holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
14,848 Commits 104 Branches 736 Tags 54 MiB
708644f7c9
Commit Graph

2056 Commits

Author SHA1 Message Date
Tom Eastep
9e6fd39145 Corrections to OPENVPN doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-30 06:57:55 -07:00
Tom Eastep
15a88f962f Add a FAQ regarding $FW 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-14 07:48:51 -07:00
Tom Eastep
0ab7e06f84 Document renaming of scripts in the Build document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-09 15:15:06 -07:00
Tom Eastep
92e244f1b8 Mention reversed interfaces in FAQ 1b. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-09 09:32:38 -07:00
Tom Eastep
290e5d3cfd Add the release repository to the Build document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-08 16:03:10 -07:00
Tom Eastep
7cb3392e3d Expand explaination of rate limiting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-08 09:53:56 -07:00
Tom Eastep
aa31e52b96 Show alternative message for partial PORT or PASV reply 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-07 06:43:07 -07:00
Tom Eastep
d31e2d67ba DEFAULTS directive enforces max number of parameters 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-03 07:22:29 -07:00
Tom Eastep
ef848a559c Correct TPROXY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-30 06:36:48 -07:00
Tom Eastep
bd2cbfc5e2 Correct typo in the Manual Chains HOWTO 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-28 07:45:49 -07:00
Tom Eastep
67b8a10879 Correct parameterized default action in the FAQ 2011-06-25 10:26:45 -07:00
Tom Eastep
6cc2503f60 More FAQ updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-25 08:23:32 -07:00
Tom Eastep
961b9b5e6d More FAQ cleanup 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-25 07:44:13 -07:00
Tom Eastep
8b61e4500a Documentation Updates (mostly FAQ) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-24 13:40:50 -07:00
Tom Eastep
6da5380230 Update troubleshooting doc for -T option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-24 11:48:14 -07:00
Tom Eastep
0d2e2a14d3 Document additional parameters to standard default actions and DEFAULT in macro files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-22 08:05:13 -07:00
Tom Eastep
44599530ea Remove warnings about duplicate zone/interface dynamic hosts 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-20 18:27:18 -07:00
Tom Eastep
c112f2381e Document IPv6 Dynamic Zones 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-20 10:59:14 -07:00
Tom Eastep
f7322a674d Update ipset doc with Shorewall6 and Shorewall-init info. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-19 15:00:48 -07:00
Tom Eastep
a4b77d7267 Update compiler.pl documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-19 07:56:03 -07:00
Tom Eastep
6f3497e353 Update Audit.xml with parameterized standard action info 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-19 06:50:18 -07:00
Tom Eastep
b7a3142620 Document parameterized default actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-11 15:25:48 -07:00
Tom Eastep
0cb98737f7 Document DEFAULTS 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-11 07:29:25 -07:00
Tom Eastep
642319d706 Change annotated documentation default 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-06 15:40:21 -07:00
Tom Eastep
c42c6864b4 Don't modify the .conf file installed in configfiles. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-06 09:46:22 -07:00
Tom Eastep
4436d479b4 Extend FAQ 4 2011-06-05 17:58:20 -07:00
Tom Eastep
b20156de9e Add note about 'burst' to the complex TC doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-05 06:33:33 -07:00
Tom Eastep
818b927b73 Make Kernel Config article unmaintained 2011-06-04 06:31:25 -07:00
Tom Eastep
eba1473600 Change heading in the Documentation Index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-03 07:39:08 -07:00
Tom Eastep
c3600eb814 Document -p and PLAIN 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-06-02 06:43:23 -07:00
Tom Eastep
0287d96aa2 Finish filtering implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-26 13:38:44 -07:00
Tom Eastep
704f3fdd55 Document audited default actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-24 07:24:15 -07:00
Tom Eastep
5d04c93a16 Implement LEGACY_FASTSTART option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-22 15:36:29 -07:00
Tom Eastep
e511c5a8d5 Corrections to Audit documents 2011-05-22 10:25:43 -07:00
Tom Eastep
a8fd3281d9 Add CONFIG_PATH section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-22 08:59:05 -07:00
Tom Eastep
57d276f0b3 Add default action example 2011-05-22 08:02:23 -07:00
Tom Eastep
b844fc3107 Correct typo in Audit doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-22 06:10:58 -07:00
Tom Eastep
ad050763cc Documentation update 2 for AUDIT support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-21 17:22:19 -07:00
Tom Eastep
e940f5018e Implement whitelisting. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-18 08:30:01 -07:00
Tom Eastep
8ec33cd6dd Update accounting documentation 2011-05-17 18:35:28 -07:00
Tom Eastep
fd70e73d34 Add ACCOUNTING_TABLE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-17 12:51:33 -07:00
Tom Eastep
43a21e122a Update Install doc with absolute path name info 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-14 07:20:38 -07:00
Tom Eastep
02baf94246 Fix typo in starting/stopping doc 2011-05-08 05:44:24 -07:00
Tom Eastep
68fe7c733e Correct ipset allowed characters 2011-04-11 10:02:18 -07:00
Tom Eastep
c902045348 Document method of turning off TSO/GSO 2011-04-11 09:49:48 -07:00
Tom Eastep
5734c84499 Documentation updates 2011-04-11 09:37:50 -07:00
Tom Eastep
f2d5e79684 Add link to 2011 Linuxfest Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-10 15:25:52 -07:00
Tom Eastep
6e7a7b7f39 Clarify what Shorewall UPnP does and does not do 2011-04-10 10:29:10 -07:00
Tom Eastep
81437b2bb1 Don't mention downloads in the complex TC doc 2011-04-04 19:01:06 -07:00
Tom Eastep
6b93ff3a91 Clarify Debian file location 2011-04-03 19:32:39 -07:00
Tom Eastep
a47357a6e8 Re-add LXC doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-03 10:27:52 -07:00
Tom Eastep
cc633c5bd9 Shorewall 4.4.19 Changes 2011-04-03 09:56:30 -07:00
Tom Eastep
d7fb4e8ed9 More corrections to Tuomo's Example 2011-03-02 07:13:14 -08:00
Tom Eastep
e2c8d7b3e1 Correct Tuomo's workaround description 2011-03-01 14:04:06 -08:00
Tom Eastep
b7b1d5a7ab Link Proxy NDP section to the Vserver example of same 2011-02-28 13:40:20 -08:00
Tom Eastep
323fef9b51 Add additional info to the Vserver NDP section 2011-02-28 13:38:03 -08:00
Tom Eastep
cb94ca821e Correct typo 2011-02-28 13:08:28 -08:00
Tom Eastep
e9a3dc85fc Add proxy NDP example to the Vserver article 2011-02-28 13:05:04 -08:00
Tom Eastep
ac45a9b392 Fix typo in the Lenny->Squeeze doc 2011-02-19 09:28:09 -08:00
Tom Eastep
e47cb61c33 Introduce 'accountfwd' chain for forwarded accounting in sectioned configuration 2011-02-18 15:44:55 -08:00
Tom Eastep
da1ae7d301 Add bleve's tip to the MultiISP doc 2011-02-18 09:02:56 -08:00
Tom Eastep
e5fb8b0a35 Add Simple TC warning to the Lenny->Squeeze article 2011-02-12 20:02:54 -08:00
Tom Eastep
5c0b592934 Section the accounting file 2011-02-12 12:47:15 -08:00
Tom Eastep
27add33ff3 Add 'show ipa' to Accounting doc 2011-02-10 13:54:51 -08:00
Tom Eastep
f5a39a4aa8 Updates for new release model 2011-02-07 16:32:51 -08:00
Tom Eastep
b4b59119ef Don't allow non-accounting chain in the CHAIN accounting column 2011-02-07 16:32:38 -08:00
Tom Eastep
2c2fdab0fe Rename USE_LOCAL_MODULES to EXPORTMODULES 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-02-06 08:42:35 -08:00
Tom Eastep
98e3827246 Remove rant in getting started doc 2011-02-04 06:45:53 -08:00
Tom Eastep
ea2c72d1b1 Prepare for 4.4.17 2011-02-04 06:44:02 -08:00
Tom Eastep
b61ad28897 Add threat to GettingStarted doc 2011-02-03 20:38:41 -08:00
Tom Eastep
ac13be4ed4 Add rate-limiting example to rules manpages 2011-02-03 13:26:41 -08:00
Tom Eastep
ae4d675d0d Document chain name length restriction 2011-01-31 07:07:10 -08:00
Tom Eastep
a9f5721851 Add OpenSuSE 11.3 to distros tested with per-IP accounting 2011-01-31 06:55:59 -08:00
Tom Eastep
a026ffabe1 Add iptaccount -l example with output 2011-01-30 14:04:26 -08:00
Tom Eastep
2cf3d15d45 Mention the iptaccount --help command 2011-01-30 10:46:35 -08:00
Tom Eastep
303afe8c7e Some accounting fixes (code and docs) 2011-01-30 09:39:14 -08:00
Tom Eastep
26cea4336e Document per-IP accounting 2011-01-30 08:33:06 -08:00
Tom Eastep
156b04c380 Implement Run-time Address Variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-01-26 09:08:48 -08:00
Tom Eastep
4098535a43 Revise info about mis-using Vserver zones 2011-01-23 12:47:13 -08:00
Tom Eastep
d5b0a39b45 Add some info about mis-using Vserver zones 2011-01-23 09:45:06 -08:00
Tom Eastep
a7dd95d394 Add some info about mis-using Vserver zones 2011-01-23 09:43:35 -08:00
Tom Eastep
228eeabb7d More explainations in the Simple TC doc 2011-01-23 08:36:45 -08:00
Tom Eastep
7b73323301 Add more introductory material to the Simple TC document 2011-01-23 07:53:56 -08:00
Tom Eastep
a2b440b093 Add USE_LOCAL_MODULES option 2011-01-22 08:13:17 -08:00
Tom Eastep
985fd990c6 Update Shorewall-4 with info about shorewall-init 2011-01-22 07:30:40 -08:00
Tom Eastep
d0858f6034 Add module-loading section to Shorewall-lite doc 2011-01-21 15:49:28 -08:00
Tom Eastep
3a2da73808 Document INCLUDE changes in the basics doc 2011-01-15 15:56:20 -08:00
Tom Eastep
265ca85d02 Allow INCLUDE in extension scripts 2011-01-15 15:43:45 -08:00
Tom Eastep
4a69ad35ee Resolve conflicts -- take 2 2011-01-13 19:24:15 -08:00
Tom Eastep
edde07fd85 Resolve conflects 2011-01-13 19:01:44 -08:00
Tom Eastep
fce558d97e Correct 'shorewall-common' references in the quickstart guides 2011-01-13 18:53:03 -08:00
Roberto C. Sanchez
28682a2428 eliminate obsolete references to shorewall-common 2011-01-13 20:02:19 -05:00
Tom Eastep
08f09d7de0 Deprecate EXPORTPARAMS 2011-01-09 10:12:36 -08:00
Tom Eastep
97672455b2 Correct typo in the FAQ 2011-01-09 09:18:21 -08:00
Tom Eastep
3c4336da58 Enhance DNAT documentation again 2011-01-07 10:27:35 -08:00
Tom Eastep
a8084370b6 Correct bridge example in the OPENVPN doc 2011-01-05 06:57:42 -08:00
Tom Eastep
6a7dad5e18 Merge branch 'master' into 4.4.16 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-12-27 12:32:28 -08:00
Tom Eastep
79cbfd0126 Allow '--' to specify '-' as an action parameter 2010-12-26 17:03:05 -08:00
Tom Eastep
4111432a52 Implement optional action parameters 2010-12-26 16:13:53 -08:00
Tom Eastep
31bd00e42e Document parameterized actions 2010-12-26 08:59:31 -08:00
Tom Eastep
29da130eef Add a note about the SOURCE and DEST columns 2010-12-24 14:03:55 -08:00
Tom Eastep
a51eac91b0 Add documentation for parameterized actions 2010-12-22 15:09:54 -08:00
Tom Eastep
880a94e42f Update documentation regarding Hack removal 2010-12-14 11:19:17 -08:00
Tom Eastep
aba63d5c9b More action/macro documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-12-13 09:06:29 -08:00
Tom Eastep
e8b26236e2 Shuffle the Compiled Program article 2010-12-12 19:00:15 -08:00
Tom Eastep
b786da4abb Document lack of configfiles/ in Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-12-12 08:45:54 -08:00
Tom Eastep
48b00d719e Complete Proxy NDP implementation 2010-12-11 10:04:07 -08:00
Tom Eastep
2f70c0b71a Add Optional/Required interface section to the config basics doc 2010-12-09 10:04:52 -08:00
Tom Eastep
627733d925 Mention DHCPfwd in the DHCP doc - TAKE 2 2010-12-01 11:39:48 -08:00
Tom Eastep
b573826226 Mention DHCPfwd in the DHCP doc 2010-12-01 11:37:40 -08:00
Tom Eastep
c0ba395276 Update IPSEC title 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-11-28 10:00:31 -08:00
Tom Eastep
095345f95c Mention 'weak host model' in the Fool's firewall article 2010-11-27 11:14:51 -08:00
Tom Eastep
681529b664 Clarify 'switch' in the Fool's firewall article 2010-11-27 11:01:20 -08:00
Tom Eastep
2702d7f208 Implement header matching 2010-11-24 10:46:06 -08:00
Tom Eastep
972d00c300 Add another SNAT virtual alias example 2010-11-22 12:04:20 -08:00
Tom Eastep
93f9e8914c Add another SNAT virtual alias example 2010-11-22 11:59:59 -08:00
Tom Eastep
9b31906c6c Update bogus link in the features page 2010-11-21 21:40:56 -08:00
Tom Eastep
6083693181 Tweak FAQ 16c - LOGFILE 2010-11-21 19:37:54 -08:00
Tom Eastep
fdd1500971 Add FAQ 16c - LOGFILE 2010-11-21 12:05:28 -08:00
Tom Eastep
a17c47b017 Add FAQ 16b - dmesg 2010-11-21 10:48:23 -08:00
Tom Eastep
eac128b5e2 Add routes file to manpage indexes; modify links in the features page 2010-11-20 13:51:16 -08:00
Tom Eastep
e052951890 More /etc/shorewall/routes documentation 2010-11-17 17:27:48 -08:00
Tom Eastep
4ca1098e3e Be more explicit about route rules with SOURCE lo 2010-11-15 21:03:53 -08:00
Tom Eastep
17cc0bad45 Mention IPv6 in the tcfilters section 2010-11-15 12:38:28 -08:00
Tom Eastep
c9737930a2 Complete Shared TC documentation 2010-11-14 14:48:16 -08:00
Tom Eastep
a1e3683651 Documentation updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-11-10 14:38:55 -08:00
Tom Eastep
8c1bdc803b Fix typo in address-type section; add faq 94 2010-11-04 09:57:33 -07:00
Tom Eastep
e9b7b8acad Add address-type info to config file basics doc 2010-11-03 16:31:50 -07:00
Tom Eastep
5b7a2f002a Add helpers file to advice about modifying loaded modules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-11-03 12:47:50 -07:00
Tom Eastep
d3f729c56e Clarify applications running on the firewall section 2010-10-27 15:51:29 -07:00
Tom Eastep
54fdce9e22 Fix typos in Introduction 2010-10-26 07:32:50 -07:00
Tom Eastep
0f1370f265 Correct typo in upgrade issues 2010-10-21 07:57:39 -07:00
Tom Eastep
959b8f5167 Revise Vserver article 2010-10-10 08:29:19 -07:00
Tom Eastep
aad8a7b213 Clear FORWARD_CLEAR_MARK setting in the remaining config files 2010-10-09 11:31:19 -07:00
Tom Eastep
38851fe446 Delete obsolete options from shorewall.conf 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-04 07:44:28 -07:00
Tom Eastep
ac8c7ed7d4 Updating bridge documents 2010-10-03 14:12:38 -07:00
Tom Eastep
2599e44fca More Tweaks to FAQ 93 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-03 13:03:11 -07:00
Tom Eastep
4c1c63617b Tweak FAQ 93 2010-10-03 12:56:09 -07:00
Tom Eastep
e62033ed13 Add FAQ 93 re bridging. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-03 12:52:46 -07:00
Tom Eastep
cee05d9763 Refine -lite handling of scfilter. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-03 12:52:30 -07:00
Tom Eastep
432534a650 Eliminate need to restart -lite to extract scfilter 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-03 10:56:55 -07:00
Tom Eastep
5b86cbdabf Document scfilter in the Extensions Scripts Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-10-01 12:29:41 -07:00
Tom Eastep
468c918121 Correct grammar in FAQ 92 2010-09-28 08:05:18 -07:00
Tom Eastep
a7be406fb9 Add FAQ 92 2010-09-28 08:04:02 -07:00
Tom Eastep
26ec7cee1d Update ipset doc with multiple match syntax 2010-09-21 06:59:55 -07:00
Tom Eastep
c21a4d786d add ipset manpage to the index 2010-09-20 16:00:19 -07:00
Tom Eastep
1d650b41cd Remove blacklisting by destination IP address support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-09-15 15:24:58 -07:00
Tom Eastep
2ff06f5f0a Update simple TC doc 2010-09-14 07:59:01 -07:00
Tom Eastep
9f786b7c59 Delete mention of triggers in ipset doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-09-12 08:01:54 -07:00
Tom Eastep
b937290740 Add version cautions to blacklisting doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-09-12 07:58:13 -07:00
Tom Eastep
7e8979157c Update Features Page re: Virtualization 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-09-08 15:47:23 -07:00
Tom Eastep
2cb5aaeb07 Correct interface reference 2010-09-08 13:12:19 -07:00
Tom Eastep
a4606bee80 Pretty up Network Diagram -- exchange caption location 2010-09-08 12:57:35 -07:00
Tom Eastep
bbe5dae9b0 Pretty up Network Diagram some more 2010-09-08 12:44:40 -07:00
Tom Eastep
0907a7b6c2 Pretty up Network Diagram 2010-09-08 12:38:14 -07:00
Tom Eastep
7f72d66b90 A couple of documentation updates 2010-09-08 11:55:16 -07:00
Tom Eastep
8853de0c2e Fix links to secmark manpages 2010-09-07 15:03:05 -07:00
Tom Eastep
8d63e04926 Yet more docunentation updates 2010-09-06 20:37:34 -07:00
Tom Eastep
50b4bd8dfe More Blacklist and Secmark documentation updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-09-06 17:26:49 -07:00
Tom Eastep
c6f58ba924 Enhance SELinux support: 
- Add state match
- Add user/group match
- Add examples to the man pages
 2010-09-06 09:06:40 -07:00
Tom Eastep
f93413b2a7 Update Multi-ISP doc for variable name change in 4.4.8. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-31 15:33:22 -07:00
Tom Eastep
8077c9e1c3 Add FAQ 91 2010-08-30 11:07:37 -07:00
Tom Eastep
c2558af9c8 Document and correct implementation of EXCLUSION_MASK 
1. Require KLUDGEFREE if existing rule uses mark match
2. Pretty up the code
3. Use MASK_BITS rather than TC_BITS when calculating the offset of EXCLUSION_MASK

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-28 08:29:47 -07:00
Tom Eastep
6b0fa8b4e2 Change note about MARK_IN_FORWARD_CHAIN 2010-08-19 15:33:12 -07:00
Tom Eastep
baf8e21a80 Add reference to manual chains article for the compile extension 2010-08-17 09:23:43 -07:00
Tom Eastep
bc19a80ac4 Correct FAQ 2 for Shorewall-lite 2010-08-14 07:14:52 -07:00
Tom Eastep
1510e111c4 Fix typo in conf basics doc 2010-08-13 20:27:14 -07:00
Tom Eastep
000873575e Update Shorewall Lite Doc 2010-08-11 15:59:24 -07:00
Tom Eastep
965ad7ced1 Minor tweaks to the IPAddrs module 2010-08-11 11:46:26 -07:00
Tom Eastep
0234564a1b Add destination IP blacklisting 2010-08-10 17:33:50 -07:00
Tom Eastep
3ce8ff5741 Bump version to Beta 4 2010-08-01 16:10:32 -07:00
Tom Eastep
f75c5809b5 Advocate use of 'ip' to examine routing tables 2010-08-01 11:56:06 -07:00
Tom Eastep
967629569b Taylor Universal config to work with Shorewall-init and streamline ruleset 
- Make interface 'all' optional and set REQUIRE_INTERFACE=Yes
- Add COMPLETE option
- Set FASTACCEPT in Universal samples
- Reset SUBSYSLOCK in Universal samples

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-08-01 08:36:56 -07:00
Tom Eastep
a88e2afa69 Tweak the Universal documentation 2010-07-31 18:43:54 -07:00
Tom Eastep
c6404f1a74 Reword last title in Universal ruleset doc 2010-07-31 14:51:52 -07:00
Tom Eastep
ee5d2a56da Add Universal doc 2010-07-31 13:52:09 -07:00
Tom Eastep
bebeba8cae Document Universal Configuration and allow for empty LOGFILE 2010-07-31 12:45:43 -07:00
Tom Eastep
d483725474 Update Accounting doc 2010-07-29 16:49:40 -07:00
Tom Eastep
6a1fea3a40 Add 'user marks' 2010-07-27 11:02:36 -07:00
Tom Eastep
aac343b476 Document mark geometry capability 2010-07-27 08:05:54 -07:00
Tom Eastep
7f4a7372ef Remove nic registration requirement for IRC channel 2010-07-24 16:04:21 -07:00
Tom Eastep
a9a19c4da6 Remove another link to a Russian-language page 2010-07-24 11:08:06 -07:00
Tom Eastep
242f13f6bd Delete foreign language links -- docs are very out of date 2010-07-24 09:33:47 -07:00
Tom Eastep
9ab66c3b07 More config basic doc tweaks 2010-07-24 07:09:02 -07:00
Tom Eastep
039ac17fe6 Correct SOURCE/DEST section 2010-07-23 14:32:11 -07:00
Tom Eastep
93e5fc2deb Correct SOURCE/DEST section 2010-07-23 14:19:05 -07:00
Tom Eastep
c2717b9eec Correct SOURCE/DEST section 2010-07-23 14:17:38 -07:00
Tom Eastep
00352baba7 Add warning about Upstart 2010-07-23 07:38:28 -07:00
Tom Eastep
c536680bd6 Add FAQ 90 2010-07-21 13:31:43 -07:00
Tom Eastep
eb2dcb46cd Remove mention of 4.5 from Manpages6 index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-21 12:36:18 -07:00
Tom Eastep
46644a0336 Add instructions for disabling existing firewalls 2010-07-21 11:49:37 -07:00
Tom Eastep
d897635af5 Allow bizarre overriding of SOURCE/DEST with ipsets 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-20 16:03:12 -07:00
Tom Eastep
c9423491f2 Don't mention 4.5 on Manpages page 2010-07-19 15:11:55 -07:00
Tom Eastep
8eeb71dc1b Fix inconsistencies in manpages 2010-07-19 14:45:05 -07:00
Tom Eastep
cbb524b067 Implement ADD/DEL commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-18 08:46:38 -07:00
Tom Eastep
d2bb96be88 Emphasize that you must have a Nic to post on the Shorewall channel 2010-07-18 07:34:03 -07:00
Tom Eastep
9977f778ad Link to a better Netfilter Diagram 2010-07-15 11:07:14 -07:00
Tom Eastep
35a4b8e7f4 Update Vserver FAQ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-05 13:12:06 -07:00
Tom Eastep
c8274f0538 Minor vserver doc update 2010-07-02 13:34:21 -07:00
Tom Eastep
ba535b8937 Correct IPv6 zones file in Vserver doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-07-01 15:56:34 -07:00
Tom Eastep
f538aecd82 Update the Vserver article with IPv6 and a graphic 2010-07-01 15:13:29 -07:00
Tom Eastep
7dbf829e9b Clean up Vserver doc 2010-07-01 07:22:54 -07:00
Tom Eastep
e4afc15370 Finish Vserver Implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-30 20:35:46 -07:00
Tom Eastep
ac4349e930 Add more IPv6 configuration info 2010-06-27 17:46:12 -07:00
Tom Eastep
236269eafc Add IPv6 example to the OpenVPN doc 2010-06-27 16:26:40 -07:00
Tom Eastep
ed72afd8a0 Add comment about the unfortunate name of the tcrules file 2010-06-25 06:33:14 -07:00
Tom Eastep
40f57bf926 Update Squid Document 2010-06-16 09:24:01 -07:00
Tom Eastep
625f254d02 Add tcfilters to manpage index 2010-06-10 06:15:15 -07:00
Tom Eastep
f50a609d1d Update the UPnP document with the 4.4.10 changes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-08 11:34:37 -07:00
Tom Eastep
e061d15baf Update blacklisting doc with 4.4.10 behavior. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-08 11:32:39 -07:00
Tom Eastep
f412f96153 Add introduction to config file basics document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-06 08:24:28 -07:00
Tom Eastep
5e74427332 Update the Build document with the current release model 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-02 16:23:09 -07:00
Tom Eastep
91840acb18 Remove unused RUNLEVELS variable from the install scripts. 
Add some documentation

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-01 07:12:19 -07:00
Tom Eastep
0553f232b5 Remove apparent restriction on files where shell variables can be used 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-31 10:25:53 -07:00
Tom Eastep
78aaea749e Mention Shorewall-init in the beginner HOWTOs 2010-05-31 09:40:20 -07:00
Tom Eastep
47c4cbd85a Remove extra step in DSL modem access 2010-05-30 11:31:41 -07:00
Tom Eastep
07366ac819 Enhance FAQ 89 -- DSL modem access 2010-05-30 09:30:56 -07:00
Tom Eastep
97d8fd1588 Add FAQ 89 -- DSL modem access 2010-05-30 08:59:38 -07:00
Tom Eastep
ff5f2ab15a Emphasize 'routeback' in the OpenVZ doc 2010-05-28 17:14:31 -07:00
Tom Eastep
98dff075ca Mention SAFESTOP in the start/stop document 2010-05-27 13:55:07 -07:00
Tom Eastep
e1c04f5ad6 Add Shorewall Init Documentation 2010-05-27 13:36:00 -07:00
Tom Eastep
eaad566978 Update documents for Shorewall-lite 2010-05-20 17:06:53 -07:00
Tom Eastep
5bab407da2 Remove mention of 4.5 from the Documentation Index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-13 16:40:07 -07:00
Tom Eastep
46b3a2a81a Remove dire threats about installing remotely 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-13 16:40:01 -07:00
Tom Eastep
a0a08c918d Apply patch from Fog_Watch 2010-05-13 16:39:39 -07:00
Tom Eastep
74c515016e Add back stuff merged earlier: 2010-05-08 16:32:03 -07:00
Tom Eastep
e9b836bbad Document OS X as an Administrative system 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-06 09:07:33 -07:00
Tom Eastep
5456c9fba3 Add instructions for proxying firewall-local connections 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-01 08:26:22 -07:00
Tom Eastep
83d8d497d7 Correct typos in IPSEC article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-28 08:12:41 -07:00
Tom Eastep
4b6bff7693 Add link from the netmap article to the OpenVPN doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-27 07:04:33 -07:00
Tom Eastep
eab6387817 Add solution for handling duplicate networks in an OpenVPN environment 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-27 07:04:06 -07:00
Tom Eastep
40bc2cc4a2 Update Link 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-26 18:06:16 -07:00
Tom Eastep
6e04c7eec8 Mention 6in4 Tunnels in the Documentation Index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-26 11:11:12 -07:00
Tom Eastep
33801bb8a9 Add 6in4 information to 6to4 article 2010-04-24 19:53:15 -07:00
Tom Eastep
f2f8bcd804 Add link to 2010 Linuxfest presentation 2010-04-24 08:06:07 -07:00
Tom Eastep
32d3e50c05 Remove extra <emphasis> <\emphasis> 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-17 08:54:37 -07:00
Tom Eastep
66a07c3ce6 Update copyright in UPnP Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-17 08:51:57 -07:00
Tom Eastep
a620aa22f9 Remove outdated information from the UPnP doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-17 08:51:11 -07:00
Tom Eastep
0a9b7c75d0 Delete misleading wording in the explaination of rate limiting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 06:24:35 -07:00
Tom Eastep
704eb1ee8e Fix lib.private in the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-14 19:05:42 -07:00
Tom Eastep
3b6b7a4099 Add simple tc files to basics doc 2010-04-11 17:00:19 -07:00
Tom Eastep
b3f57ae5dc Add 'preview' to Perl doc 2010-04-11 14:31:32 -07:00
Tom Eastep
eb0abb3dd7 Remove 'Beta' status from 4.4 2010-04-11 12:49:30 -07:00
Tom Eastep
7ab3c6a612 Add /etc/shorewall/interfaces to the IFB instructions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-06 16:14:58 -07:00
Tom Eastep
450f2787ba Cover 1:1 NAT in FAQ 2d. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-06 08:06:06 -07:00
Tom Eastep
9bf87bc5e1 Add FAQ 2d. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-06 08:02:20 -07:00
Tom Eastep
a670c05043 Reword reference to RFC 4787. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-06 07:48:35 -07:00
Tom Eastep
5e30c5683c Tone down response to Shorewall FAQ 2 and provide RFC reference. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-06 07:44:43 -07:00
Tom Eastep
430cbf310f Revise FAQ 73 to match reality. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-31 08:38:29 -07:00
Tom Eastep
ee8270aadf Correct typo in the FAQ. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-30 11:35:33 -07:00
Tom Eastep
ad08d2195e Add a short section about bridged OpenVPN configurations. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-25 15:30:46 -07:00
Tom Eastep
8fc1a08766 Expand Split DNS Article 2010-03-22 19:57:23 -07:00
Tom Eastep
a01fa345b7 Add support for UDP Lite 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-16 09:42:50 -07:00
Tom Eastep
472425cc62 Add FAQ 6c re: dmesg 2010-03-12 12:22:39 -08:00
Tom Eastep
0fb9333346 Update release model doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-08 13:50:24 -08:00
Tom Eastep
696f7d6b2b Update copyright on basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 09:34:27 -08:00
Tom Eastep
7ee96c41e0 Tweak OpenVZ doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 07:26:12 -08:00
Tom Eastep
1c293d17dc Formatting improvements in OpenVZ doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-06 12:46:42 -08:00
Tom Eastep
9b1483d93e Update OpenBZ Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-06 12:40:52 -08:00
Tom Eastep
e9dffbace2 Correct Type in Extension Script Doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-06 06:43:14 -08:00
Tom Eastep
a963c8f955 Don't export CONFDIR or SHAREDIR 
Document CONFDIR, SHAREDIR and VARDIR
Add FILEMODE to the old reserved variable names

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 11:46:23 -08:00
Tom Eastep
49c1350aa0 Documentation for final cleanup of variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 10:28:09 -08:00
Tom Eastep
2656a9b0c7 Eliminate use of PRODUCT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 12:34:36 -08:00
Tom Eastep
5613d0105a Remove all reliance on HOSTNAME 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 11:59:38 -08:00
Tom Eastep
82bb80cbba Put real fwlogwatch output in the FAQ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 08:18:20 -08:00
Tom Eastep
55e1124bbe Update docs regarding VERSION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 08:18:01 -08:00
Tom Eastep
5fc6d58e19 Eliminate STOPPING variable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 07:37:30 -08:00
Tom Eastep
9ec5f36549 Add fwlogwatch info 2010-03-01 12:17:09 -08:00
Tom Eastep
53c73bc8e9 Eliminate VERBOSE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-28 17:58:01 -08:00
Tom Eastep
8fadaa8f2c Add FAQ 25a 2010-02-27 16:56:23 -08:00
Tom Eastep
f0dc720740 Document -s installer option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-27 12:09:48 -08:00
Tom Eastep
061d850c16 Rename RESTOREPATH to g_restorepath 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-26 08:35:50 -08:00
Tom Eastep
c1ac19a81e Correct a couple of typos 2010-02-25 16:35:19 -08:00
Tom Eastep
8aaddf368b More reserved variable names documented 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 12:37:22 -08:00
Tom Eastep
570497766b Add COMMAND to the list of reserved variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-23 07:18:54 -08:00
Tom Eastep
4320ebb8b0 Add SW_* to the list of reserved variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-23 06:57:29 -08:00
Tom Eastep
efa41d1801 Correct a typo 2010-02-22 08:36:31 -08:00
Tom Eastep
8bc6f2144a Remove mention of variable name change in 4.4.8 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-21 15:14:40 -08:00
Tom Eastep
8c3bb22511 Additions to reserved shell variables 2010-02-21 08:34:21 -08:00
Tom Eastep
70242c0d00 Correct typo in Build document 
separete -> separate

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-21 06:58:23 -08:00
Tom Eastep
3a9416fb87 Correct Build article: 
- Change lists.shorewall.net to www1.shorewall.net
- Correct partial upload example

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-21 06:56:12 -08:00
Tom Eastep
c030bc900c List variable names to be avoided in manpages and config file basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-19 08:12:56 -08:00
Tom Eastep
ba01cecbcd Explain RATE and BURST in the basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 08:54:34 -08:00
Tom Eastep
01521e4941 Correct typo in simple TC doc 2010-02-08 15:40:07 -08:00
Tom Eastep
1f86f54a8e Update simple TC doc with 4.4.7 workaround for lack of 'flow' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-08 08:44:40 -08:00
Tom Eastep
6239218db5 Warn about absense of the 'flow' classifier. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-08 06:45:11 -08:00
Tom Eastep
28b1139ef7 Add 'Tips and Hints' as an alias for the config file basics doc -- Take 2 2010-02-06 17:08:00 -08:00
Tom Eastep
b449d8168e Add 'Tips and Hints' as an alias for the config file basics doc 2010-02-06 17:03:22 -08:00
Tom Eastep
e788b4c0f6 Mention DYNAMIC_BLACKLIST in the blacklisting doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-02 11:13:44 -08:00
Tom Eastep
193fdc85f0 Add 'Make Install' to iptables installation instructions. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-31 12:12:55 -08:00
Tom Eastep
17fa381409 Update Build doc for revised Git layout 2010-01-25 16:27:50 -08:00
Tom Eastep
c5f64848f6 Tweak bridge/firewall doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-24 15:28:37 -08:00
Tom Eastep
bb1f2993cc Tweaks to aliased interfaces doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-24 13:52:25 -08:00
Tom Eastep
83565f7a22 Updates to Actions doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-24 12:06:56 -08:00
Tom Eastep
8dd835be2b Document LOAD_HELPERS_ONLY in the three basic HOWTOs. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-22 13:12:41 -08:00
Tom Eastep
f74771a118 More LOAD_HELPERS_ONLY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-21 20:30:35 -08:00
Tom Eastep
61a0e85410 Renumber FAQ 87 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-19 10:43:56 -08:00
Tom Eastep
8b50966f80 sip_direct_media was added in 2.6.26. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-19 10:36:13 -08:00
Tom Eastep
f731e04388 Mention sip_direct_media=0 in FAQ 77. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-19 10:32:34 -08:00
Tom Eastep
146a738e4c Document TPROXY 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-17 08:20:15 -08:00
Tom Eastep
c39f3c12c9 Add FAQ about Snort 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-16 08:32:24 -08:00
Tom Eastep
81a5723009 Add appropriate 'use' statement to Limit code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-14 08:04:08 -08:00
Tom Eastep
505a2bac22 Make it clear that the variable expansion restriction applies to config files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 08:38:16 -08:00
Tom Eastep
ed3d3855f2 Correct typo in Shell Variable section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 08:10:56 -08:00
Tom Eastep
2b39d7f522 Update version references for simplified TC 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 17:33:47 -08:00
Tom Eastep
d164880381 Update Lenny->Squeeze doc to indicate that 4.4 is now in Sid 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 12:28:35 -08:00
Tom Eastep
3822fe98c2 Correct typo in Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 11:20:56 -08:00
Tom Eastep
4be3cbe97b Expand DHCP relay instructions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 09:13:29 -08:00
Tom Eastep
341617b5b8 Update DHCP document for forwarding. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 07:55:58 -08:00
Tom Eastep
ab86994d68 Delete tc4shorewall link from the traffic shaping page 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-11 12:48:23 -08:00
Tom Eastep
a1e46b68f0 Add [...] to IPv6 doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-08 15:11:19 -08:00
Tom Eastep
a2efc8e827 Correct log file for Debian and derivatives 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-07 11:41:27 -08:00
Tom Eastep
bbce309791 Bring 4.4.6 Lenny->Squeeze in sync with the 4.5.3 version 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-06 09:09:36 -08:00
Tom Eastep
556170c990 Replace SVN by GIT in Documentation Index 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-05 07:48:47 -08:00
Tom Eastep
1f49d49464 Update Build Document 
- Copyright
- Add additional options to build44
- Add warning about xmlto
- Correct a couple of typos

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-05 07:41:27 -08:00
Tom Eastep
0c92e05509 Update the Shorewall-perl document regarding SAVE_IPSETS. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 14:45:27 -08:00
Tom Eastep
a7865e7e0e Fix simple TC typo 2009-12-26 12:44:42 -08:00
Tom Eastep
7e3675fb30 Move 4.5 manpage/doc updates to master 2009-12-26 12:40:16 -08:00
Tom Eastep
4bbbcc20dd Add additional advise about the routestopped file 2009-12-16 11:11:28 -08:00
Tom Eastep
c8c523622b Fix a couple of typos 2009-12-13 07:22:18 -08:00
Tom Eastep
0e19ad5ea0 Fix nonsensical combo of logmartians and routefilter 2009-12-13 07:14:13 -08:00
Tom Eastep
17802a4555 Fix typo 2009-12-13 07:08:05 -08:00
Tom Eastep
c56ff69c8f Another minor retitling 2009-12-11 14:25:45 -08:00
Tom Eastep
c40f8e3742 Retitle the Lenny to Squeeze article 2009-12-11 13:36:33 -08:00
Tom Eastep
6a62ced2c6 Add footnote and proviso regarding two links from the same ISP 2009-12-11 07:22:00 -08:00
Tom Eastep
0e5293ffc5 Describe checking for cls_flow support 2009-12-05 09:34:39 -08:00
Tom Eastep
acc985a290 Update 'flow=' description in the TC doc 2009-12-05 08:07:34 -08:00
Tom Eastep
083debb34e More add Debian logo to Debian-specific configuration steps 2009-12-04 09:15:15 -08:00
Tom Eastep
0e71ed18c0 Add Debian logo to Debian-specific configuration steps 2009-12-04 09:06:00 -08:00
Tom Eastep
66d07955b0 Fix inconsistency in the Traffic Shaping Document 2009-11-30 07:39:01 -08:00
Cristian Rodríguez
add564e07a Update broken link 2009-11-29 15:27:30 -03:00
Tom Eastep
fedb26fe1e Revise Logging section of beginner HOWTOs 2009-11-22 10:11:50 -08:00
Tom Eastep
1150ef72d3 Move Logging section forward in the HOWTOs 2009-11-22 09:52:53 -08:00
Tom Eastep
c1001d7cc9 Add warning about default routes to multi-interface HOWTOs 2009-11-22 09:30:45 -08:00
Tom Eastep
de9c088972 Fix reported issues in the Macro article 2009-11-18 20:08:50 -08:00
Cristian Rodríguez
d7c084c9c6 comment out broken link until we find a suitable substitute 2009-11-18 16:22:17 -03:00
Tom Eastep
1c1f16661f Tweak per-IP section 2009-11-14 11:56:37 -08:00
Tom Eastep
cb67513160 Document per-IP traffic shaping: 2009-11-14 08:52:47 -08:00
Tom Eastep
8ddc2e804d Document Logical Interfaces some more 2009-11-11 11:29:21 -08:00
Tom Eastep
7014bd3ea0 Add 'physical' interface option for bridge ports 2009-11-06 08:07:13 -08:00
Tom Eastep
c1898d1c80 Remove anachronistic 'LAST LINE' from INtro 2009-11-05 13:30:18 -08:00
Tom Eastep
7e21488aec Document ICMP codes 2009-11-05 11:58:54 -08:00
Tom Eastep
b4199fd068 Document ICMP codes 2009-11-05 11:44:40 -08:00
Tom Eastep
4548db58da Relax port list limitation in /etc/shorewall/routestopped 2009-11-03 11:36:32 -08:00
Tom Eastep
1892160ed5 Update copyright year list 2009-11-03 07:39:27 -08:00
Tom Eastep
f0b4b1f42e Add limit option to tcclasses 2009-10-26 12:23:32 -07:00
Tom Eastep
58ef1d3b63 Correct typo; elaborate on how PERL is processed 2009-10-21 09:39:50 -07:00
Tom Eastep
d0cda6b6ea Add TRACK_PROVIDERS option 2009-10-20 13:24:17 -07:00
Tom Eastep
49f361124e Make 'track' the default 2009-10-20 12:24:28 -07:00
Tom Eastep
c4af105ee4 Update display of capabilities in FAQ 2009-10-19 08:41:29 -07:00
Tom Eastep
f6913953fe Add Raw table to Netfilter Overview 2009-10-16 11:25:57 -07:00
Tom Eastep
a61c9a9e06 Fix typo 2009-10-16 10:45:46 -07:00
Tom Eastep
62c7ad7fbb Update Netfilter Overview 2009-10-16 10:29:36 -07:00
Tom Eastep
80f41779f8 Replace keyword 'object' with 'script' 2009-10-12 08:24:47 -07:00
Tom Eastep
fe3b8be029 Expand the answer to FAQ 1h 2009-10-12 07:38:19 -07:00
Tom Eastep
7612c895e5 Attempt to clarify LSM some more 2009-10-08 14:05:46 -07:00
Tom Eastep
28b0e99492 Explain how to list the dynamic blacklist 2009-10-06 10:20:09 -07:00
Tom Eastep
3171d3bfc2 Update FAQ regarding ACCEPT/DNAT 2009-10-02 10:45:56 -07:00
Tom Eastep
a8cc7d2a7e More clarification of masq file changes 2009-10-01 12:34:34 -07:00
Tom Eastep
d323c5b9c5 Delete shorewall-perl and shorewall-shell during upgrade 2009-10-01 07:37:30 -07:00
Tom Eastep
9f853d02d9 Make Tuomo Happy 2009-09-25 13:35:37 -04:00
Tom Eastep
111464ad95 Clarify 'loose' -- tweak wording 2009-09-25 06:17:49 -04:00
Tom Eastep
795ffb7212 Clarify 'loose' 2009-09-25 06:15:56 -04:00
Tom Eastep
0d651f093b Correct file name 2009-09-15 10:33:52 -07:00
Tom Eastep
326ac90596 Remove pre-4.4 cruft from article 2009-09-15 06:59:59 -07:00
Tom Eastep
d6b641b000 Add FAQ 86 2009-09-14 14:14:20 -07:00
Tom Eastep
a5f3a05341 Fix typo in the Introduction 2009-09-14 13:43:32 -07:00
Tom Eastep
0e8cb3b74d Improve wording of 'masq' section; add IDs to all sections 2009-09-14 09:01:02 -07:00
Tom Eastep
8180f45382 Add footnotes for non-Debian users 2009-09-14 08:29:49 -07:00
Tom Eastep
f25646d819 Add missing link to ipset section 2009-09-14 08:10:18 -07:00
Tom Eastep
b8e772a416 More Lenny->Squeeze additions (ipsets, extension scripts, more shorewall.conf options) 2009-09-14 07:49:47 -07:00
Tom Eastep
d5d4c451f9 Mention DYNAMIC_ZONES is Lenny->Squeeze article 2009-09-14 07:01:39 -07:00
Tom Eastep
9f102a1fba More tweaks to Lenny->Squeeze article 2009-09-14 06:53:25 -07:00
Tom Eastep
e814dc7b75 Make index entry for Lenny->Squeeze more generic 2009-09-13 09:32:06 -07:00
Tom Eastep
e1f7048107 More tweaks to the Lenny->Squeeze article 2009-09-13 09:28:58 -07:00
Tom Eastep
485ddd5e9f Note that the Lenny->Squeeze article is useful to non-Debian users 2009-09-13 09:25:45 -07:00
Tom Eastep
57f4458ec9 Avoid repetative wording 2009-09-13 08:19:07 -07:00
Tom Eastep
8fdebf0c38 Add new columns to macros 2009-09-13 08:09:40 -07:00
Tom Eastep
66765dcf75 Minor rewording 2009-09-12 15:03:19 -07:00
Tom Eastep
07d8872823 Indicate that Squeeze 'will' include 4.4 2009-09-12 09:20:38 -07:00
Tom Eastep
0336a77120 Fix ID 2009-09-11 16:36:56 -07:00
Tom Eastep
95d422b15f Add Extension Scripts to Lenny->Squeeze Article 2009-09-11 16:33:06 -07:00
Tom Eastep
82eaf124ca Add section about SOURCE and DEST 2009-09-10 14:55:50 -07:00
Tom Eastep
9a1cb0c6b6 Admin that PKTTYPE is a no-op 2009-09-07 16:44:19 -07:00
Tom Eastep
b2c7b583f5 Add Lenny->Squeeze article to index 2009-09-07 16:26:32 -07:00
Tom Eastep
bc7e65732e Add upgrade warning 2009-09-07 14:13:32 -07:00
Tom Eastep
993bbe8a4e Fix broken links in Lenny->Squeeze doc 2009-09-07 09:43:53 -07:00
Tom Eastep
1ef90b4f0f Add means for handling 'norfc1918' warning in Lenny->Squeeze doc 2009-09-07 09:39:00 -07:00
Tom Eastep
8da5fd42d0 Yet more enhancements to Lenny->Squeeze doc 2009-09-07 09:35:15 -07:00
Tom Eastep
180024c1fc More enhancements to Lenny->Squeeze doc 2009-09-07 09:21:47 -07:00
Tom Eastep
06e85d6191 Add routestopped file to Lenny->Squeeze doc 2009-09-07 09:07:07 -07:00
Tom Eastep
c4eeb7b77e Link upgrade issues back to the home page 2009-09-06 17:25:39 -07:00
Tom Eastep
cf9bb616b8 Add example of nat-only fix 2009-09-06 14:03:36 -07:00
Tom Eastep
70ebe17cb3 Reimplement MAPOLDACTIONS=Yes 2009-09-06 13:37:24 -07:00
Tom Eastep
477c0ef9e8 Update Lenny->Squeeze doc 2009-09-06 12:46:22 -07:00
Tom Eastep
1a33596ada Update Lenny->Squeeze doc 2009-09-06 12:41:36 -07:00
Tom Eastep
7192b47289 Add a Lenny->Squeeze Howto 2009-09-06 09:51:32 -07:00
Tom Eastep
f126755a96 Add notes about find_first_interface_address_if_any() 2009-09-05 08:59:45 -07:00
Tom Eastep
496a9449f1 Add note to simple bridge doc 2009-09-05 08:23:35 -07:00
Tom Eastep
4368af9525 Add /etc/shorewall/masq to Simple Bridge article 2009-09-05 07:24:29 -07:00
Tom Eastep
0a39672b46 Add FAQ 85 2009-09-01 08:19:53 -07:00
Tom Eastep
3647b801dc Add another image file 2009-08-31 14:29:06 -07:00
Tom Eastep
fbfa4b4e49 Update release documents and make minor change to faq 2009-08-31 14:19:15 -07:00
Tom Eastep
9ef0dcb221 Remove extraineous label from graphic 2009-08-31 09:08:15 -07:00
Tom Eastep
57ca3591e5 Hopefully the last fix to 6to4 doc 2009-08-29 12:19:45 -07:00
Tom Eastep
75232c6f10 Fix 6to4 Article again 2009-08-29 11:56:32 -07:00
Tom Eastep
3f9e1ced7d Fix 6to4 Article 2009-08-29 11:55:00 -07:00
Tom Eastep
84fab0ebda Minor update to MultiISP doc 2009-08-29 09:05:14 -07:00
Tom Eastep
1ab2c5b2c0 Make the LOGFILE instructions in the support article even more explicit 2009-08-27 13:23:09 -07:00
Tom Eastep
8d447ebfba Move French language documents to the same directory as the English and Russian documents 2009-08-27 12:10:47 -07:00
Tom Eastep
b81f176680 Correct OpenVPN document 2009-08-26 07:11:51 -07:00
Tom Eastep
e6dc40f2f4 Fix typo 2009-08-25 12:59:25 -07:00
Tom Eastep
8932106394 Modify 'ping6' advice 2009-08-24 16:29:02 -07:00
Tom Eastep
679cff2779 Correct example in the docs and ensure that future idiots don't place 'default' in the PRIO column of tcclasses 2009-08-23 20:45:05 -07:00
Tom Eastep
65c59a36db Update Build document to reflect signing during upload rather than build 2009-08-22 07:31:52 -07:00
Tom Eastep
f1d12d193b A little reorganization of the FAQ wrt IPv6 2009-08-18 09:22:05 -07:00
Tom Eastep
82cd525658 Fix another typo in FAQ 2009-08-18 09:10:49 -07:00
Tom Eastep
2d404fa998 Fix typos in FAQ 2009-08-18 09:09:33 -07:00
Tom Eastep
6d2809f154 Note the inadaquacy of the Busybox version of the iproute2 utilities 2009-08-17 07:17:33 -07:00
Tom Eastep
400a1ed647 Explain how to combine the loc and fw zones 2009-08-16 10:17:48 -07:00
Tom Eastep
e2bfcef5af Fix Introduction's description of Shorewall6-lite 2009-08-14 07:27:52 -07:00
Tom Eastep
c026c3d75e Some last-minute updates to the docs for 4.4 2009-08-10 09:42:00 -07:00
Tom Eastep
ef7fe8166a Back out prior change 2009-08-10 07:31:55 -07:00
Tom Eastep
33c3a27960 Add Debian config info to 6to4 doc 2009-08-10 07:24:29 -07:00
Tom Eastep
3e7c7a7e90 Fix a couple of typos 2009-08-09 11:38:18 -07:00
Tom Eastep
3cf02bd617 Update 'Upgrade Issues' doc with WARNING about SHOREWALL_COMPILER 2009-08-09 08:44:14 -07:00
Tom Eastep
8011a61970 Add section IDs to Dynamic Zones page 2009-08-07 13:54:24 -07:00
Tom Eastep
429178d162 Add additional 4.4 upgrade FAQs 2009-08-07 09:55:19 -07:00
Tom Eastep
fd75bc728a Idiot-proofing of the upgrade issues page 2009-08-07 09:46:20 -07:00
Tom Eastep
b612336b95 Fix broken link 2009-08-06 12:45:10 -07:00
Tom Eastep
88c389e186 More Documentation updates in preparation for 4.4 release 2009-08-06 11:07:08 -07:00
Tom Eastep
e91d3dd905 More LAST LINE deletions 2009-08-05 07:38:02 -07:00
Tom Eastep
dd5a73d678 Tweak to 'My Config' doc 2009-08-03 13:23:34 -07:00
Tom Eastep
8c5a41f1fc Remove absurd rules 2009-08-02 09:28:26 -07:00
Tom Eastep
5ded978c07 Update graphic 2009-08-02 08:50:20 -07:00
Tom Eastep
0e09292587 Add traffic shaping to my network configuration 2009-08-02 08:36:29 -07:00
Tom Eastep
4cd41a81f7 More updates to MyNetwork 2009-08-01 07:56:31 -07:00
Tom Eastep
70dfdb517e Finish MyNetwork article 2009-08-01 07:35:07 -07:00
Tom Eastep
b324d9d84f Publish the new 'Tom's Configuration' page 2009-07-31 19:37:24 -07:00
Tom Eastep
e971a3fbe5 Publish the new 'Tom's Configuration' page 2009-07-31 19:34:41 -07:00
Tom Eastep
6c4b9255f0 Update upgrade issues web page 2009-07-29 17:04:46 -07:00
Tom Eastep
99128502a2 Fix instructions for building xtables-addons on a yet-to-be-installed kernel 2009-07-29 14:32:37 -07:00
Tom Eastep
94d3651666 Fix typo in the Introduction to Shorewall 2009-07-13 06:51:27 -07:00
Tom Eastep
2ca7e4b1eb More updates to OpenVZ doc 2009-07-11 08:16:25 -07:00
Tom Eastep
966729a665 Update OpenVZ graphic 2009-07-11 07:56:36 -07:00
Tom Eastep
4d09aa0ff4 Remove duplicate macro GIT and update OpenVZ Doc 2009-07-10 11:31:33 -07:00
Tom Eastep
328eeba719 Add FAQ 34 2009-07-10 08:48:54 -07:00
Tom Eastep
73a48e1ddc Update FAQ 14 2009-07-10 07:52:14 -07:00
Tom Eastep
54089a3607 Add FAQ 14 2009-07-10 07:46:34 -07:00
Tom Eastep
047a5caffd Update OpenVZ doc again and update FAQ to refer to it 2009-07-08 09:06:15 -07:00
Tom Eastep
459f222137 Clarify RFC 1918 configuration 2009-07-07 16:25:35 -07:00
Tom Eastep
36a42fbe7f More OpenVZ doc updates 2009-07-06 10:03:27 -07:00
Tom Eastep
86025ceaf1 Add OPTIONS to interfaces 2009-07-05 10:08:50 -07:00
Tom Eastep
fb571210c9 More OpenVZ documentation updates 2009-07-05 09:09:58 -07:00
Tom Eastep
187e250915 Add link to parallels.com 2009-07-01 17:30:56 -07:00
Tom Eastep
a10343dbf7 Mention Parellels in favor of SWSoft 2009-07-01 17:16:01 -07:00
Tom Eastep
a6ba1d6b39 Add OpenVZ Documentation 2009-06-30 08:55:19 -07:00
Tom Eastep
38f859dfc4 Add OpenVZ Documentation 2009-06-30 08:55:04 -07:00
Tom Eastep
355a515b1b Some 4.4 cleanup of the Configuration File Basics doc 2009-06-28 08:11:27 -07:00
Cristian Rodríguez
0d1b60bfa5 update link of FAQ 38 2009-06-25 07:17:01 -04:00
Tom Eastep
88a0115776 Mention 'optional' in swping/lsm section 2009-06-23 11:14:02 -07:00
Cristian Rodríguez
7e5e2e882b fix broken link 2009-06-21 19:00:28 -04:00
Tom Eastep
14d07265ee Add recommendation to migrate before upgrade 2009-06-21 08:51:05 -07:00
Tom Eastep
a01c1a1319 Tweak Shorewall-4/Shorewall-perl Docs -- take 2 2009-06-21 08:33:02 -07:00
Tom Eastep
d745f3bfc5 Tweak Shorewall-4/Shorewall-perl Docs 2009-06-21 08:31:19 -07:00
Tom Eastep
bd55a545b5 Rename lib.user to lib.private 2009-06-20 09:35:08 -07:00
Tom Eastep
01d046fac9 Add lib.user extension script 2009-06-19 14:39:45 -07:00
Tom Eastep
793ecd5c73 Add version warning about LSM documentation 2009-06-19 13:05:35 -07:00
Tom Eastep
8cdb171087 Some documentation updates 2009-06-19 13:00:58 -07:00
Tom Eastep
eb5fc2c415 Document 'findgw' in the extension script doc 2009-06-17 16:46:20 -07:00
Tom Eastep
d21c927d29 Refer to shorewall(8) for packet mark display 2009-06-17 13:40:02 -07:00
Tom Eastep
08cfa6d19a More documentation updates 2009-06-17 11:21:58 -07:00
Tom Eastep
defbbb418b Update version applicability in basic HOWTOs 2009-06-16 14:33:35 -07:00
Tom Eastep
2a7491ebf2 More work on optional interfaces 2009-06-16 14:03:15 -07:00
Tom Eastep
6064d9e681 Document that 'continue' is no longer released 2009-06-16 09:51:32 -07:00
Tom Eastep
a43431af57 Update tc doc 2009-06-16 08:56:17 -07:00
Tom Eastep
0d5a64866a Prepare website for 4.4.0 Beta 1 2009-06-13 07:32:16 -07:00
Tom Eastep
96128196e3 Fix typo 2009-06-12 14:25:49 -07:00
Tom Eastep
6896be988d Delete Dia backup file 2009-06-12 13:57:54 -07:00
Tom Eastep
b3af4c6abb Add a Bridged networks example to the OpenVPN article 2009-06-12 13:57:14 -07:00
Tom Eastep
32cab2d7fc Update the Introduction 2009-06-09 07:03:57 -07:00
Tom Eastep
41687a10a3 Remove anachronisms from UPnP document 2009-06-08 14:21:47 -07:00
Tom Eastep
c370dc650c Remove support for 'norfc1918' and it's associated settings in shorewall.conf 2009-06-05 10:51:30 -07:00
Tom Eastep
6a67fbcb74 Tweak FAQ 36 2009-06-05 08:45:52 -07:00
Tom Eastep
2288ea4d72 Bring MAC validation article up to date 2009-06-04 15:48:49 -07:00
Tom Eastep
252c8c0c8d Corrected Dynamic Zone example 2009-06-04 12:46:14 -07:00
Tom Eastep
93b2227ce6 Add FAQ 36 re: BANDWIDTH_IN 2009-06-03 17:11:14 -07:00
Tom Eastep
759a9ac626 Correct typo in two- and three-interface quickstart guides 2009-06-02 15:05:14 -07:00
Tom Eastep
b82dad8843 Add a new FAQ; remove 'Added in' from rules manpage 2009-06-02 08:21:52 -07:00
Tom Eastep
a953c1af46 More documentation changes for 4.4 2009-06-02 06:32:42 -07:00
Tom Eastep
228f603d32 Correct typo in FTP doc 2009-06-01 15:01:05 -07:00
Tom Eastep
793a929051 More documentation cleanup for 4.4 2009-05-31 10:11:23 -07:00
Tom Eastep
589df0dc57 Correct typo 2009-05-30 13:07:05 -07:00
Tom Eastep
850d02c268 Make installation of iptables required steps 2009-05-30 12:58:49 -07:00
Tom Eastep
2eff56d927 Add info about Debian xtables-addons packages 2009-05-30 12:48:22 -07:00
Tom Eastep
234b9b294a Documentation updates 2009-05-30 08:34:34 -07:00
Tom Eastep
c5667c7658 Correct Debian and Ubuntu info re: CONNMARK 2009-05-29 06:45:31 -07:00
Tom Eastep
d33532d6cd Add TOS field to tcfilters 2009-05-28 16:41:14 -07:00
Tom Eastep
97fa7a0513 Add LENGTH column to tcfilters file 2009-05-28 14:29:33 -07:00
Tom Eastep
98d06d29c6 Restore material inadvertently deleted from Ipset article 2009-05-28 07:31:22 -07:00
Tom Eastep
7418e27308 Deimplement ipset binding support 2009-05-28 07:22:48 -07:00
Tom Eastep
acf40290a5 Remove anachronisms from FAQ 2009-05-26 07:19:49 -07:00
Tom Eastep
0bd3b0c0af Clarify requirement for RT parameters 2009-05-24 16:58:41 -07:00
Tom Eastep
132f812913 Tweak notes on HFSC article 2009-05-24 13:42:37 -07:00
Tom Eastep
9a80245841 Explain 'magic numbers' in the HFSC article 2009-05-24 13:36:58 -07:00
Tom Eastep
a0071a21e8 Tweak and document HFSC implementation 2009-05-24 10:06:36 -07:00
Tom Eastep
dd34b816fe Correct highlighting in port forwarding addition 2009-05-23 07:43:37 -07:00
Tom Eastep
d6c8cd5d3e Warn if 'proxyarp' specified on a non-loose provider 2009-05-21 09:39:43 -07:00
Tom Eastep
cc54321cd1 Some documentation updates -- missed a file 2009-05-20 12:47:20 -07:00
Tom Eastep
142fab8d46 Some documentation updates 2009-05-20 07:54:17 -07:00
Tom Eastep
45f8a61c12 Update 'fools' article to clarify wrong-interface issue 2009-05-12 08:28:47 -07:00
Tom Eastep
52ad3cbda3 Reduce font size in new 6to4 graphics 2009-05-11 12:06:55 -07:00
Tom Eastep
4ba6571f41 Improve formatting of 6 to 4 article 2009-05-11 07:20:40 -07:00
Tom Eastep
86bca34b4a Highlight IPv6 Changes in /etc/network/interfaces example 2009-05-11 07:12:47 -07:00
Tom Eastep
f9c920dc87 Add FAQ 77 issue to upgrade issues 2009-05-11 07:04:37 -07:00
Tom Eastep
73d5f39bba More updaes to the 6to4 doc 2009-05-10 18:08:39 -07:00
Tom Eastep
c240f6a48a Remove unintended paragraph 2009-05-10 17:53:49 -07:00
Tom Eastep
2a23460571 Make sit1 auto in /etc/network/interfacs 2009-05-10 16:24:12 -07:00
Tom Eastep
4e8607d278 Update 6 to 4 doc to include Debian Configuration 2009-05-10 15:01:30 -07:00
Tom Eastep
c5a98fe4da Clarify start/stop and ipsets 2009-05-06 07:14:31 -07:00
Tom Eastep
d65fa79837 Minor wording improvement 2009-05-05 08:02:26 -07:00
Tom Eastep
2b4e93164e Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall 2009-05-05 07:51:13 -07:00
Tom Eastep
624c24f2c0 Sequentially assign class numbers when WIDE_TC_MARKS=Yes 2009-05-05 07:50:46 -07:00
Tom Eastep
9aa9371509 Documentation updates 2009-05-04 16:46:45 -07:00
Tom Eastep
f533468da0 Resolve merge conflicts 2009-05-03 09:56:13 -07:00
Tom Eastep
16826aeb31 Remove IPMARK support 2009-05-03 08:38:27 -07:00
Tom Eastep
992b0bf00f Correct minor class construction description 2009-05-02 07:03:25 -07:00
Tom Eastep
b5d72e6578 Fix a couple of issues in the tc doc 2009-05-01 15:56:08 -07:00
Tom Eastep
798dde23c8 Modest update to Packet processing doc 2009-04-30 19:11:16 -07:00
Tom Eastep
c1cf1695c0 Deprecate interface names in the SOURCE column of /etc/shorewall/masq 2009-04-29 15:13:22 -07:00
Tom Eastep
89f0aa0081 Fix text formatting 2009-04-29 14:31:55 -07:00
Tom Eastep
2c09282ca3 Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall 2009-04-27 20:38:36 -07:00
Tom Eastep
f16edbe395 Be explicit about the effect of IMPLICIT_CONTINUE=No 2009-04-27 08:03:04 -07:00
Tom Eastep
02c53d94a7 Add blacklisting FAQ 2009-04-24 11:30:53 -07:00
Tom Eastep
82bf6eb3f5 Revise WIDE_TC_MARKS classid generation 2009-04-20 17:54:33 -07:00
Tom Eastep
a929a34bd0 Add additional 'Recommended Reading' 2009-04-20 15:35:19 -07:00
Tom Eastep
419ca70164 Add additional 'Recommended Reading' 2009-04-20 15:31:07 -07:00
Tom Eastep
7740d367bb Document WIDE_TC_MARKS 2009-04-20 14:58:36 -07:00
teastep
30d28432e1 Document FORMAT 2 and the ORIGINAL DEST column 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9926 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:18:17 +00:00
teastep
4bab073494 Fix minor typo 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 23:05:03 +00:00
teastep
64cea700da Document Shorewall6 support on kernel 2.6.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9913 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 18:27:37 +00:00
teastep
850fe6e691 Document FORMAT 2 and the ORIGINAL DEST column 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9903 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:03:32 +00:00
teastep
bcb6096afd Update web site for 4.2.8; fix broken link 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9901 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:02:59 +00:00
teastep
62b9472711 Clarify the usage of the GATEWAY column when USE_DEFAULT_RT = Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9864 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 23:25:53 +00:00
teastep
905c226f76 Add a connection rate limiting doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9862 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 23:24:40 +00:00
el_cubano
c861b34d57 Typo fix. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9860 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 22:38:54 +00:00
teastep
749d1c837f Update Documentation Index for "Fool's Firewall" Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9820 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:21:33 +00:00
teastep
b6091361cb Add "The Fool's Firewall" Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9814 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 21:31:09 +00:00
teastep
2fd359c459 More "Fools Firewall" changes/additions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9813 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 20:33:06 +00:00
teastep
69bde82800 Add another "Fool's Firewall" Graphic 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9812 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 20:32:30 +00:00
teastep
edc9509e1f Add "Fool's Firewall" graphic 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9811 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 19:43:56 +00:00
teastep
7ce546bc80 More minor doc updates. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9810 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:47 +00:00
teastep
738e33f7f5 More Build doc fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9809 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:26 +00:00
teastep
d56e907150 A couple of additional changes for Git and the Build doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9808 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:10 +00:00
teastep
a5f37c860f Update Build document to reflect migration to Git 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9807 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:44:06 +00:00
teastep
9d03fe20e0 Minor documentation updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9806 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:29 +00:00
teastep
50cbe499e2 Add article about Dynamic Zones 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9802 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:21:41 +00:00
teastep
5b48b00bcc Remove remaining potential point of confusion in Squid documentation. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9801 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:48:50 +00:00
teastep
07c579562e Explain how to exclude certain hosts from transparent proxy 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9795 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 14:28:23 +00:00
teastep
7b6da582ef Large update to Multi-ISP doc for 4.4 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9779 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 19:53:25 +00:00
teastep
b663644d0d Ignore leading white space on certain continuation lines 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-27 16:55:51 +00:00
teastep
7549785e46 Correct interface naming in radvd description 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9738 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-26 15:43:06 +00:00
teastep
e0a71abe36 Add FAQ 83 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9725 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-21 22:46:42 +00:00
teastep
92e6f2d001 Update manpages with COMMENT documented. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9718 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-20 16:47:27 +00:00
teastep
7cf6243d29 Update Copyright 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9717 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-20 16:47:07 +00:00
teastep
c9ddc27b43 Add link to Collectd article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9713 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-20 15:09:04 +00:00
teastep
f26cab7cc1 Add FAQ 1h 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9710 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-20 14:18:07 +00:00
teastep
7db98189d2 Update list of files for COMMENT support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9707 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-19 21:52:13 +00:00
teastep
b0e1a82be3 Add FAQ 82 re: USE_DEFAULT_RT start error 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9701 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-18 21:33:15 +00:00
teastep
cc85712713 Another formatting change to the Multi-ISP doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9700 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-18 21:33:05 +00:00
teastep
a9641e69c7 Clean up Multi-ISP 4.4 doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9698 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-17 19:55:34 +00:00
teastep
b6b8cd4c7f One more modified file with new syntax 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-15 20:48:53 +00:00
teastep
00b7025467 Use 4.2 syntax for parameterized Macros. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9693 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-15 20:46:56 +00:00
teastep
8dd7895609 Add 'Shorewall on a Laptop' article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9689 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-15 15:54:11 +00:00
teastep
d370ba429f Remove 'eth0' from lsm defaults 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9681 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-10 14:32:28 +00:00
teastep
cfbc7514b6 Put all Perl components in a common directory -- Phase III 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9597 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 22:48:51 +00:00
teastep
efeef2bf93 Add VPN section to Multi-ISP doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9594 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 17:10:18 +00:00
teastep
95a079c6c3 Extend the description of 'track' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9582 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-03 20:05:30 +00:00
teastep
f0ff364a6f Mention nets=(...) in the Introduction 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9580 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-02 23:01:56 +00:00
teastep
3f961c5b19 Add notrack to Manpage indexes - Take 2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9570 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 17:20:33 +00:00
teastep
e7fb33276c Add notrack to Manpage indexes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9569 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 17:17:31 +00:00
teastep
757d0b8d7c Change references to 'recent set' to 'recent list' to match -m recent documentation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9567 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 17:06:46 +00:00
teastep
30903f1e37 Tweak traffic shaping doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9562 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-28 04:00:11 +00:00
teastep
c31f899749 Documentation update for Shorewall 4.3 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9561 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-28 03:45:43 +00:00
teastep
5b5f7dc10e Update website for 4.3 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9559 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 18:05:47 +00:00
teastep
1f7d8964c3 Tweak network diagram 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9530 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 19:47:39 +00:00
teastep
491f7d6b6d Update Multi-ISP doc to indicate tht I now use LSM 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9528 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 19:17:36 +00:00
teastep
04ff1fb5e0 Add LSM to Multi-ISP doc -- Take 2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9524 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-24 16:57:33 +00:00
teastep
140d23b389 Add LSM to Multi-ISP doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9523 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-24 16:44:06 +00:00
teastep
54478f3757 Add UNTRACKED to traffic dealt with in the NEW section; minor format change in Macro doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9458 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-19 19:28:08 +00:00
teastep
f6234d7aea Finish move of 'Limit' documentation to the Actions Article; Correct Macro doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9454 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-19 15:36:19 +00:00
teastep
5bac721af2 Add note about USE_ACTIONS and Shorewall-perl 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9453 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-19 15:19:43 +00:00
teastep
ece5bd4c72 Update SUBSYSLOCK documentation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9452 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-18 16:48:34 +00:00
teastep
da85a8f7b3 Documentation for notrack 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9447 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-16 18:39:01 +00:00
el_cubano
44fe01b60e Fix typo. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9445 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-16 02:33:02 +00:00
teastep
a6d139a160 Fix typo in IPP2P doc 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-10 22:10:24 +00:00
teastep
37988a5a31 More doc updates 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9419 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-06 03:40:44 +00:00
teastep
04691679bc Clarify how Shorewall-shell works with 'restore' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9416 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-05 20:07:05 +00:00
teastep
f8fdfcfa9e Add 'restored' extension script 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9414 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-05 18:16:40 +00:00
teastep
7d395d3571 Try to avoid TC confusion 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-03 23:56:17 +00:00