holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
9,237 Commits 104 Branches 736 Tags 54 MiB
15d8d6d8b7
Commit Graph

726 Commits

Author SHA1 Message Date
Tom Eastep
15d8d6d8b7 Add SECMARK and CONNSECMARK support 2010-09-04 15:12:08 -07:00
Tom Eastep
57c54af6ed Re-implement optional interface handling 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-29 12:32:44 -07:00
Tom Eastep
c98cf8aea6 Re-implement exclusion in CONTINUE/NONAT/ACCEPT+ rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-27 10:09:42 -07:00
Tom Eastep
255cd6cf9c Implement zone lists in rules file entries 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-18 12:18:58 -07:00
Tom Eastep
42362ea318 Document fix for AUTOMAKE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-14 07:55:45 -07:00
Tom Eastep
b7f638ddb3 Document status command change 2010-08-12 19:46:57 -07:00
Tom Eastep
7168257152 Document port range editing fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-12 11:52:43 -07:00
Tom Eastep
92eed0d23c Document fix for any bug 2010-08-12 07:35:45 -07:00
Tom Eastep
0234564a1b Add destination IP blacklisting 2010-08-10 17:33:50 -07:00
Tom Eastep
364ad41cf5 Add support for new ipset match syntax 2010-08-03 21:06:17 -07:00
Tom Eastep
2774ee1bd6 Make 'icmp' a synonym for 'ipv6-icmp' in IPv6 compilations 2010-08-02 08:04:55 -07:00
Tom Eastep
967629569b Taylor Universal config to work with Shorewall-init and streamline ruleset 
- Make interface 'all' optional and set REQUIRE_INTERFACE=Yes
- Add COMPLETE option
- Set FASTACCEPT in Universal samples
- Reset SUBSYSLOCK in Universal samples

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-01 08:36:56 -07:00
Tom Eastep
4e02031985 Document Universal Configuration 2010-07-31 11:59:25 -07:00
Tom Eastep
005b6f7b45 Use new hashlimit match syntax if available 2010-07-31 07:19:41 -07:00
Tom Eastep
bd5facda30 Implement per-IP log rate limiting 2010-07-25 12:42:39 -07:00
Tom Eastep
055f92c3d2 Document fix for :random with REDIRECT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-22 07:28:43 -07:00
Tom Eastep
cbb524b067 Implement ADD/DEL commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-18 08:46:38 -07:00
Tom Eastep
27937f32e3 Document IPv6 multicast network fix 2010-07-16 09:37:38 -07:00
Tom Eastep
e0ae48f4c4 Document fix for IPv6 shorecap program 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-15 13:32:10 -07:00
Tom Eastep
4792d1e5f1 Fix nets= in Shorewall6 2010-07-11 19:52:18 -07:00
Tom Eastep
02fab09a14 Add PERL= option to shorewall.conf and shorewall6.conf 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-05 13:11:52 -07:00
Tom Eastep
4547067da9 Document fix for missing closing quote 2010-07-05 11:43:37 -07:00
Tom Eastep
d3e30b5fe4 Add FORWARD_CLEAR_MARK option 2010-07-03 17:03:42 -07:00
Tom Eastep
364cddf99b Update release documents for find_hosts_by_option() fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-02 07:40:30 -07:00
Tom Eastep
e4afc15370 Finish Vserver Implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-30 20:35:46 -07:00
Tom Eastep
9e37fe1ffa Deimplement flawed rate limiting with simple TC 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-26 07:42:08 -07:00
Tom Eastep
fe27554fd0 Document undefined value issue 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-24 14:18:48 -07:00
Tom Eastep
cc376ab72e Update release documents for REQUIRE_INTERFACE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-23 13:00:00 -07:00
Tom Eastep
d5aaa97d4e Update release documents for changes ported from the 4.4.10 branch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-22 08:40:07 -07:00
Tom Eastep
efa4cfa921 Update release documents for 4.4.11 Beta 1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-18 12:09:43 -07:00
Tom Eastep
625f254d02 Add tcfilters to manpage index 2010-06-10 06:15:15 -07:00
Tom Eastep
b3370dfd78 Initiate 4.4.11 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-06 13:36:45 -07:00
Tom Eastep
82a74d7534 Resolve Optional/Required interfaces with wildcard names 
Optional is allowed
Required is not

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-04 08:46:29 -07:00
Tom Eastep
165535cd8b Disallow wildcard optional/required interfaces 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-04 07:18:55 -07:00
Tom Eastep
91840acb18 Remove unused RUNLEVELS variable from the install scripts. 
Add some documentation

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-01 07:12:19 -07:00
Tom Eastep
5bd1bac70d Document fix for optimization bug 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-29 09:13:52 -07:00
Tom Eastep
e29d6d080d Restore -a functionality to the version command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-29 08:59:45 -07:00
Tom Eastep
84909de8b9 Fixes for Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-25 16:02:57 -07:00
Tom Eastep
5b2affbd01 Changes to make RedHat work with NetworkManager 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-18 13:41:01 -07:00
Tom Eastep
679ad6cf04 Allow OS X to be an Administrative System 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-06 09:07:16 -07:00
Tom Eastep
96bef5bd49 Assume 'routeback' in routestopped based on interface config. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-03 12:31:11 -07:00
Tom Eastep
d8b0f496df Allow simple configuration of a bridge with no IP address 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-27 12:26:58 -07:00
Tom Eastep
f49848bd5b Document rare optimization fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-26 16:32:53 -07:00
Tom Eastep
2cb3bac946 Document fix for find_first_interface_address() 2010-04-23 12:18:51 -07:00
Tom Eastep
64bf772594 Set OUTPUT policy to ACCEPT when optimize_chain deletes all of its rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 13:38:38 -07:00
Tom Eastep
b0b39cfc39 Document optimization level 2 fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 11:55:13 -07:00
Tom Eastep
8c09f21e5d Implement 'show log <token>' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-19 10:20:28 -07:00
Tom Eastep
938cfd7ba4 Don't create fw-><bport> chains and rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 12:29:51 -07:00
Tom Eastep
aeb90969f7 Optimize 8 Documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-14 17:12:25 -07:00
Tom Eastep
91a711b34f Document startup log fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-10 11:54:54 -07:00