holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
12,606 Commits 104 Branches 736 Tags 54 MiB
6b67f2698d
Commit Graph

1753 Commits

Author SHA1 Message Date
Tom Eastep
7abebb72e4 Document Shorewall::Config::set_action_param(). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-21 15:13:51 -08:00
Tom Eastep
da0261cb91 Document @1, @2,...@n 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-20 09:46:24 -08:00
Tom Eastep
df7785f2e9 Implement user-defined address variables. 
- Also correct handling of ${0} & ${chain} in a SWITCH column.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-18 17:58:20 -08:00
Tom Eastep
2b9af94c59 Clean up the Embedded Perl section in the Actions documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-17 15:59:52 -08:00
Tom Eastep
e8720e9f78 Add a section Id to the Shorewall Variables section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 09:48:33 -08:00
Tom Eastep
6b758fd588 Describe use of BEGIN PERL .... END PERL in action bodies. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 09:06:29 -08:00
Tom Eastep
1dc0f8b170 Split the Shell Variables section into multiple sections. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 08:45:46 -08:00
Tom Eastep
10237e01b2 Document ?set and ?reset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-09 11:46:51 -08:00
Tom Eastep
56d7b6248b Begin Action Documentaiton Update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-05 19:07:42 -08:00
Tom Eastep
22aa06f497 Small change to the Actions document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-04 10:39:29 -08:00
Tom Eastep
172c1a5b44 Update the alternative column specification table. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-29 07:43:48 -08:00
Tom Eastep
d7096ae52e Back out default-action macros and document in-line actions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-27 10:53:18 -08:00
Tom Eastep
7673b1ac4b Support multiple parameters in macros. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-26 11:04:19 -08:00
Tom Eastep
dd0f42c462 Mention Macros as default actions in the Actions and Macros docs. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-25 12:09:41 -08:00
Tom Eastep
9a8cf60857 Recomment disabling route filtering on fallback interfaces. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-20 12:45:19 -08:00
Tom Eastep
a484cb848f Document TPROXY IPv6 gotcha. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-14 11:51:30 -08:00
Tom Eastep
0e7a4d56fd Mention IMPLICIT_CONTINUE in the bridge doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-04 07:07:19 -08:00
Tom Eastep
e11dac3fe2 Replace wireless router image in the 2012 Network diagram. 
- Correct a typo in the 4.4 upgrade issues

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-29 07:18:28 -07:00
Tom Eastep
d3c63a2d97 Merge branch '4.5.9' 
Conflicts:
	docs/MultiISP.xml
	docs/images/Network2012a.dia
	docs/images/Network2012a.png
 2012-10-28 12:45:51 -07:00
Tom Eastep
39c0991940 More updates to the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 12:34:27 -07:00
Tom Eastep
9e984b10f6 More updates to the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 12:10:06 -07:00
Tom Eastep
19048b6a18 Recover Network Diagram 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-28 09:06:48 -07:00
Tom Eastep
2fcbeb9ddf Update Multi-ISP doc with my current config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 20:43:13 -07:00
Tom Eastep
8397244fd6 Update Multi-ISP doc with my current config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 20:28:52 -07:00
Tom Eastep
ef3652fc98 Update migration issues document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-27 08:01:16 -07:00
Tom Eastep
b9139a4ec8 Add additional steps to creating a dump file. 
- Ubuntu Precise with 4.4.26.1 -- use bash
- ipsec-tools required if IPSEC-related issue

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 12:42:35 -07:00
Tom Eastep
1e7a196b3d correct a typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 12:41:29 -07:00
Tom Eastep
e177916c12 Implement statistical marking in the tcrules file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-26 07:10:26 -07:00
Paul Gear
b082ca2331 Spelling fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-12 16:50:55 -07:00
Tom Eastep
18f981d7cc Update formatting in Dynamic Zones doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-09 07:08:35 -07:00
Tom Eastep
1195661264 Document new Dynamic Zone implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-07 12:20:36 -07:00
Tom Eastep
e2eba9468d Update IPv6 doc with new syntax. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-27 14:30:26 -07:00
Tom Eastep
32f89fa24b Don't unconditionally detect helpers when LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-22 09:27:13 -07:00
Tom Eastep
97cdc390c3 Continue work on Internals document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-21 15:06:29 -07:00
Tom Eastep
4c906dc3d1 Add UDP conntrack FAQ 1j. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-21 07:28:37 -07:00
Tom Eastep
483374d356 Continue development of the Internals document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-17 07:52:18 -07:00
Tom Eastep
f8c2e129c9 Additional content in the Internals document. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-16 15:47:29 -07:00
Tom Eastep
92ed56bbbc More content in the Internals doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-16 07:29:53 -07:00
Tom Eastep
0dd7ad7920 Re-organize Squid document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-08 08:08:16 -07:00
Tom Eastep
7235d4da11 Update manpage indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-03 20:25:15 -07:00
Tom Eastep
55e3b11a28 Pass both shorewallrc files to the compiler from lib.cli-std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-03 15:07:50 -07:00
Tom Eastep
c16dfc609d Documentation updates for VARLIB 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-02 15:43:52 -07:00
Tom Eastep
f5e1a42ac9 Update the Shorewall-Lite article 
- Mention shorewallrc
- Mention that /etc/shorewall/shorewall.conf is no longer read when the
  configuration directory has a shorewall.conf file.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-02 09:10:19 -07:00
Tom Eastep
9b05146a85 New documents (WIP) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-30 10:06:58 -07:00
Tom Eastep
899bce13c3 Some doc updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-27 13:22:05 -07:00
Tom Eastep
15fd345545 FAQ update 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-25 09:06:37 -07:00
Tom Eastep
0423769f59 Update docs for info added/changed in 4.5.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-20 11:36:32 -07:00
Tom Eastep
1b7a7d0fdf Remove some more hard-coded directory names from the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-17 14:24:52 -07:00
Tom Eastep
fdc45a990d Arrange for HELPER to match in the RELATED section. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 15:44:19 -07:00
Tom Eastep
f1fbb95d48 Update documentation for content merged from the 4.5.8 (master) path 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-13 08:16:36 -07:00
Tom Eastep
8f71797a48 Update upgrade doc to mention both SHA and SHA1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-08 10:51:06 -07:00
Tom Eastep
88dabde9c9 Update upgrade-issues doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-07 09:10:21 -07:00
Tom Eastep
c007f847a0 Handle disabled helpers in pre-3.5 kernels. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-06 15:54:45 -07:00
Tom Eastep
6c97e13107 Use -j CT for helper detection, when available 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 11:36:03 -07:00
Tom Eastep
6fbb578ce6 Add Helpers Document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-04 07:28:13 -07:00
Tom Eastep
c2cd031285 Mention the conntrack file in the config basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-02 11:31:25 -07:00
Tom Eastep
735b7c2cf5 Add support for nfacct 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-28 11:21:16 -07:00
Tom Eastep
55519bd9ac Revise instructions for disabling iptables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-17 16:48:15 -07:00
Tom Eastep
620d8f1cd0 Add an Anti-spoofing document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-15 11:26:16 -07:00
Tom Eastep
aa652fda1b Add FAQ 99 
- Empty ruleset after boot even though Shorewall runs.
 2012-07-07 07:55:17 -07:00
Tom Eastep
66f3df4570 Correct typo in ISO 366O doc. 
- changed tcrules to rules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-07 07:38:27 -07:00
Tom Eastep
74f831a73e Improve the readability of the ?ELSIF example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:51:14 -07:00
Tom Eastep
f0b5ee4cdb Correct a typo in NewRelease.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:50:38 -07:00
Tom Eastep
0bf2753472 Re-implement conditional inclusion 
- Correct defects
- Add ?ELSIF support
- Allow Perl-compatible expressions in ?IF
 2012-06-27 15:15:44 -07:00
Tom Eastep
640d34cecd Remove old advice from the Aliased Interface Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-20 16:39:12 -07:00
Tom Eastep
d1627efe5a Add a complex QOS Example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-17 09:57:31 -07:00
Tom Eastep
6c47349689 Support 'red' queuing discipline 
- Also added 'ls' support for HFSC

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-13 14:29:13 -07:00
Tom Eastep
f92a9fa0d6 Update traffic shaping doc with linklayer options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 09:40:33 -07:00
Tom Eastep
4a51241c40 Merge branch '4.5.5' 2012-06-12 08:12:26 -07:00
Tom Eastep
b2c96970ee Add cls_basic to recommended TC modules in FAQ 67 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-12 08:11:17 -07:00
Tom Eastep
2e05b81443 Apply patch from Ronan Amicel 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-11 11:26:49 -07:00
Tom Eastep
5f051fc61b Unify document indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:31:31 -07:00
Tom Eastep
61d4363865 Update Netfilter overview with Raw and Rawpost tables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 15:30:39 -07:00
Tom Eastep
705744fd8c Convert Frequently-used Articles section into a table 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:36:32 -07:00
Tom Eastep
724f3cbd76 Unify documentation indexes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-10 07:22:14 -07:00
Tom Eastep
f86476a43c Remove SYSCONFDIR aliasing from Install.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:53 -07:00
Tom Eastep
1ed6769b14 Fix broken URL in logging doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-09 07:18:17 -07:00
Tom Eastep
5c7a4b579c Clarify CONFIG_PATH setting using -lite products 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 17:23:13 -07:00
Tom Eastep
ee467a4877 Allow embedded shell/Perl directives to have leading '?' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 07:32:43 -07:00
Tom Eastep
fc97f6d00e Implement LOG target option control. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-24 13:54:59 -07:00
Tom Eastep
ab2376d61d Document 15-cc limit. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-21 07:03:53 -07:00
Tom Eastep
73e5bb0374 Expand the GEOIP documentation to describe GEOIPDIR option. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 09:40:00 -07:00
Tom Eastep
d8ec051114 Load the geoip cc's dynamically. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-20 08:59:59 -07:00
Tom Eastep
f0a3e1652a Bracket non-trivial cc lists with [...] 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-19 09:39:49 -07:00
Tom Eastep
cb72948739 Add Geoip match to config basics doc. Clarify variable search algorithm. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-18 07:27:33 -07:00
Tom Eastep
55c88e8e81 Replace curly brace enclosure with a preceding caret to avoid ambiguity. 
- {...} is used to enclose a set of column/value pairs and it is certain
  that the two will become confused.
 2012-05-17 15:26:16 -07:00
Tom Eastep
d1519345c4 Add TOC Link to ISO-3661.html; Correct typo in ISO-3661 page. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 12:26:02 -07:00
Tom Eastep
d220d3d9d5 Abandon action.GeoIP in favor of extended syntax in the SOURCE and DEST columns. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-17 10:44:02 -07:00
Tom Eastep
cc07e74532 Correct typo in TPROXY documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-16 15:56:19 -07:00
Tom Eastep
3d541f50c8 Use "(S)" consistently in column headings. 
- add synonyms so both the singular and plural forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 12:42:04 -07:00
Tom Eastep
bad8b9bddb Improve TPROXY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 11:39:15 -07:00
Tom Eastep
69d735ea0a Make TPROXY actually work! 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-10 11:19:23 -07:00
Tom Eastep
582d025f58 Add DIVERT action to tcrules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-09 09:41:58 -07:00
Tom Eastep
089d980dae Document the --shorewallrc parameter to compiler.pl 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-08 07:59:22 -07:00
Tom Eastep
2cbf1e86ad Allow synonyms for column names in alternate specification formats 
- gateway and gateways in the tunnels file
- mark and action in the tcrules file

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 11:59:47 -07:00
Tom Eastep
7453b70666 Add emphasis to the 'required' option in the config basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 07:14:56 -07:00
Tom Eastep
53d66833b2 Document how to avoid dhcp client setting default route 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-04 08:28:06 -07:00
Tom Eastep
2dd82a9898 Update Multi-ISP documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-01 10:28:12 -07:00
Tom Eastep
3a362a7004 Update FAQ 17 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-25 09:44:24 -07:00
Tom Eastep
25125c47e4 Document configure.pl 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-10 11:57:08 -07:00