Shorewall to discard it, simply 'rm /var/lib/shorewall/restore'. Shorewall to discard it, use the 'shorewall forget' command.
WARNING: iptables 1.2.9 is broken with respect to iptables-save; WARNING: iptables 1.2.9 is broken with respect to iptables-save;
you must patch iptables 1.2.9 with the iptables patch availale from If your kernel has connection tracking match support, you must
patch iptables 1.2.9 with the iptables patch availale from
the Shorewall errata page. the Shorewall errata page.
2) The previous implementation of dynamic zones was difficult to 2) The previous implementation of dynamic zones was difficult to

10
Shorewall2/shorewall
View File

@ -80,6 +80,10 @@
# "dropped" addresses so that it will # "dropped" addresses so that it will
# be automatically reinstated the # be automatically reinstated the
# next time that Shorewall starts. # next time that Shorewall starts.
# Save the current state so that 'shorewall
# restore' can be used.
#
# shorewall forget Discard the data saved by 'shorewall save'
# #
# shorewall ipaddr [ <address>/<cidr> | <address> <netmask> ] # shorewall ipaddr [ <address>/<cidr> | <address> <netmask> ]
# #
@ -539,6 +543,7 @@ usage() # $1 = exit status
echo " clear" echo " clear"
echo " delete <interface>[:<host>] <zone>" echo " delete <interface>[:<host>] <zone>"
echo " drop <address> ..." echo " drop <address> ..."
echo " forget"
echo " help [ <command > | host | address ]" echo " help [ <command > | host | address ]"
echo " hits" echo " hits"
echo " ipcalc [ <address>/<vlsm> | <address> <netmask> ]" echo " ipcalc [ <address>/<vlsm> | <address> <netmask> ]"
@ -986,6 +991,11 @@ case "$1" in
fi fi
mutex_off mutex_off
;; ;;
forget)
rm -f /var/lib/shorewall/restore
rm -f /var/lib/shorewall/save
echo " Previously saved information discarded"
;;
ipcalc) ipcalc)
[ -n "$debugging" ] && set -x [ -n "$debugging" ] && set -x
if [ $# -eq 2 ]; then if [ $# -eq 2 ]; then