Tom Eastep
|
71480ff647
|
Validate nets in the netmap file.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-13 15:59:42 -07:00 |
|
Tom Eastep
|
97121116a3
|
Add rawpost table detection
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-13 11:14:29 -07:00 |
|
Tom Eastep
|
37b08dd991
|
Merge branch '4.4.22'
|
2011-08-13 10:48:27 -07:00 |
|
Tom Eastep
|
dec4f4f186
|
Separate target and targetopts in add_ijump calls.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-13 09:56:14 -07:00 |
|
Tom Eastep
|
11919fd6e6
|
Don't allow connection pickup from the Net (Samples)
|
2011-08-13 07:07:54 -07:00 |
|
Tom Eastep
|
7192960ffb
|
Correct typos in Macros HOWTO
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-12 14:54:06 -07:00 |
|
Tom Eastep
|
f49ae2762b
|
Correct typos in Macros HOWTO
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-12 14:49:34 -07:00 |
|
Tom Eastep
|
b1b323191c
|
Merge branch '4.4.22'
|
2011-08-11 20:19:47 -07:00 |
|
Tom Eastep
|
786455b287
|
Unlink .bak file if no changes to .conf.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-11 20:19:30 -07:00 |
|
Tom Eastep
|
39c71418da
|
Merge branch '4.4.22'
|
2011-08-10 09:34:37 -07:00 |
|
Tom Eastep
|
7708c251db
|
Fix ECN when MANGLE_FORWARD is not available.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-10 09:34:15 -07:00 |
|
Tom Eastep
|
8eff66dcfd
|
Fix handling or ORIGINAL DEST when CONNTRACK_MATCH is not available
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-10 07:12:13 -07:00 |
|
Tom Eastep
|
c923dfdade
|
Correct Port Knocking HOWTO for iptables 1.4.12
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-09 16:22:46 -07:00 |
|
Tom Eastep
|
67c1fa1e63
|
Fix old state match
|
2011-08-08 20:35:55 -07:00 |
|
Tom Eastep
|
ac8617bdc8
|
Merge branch '4.4.22' of ssh://shorewall.git.sourceforge.net/gitroot/shorewall/shorewall into 4.4.22
|
2011-08-08 20:34:04 -07:00 |
|
Tom Eastep
|
8fe064914b
|
Fix old state match
|
2011-08-08 20:32:02 -07:00 |
|
Tom Eastep
|
27353478a0
|
Fix old state match
|
2011-08-08 20:19:11 -07:00 |
|
Tom Eastep
|
4824c9b8ff
|
Add QUOTA_MATCH capability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-08 14:37:47 -07:00 |
|
Tom Eastep
|
35457f4e95
|
Remove she-bang from lib.*
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-03 07:54:46 -07:00 |
|
Tom Eastep
|
b0fe8e1e60
|
Merge branch '4.4.22'
|
2011-08-03 07:20:57 -07:00 |
|
Tom Eastep
|
a548bddea8
|
Remove she-bang from first line of prog.header*
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-03 07:20:34 -07:00 |
|
Tom Eastep
|
679de4ccf6
|
Apply Orion Poplawski's 'qtnoin' patch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-02 16:51:49 -07:00 |
|
Tom Eastep
|
50a29f6858
|
Correct detection of OLD_IPSET_MATCH when LOAD_MODULES_ONLY=No
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-02 11:58:54 -07:00 |
|
Tom Eastep
|
ae0cffa588
|
Fix handling of zone names beginning with 'all'
|
2011-08-02 09:13:23 -07:00 |
|
Tom Eastep
|
58f9a66587
|
Add FAQ 96 re: DISABLE_IPV6
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-08-02 07:33:01 -07:00 |
|
Tom Eastep
|
d358285d56
|
Remove obsolete comment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-31 11:34:46 -07:00 |
|
Tom Eastep
|
f675513383
|
Make 'build' work on a Mac
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 10:57:32 -07:00 |
|
Tom Eastep
|
db8092d71e
|
Update VPN Basics Doc
|
2011-07-30 09:16:26 -07:00 |
|
Tom Eastep
|
512273fa91
|
Avoid undefined reference in Shorewall::rules::save_policies
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 07:04:42 -07:00 |
|
Tom Eastep
|
9e6fd39145
|
Corrections to OPENVPN doc.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 06:57:55 -07:00 |
|
Tom Eastep
|
42ae3ba581
|
Cleaner fix for TCP_FLAGS_DISPOSITION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-30 06:57:18 -07:00 |
|
Tom Eastep
|
d9fe6e7a42
|
Handle missing TCP_FLAGS_DISPOSITION setting
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-28 15:56:34 -07:00 |
|
Tom Eastep
|
6c025d20c9
|
Fix Shorewall6 Kernel Version test
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-28 15:53:35 -07:00 |
|
Tom Eastep
|
a992ec594a
|
Accomodate kernel version 3.0
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-27 17:03:27 -07:00 |
|
Tom Eastep
|
18e3dd40e6
|
Add an IPv6 ipset manpage and clarify +[...]
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-26 13:15:10 -07:00 |
|
Tom Eastep
|
33f7822df9
|
Correct 'action' editing RE in parameterized actions
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 09:16:22 -07:00 |
|
Tom Eastep
|
a18c502796
|
Correct reference counting in one more place in expand_rule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 07:42:01 -07:00 |
|
Tom Eastep
|
ecd2e2276e
|
Add some comments and remove extra whitespace
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-25 06:56:05 -07:00 |
|
Tom Eastep
|
215e923562
|
A little cleanup
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 16:17:22 -07:00 |
|
Tom Eastep
|
703bc88bfd
|
Move merge_rules() back to where it was.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 15:06:42 -07:00 |
|
Tom Eastep
|
6300d6cbfc
|
Validate 'action' parameter to the new parameterized actions.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 11:46:57 -07:00 |
|
Tom Eastep
|
ac5a6f4471
|
Cleanup of progress messages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 09:13:46 -07:00 |
|
Tom Eastep
|
f2c9647579
|
Set empty target in rules created via add_irule()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 08:28:43 -07:00 |
|
Tom Eastep
|
e693665be1
|
Add correct reference counting to merge_rules()
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-24 08:03:45 -07:00 |
|
Tom Eastep
|
ea4b8cdb6f
|
Exempt policy chains from optimization level 8.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 16:34:01 -07:00 |
|
Tom Eastep
|
b789d825f8
|
Unify the setting of $targetref and $jump
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 14:47:16 -07:00 |
|
Tom Eastep
|
83e6e2f105
|
Another fix for reference counting.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 13:54:56 -07:00 |
|
Tom Eastep
|
028fc20741
|
Correct reference accounting when long port lists are split
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 07:31:58 -07:00 |
|
Tom Eastep
|
3d616980a6
|
Don't delete the {target} member in clear_rule_target() but instead set it to ''
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-23 07:30:56 -07:00 |
|
Tom Eastep
|
567993292f
|
Some efficiency changes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-07-22 17:48:14 -07:00 |
|