holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,660 Commits 104 Branches 736 Tags 54 MiB
master
Commit Graph

430 Commits

Author SHA1 Message Date
Jeremy Sowden
badf2fc9f0 Support SAFESTOP under systemd 
By default, in Debian and its derivatives, stopping the Shorewall
service executes `/sbin/shorewall clear`.

The `SAFESTOP` setting in /etc/default/shorewall is intended to stop the
service by calling `/sbin/shorewall stop`.

However, the systemd service files do not support this.  Instead,
install a shell-script that sources /etc/default/shorewall and honours
`SAFESTOP` when stopping Shorewall and patch the service files to call
it.

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
 2023-09-09 12:48:07 +01:00
Paul Gear
77317c1766 Merge branch 'systemd-service-documentation' into 'master' 
Document related man-pages in Debian systemd service files

See merge request shorewall/code!8
 2023-02-01 02:39:27 +00:00
Jeremy Sowden
b7f2d1b22e Move '-6' and '-l' options from SRWL to SRWL_OPTS in Debian init-scripts. 
Changing the definitions of SRWL from /sbin/shorewall6 to
'/sbin/shorewall -6' and so on broke the init-scripts since the scripts
test whether `$SRWL` is executable:

    test -x $SRWL || exit 0

which now fails:

    sh: test: /sbin/shorewall: binary operator expected

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
 2023-01-31 22:52:21 +00:00
Jeremy Sowden
5637385507 Document related man-pages in Debian systemd service files 
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
 2023-01-31 22:50:18 +00:00
Tom Eastep
ba87937f49
Replace StandardOutput=syslog by StandardOutput=journal in unit files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-10-30 09:24:47 -07:00
Tom Eastep
15ca726c49
Add target files 5.2.4.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-04-17 17:56:06 -07:00
Tuomo Soini
be924ff765
Fix http links to point to current project website 
Also removes deprecated Shorewall6/configfiles/masq

Signed-off-by: Tuomo Soini <tis@foobar.fi>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-27 14:24:37 -07:00
Tom Eastep
de39f7d3aa
Revert "Add another targetname file" 
This reverts commit 3e2d7cf990.
 2020-03-15 09:02:46 -07:00
Tom Eastep
e82307f61e
Add empty target files 5.2.4-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-10 11:03:02 -07:00
Tom Eastep
fa1aa4b481
Merge branch '5.2.3' 
# Conflicts:
#	docs/Introduction.xml
 2020-03-06 13:04:18 -08:00
Tom Eastep
3e2d7cf990
Add another targetname file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-06 09:37:41 -08:00
Tom Eastep
95d3486788
Add empty target files 5.2.3.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-06 09:19:25 -08:00
Tom Eastep
b437f609e5
Merge branch '5.2.3' 2020-02-01 11:01:59 -08:00
Tom Eastep
f05bd969af Revert "Add targetname files" 
This reverts commit c9eb443574.
 2020-02-01 09:46:05 -08:00
Tom Eastep
7aaa04149e Merge branch '5.2.3' 
# Conflicts:
#	Shorewall/manpages/shorewall-files.xml
#	docs/SharedConfig.xml
 2020-02-01 09:45:33 -08:00
Tom Eastep
c9eb443574 Add targetname files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-01-29 10:41:55 -08:00
Matt Darfeuille
53495ec0a8
Point exclusively to shorewall.org 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-03-25 11:35:00 -07:00
Matt Darfeuille
442e6ac152
Update version to 5.2 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-06-23 09:09:00 -07:00
Tom Eastep
ffc5a3c7df
Add ALT Linux support by Alexey Shabalin <sha-ba@mail.ru> 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-05-29 08:13:26 -07:00
Matt Darfeuille
299ea2b41f
Update version to 5.2 
- Remove unneeded punctuation marks

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-24 09:53:02 -07:00
Tom Eastep
90f33dd436
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:48:14 -07:00
Tom Eastep
0603f8e355
Serialize start of IPv4 and IPv6 under systemd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 12:48:18 -07:00
Tom Eastep
5f1370f1b4
Clear the firewall on Debian systemd 'stop' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-06 11:22:55 -08:00
Matt Darfeuille
06c6a017d5
Use a specific parameter file for systemd script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:25 -08:00
Matt Darfeuille
75fd8ccb37
Use a specific parameter file for sysvinit script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:21 -08:00
Matt Darfeuille
c04845534a
Use a common uninstaller for Lite and Lite6 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:15 -08:00
Matt Darfeuille
783e438b4a
Be more verbose while uninstalling Shorewall 
- Remove version file as a file and not as a directory.

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:00 -08:00
Matt Darfeuille
c58efe7698
Unify the uninstallers 
- Clean up code
 - Use the .service suffix

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:55:36 -08:00
Matt Darfeuille
f6f7e691d0
Fail if the rc file can not be loaded 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:54:40 -08:00
Matt Darfeuille
a9048b63f2
Correct typos 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:54:36 -08:00
Matt Darfeuille
20cc56f2f1
Load uninstallers's common functions 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:53:39 -08:00
Matt Darfeuille
a6eebc8ecf
Replace product names by product vars 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 16:40:41 -08:00
Tom Eastep
f12b78d518
Correct Shorewall6-lite .service file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-01-10 09:55:16 -08:00
Tom Eastep
f68d3fd9fa
Revert "Remove SUBSYSLOCK" 
This reverts commit 386b137e9b.
 2017-01-06 09:49:40 -08:00
Tom Eastep
386b137e9b
Remove SUBSYSLOCK 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-01-05 10:03:03 -08:00
Tom Eastep
ce68f84d9d
Remove Makefile from Shorewall[6][-lite] 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-01-05 08:22:02 -08:00
Tom Eastep
5174fe0161
Avoid echo options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-28 11:09:08 -08:00
Matt Darfeuille
3caedbbbef
lite6: Don't set the 'file' var needlessly 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-19 08:14:49 -08:00
Tom Eastep
e3951cb5a3
Re-add volume 8 manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-18 16:16:50 -08:00
Matt Darfeuille
7be8c579a7
lite6: Correct the filepath of .shorewallrc 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-12-18 12:14:25 -08:00
Tom Eastep
875c352473
Unify the CLI 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-21 10:00:55 -08:00
Tom Eastep
36517cdb1e
Rename setup_environment to setup_product_environment 
- Default to first detected product
- Verify that specified product is installed

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-20 08:48:18 -08:00
Tom Eastep
8b99fe20b5
Pave the way for unifying the CLI 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-19 21:17:35 -08:00
Tom Eastep
137b051e52
Centralize setting of product-dependent g_* variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-11-19 17:17:03 -08:00
Tom Eastep
49fae96b09
Update the manpages for 'blacklist' verbosity 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-10-10 19:45:42 -07:00
Roberto C. Sánchez
7c9876241c
Debian init scripts: add run-level 1 to Default-Stop specification 2016-07-04 17:37:00 -04:00
Roberto C. Sánchez
8b36c2c1cf
Debian init scripts: more accurately describe what action is being taken 2016-07-04 13:34:33 -04:00
Tom Eastep
4869f61a25
'allow' now works with ipset-based dynamic blacklisting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-06-09 08:44:25 -07:00
Tom Eastep
32f888a7d4 Add an ENVIRONMENT section to the CLI manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-15 15:41:55 -07:00
Tom Eastep
05e4049174 Ipset-based blacklisting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-04-10 16:07:56 -07:00