holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
2,407 Commits 104 Branches 736 Tags 54 MiB
3e301ffbf4
Commit Graph

72 Commits

Author SHA1 Message Date
teastep
3daf8076ff Add warning about side effects of ADD_SNAT_ALIASES and ADD_IP_ALIASES 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2749 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-09-29 15:37:15 +00:00
teastep
f6875e9da7 Alchemy -- zone file style 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2623 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-09-02 20:46:53 +00:00
teastep
738b45ad9e Update the version number to 3.0 in all files 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-31 15:27:22 +00:00
teastep
370d61970a Add FASTACCEPT option to accept ESTABLISHED/RELATED packets early 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2474 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-11 19:53:07 +00:00
teastep
ac1983a5da Large cleanup patch from Tuomo Soini 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-02 16:46:30 +00:00
teastep
0a03598d11 Correct anachronistic reference in /etc/shorewall/shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2436 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-31 16:26:55 +00:00
teastep
b66929a65e Large merge of function from EXPERIMENTAL to HEAD. 
1) Elimination of the "shorewall monitor" command.

2) The /etc/shorewall/ipsec and /etc/shorewall/zones file are combined into
a single /etc/shorewall/zones file. This is done in an upwardly-compatible
way so that current users can continue to use their existing files.

3) Support has been added for the arp_ignore interface option.

4) DROPINVALID has been removed from shorewall.conf. Behavior is as if
DROPINVALID=No was specified.

5) The 'nobogons' option and BOGON_LOG_LEVEL are removed.

6) Error and warning messages have been made easier to spot by using
capitalization (e.g., ERROR: and WARNING:).

7) The /etc/shorewall/policy file now contains a new connection policy and a
policy for ESTABLISHED packets. Useful for users of snort-inline who want to
pass all packets to the QUEUE target.

8) A new 'critical' option has been added to /etc/shorewall/routestopped.
Shorewall insures communication between the firewall and 'critical' hosts
throughout start, restart, stop and clear. Useful for diskless firewall's
with NFS-mounted file systems, LDAP servers, Crossbow, etc.

9) Macros. Macros are very similar to actions but are easier to use, allow
parameter substitution and are more efficient. Almost all of the standard
actions have been converted to macros in the EXPERIMENTAL branch.

10) The default value of ADD_IP_ALIASES in shorewall.conf is changed to No.

11) If you have 'make' installed on your firewall, then when you use
the '-f' option to 'shorewall start' (as happens when you reboot),
if your /etc/shorewall/ directory contains files that were modified
after Shorewall was last restarted then Shorewall is started using
the config files rather than using the saved configuration.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2409 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-25 23:08:09 +00:00
teastep
b0e6e3a893 Given the large number of people shooting themselves in the foot with 
poorly-written one-to-one NAT rules, I'm changing the shorewall.conf
file to set ADD_IP_ALIASES=No in shorewall.conf. Hopefully, this will
reduce the amount of whining about routing table modification during
"shorewall [re]start".


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2372 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-19 18:41:05 +00:00
teastep
318e204358 Re-implement MACLIST_TTL 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-17 22:08:15 +00:00
teastep
c6e3e84352 Disable MACLIST_TTL 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2356 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-17 16:52:21 +00:00
paulgear
2a19eb8a5a Copy latest 2.4 version from Shorewall2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2264 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 05:55:29 +00:00
paulgear
90dd62e89e Copy latest 2.2 version from STABLE2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2263 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 05:45:05 +00:00
paulgear
921a7223d4 Copy latest 2.0 code from STABLE2/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2262 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-09 04:45:32 +00:00
teastep
5338cb48b0 Minor updates for 1.4.9 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1070 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2004-01-09 20:18:40 +00:00
teastep
795c791669 Remove backquotes from commands in shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@812 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-12-08 18:42:25 +00:00
teastep
5466a7f35b Add MODULE_SUFFIX option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@799 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-12-01 18:37:41 +00:00
teastep
baa82a4697 Add MODULE_SUFFIX option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@798 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-12-01 18:30:28 +00:00
teastep
f9c596a465 Reword desciption of NEWNOTSYN 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@793 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-11-28 17:39:53 +00:00
teastep
f046ea3ab1 Fix route filtering 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@782 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-10-30 15:42:45 +00:00
teastep
ee51d49233 Correct Debian lockfile usage comment in shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-10-27 22:36:22 +00:00
teastep
67ad01a56f Added BLACKLISTNEWONLY 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@765 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-10-11 16:06:00 +00:00
teastep
3d9d913b4b 1.4.6_2003-731 plus idiot-proofing of the policy file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@682 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-08-01 02:49:12 +00:00
teastep
4c08cc4780 ADMINISABSENTMINDED Option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@681 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-07-29 23:04:04 +00:00
teastep
fc1cc9b0eb Fix capability report -- Simon Matter 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-30 14:21:42 +00:00
teastep
06e38b587d SHOREWALL_SHELL parameter 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@621 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-28 15:22:22 +00:00
teastep
7a2cad4d07 Add Conntrack Match Capability 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@618 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-27 21:02:52 +00:00
teastep
4e39f1e0dd Implemented 'newnotsyn' interface option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@597 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-06-18 18:43:41 +00:00
teastep
66337f3cda Restore 5-character zone name capability 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@570 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-27 17:42:12 +00:00
teastep
535510e8a2 Improve formatting in shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@569 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-22 21:45:04 +00:00
teastep
17868a6cce Changes for 1.4.4 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@568 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-22 20:48:59 +00:00
teastep
09392c88d3 Move DNAT and REDIRECT logging to the nat table 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@567 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-22 20:37:24 +00:00
teastep
e33573eff9 Change LOGMARKER/LOGFORMAT Implementation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@566 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-21 21:36:05 +00:00
teastep
f96c06d949 Remove references to fireparse from shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@565 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-05-21 14:25:23 +00:00
teastep
bbcbbca6b8 Implement LOGMARKER variable 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@546 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-04-25 16:22:18 +00:00
teastep
6a478754ac Remove SHARED_DIR from shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@488 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-03-08 17:55:34 +00:00
teastep
21cb22303f 1) Remove trailing white space. 
2) Improve detection of white space in comma-separated lists.
3) Fix a typo in the INSTALL file.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@464 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-23 14:10:37 +00:00
teastep
6cabdfae5d More 1.3.14 Changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@456 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-19 23:52:03 +00:00
teastep
5fe2bef29e Remove icmp.def; change versions to 1.4 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-15 00:09:44 +00:00
teastep
ef51c04d1d Shorewall 2.0.0 Alpha1 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@443 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-02-08 20:58:44 +00:00
teastep
4cf3600e5c Update copyrights 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@425 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-31 18:04:57 +00:00
teastep
a5f8c0595d Remove FORWARDPING from shorewall.donf -- add threats to OLD_PING_HANDLING description 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@408 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-21 02:17:49 +00:00
teastep
7fe133fe4a Add OLD_PING_HANDLING option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@406 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-21 00:34:00 +00:00
teastep
f09342105d Add CLEAR_TC to shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@404 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-15 22:12:24 +00:00
teastep
feb0752113 Allow shared files to be moved easily 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@397 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2003-01-06 23:01:23 +00:00
teastep
f918713016 Fix typo in shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@379 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-12-21 18:18:45 +00:00
teastep
fa843d4139 Allow marking packets in the FORWARD chain 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@368 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-12-16 19:25:20 +00:00
teastep
1220331e35 Add ULOG Support - phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@363 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-12-13 04:06:24 +00:00
teastep
b9891e08e2 Add ULOG Support 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@362 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-12-13 03:23:46 +00:00
teastep
8c3af56566 Add TCP Flags Checking 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-11-10 21:34:20 +00:00
teastep
cd555022bf Add MAC verification 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2002-10-22 18:07:52 +00:00