Commit Graph

247 Commits

Author SHA1 Message Date
teastep
3fb29bab42 Tiny optimization to last change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8467 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 20:25:17 +00:00
teastep
c805d895b7 Validate MAC addresses
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8466 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 19:48:02 +00:00
teastep
c7db0435eb Catch absurd MARK contents
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:43:23 +00:00
teastep
aee1f94ce4 Generate correct match for CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8429 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:11:56 +00:00
teastep
3d3f0a71c5 Handling missing 'min' in connbytes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8428 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:09:06 +00:00
teastep
a5811aa4d4 Stop Accounting rule violations -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8419 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 01:03:34 +00:00
teastep
adf068c510 Stop Accounting rule violations
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8418 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 01:01:12 +00:00
teastep
b46bcd39a1 Formalize zone dynamic chain naming
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8417 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:54:52 +00:00
teastep
5d459daa75 Avoid undefined var error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8416 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:29:19 +00:00
teastep
8463d54580 Fix one bug plus clean up more chain-to-chain jump generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:09:22 +00:00
teastep
0927fcb95c Add some insurance
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8414 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 20:37:17 +00:00
teastep
15915994f6 Fix silly duplicate-rule problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8411 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 00:12:15 +00:00
teastep
699571a083 Back out unnecessary patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8407 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:30:40 +00:00
teastep
ed538add0e Make logging work correctly in ESTABLISHED and RELATED sections
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8406 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:09:43 +00:00
teastep
0064bcb5b5 Defer setting up forwarding
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8395 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-06 22:45:32 +00:00
teastep
a141478319 Resolve RFC 1918 Mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8372 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-28 00:05:25 +00:00
teastep
df41b69a04 Deprecate 'norfc1918' in favor of built-in actions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8367 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-27 19:45:23 +00:00
teastep
2a6b894bd4 Add MANGLE_ENABLED option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8351 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:36:48 +00:00
teastep
507d58ea0c Add 'avgpkt' to CONNBYTES code (it was already documented)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8346 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 14:56:37 +00:00
teastep
3d55331074 Finish CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8345 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 22:23:12 +00:00
teastep
148415f23a Avoid unnecessary calls to getprotobynumber()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8344 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 20:56:29 +00:00
teastep
5986d4db32 Default gateway detection in /etc/shorewall/init
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8342 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 16:08:34 +00:00
teastep
10e2cb3751 Fix rule generation for '- <interface>' entries in /etc/shorewall/interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8282 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-12 22:34:21 +00:00
teastep
1e7c0d0947 Bring 4.0 changes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8271 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-07 00:36:16 +00:00
teastep
aec4134aa1 Fix bug reported by Steven Springl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-24 17:05:27 +00:00
teastep
a81ce26230 Add AUTO_COMMENT option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8214 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-23 01:46:50 +00:00
teastep
d39cb6c1c1 Make macros auto-commenting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8213 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-22 23:15:39 +00:00
teastep
433e4a6f51 Generate error on a MAC address in the OUTPUT or POSTROUTING chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8203 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-18 17:38:25 +00:00
teastep
c0be049f3d Add restriction handling to tcrules processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8194 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-14 17:40:38 +00:00
teastep
60080486ec Fix handling of zone exclusion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8168 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-09 17:36:33 +00:00
teastep
c819e1fea7 Beef up check in do_user()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8162 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 19:16:25 +00:00
teastep
6d421fc49e Move fix for !user to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8161 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-07 19:05:45 +00:00
teastep
bed37c1965 Update versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8148 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 23:35:53 +00:00
teastep
5aeef8b231 Move prototol/port validation to the IPAddrs module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8146 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-05 16:43:11 +00:00
teastep
2d6e206a5f Long overdue cleanup of validate_interface_file()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8134 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-02 01:27:39 +00:00
teastep
82e525d0f5 Disallow move_rules() calls when source chain has embedded commands
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-02-01 22:53:05 +00:00
teastep
8ef198b3a6 More optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8124 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 18:47:27 +00:00
teastep
b81ae53477 Correct handling of IPSEC; re-order rules slightly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8123 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 16:39:40 +00:00
teastep
2a2a7530c2 Add optimizations in basic chain handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8122 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 00:03:25 +00:00
teastep
7b4abdba94 Validate comma-separated lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 01:07:57 +00:00
teastep
65df4d9f73 Ruleset optimization -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8100 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-24 16:22:03 +00:00
teastep
03091be09a Allow loose interface matching in more places
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:21:44 +00:00
teastep
99a5eba368 Remove delayed insertion of RETURN rules in dnat chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-16 23:24:41 +00:00
teastep
3d84cec3a3 Fix for DNAT/REDIRECT nested-zone mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8048 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 01:32:18 +00:00
teastep
384e88df43 First step in adding structure to NAT table ruleset
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 19:56:44 +00:00
teastep
6a2f313246 tweak a comment
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8005 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-03 22:18:24 +00:00
teastep
36096dfff7 Express mark test mask in Hex
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 17:47:58 +00:00
teastep
1a24a6fe78 Final fix for wrong mask in mark tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7981 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 00:27:52 +00:00
teastep
d5073f0b3f Move do_test() fixes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7966 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-29 16:31:49 +00:00
teastep
17e75e230f Fix problem with optional interfaces and DETECT_IP_ADDRS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7933 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 19:14:27 +00:00