holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
12,093 Commits 104 Branches 736 Tags 54 MiB
01a8ff20d4
Commit Graph

1710 Commits

Author SHA1 Message Date
Tom Eastep
9b05146a85 New documents (WIP) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-30 10:06:58 -07:00
Tom Eastep
899bce13c3 Some doc updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-27 13:22:05 -07:00
Tom Eastep
15fd345545 FAQ update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-25 09:06:37 -07:00
Tom Eastep
0423769f59 Update docs for info added/changed in 4.5.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-20 11:36:32 -07:00
Tom Eastep
1b7a7d0fdf Remove some more hard-coded directory names from the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-17 14:24:52 -07:00
Tom Eastep
fdc45a990d Arrange for HELPER to match in the RELATED section. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 15:44:19 -07:00
Tom Eastep
f1fbb95d48 Update documentation for content merged from the 4.5.8 (master) path 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 08:16:36 -07:00
Tom Eastep
8f71797a48 Update upgrade doc to mention both SHA and SHA1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-08 10:51:06 -07:00
Tom Eastep
88dabde9c9 Update upgrade-issues doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-07 09:10:21 -07:00
Tom Eastep
c007f847a0 Handle disabled helpers in pre-3.5 kernels. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-06 15:54:45 -07:00
Tom Eastep
6c97e13107 Use -j CT for helper detection, when available 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 11:36:03 -07:00
Tom Eastep
6fbb578ce6 Add Helpers Document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 07:28:13 -07:00
Tom Eastep
c2cd031285 Mention the conntrack file in the config basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-02 11:31:25 -07:00
Tom Eastep
735b7c2cf5 Add support for nfacct 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-28 11:21:16 -07:00
Tom Eastep
55519bd9ac Revise instructions for disabling iptables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-17 16:48:15 -07:00
Tom Eastep
620d8f1cd0 Add an Anti-spoofing document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-15 11:26:16 -07:00
Tom Eastep
aa652fda1b Add FAQ 99 
- Empty ruleset after boot even though Shorewall runs.
 2012-07-07 07:55:17 -07:00
Tom Eastep
66f3df4570 Correct typo in ISO 366O doc. 
- changed tcrules to rules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-07 07:38:27 -07:00
Tom Eastep
74f831a73e Improve the readability of the ?ELSIF example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:51:14 -07:00
Tom Eastep
f0b5ee4cdb Correct a typo in NewRelease.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:50:38 -07:00
Tom Eastep
0bf2753472 Re-implement conditional inclusion 
- Correct defects
- Add ?ELSIF support
- Allow Perl-compatible expressions in ?IF
 2012-06-27 15:15:44 -07:00
Tom Eastep
640d34cecd Remove old advice from the Aliased Interface Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-20 16:39:12 -07:00
Tom Eastep
d1627efe5a Add a complex QOS Example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-17 09:57:31 -07:00
Tom Eastep
6c47349689 Support 'red' queuing discipline 
- Also added 'ls' support for HFSC

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-13 14:29:13 -07:00
Tom Eastep
f92a9fa0d6 Update traffic shaping doc with linklayer options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 09:40:33 -07:00
Tom Eastep
4a51241c40 Merge branch '4.5.5' 2012-06-12 08:12:26 -07:00
Tom Eastep
b2c96970ee Add cls_basic to recommended TC modules in FAQ 67 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 08:11:17 -07:00
Tom Eastep
2e05b81443 Apply patch from Ronan Amicel 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-11 11:26:49 -07:00
Tom Eastep
5f051fc61b Unify document indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:31:31 -07:00
Tom Eastep
61d4363865 Update Netfilter overview with Raw and Rawpost tables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:30:39 -07:00
Tom Eastep
705744fd8c Convert Frequently-used Articles section into a table 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:36:32 -07:00
Tom Eastep
724f3cbd76 Unify documentation indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:22:14 -07:00
Tom Eastep
f86476a43c Remove SYSCONFDIR aliasing from Install.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:53 -07:00
Tom Eastep
1ed6769b14 Fix broken URL in logging doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:17 -07:00
Tom Eastep
5c7a4b579c Clarify CONFIG_PATH setting using -lite products 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 17:23:13 -07:00
Tom Eastep
ee467a4877 Allow embedded shell/Perl directives to have leading '?' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 07:32:43 -07:00
Tom Eastep
fc97f6d00e Implement LOG target option control. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-24 13:54:59 -07:00
Tom Eastep
ab2376d61d Document 15-cc limit. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-21 07:03:53 -07:00
Tom Eastep
73e5bb0374 Expand the GEOIP documentation to describe GEOIPDIR option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 09:40:00 -07:00
Tom Eastep
d8ec051114 Load the geoip cc's dynamically. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 08:59:59 -07:00
Tom Eastep
f0a3e1652a Bracket non-trivial cc lists with [...] 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-19 09:39:49 -07:00
Tom Eastep
cb72948739 Add Geoip match to config basics doc. Clarify variable search algorithm. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-18 07:27:33 -07:00
Tom Eastep
55c88e8e81 Replace curly brace enclosure with a preceding caret to avoid ambiguity. 
- {...} is used to enclose a set of column/value pairs and it is certain
  that the two will become confused.
 2012-05-17 15:26:16 -07:00
Tom Eastep
d1519345c4 Add TOC Link to ISO-3661.html; Correct typo in ISO-3661 page. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 12:26:02 -07:00
Tom Eastep
d220d3d9d5 Abandon action.GeoIP in favor of extended syntax in the SOURCE and DEST columns. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 10:44:02 -07:00
Tom Eastep
cc07e74532 Correct typo in TPROXY documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-16 15:56:19 -07:00
Tom Eastep
3d541f50c8 Use "(S)" consistently in column headings. 
- add synonyms so both the singular and plural forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 12:42:04 -07:00
Tom Eastep
bad8b9bddb Improve TPROXY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 11:39:15 -07:00
Tom Eastep
69d735ea0a Make TPROXY actually work! 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-10 11:19:23 -07:00
Tom Eastep
582d025f58 Add DIVERT action to tcrules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-09 09:41:58 -07:00
Tom Eastep
089d980dae Document the --shorewallrc parameter to compiler.pl 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-08 07:59:22 -07:00
Tom Eastep
2cbf1e86ad Allow synonyms for column names in alternate specification formats 
- gateway and gateways in the tunnels file
- mark and action in the tcrules file

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 11:59:47 -07:00
Tom Eastep
7453b70666 Add emphasis to the 'required' option in the config basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 07:14:56 -07:00
Tom Eastep
53d66833b2 Document how to avoid dhcp client setting default route 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-04 08:28:06 -07:00
Tom Eastep
2dd82a9898 Update Multi-ISP documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-01 10:28:12 -07:00
Tom Eastep
3a362a7004 Update FAQ 17 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-25 09:44:24 -07:00
Tom Eastep
25125c47e4 Document configure.pl 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-10 11:57:08 -07:00
Tom Eastep
55cd81747d Add emphasis in some examples; correct a typo. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-07 07:38:38 -07:00
Tom Eastep
97cc4930cf Deimplement option leading ? in embedded directives 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-06 16:26:05 -07:00
Tom Eastep
f85321e201 Clean up conditional include documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-06 11:50:22 -07:00
Tom Eastep
85fce606dc Give all config files access to shorewallrc variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-01 13:19:38 -07:00
Tom Eastep
c26f6d45dd Document install changes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-31 20:02:03 -07:00
Tom Eastep
0063de1564 Add capabilities to conditionals 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-19 11:57:33 -07:00
Tom Eastep
72e6330ff4 Revert "Add capabilities to ?IF conditionals" 
This reverts commit 0d71c590e4.
 2012-03-19 07:20:31 -07:00
Tom Eastep
c51e387e79 Document MANDIR 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-18 12:09:22 -07:00
Tom Eastep
0fac1d182f Add an Id to the default location section of the Install doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-18 11:20:24 -07:00
Tom Eastep
0d71c590e4 Add capabilities to ?IF conditionals 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-18 08:48:26 -07:00
Tom Eastep
81714ee81f Document '!' in ?IF 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-17 16:58:25 -07:00
Tom Eastep
b7465262ca Rename MARK/CLASSIFY column to ACTION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-16 10:09:13 -07:00
Tom Eastep
ab13fbe95e Allow conditional compilation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-16 08:16:12 -07:00
Tom Eastep
a3219f71c9 Add a restriction to the SHELL and PERL directives. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-13 12:27:04 -07:00
Tom Eastep
fd5b7b20cf Remove trailing white-space 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-08 13:05:56 -08:00
Tom Eastep
05f025e422 Don't install isusable script by default 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-07 07:46:53 -08:00
Tom Eastep
1d249567ed Add unsubscribe instructions to the FAQ. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-05 13:32:12 -08:00
Tom Eastep
9493bda0cc Mention Shorewall-core in the 4.5.0 upgrade issues. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-01 07:28:16 -08:00
Tom Eastep
bd9a3e5a3e Update the release model web page 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-25 08:24:48 -08:00
Tom Eastep
47453a20f7 Tweak to Run-time gateway variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-24 09:02:04 -08:00
Tom Eastep
7273f4d8d4 Implement run-time gateway variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-23 13:36:00 -08:00
Tom Eastep
09ad6bba1a Fix Shorewall-core installer 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-22 15:59:28 -08:00
Tom Eastep
c751a0ada3 Documentation updates suggested by Jeffrey Spain. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-20 11:30:06 -08:00
Tom Eastep
8c981e0464 Cleanup of install scripts based on feedback from Mr. Dash4 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-20 10:08:42 -08:00
Tom Eastep
76f8a9e171 Update the Install article for 4.5. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-20 09:02:04 -08:00
Tom Eastep
30cf344be0 Unify 4.4/4.5 documentation Index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-12 11:47:08 -08:00
Tom Eastep
892f4417b3 Update build doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-05 08:06:02 -08:00
Tom Eastep
8d9b1d50d1 Change zone ordering in the IPSEC doc. 
- Place net before vpn so that pppoe users who blindly copy examples won't
  get mis-ordered nested zones.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-21 05:51:28 -08:00
Tom Eastep
4f90736601 Update multi-ISP doc for automatic .status file generation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-17 07:30:13 -08:00
Tom Eastep
5c596ed715 Update Shorewall Perl doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-17 07:24:29 -08:00
Tom Eastep
7060c1350f Add 'ttl' to Debian tunnel configurations. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-16 10:31:05 -08:00
Tom Eastep
58bf562747 Generate load rules at runtime rather than at compile time. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-15 19:23:44 -08:00
Tom Eastep
7316a2c51a Implement 'load=<load-factor>' in providers file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-13 16:37:05 -08:00
Tom Eastep
23c4ebf2a0 Correct FAQ 2a 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-12 16:49:32 -08:00
Tom Eastep
aff1e4ef0a Correct ethtool commands in the FAQ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-10 17:28:56 -08:00
Tom Eastep
58a0b9b5c1 Rename route_rules to rtrules -- phase 2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-09 07:19:10 -08:00
Tom Eastep
4c2df6fea7 Rename route_rules to rtrules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-09 06:38:55 -08:00
Tom Eastep
123db94b71 Remove empty cell in documentation index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-04 12:25:13 -08:00
Tom Eastep
4912199396 Shorewall 4.5 Documentation Updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-02 10:19:07 -08:00
Tom Eastep
b367fb46af Add a caution to the Getting Started Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-12-29 07:49:40 -08:00
Tom Eastep
1f051314b3 Update network diagram 2011-12-17 14:11:56 -08:00
Tom Eastep
57d0550311 Document use of .conf options as variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-12-17 07:40:43 -08:00
Tom Eastep
4abd626b32 New IPv6 network diagram 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-12-12 10:35:03 -08:00