holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
14,552 Commits 104 Branches 736 Tags 54 MiB
5.0.15
Commit Graph

14552 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
ad91501e79
Correct two-interface sample snat file 
- s/92/192/

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-16 08:14:20 -07:00
Tom Eastep
395ea90cd7
Clear the firewall on Debian during systemd stop 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-15 13:01:24 -07:00
Tom Eastep
ce861dd0a3
Correctly handle expansion of option names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-15 11:47:54 -07:00
Tom Eastep
8fca17a0ef
Correct all+ handling in the policy file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-15 11:36:47 -07:00
Tom Eastep
63d7580219
Allow compact IPv6 addresses in IP6TABLES() rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-01-07 16:20:38 -08:00
Tom Eastep
1d1068ac74
Correct splitting of IP(6)TABLES options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-01-07 16:20:26 -08:00
Tom Eastep
5bc724c268
Correct handling of safe-restart with SAVE_IPSETS 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-27 16:35:58 -08:00
Tom Eastep
c6fab61c3d
Remove redundent test 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-20 14:42:20 -08:00
Tom Eastep
03a9b92a14
Use 'ip -s xfrm' to dump the SPD and SAD 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-20 09:30:49 -08:00
Matt Darfeuille
b3b637d663
shorewall: Correct displaying of shorewall version 
Add the Product name variable to properly display the product name
when the '-v' option is passed to the script.

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-20 09:30:16 -08:00
Tom Eastep
363679bb4c
Correct merge compatibility change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-20 09:29:50 -08:00
Tom Eastep
458c26c2d6
Exercise care when merging rules including -m multiport 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-20 09:29:36 -08:00
Tom Eastep
e229849c5b
Correct intra-zone handling in policies 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-19 09:12:14 -08:00
Tom Eastep
e98abac706
Define MYNET in the QOS example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-12 09:35:03 -08:00
Tom Eastep
5ea78b8078
Correct typo in the snat manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-11 14:36:04 -08:00
Michele Baldessari
036a6e5a83
Add an IPv6 bidirectional mDNS macro 
Add the missing corresponding IPv6 bidirectional mDNSbi macro.

Closes-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1295844

Signed-off-by: Michele Baldessari <michele@acksyn.org>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-10 14:44:10 -08:00
Tom Eastep
192486eb0a
Bring shorewall6-actions(5) up to date 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-09 09:47:14 -08:00
Tom Eastep
e4804e1900
NFQUEUE should be non-terminating 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-09 08:46:39 -08:00
Tom Eastep
f537e3e15c
Fix optimization bug in merge_rules() 
- Reset the simple member if a unique option is merged

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-02 14:47:03 -08:00
Tom Eastep
4949569383
Correct 'restore' exit status 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-02 09:33:16 -08:00
Tom Eastep
a1981823f4
Correct typo (syntax error!) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-01 15:21:25 -08:00
Tom Eastep
ff81980552
Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code 2016-11-21 15:16:30 -08:00
Roberto C. Sánchez
8a6dcc469b
Fix typo 2016-11-21 11:59:57 -05:00
Tom Eastep
ccab75e69a
Avoid unnecessary change in the generated script 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-20 09:17:39 -08:00
Tom Eastep
9eb390403b
Implement -p option to disable PAGER 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-17 10:58:10 -08:00
Tom Eastep
ab9f340c55
use $PAGER in the 'show macro' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-17 10:57:39 -08:00
Tom Eastep
88284ed568
Delete version from the heading of compiler.pl 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-16 13:03:00 -08:00
Tom Eastep
481afef2c3
Don't insist that route deletion succeeds 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-12 08:38:09 -08:00
Tom Eastep
6b38b3a515
Revert "More IPv6 routing cleanup" 
This reverts commit 1e7f63834c.
 2016-11-12 08:25:38 -08:00
Tom Eastep
80951d23c2
add/delete multi-nexthop IPv6 routes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-12 08:24:46 -08:00
Tom Eastep
1e7f63834c
More IPv6 routing cleanup 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-09 10:34:19 -08:00
Tom Eastep
74b94f71f8
Always return $omitting from process_compiler_directive() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-09 08:07:17 -08:00
Tom Eastep
ef4ab62dd3
Disable directive callbacks after file conversion. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-09 07:47:19 -08:00
Tom Eastep
42c1c2a205
Don't copy link-level address routes into provider tables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-08 14:42:44 -08:00
Tom Eastep
6095d05af9
Update manpages for 'update' improvements 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-07 13:50:11 -08:00
Tom Eastep
d989241712
Retain shell variables during routestopped and blacklist conversions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-07 11:26:17 -08:00
Tom Eastep
652bc75448
Omit Shorewall version from converted files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-07 11:12:36 -08:00
Tom Eastep
d105da3964
Preserve shell variables when converting tos->mangle 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-06 17:25:35 -08:00
Tom Eastep
c5b393a074
Preserve shell variables when converting tcrules->mangle 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-06 17:25:01 -08:00
Tom Eastep
1b82dedb77
Preserve shell variables when converting masq -> snat 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-06 13:53:05 -08:00
Tom Eastep
6398756647
Add a routine to split the raw current line image 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-06 08:44:24 -08:00
Tom Eastep
daa2440d9a
Ensure that $directive_callback->() gets an unaltered image 
- pass omitted lines to that function as well

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-06 08:03:31 -08:00
Tom Eastep
6a89fd1367
Merge branch 'master' into 5.0.14 2016-11-04 08:37:55 -07:00
Tom Eastep
ffe1e1d335
Fix typo in the two-interface sample snat file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-04 08:36:24 -07:00
Tom Eastep
cecfe54ef6
Avoid shell errors when /proc/net/xt_recent/ is empty. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-03 21:29:01 -07:00
Tom Eastep
8441ac5c5f
Handle another issue with ADD_SNAT_ALIASES=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-03 15:06:38 -07:00
Tom Eastep
01a6881f4f
Catch total lack of address/port in SNAT argument 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-02 19:30:55 -07:00
Tom Eastep
f917670fbd
Tighten editing of SNAT/MASQ port ranges. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-02 19:30:18 -07:00
Tom Eastep
c376740329
Detect degenerate addr:port[-range] in SNAT rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-02 15:28:00 -07:00
Tom Eastep
4169520d63
Handle exceptionrule correctly with MASQUERADE. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-02 14:36:51 -07:00