holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add 'restored' extension script

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9414 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2009-02-05 18:16:40 +00:00
parent 87e2df83a2
commit f8fdfcfa9e
1 changed files with 52 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

92
docs/shorewall_extension_scripts.xml
View File

@ -69,83 +69,87 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>compile -- (Added in Shorewall-perl version 4.0.6). Invoked by <para><filename>compile</filename> -- (Added in Shorewall-perl version
the Shorewall-perl compiler early in the compilation process. Must be 4.0.6). Invoked by the Shorewall-perl compiler early in the
written in Perl.</para> compilation process. Must be written in Perl.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>init -- invoked early in <quote>shorewall start</quote> and <para><filename>init</filename> -- invoked early in <quote>shorewall
<quote>shorewall restart</quote></para> start</quote> and <quote>shorewall restart</quote></para>
</listitem> </listitem>
<listitem> <listitem>
<para>initdone -- invoked after Shorewall has flushed all existing <para><filename>initdone</filename> -- invoked after Shorewall has
rules but before any rules have been added to the builtin flushed all existing rules but before any rules have been added to the
chains.</para> builtin chains.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>start -- invoked after the firewall has been started or <para><filename>start</filename> -- invoked after the firewall has
restarted.</para> been started or restarted.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>started -- invoked after the firewall has been marked as <para><filename>started</filename> -- invoked after the firewall has
'running'.</para> been marked as 'running'.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>stop -- invoked as a first step when the firewall is being <para><filename>stop</filename> -- invoked as a first step when the
stopped.</para> firewall is being stopped.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>stopped -- invoked after the firewall has been stopped.</para> <para><filename>stopped</filename> -- invoked after the firewall has
been stopped.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>clear -- invoked after the firewall has been cleared.</para> <para><filename>clear</filename> -- invoked after the firewall has
been cleared.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>tcclear -- invoked to clear traffic shaping when CLEAR_TC=Yes in <para><filename>tcclear</filename> -- invoked to clear traffic shaping
<ulink when CLEAR_TC=Yes in <ulink
url="manpages/shorewall.conf.html">shorewall.conf</ulink>.</para> url="manpages/shorewall.conf.html">shorewall.conf</ulink>.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>refresh -- invoked while the firewall is being refreshed but <para><filename>refresh</filename> -- invoked while the firewall is
before the blacklst chains have been rebuilt.</para> being refreshed but before the blacklst chains have been
rebuilt.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>refreshed -- invoked after the firewall has been <para><filename>refreshed</filename> -- invoked after the firewall has
refreshed.</para> been refreshed.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>continue -- invoked to allow you to insert special rules to <para><filename>continue</filename> -- invoked to allow you to insert
allow traffic while Shorewall is [re]starting. Any rules added in this special rules to allow traffic while Shorewall is [re]starting. Any
script should be deleted in your <emphasis>start</emphasis> script. rules added in this script should be deleted in your
This script is invoked earlier in the [re]start process than is the <emphasis>start</emphasis> script. This script is invoked earlier in
<emphasis>initdone</emphasis> script described above (Not used by the [re]start process than is the <emphasis>initdone</emphasis> script
Shorewall Perl).</para> described above (Not used by Shorewall Perl).</para>
</listitem> </listitem>
<listitem> <listitem>
<para>maclog -- invoked while mac filtering rules are being created. <para><filename>maclog</filename> -- invoked while mac filtering rules
It is invoked once for each interface having 'maclist' specified and are being created. It is invoked once for each interface having
it is invoked just before the logging rule is added to the current 'maclist' specified and it is invoked just before the logging rule is
chain (the name of that chain will be in $CHAIN).</para> added to the current chain (the name of that chain will be in
$CHAIN).</para>
</listitem> </listitem>
<listitem> <listitem>
<para>isusable -- (Added in Shorewall-perl version 4.0.3) invoked when <para><filename>isusable</filename> -- (Added in Shorewall-perl
Shorewall is trying to determine the usability of the network version 4.0.3) invoked when Shorewall is trying to determine the
interface associated with an optional entry in usability of the network interface associated with an optional entry
<filename>/etc/shorewall/providers</filename>. $1 is the name of the in <filename>/etc/shorewall/providers</filename>. $1 is the name of
interface which will have been determined to be up and configured the interface which will have been determined to be up and configured
before the script is invoked. The return value from the script before the script is invoked. The return value from the script
indicates whether or not the interface is usable (0 = usable, other = indicates whether or not the interface is usable (0 = usable, other =
unusable).</para> unusable).</para>
@ -179,9 +183,17 @@ esac</programlisting><caution>
</listitem> </listitem>
<listitem> <listitem>
<para>save -- (Added in Shorewall version 4.2.0 Beta2). This script is <para><filename>save</filename> -- (Added in Shorewall version 4.2.0
invoked during execution of the <command>shorewall save</command> and Beta2). This script is invoked during execution of the
<command>shorewall-lite save</command> commands.</para> <command>shorewall save</command> and <command>shorewall-lite
save</command> commands.</para>
</listitem>
<listitem>
<para><filename>restored</filename> -- (Added in Shorewall-perl
version 4.2.6). This script is invoked at the completion of a
successful <command>shorewall restore</command> and
<command>shorewall-lite restore</command>.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>