holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,465 Commits 104 Branches 736 Tags 54 MiB
381d55760b
Commit Graph

15465 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
34e4fffd7d
Module suffix changes 
- Re-order default list in the compiler to match lib.common
- MODULE_SUFFIX="ko ko.xz" in standard .conf files.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 12:44:23 -07:00
Tom Eastep
2e98d4375b
Correct check for module already loaded 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 10:27:29 -07:00
Tom Eastep
419ff8903b
Invert logic in Shorewall::Chains::delete_reference() - better readability 
- similar change in Shorewall::Chains::adjust_reference_counts()

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-19 12:25:27 -07:00
Tom Eastep
390ac30be8
Remove a superfluous line of code from Shorewall::Chains::format_rule() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-19 12:12:54 -07:00
Tom Eastep
8cb98f16ea
Add a comment in Shorewall::Chains::optimize_level8() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-19 08:08:24 -07:00
Tom Eastep
5a9f179e25
Allow port variables as the server port in DNAT rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-16 15:36:18 -07:00
Tom Eastep
d8eca457de
Correct typo in the Aliased Interfaces article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-16 08:24:44 -07:00
Tom Eastep
8641d53bd1
Use MUTEX_TIMEOUT for ip[6]tables --wait interval 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-15 14:02:08 -07:00
Tom Eastep
7e3521e221
RESTORE_WAIT_OPTION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 18:56:40 -07:00
Tom Eastep
0603f8e355
Serialize start of IPv4 and IPv6 under systemd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 12:48:18 -07:00
Tom Eastep
ddefde2d10
Correct handling of address variables in DNAT rule. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 08:30:11 -07:00
Tom Eastep
2beeedd8fe
Remove incorrect '+' info from shorewall-interfaces(5) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-12 12:19:00 -07:00
Tom Eastep
1a2647618e
Allow runtime address variables as the server IP in DNAT rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-12 12:18:16 -07:00
Tom Eastep
72293883dd
Tabify the Zones module 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-12 11:28:14 -07:00
Tom Eastep
c31397532c
Verify that parent and child zones have a common interface 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-12 09:24:05 -07:00
Tom Eastep
d0861e813b
Make Shorewall's handling of '+' consistent with that of iptables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-12 08:22:57 -07:00
Tom Eastep
5d5bef105a
Remove reference to swping from the shorewall-init article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-11 13:38:58 -07:00
Tom Eastep
da62bd2b32
Use a hash slice in recently-added code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-11 13:38:34 -07:00
Tom Eastep
a83c19cc33
Adjust some default values in shorewall.conf(5) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-10 15:48:16 -07:00
Tom Eastep
96a33395e8
Correct typo in the Squid document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-09 15:42:19 -07:00
Tom Eastep
dabe8abe52
Add 'action' to the conntrack columns for alternate input 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-09 12:41:45 -07:00
Tom Eastep
a504820d19
Correct optimize level 8 handling of policy and policychain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-07 16:56:30 -07:00
Matt Darfeuille
8db4265ccc
docs: Clarify path for locating Shorewall files 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-07 13:48:47 -07:00
Tom Eastep
4c2c1bcdf1
Export CONFDIR and SHAREDIR to the generated script. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-06 13:42:01 -07:00
Tom Eastep
f2ee8013fc
Update the providers manpage re balanced IPv6 routes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-05 10:12:42 -07:00
Tom Eastep
56c8f70b52
Describe the parameters passed to the enable and disable extension scripts 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-04 12:38:14 -07:00
Tom Eastep
657215f9b5
Add sample enabled and disabled scripts 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-03 12:50:49 -07:00
Tom Eastep
5589ab76d9
Add arguments to the enabled and disabled user exits 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-03 12:44:15 -07:00
Tom Eastep
ec0e6763e4
add 'enabled' and 'disabled' to the Extension Script Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-02 15:44:48 -07:00
Tom Eastep
6425e5ae5d
Remove superfluous white space in the generated script 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-02 14:09:05 -07:00
Tom Eastep
8521c6f750
Merge branch '5.1.5' 2017-08-02 14:02:03 -07:00
Tom Eastep
c57edb0fbf
Update FAQ2* to use address variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-01 14:56:20 -07:00
Tom Eastep
80e6cd8a2f
Add enabled and disabled user exits 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-29 15:15:57 -07:00
Tom Eastep
69a0061d0f
Correct handling of MAC addresses in the accounting file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-27 14:55:19 -07:00
Tom Eastep
5a24953e6c
Merge branch '5.1.5' 2017-07-27 09:14:50 -07:00
Tom Eastep
eea3cca90c
Correct handling of USER/GROUP in the OUTPUT accounting section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-27 09:01:46 -07:00
Tom Eastep
a420ef04d9
Correct tcfilter source port handling when BASIC_FILTERS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-26 16:48:53 -07:00
Tom Eastep
e573436b12
Correct tcfilter source port handling when BASIC_FILTERS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-23 12:14:57 -07:00
Tom Eastep
7f44473387
Correct some typos in the Install article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-23 10:44:46 -07:00
Tom Eastep
cf9773c4de
Update FAQ 76 to make it non-Debian specific 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-21 16:56:08 -07:00
Tom Eastep
939f0e92a5
Allow configure.pl to recognize $SOURCE_DATE_EPOCH 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 15:18:50 -07:00
Tom Eastep
320d448684
Apply Bernhard M. Wiedemann's patch for configure... 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 15:18:41 -07:00
Tom Eastep
975a14b94f
Allow configure.pl to recognize $SOURCE_DATE_EPOCH 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 14:48:40 -07:00
Tom Eastep
cf3c304078
Apply Bernhard M. Wiedemann's patch for configure... 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 14:19:39 -07:00
Tom Eastep
d1a21fb678
Revert "Add SHARED_CONFIG option to shorewallrc" 
This reverts commit 4e978b687d.
 2017-07-20 12:23:59 -07:00
Tom Eastep
b9b7baf98d
Merge branch '5.1.5' 2017-07-20 10:37:53 -07:00
Tom Eastep
92e725de97
Remove link to non-existent blog 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-16 09:23:02 -07:00
Tom Eastep
922bd9eeca
Implement SPARSE=Very 
- Only installs the .conf file.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-09 16:18:09 -07:00
Tom Eastep
d2b3fa476a
Correct VLSM (56->60) in the Shared Config Document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-09 16:17:16 -07:00
Tom Eastep
4e978b687d
Add SHARED_CONFIG option to shorewallrc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-07 08:25:33 -07:00