teastep
|
00a72b0dec
|
Add 'src=' and 'mtu=' OPTIONS in providers file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8181 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-11 18:30:45 +00:00 |
|
teastep
|
dec8b5d308
|
Eliminate dummy interface names for built-in providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-09 23:51:28 +00:00 |
|
teastep
|
a4a400eba1
|
Use a more sensible variable name for keeping track of optional interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-09 22:39:23 +00:00 |
|
teastep
|
a40697d21e
|
Don't generate 'track' mark rules for absent providers
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8170 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-09 20:59:42 +00:00 |
|
teastep
|
60080486ec
|
Fix handling of zone exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-09 17:36:33 +00:00 |
|
teastep
|
3574d2b099
|
Use function rather than generating name manually
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8167 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-08 19:34:28 +00:00 |
|
teastep
|
94c4b5bd81
|
Finish optimization changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8166 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-07 23:47:02 +00:00 |
|
teastep
|
44c9717a67
|
Add back 'complex' zone attribute but don't use it yet
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8165 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-07 22:34:27 +00:00 |
|
teastep
|
f229aaf5dc
|
Trivial optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-07 20:47:14 +00:00 |
|
teastep
|
c819e1fea7
|
Beef up check in do_user()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8162 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-07 19:16:25 +00:00 |
|
teastep
|
6d421fc49e
|
Move fix for !user to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8161 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-07 19:05:45 +00:00 |
|
teastep
|
736f4f17bb
|
Make gunk patch a bit safer (allow non-ASCII characters in COMMENT lines)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8152 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-06 18:01:24 +00:00 |
|
teastep
|
7a82ff8bba
|
Catch unprintable junk in config files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8150 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-06 17:45:03 +00:00 |
|
teastep
|
52f29cad4b
|
Correct some module versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8149 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-05 23:50:00 +00:00 |
|
teastep
|
bed37c1965
|
Update versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8148 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-05 23:35:53 +00:00 |
|
teastep
|
0edd543098
|
Only import what's needed
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8147 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-05 16:45:33 +00:00 |
|
teastep
|
5aeef8b231
|
Move prototol/port validation to the IPAddrs module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8146 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-05 16:43:11 +00:00 |
|
teastep
|
5e8f0c120a
|
Update trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8142 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-03 18:52:06 +00:00 |
|
teastep
|
8225910d63
|
Remove superfluous call from generate_matrix()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-03 18:47:33 +00:00 |
|
teastep
|
9ce89bd6f0
|
Fix typo in macro processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8137 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-03 16:00:02 +00:00 |
|
teastep
|
8a6e2f1712
|
A little optimization in macro handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8136 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-03 00:07:58 +00:00 |
|
teastep
|
d0fd40ae0b
|
More cleanup of validate_interface_file()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8135 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-02 16:59:59 +00:00 |
|
teastep
|
2d6e206a5f
|
Long overdue cleanup of validate_interface_file()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-02 01:27:39 +00:00 |
|
teastep
|
82e525d0f5
|
Disallow move_rules() calls when source chain has embedded commands
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-02-01 22:53:05 +00:00 |
|
teastep
|
cf99cd78bd
|
Fix typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8127 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-31 21:17:24 +00:00 |
|
teastep
|
2cd7e2b2fb
|
More sorting by interface number
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8126 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-31 02:33:16 +00:00 |
|
teastep
|
06d3269f7e
|
Order interfaces within zone when generating top-level rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8125 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-30 21:57:39 +00:00 |
|
teastep
|
8ef198b3a6
|
More optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8124 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-30 18:47:27 +00:00 |
|
teastep
|
b81ae53477
|
Correct handling of IPSEC; re-order rules slightly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8123 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-30 16:39:40 +00:00 |
|
teastep
|
2a2a7530c2
|
Add optimizations in basic chain handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8122 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-30 00:03:25 +00:00 |
|
teastep
|
e75be13ff4
|
Fix exclusion in zone definition
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-28 21:38:18 +00:00 |
|
teastep
|
ed709b56c7
|
Place zone name in error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-28 20:29:27 +00:00 |
|
teastep
|
4be347d1cc
|
Move 'dynamic' jumps to the INPUT and FORWARD chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-28 19:41:23 +00:00 |
|
teastep
|
3cad33ea20
|
More defense against silly lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-26 22:15:07 +00:00 |
|
teastep
|
7b4abdba94
|
Validate comma-separated lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-26 01:07:57 +00:00 |
|
teastep
|
f960345b51
|
Catch invalid lists in nat/masq entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-25 23:52:33 +00:00 |
|
teastep
|
65df4d9f73
|
Ruleset optimization -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8100 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-24 16:22:03 +00:00 |
|
teastep
|
746a00994d
|
Create 'sourceonly' hosts option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8093 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-22 23:48:03 +00:00 |
|
teastep
|
03091be09a
|
Allow loose interface matching in more places
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-22 23:21:44 +00:00 |
|
teastep
|
e2e827cdbc
|
Allow loose match for interfaces names in masq, nat and netmap
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8079 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-19 23:36:27 +00:00 |
|
teastep
|
3f4d773489
|
Allow DNS names in DEST column of a DNAT rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-17 19:02:40 +00:00 |
|
teastep
|
99a5eba368
|
Remove delayed insertion of RETURN rules in dnat chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-16 23:24:41 +00:00 |
|
teastep
|
6b564e0eb3
|
Factor out invariant parts of a loop
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8071 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-15 19:02:00 +00:00 |
|
teastep
|
545dd7dbc3
|
Interface lists in masq and nat files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8068 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-15 02:39:21 +00:00 |
|
teastep
|
2f96bc5181
|
More work on DNAT/REDIRECT mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8065 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-14 16:34:26 +00:00 |
|
teastep
|
318b4f002d
|
Consult policies when constructing dnat chains; warning when zone specified on NAT-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-13 18:47:06 +00:00 |
|
teastep
|
55a25721e6
|
More tweaks to DNAT/REDIRECT thingy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8052 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-13 00:41:10 +00:00 |
|
teastep
|
88a74e40f3
|
Another look at DNAT/REDIRECT and nested zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8051 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-12 21:11:39 +00:00 |
|
teastep
|
755983b38c
|
Make DNAT/MASQ short-circuit dependent on z->fw policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8050 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-12 17:39:14 +00:00 |
|
teastep
|
3d84cec3a3
|
Fix for DNAT/REDIRECT nested-zone mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8048 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
|
2008-01-12 01:32:18 +00:00 |
|