holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,162 Commits 104 Branches 736 Tags 54 MiB
5e3795b5a4
Commit Graph

15162 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
a9fbaa57ed
Pass -$g_family to 'ip xfrm' commands 
- This currently doesn't work correctly, but maybe it will in the future

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:00:29 -07:00
Tom Eastep
317f12041b
Strengthen the test for empty SPD entries 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-30 15:43:17 -07:00
Tom Eastep
8469f983d8
Merge branch '5.1.7' 
# Conflicts:
#	Shorewall/Perl/prog.footer
 2017-09-29 15:25:37 -07:00
Tom Eastep
f54acb665a
Correct handling of mark range in MARK target. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-29 14:44:33 -07:00
Tom Eastep
3d2e9eb93e
Improve the fix for SELinux "getattr" denials 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-28 15:16:50 -07:00
Tom Eastep
c6a939301f
Improve the fix for SELinux "getattr" denials 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-28 15:16:00 -07:00
Tom Eastep
1cb98254cc
Handle SELinux getattr denials in open() processing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-26 16:42:54 -07:00
Tom Eastep
baa791a1e3
Handle SELinux getattr denials in open() processing 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-26 16:41:50 -07:00
Tom Eastep
8b4b965f63
Remove unnecessary disable/enable of script generation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-21 14:36:30 -07:00
Tom Eastep
8ee2d6246c
Update a comment in the compiler 
- get_configuration() also processes the shorewallrc file(s)

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-21 12:32:34 -07:00
Tom Eastep
a7be3dfece
Align progress messages produced by 'reenable' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:29:13 -07:00
Tom Eastep
846e8c4ece
Correct reenable logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:29:08 -07:00
Tom Eastep
e2bf7e6584
Align progress messages produced by 'reenable' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:28:09 -07:00
Tom Eastep
ff3994f6a1
Correct reenable logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 13:17:50 -07:00
Tom Eastep
494ec9c59c
Avoid extra comparison in reload_command() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:49:11 -07:00
Tom Eastep
1cde92e8f3
Initialize g_dockeringress 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:43:44 -07:00
Tom Eastep
721a1e3b33
Initialize g_dockeringress 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 10:39:52 -07:00
Tom Eastep
84fa774cb7
Change copyright dates in lib.runtime 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-19 09:03:00 -07:00
Tom Eastep
c39bc7b65f
Update version of lib.*installer 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:09:35 -07:00
Tom Eastep
2548e8741d
Update version and copyright dates in lib.common 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:07:37 -07:00
Tom Eastep
0a31fba6bb
Update version and copyright dates in lib.core 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:00:50 -07:00
Tom Eastep
9701c9c522
Update version and copyright dates in lib.base 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:57:02 -07:00
Tom Eastep
973d352209
Update shorewall script 
- Update copyright dates
- Add a comment about PRODUCT setting

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:51:27 -07:00
Tom Eastep
91e59c2ed4
Remove the Lite Makefiles 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 11:56:04 -07:00
Tom Eastep
be5aabcbfb
Correct typo in Chains.pm 
&g_dockeringress -> $g_dockeringress

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 10:14:22 -07:00
Tom Eastep
a8937e6bc8
Correct harmless typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 10:06:41 -07:00
Tom Eastep
e91bd9a0e9
Remove useless/empty .tmp file when SAVE_IPSETS is set 
- Add SAVE_IPSETS support to the Redhat/Fedora sysv init script

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 09:28:43 -07:00
Tom Eastep
5e1cf17ebc
DOCKER-INGRESS support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-17 10:57:29 -07:00
Tom Eastep
85a7ec6fe5
Correct module loading in the compiler 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-14 15:08:38 -07:00
Tom Eastep
fb831e3128
Remove empty/useless ipsets tmp file in Shorewall-init 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 11:56:24 -07:00
Tom Eastep
2ed11c7e15
Default ADD_IP_ALIASES to 'No' in Shorewall6 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 11:55:53 -07:00
Tom Eastep
ef1353790e
Correct VLSM editing in the 'ipcalc' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:41 -07:00
Tom Eastep
4f79d2e82b
Move and simplify handling of nat columns 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:04 -07:00
Tom Eastep
e6a2ba78a4
Correct handling of DEST column during action invocation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 10:05:37 -07:00
Tom Eastep
41ea3bdeda
Modify the Event actions to handle NAT rules 
- Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 09:47:12 -07:00
Tom Eastep
1065c2951b
Allow NAT targets to be passed to the Event actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-08 09:46:03 -07:00
Tom Eastep
3b373f3f21
Correct handling of ipsets in the DEST column of the snat file 
- Also corrected handling of exclusion

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-06 11:30:42 -07:00
Tom Eastep
0c05ab3bff
Correct typo in shorewall-snat(5) 
- missing ':' in IPv4 Example 4.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-05 10:29:19 -07:00
Tom Eastep
ef3a33e3f4
Merge branch '5.1.6' 
# Conflicts:
#	Shorewall-core/lib.common

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-30 15:02:23 -07:00
Tom Eastep
8a78fb6e77
Correct -p check for the conntrack utility's availability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-29 09:06:36 -07:00
Tom Eastep
b54a691110
Improve dynamic gateway detection 
- Use provider's routing table, if any

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 15:04:47 -07:00
Tom Eastep
90f33dd436
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:48:14 -07:00
Tom Eastep
b7aef24d7c
Delete useless line of code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:18:29 -07:00
Tom Eastep
6f475cde3f
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 10:19:25 -07:00
Tom Eastep
6053a40af0
Apply Tuomo Soini's loadmodule patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 09:20:50 -07:00
Tom Eastep
7e4dba7623
Revert "Correct check for module already loaded" 
This reverts commit 2e98d4375b.
 2017-08-23 08:01:25 -07:00
Tom Eastep
3d322d31b7
Add UDP rule to macro.RDP 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-22 08:07:32 -07:00
Tom Eastep
34e4fffd7d
Module suffix changes 
- Re-order default list in the compiler to match lib.common
- MODULE_SUFFIX="ko ko.xz" in standard .conf files.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 12:44:23 -07:00
Tom Eastep
2e98d4375b
Correct check for module already loaded 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 10:27:29 -07:00
Tom Eastep
419ff8903b
Invert logic in Shorewall::Chains::delete_reference() - better readability 
- similar change in Shorewall::Chains::adjust_reference_counts()

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-19 12:25:27 -07:00