forked from extern/shorewall_code
Rename Shorewall4 to Shorewall-pl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5665 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
5890e5ddb5
commit
9bde119b32
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Accounting.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Accounting.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Actions.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Actions.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Chains.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Chains.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Common.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Common.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Config.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Config.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
@ -37,6 +37,7 @@ our @VERSION = 1.00;
|
||||
#
|
||||
our %env = ( SHAREDIR => '/usr/share/shorewall' ,
|
||||
CONFDIR => '/etc/shorewall',
|
||||
SHAREDIR4 => '/usr/share/shorewall-pl/',
|
||||
LOGPARMS => '',
|
||||
VERSION => '3.9.0-1',
|
||||
);
|
||||
@ -366,9 +367,12 @@ sub get_configuration() {
|
||||
default_yes_no 'BLACKLISTNEWONLY' , '';
|
||||
default_yes_no 'DISABLE_IPV6' , '';
|
||||
default_yes_no 'DYNAMIC_ZONES' , '';
|
||||
default_yes_no 'BRIDGING' , '';
|
||||
|
||||
fatal_error "DYNAMIC_ZONES=Yes is incompatible with the -e option" if $config{DYNAMIC_ZONES} and $ENV{EXPORT};
|
||||
|
||||
default_yes_no 'BRIDGING' , '';
|
||||
|
||||
fatal_error 'BRIDGING=Yes is not supported by Shorewall-pl' . $env{VERSION} if $config{BRIDGING};
|
||||
|
||||
default_yes_no 'STARTUP_ENABLED' , 'Yes';
|
||||
default_yes_no 'DELAYBLACKLISTLOAD' , '';
|
||||
@ -376,11 +380,11 @@ sub get_configuration() {
|
||||
default_yes_no 'RFC1918_STRICT' , '';
|
||||
default_yes_no 'SAVE_IPSETS' , '';
|
||||
|
||||
warning_message 'SAVE_IPSETS=Yes is not supported by Shorewall4 ' . $env{VERSION} if $config{SAVE_IPSETS};
|
||||
warning_message 'SAVE_IPSETS=Yes is not supported by Shorewall-pl ' . $env{VERSION} if $config{SAVE_IPSETS};
|
||||
|
||||
default_yes_no 'MAPOLDACTIONS' , '';
|
||||
|
||||
warning_message 'MAPOLDACTIONS=Yes is not supported by Shorewall4 ' . $env{VERSION} if $config{MAPOLDACTIONS};
|
||||
warning_message 'MAPOLDACTIONS=Yes is not supported by Shorewall-pl ' . $env{VERSION} if $config{MAPOLDACTIONS};
|
||||
|
||||
default_yes_no 'FASTACCEPT' , '';
|
||||
default_yes_no 'IMPLICIT_CONTINUE' , '';
|
||||
@ -571,7 +575,7 @@ sub generate_aux_config() {
|
||||
|
||||
create_temp_aux_config;
|
||||
|
||||
emit( "#\n# Shorewall auxiliary configuration file created by Shorewall4 version " . $env{VERSION} . ' - ' . ( localtime ) . "\n#" );
|
||||
emit( "#\n# Shorewall auxiliary configuration file created by Shorewall-pl version " . $env{VERSION} . ' - ' . ( localtime ) . "\n#" );
|
||||
|
||||
for my $option qw(VERBOSITY LOGFILE LOGFORMAT IPTABLES PATH SHOREWALL_SHELL SUBSYSLOCK RESTOREFILE SAVE_IPSETS) {
|
||||
conditionally_add_option $option;
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Hosts.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Hosts.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/IPAddrs.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/IPAddrs.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Interfaces.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Interfaces.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Macros.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Macros.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Nat.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Nat.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Policy.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Policy.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Providers.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Providers.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Proxyarp.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Proxyarp.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Rules.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Rules.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Tc.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Tc.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Tunnels.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Tunnels.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,5 +1,5 @@
|
||||
#
|
||||
# Shorewall4 3.9 -- /usr/share/shorewall4/Shorewall/Zones.pm
|
||||
# Shorewall-pl 3.9 -- /usr/share/shorewall-pl/Shorewall/Zones.pm
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
|
@ -1,6 +1,6 @@
|
||||
#! /usr/bin/perl -w
|
||||
#
|
||||
# The Shoreline Firewall4 (Shorewall4) Packet Filtering Firewall Compiler - V3.9
|
||||
# The Shoreline Firewall4 (Shorewall-pl) Packet Filtering Firewall Compiler - V3.9
|
||||
#
|
||||
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
||||
#
|
||||
@ -40,7 +40,7 @@
|
||||
# This program performs rudimentary shell variable expansion on action and macro files.
|
||||
|
||||
use strict;
|
||||
use lib '/usr/share/shorewall4';
|
||||
use lib '/usr/share/shorewall-pl';
|
||||
use Shorewall::Common;
|
||||
use Shorewall::Config;
|
||||
use Shorewall::Chains;
|
||||
@ -60,7 +60,7 @@ use Shorewall::Proc;
|
||||
use Shorewall::Proxyarp;
|
||||
|
||||
sub generate_script_1 {
|
||||
copy '/usr/share/shorewall4/prog.header';
|
||||
copy $env{SHAREDIR4} . 'prog.header';
|
||||
|
||||
my $date = localtime;
|
||||
|
||||
@ -442,7 +442,7 @@ stop_firewall() {
|
||||
|
||||
sub generate_script_2 () {
|
||||
|
||||
copy '/usr/share/shorewall4/prog.functions';
|
||||
copy $env{SHAREDIR4} . 'prog.functions';
|
||||
|
||||
emit '#';
|
||||
emit '# Setup Routing and Traffic Shaping';
|
||||
@ -575,7 +575,7 @@ esac';
|
||||
|
||||
emit "}\n";
|
||||
|
||||
copy '/usr/share/shorewall4/prog.footer';
|
||||
copy $env{SHAREDIR4} . 'prog.footer';
|
||||
}
|
||||
|
||||
sub compile_firewall( $ ) {
|
||||
@ -593,14 +593,12 @@ sub compile_firewall( $ ) {
|
||||
|
||||
report_capabilities if $ENV{VERBOSE} > 1;
|
||||
|
||||
fatal_error( 'Shorewall4 ' . $env{VERSION} . ' requires Conntrack Match Support' )
|
||||
fatal_error( 'Shorewall-pl ' . $env{VERSION} . ' requires Conntrack Match Support' )
|
||||
unless $capabilities{CONNTRACK_MATCH};
|
||||
fatal_error( 'Shorewall4 ' . $env{VERSION} . ' requires Extended Multi-port Match Support' )
|
||||
fatal_error( 'Shorewall-pl ' . $env{VERSION} . ' requires Extended Multi-port Match Support' )
|
||||
unless $capabilities{XMULTIPORT};
|
||||
fatal_error( 'Shorewall4 ' . $env{VERSION} . ' requires Address Type Match Support' )
|
||||
fatal_error( 'Shorewall-pl ' . $env{VERSION} . ' requires Address Type Match Support' )
|
||||
unless $capabilities{ADDRTYPE};
|
||||
fatal_error 'BRIDGING=Yes is not supported by the ' . $env{VERSION} . ' Perl-based compiler'
|
||||
if $config{BRIDGING};
|
||||
fatal_error 'MACLIST_TTL requires the Recent Match capability which is not present in your Kernel and/or iptables'
|
||||
if $config{MACLIST_TTL} && ! $capabilities{RECENT_MATCH};
|
||||
fatal_error 'RFC1918_STRICT=Yes requires Connection Tracking match'
|
||||
|
@ -1,4 +1,4 @@
|
||||
Shorewall4 3.9.0
|
||||
Shorewall-pl 3.9.0
|
||||
|
||||
This companion product to Shorewall 3.4.2 and later includes a complete
|
||||
rewrite of the compiler in Perl.
|
||||
@ -74,17 +74,17 @@ Installation
|
||||
|
||||
1) Unpack the tarball.
|
||||
|
||||
$ tar -jxf shorewall4-3.9.0-1.tar.bz2
|
||||
$ tar -jxf shorewall-pl-3.9.0-1.tar.bz2
|
||||
$ pwd
|
||||
/home/teastep/shorewall/
|
||||
$ ls
|
||||
shorewall4-3.9.0/
|
||||
shorewall-pl-3.9.0/
|
||||
$
|
||||
|
||||
2) As root, create a symbolic link to the directory containing the unpacked
|
||||
files.
|
||||
|
||||
$ ln -sf /home/teastep/shorewall/ /usr/share/shorewall4
|
||||
$ ln -sf /home/teastep/shorewall/ /usr/share/shorewall-pl
|
||||
|
||||
Using the New compiler
|
||||
----------------------
|
||||
@ -92,7 +92,7 @@ Using the New compiler
|
||||
By default, the old Bourne-shell based compiler will be used.
|
||||
|
||||
There is one change in Shorewall operation that is triggered when
|
||||
/usr/share/shorewall4 exists and is either a directory or a symbolic
|
||||
/usr/share/shorewall-pl exists and is either a directory or a symbolic
|
||||
link that points to a directory: Your params file will be processed
|
||||
with the shell's '-a' option set which will automatically export any
|
||||
variables that you set or create.
|
||||
|
Loading…
Reference in New Issue
Block a user