holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
13,323 Commits 104 Branches 736 Tags 54 MiB
1e6c266b51
Commit Graph

1012 Commits

Author SHA1 Message Date
Tom Eastep
1e6c266b51 Formatting fix (I hope) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 15:37:56 -08:00
Tom Eastep
095e523c9f Add 'show opens' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 13:10:23 -08:00
Tom Eastep
2817060edb Improvements to the 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 08:13:44 -08:00
Tom Eastep
a85fdc45ac Implement 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-05 16:20:54 -08:00
Tom Eastep
cdc2d52208 Implement ADD and DEL in the mangle file. 
- Also document the parameter to SAME

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-18 12:04:01 -08:00
Tom Eastep
b14e7c54f9 Merge branch '4.6.6' 2015-02-07 08:29:44 -08:00
Tom Eastep
30a5f508be Change samples to specify MODULE_SUFFIX="ko ko.xz" 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-06 12:56:35 -08:00
Orion Poplawski
9ad0b297e2 Supporting xz compressed kernel modules 
- I've attached a patch that adds xz support to the default MODULE_SUFFIX.
- I'm wondering it wouldn't be better to not have MODULE_SUFFX=ko in various
sample configs so that the default value is used instead:

./Shorewall/configfiles/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/Universal/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/three-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/two-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/one-interface/shorewall.conf:MODULE_SUFFIX=ko
./docs/MultiISP.xml:MODULE_SUFFIX=ko
./docs/MyNetwork.xml:MODULE_SUFFIX=ko
./Shorewall6/configfiles/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/Universal/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/three-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/two-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/one-interface/shorewall6.conf:MODULE_SUFFIX=ko

- Is:

MODULE_SUFFIX=

sufficient to use the default value or does it need to be commented out?

Thanks,

  Orion

--
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion@nwra.com
Boulder, CO 80301                   http://www.nwra.com

>From f13edf8fc07c7b62825408b8665b10d6014d368d Mon Sep 17 00:00:00 2001
From: Orion Poplawski <orion@cora.nwra.com>
Date: Mon, 26 Jan 2015 09:48:48 -0700
Subject: [PATCH] Support xz compressed modules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-06 12:51:00 -08:00
Tom Eastep
5d110616a5 Merge branch '4.6.6' 2015-01-24 18:16:47 -08:00
Tom Eastep
a2b8069ee3 Clarify Zone exclusion 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-24 18:15:10 -08:00
Tom Eastep
50a0103e89 Merge branch '4.6.6' 2015-01-20 08:11:07 -08:00
Tom Eastep
6f2308e0fa Correct syntax of the SAVE and RESTORE actions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-20 08:09:55 -08:00
Tom Eastep
28ac76bde4 Add tinc tunnel support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-13 13:28:37 -08:00
Tom Eastep
07c21b8968 Add 'primary' provider option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-06 09:06:27 -08:00
Tom Eastep
7dd9ccd06b Add the 'loopback' interface option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-03 09:22:40 -08:00
Tom Eastep
551a16d18f Document TARPIT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-01-01 09:14:00 -08:00
Tom Eastep
93285e2798 Cleanup of preceding fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 14:05:43 -08:00
Tom Eastep
2430796495 Document the -c option of 'show routing' 
Correct choice in show commands to 'req'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 12:15:28 -08:00
Tom Eastep
06ef7596cd Document the -c 'dump' option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 11:57:24 -08:00
Tom Eastep
227db0cfa7 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2014-12-23 15:37:38 -08:00
Tom Eastep
c0f7d0e65d Start firewall after the network-online target has been reached 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-23 15:37:22 -08:00
Tom Eastep
fdf513fba6 Correct font in mangle manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-19 14:26:20 -08:00
Tom Eastep
7100af5380 Correct .service files 
- Make them match earlier versions

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-11 18:05:04 -08:00
Tom Eastep
22ac37b51e Patches for Shorewall6 manpage from Thomas D 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-10 07:50:28 -08:00
Tom Eastep
6f5de7ef3f Add now logging modules to the modules files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-05 16:19:30 -08:00
Tom Eastep
2f545012a6 More documentation updates for -C 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 09:25:58 -08:00
Tom Eastep
4493b2ab6b Correct typo in 'rules' manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 06:50:40 -08:00
Tom Eastep
8fb73026c8 Replace SAVE_COUNTERS with the -C command option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-01 09:37:57 -07:00
Tom Eastep
a83c146636 Cleanup 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 20:27:06 -07:00
Tom Eastep
113f95c11e Provide STARTOPTIONS and RESTARTOPTIONS in all cases 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 10:22:39 -07:00
Tom Eastep
3454e10525 Add SAVE_COUNTERS option. 
- Also implement recover command

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 08:57:56 -07:00
Tom Eastep
055fceb82f Update policy manpages for duel limits 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-22 12:27:27 -07:00
Tom Eastep
f5bdc9e7f4 Allow two limits in the RATE LIMIT columns 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-22 11:21:43 -07:00
Tom Eastep
b60d6dd6e5 Avoid duplicate module loads 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-20 10:42:53 -07:00
Tom Eastep
2784e93307 Load xt_LOG in both helpers files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-19 08:28:36 -07:00
Tom Eastep
20c8bf02b1 Correct Shorewall6 helpers file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-19 08:28:19 -07:00
Tom Eastep
38d4b1c5a9 Revert "Correct last patch" 
This reverts commit b528625329.
 2014-10-19 08:28:11 -07:00
Tom Eastep
e3a332ec27 Correct last patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-19 08:28:00 -07:00
Tom Eastep
49218a4d28 ipt_LOG in helpers file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-15 18:07:09 -07:00
Tom Eastep
3236cd2660 Reinstate IPv6 DropSmurfs 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-13 12:34:25 -07:00
Tom Eastep
42363da458 Add new .service files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-09 10:00:53 -07:00
Tom Eastep
c5074bddb2 Rename the .service files to .service.214 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-09 09:45:52 -07:00
Tom Eastep
12458d111a Adjust the .service files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-08 17:28:22 -07:00
Tuomo Soini
a31fd20f22 Shorewall6/nat: clearly make it ipv6 specific 2014-10-07 12:42:57 +03:00
Tom Eastep
2c7ffb525d Updagte Shorewall6-nat manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-05 20:09:18 -07:00
Tom Eastep
316866482b Add ipv6 nat file and manpage 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-05 19:54:19 -07:00
Tom Eastep
3206021278 Another round of uninstall fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 13:50:39 -07:00
Tom Eastep
9dc2bba025 More uninstall corrections. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 09:39:03 -07:00
Tom Eastep
770a505cd2 Delete DropSmurfs from IPv6 actions.std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-09-30 16:16:53 -07:00
Tom Eastep
3e2c903a41 Revert "Only save ipsets of the proper family" 
This reverts commit b053cab630.
 2014-09-28 13:32:32 -07:00