holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
7,656 Commits 104 Branches 736 Tags 54 MiB
7621859e0f
Commit Graph

2093 Commits

Author SHA1 Message Date
teastep
0bb8fffcd9 Add support for IPMARK -- Phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9937 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-19 16:47:40 +00:00
teastep
32a1ac87f5 Add IPMARK target support -- first phase 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9936 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-19 15:46:57 +00:00
teastep
3cb7186e90 Modify regression test to ensure that modification timestamp of the output file changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9935 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-19 14:19:40 +00:00
teastep
322a5de871 Recommit lost commit 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 18:48:28 +00:00
teastep
834064f3af Cosmetic improvement to generated script 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9933 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:32:45 +00:00
teastep
985c551d26 Add IP, TC and IPSET configuration options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9932 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:28:25 +00:00
teastep
b8988a2171 Handle empty setup_common() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9930 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:20:06 +00:00
teastep
be41b99ae8 Allow Shorewall6 on kernel 4.2.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9929 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:19:31 +00:00
teastep
47387d085d Another go-around with the macro.template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9927 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:18:40 +00:00
teastep
032f8dc004 Add 'FORMAT 2' to the macro template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9925 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:17:42 +00:00
teastep
0cc60ea021 Avoid 'Invalid BROADCAST address' errors 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 22:57:59 +00:00
teastep
fd7108784f Allow Shorewall6 on kernel 4.2.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:54 +00:00
teastep
058e03e791 Another go-around with the macro.template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9905 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:04 +00:00
teastep
5d5b73dafc Add 'FORMAT 2' to the macro template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9902 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:03:16 +00:00
teastep
ade958dd51 Add undocumented LOGMARK log level 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9851 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 15:22:19 +00:00
teastep
347090da6e Correct netmask generation in tcfilters 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 15:22:00 +00:00
teastep
97e61965c0 Fix another inversion case 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9846 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 21:48:34 +00:00
teastep
de037034a5 Bump version to 4.3.9 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9845 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 15:31:25 +00:00
teastep
9bfc7b6d99 Tiny optimization. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 15:28:50 +00:00
teastep
c39fcc4db7 Optimization of log rule code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9843 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 20:36:22 +00:00
teastep
b734d3af31 Fix subtle bug introduced in last commit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9842 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 20:36:09 +00:00
teastep
20cfd0033c Fix a 4.3 bug in expand_rule(). 
Don't repeat matches on target rule when log chain is used.

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9841 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 19:47:39 +00:00
teastep
28e84a6aba Break up long port lists in jump to logging chain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:31:04 +00:00
teastep
e0040f4011 Small optimizations in expand_rule() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:16:25 +00:00
teastep
ff014f328b Correct usage text 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:15:36 +00:00
teastep
8278203e03 Remove one argument from expand_rule() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9835 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 22:21:48 +00:00
teastep
f20013898e Don't use -g when the target might not be terminating 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9834 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 20:18:11 +00:00
teastep
ae169f00a7 Implement rules that also log as a separate chain. Preserve original target in logging rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 18:45:21 +00:00
teastep
7d2b410904 Correct rule generation when an interface is specified as the destination of a PREROUTING rule. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-08 03:37:15 +00:00
teastep
28b6fd8033 Simplify hashlimit match code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9830 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 18:15:51 +00:00
teastep
36e0c85f5f Require the Hashlimit Match capability for per-IP rate limiting 
Use the current key words in the generated hashlimit match

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9828 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:36:23 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:35:06 +00:00
teastep
c545e65cea First part of 'hashlimit' implemenation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:23:01 +00:00
teastep
b1e9453c62 The other half of the re-implementation of 'enable/disable_object' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9825 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:49 +00:00
teastep
0744df13d6 Reimplement object_enable/disable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9824 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:30 +00:00
teastep
b6053d8577 Fix second bug regarding ADD_IP_ALIASES=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:16 +00:00
teastep
eb533d8b00 Make SHOREWALL_COMPILER=perl explicit in shorewall.conf 
Send SHOREWALL_COMPILER errors to STDERR

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9822 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:02 +00:00
teastep
4b419186bc Add note about documentation to release highlights 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9805 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:17 +00:00
teastep
52b0b4e602 More removal of SAVE_IPSETS=Yes logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9804 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:06 +00:00
teastep
844bb448c7 Fix inversion rules (omitted hunk) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9797 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:09:17 +00:00
teastep
e2c5ad441a Generate inversion that satisfies iptables 1.4.3. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9796 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:09:04 +00:00
teastep
77bbd88ab4 Cosmetic improvement in generated code for arp and route filtering. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9787 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-03 14:36:16 +00:00
teastep
54620a962e Small optimization in "logmartians" fix. Update manpage to reflect new implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9786 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-03 14:31:21 +00:00
teastep
8a9af0acf5 Fix LOG_MARTIANS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 16:33:56 +00:00
teastep
180925173b Ignore AUTOMAKE setting when a <directory> is given to start/restart 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9782 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 14:24:23 +00:00
teastep
d950fa27f2 Allow <pathname> to be omitted from the 'compile' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 01:12:34 +00:00
teastep
29c8098d37 Cosmetic improvement in generated script. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9780 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 19:53:38 +00:00
teastep
ef50c0be25 More removal of SAME target 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9775 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 01:31:16 +00:00
teastep
dbf23f64e2 Removal of SAME support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9774 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 01:31:04 +00:00
teastep
35790476a3 Fix bug in Shorewall::Rules::process_rule1() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9773 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 00:04:04 +00:00
teastep
d3a54e626c De-implement $Shorewall::Config::object_enabled and associated methods 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 00:03:51 +00:00
teastep
d00f52f933 Fix run-time error in Shorewall::process_rules1() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9771 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 22:42:49 +00:00
teastep
39131f3809 Some optimizations in Shorewall::Rules::compile_stop_firewall() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9770 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 22:42:37 +00:00
teastep
238ff4550f AUTOMAKE also applies to 'restart' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9768 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 18:54:00 +00:00
teastep
6c205d922a Add AUTOMAKE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9767 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 17:31:23 +00:00
teastep
22526979db Make generation of 'stop' ruleset activation more foolproof. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 19:58:26 +00:00
teastep
b215f91d4a Pass input directly to iptables[6]-restore during stop 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9763 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:33:30 +00:00
teastep
715554e579 Cleanup of iptables-restore/stop code. Don't purge ipsets on stop. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9762 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:00:23 +00:00
teastep
cddd1b1ae9 Use iptables[6]-restore to instantiate the 'stopped' ruleset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 00:49:00 +00:00
teastep
7210e8c15e Move generation of stop_firewall() to the end of the compilation sequence 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9760 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-29 17:52:24 +00:00
teastep
adb9830e9e Move 'compile_stop_firewall' to Shorewall::Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9743 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-28 19:22:15 +00:00
teastep
d9622dabfe Centralize iptables knowledge in the Chains module -- first phase 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9742 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-28 19:21:36 +00:00
teastep
cc5c6b40aa Fix typo in release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9741 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-28 19:21:03 +00:00
teastep
b663644d0d Ignore leading white space on certain continuation lines 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-27 16:55:51 +00:00
teastep
d67c94de9c Move extension script handling to generate_script_1() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-26 18:18:09 +00:00
teastep
9328f0fc4c Detect dhclient dynamic gateway 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-24 20:58:04 +00:00
teastep
6013e8b53d Improve error message for startup errors. Document in release documents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9730 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-23 22:51:05 +00:00
teastep
1545d62ba9 Update version by hand 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9729 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-23 22:50:04 +00:00
teastep
e986e80c0a Fix swping 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9727 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-22 23:24:57 +00:00
teastep
1ff093b1c0 Minor tweak to Shorewall::Zones 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9724 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-21 22:46:16 +00:00
teastep
bb8e562d18 Detect IP configuration early in start/restart so that stopping the fireawall isn't necessary in the case of failure. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9722 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-21 16:45:27 +00:00
teastep
6dac69554f Apply Tuomo Soini's patch for USE_DEFAULT_RT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-19 14:04:57 +00:00
teastep
2734d2b8cb Change 'flow' filter rule (which still doesn't work :-() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9702 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-18 21:33:28 +00:00
teastep
a9641e69c7 Clean up Multi-ISP 4.4 doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9698 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-17 19:55:34 +00:00
teastep
5ea4f651eb Update version 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9697 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-17 18:51:17 +00:00
teastep
f91a5dbf0c Document the deprecation of the old parameter macro syntax. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9696 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-16 18:01:42 +00:00
teastep
08cd0684ec Use new syntax in standard actions. Add additional comments in Shorewall::Config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9695 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-16 16:37:21 +00:00
teastep
fc3a2fc386 Add explanation of maximum zone length 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-15 15:54:29 +00:00
teastep
229e573c3c Make zone type numeric for faster comparison 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9684 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-13 22:59:49 +00:00
teastep
e75789d894 A few minor changes in Shorewall::Chains. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9682 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-11 01:16:45 +00:00
teastep
77444634e1 Correct fatal error message generated by assert() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9675 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 21:45:30 +00:00
teastep
ce5efc5dfa Add a comment 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9674 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 21:45:18 +00:00
teastep
5a6d66f263 Replace discrete tests with calls to fatal_error() with calls to assert(); 
second batch

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9673 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 20:57:18 +00:00
teastep
b987ea4940 Replace discrete tests with fatal_error() calls with assert() calls. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9672 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 20:56:53 +00:00
teastep
70570c4a18 Change policy->{is_optional} to policy->{provisional} 
Signed-off-by: Tom Eastep <teastep@ursa.(none)>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9668 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 16:28:29 +00:00
el_cubano
4d8137cb61 Fix up defaults files. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9632 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 13:01:10 +00:00
teastep
faa8a9ec2d Cosmetic changes to four Perl Modules 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-08 16:51:22 +00:00
teastep
dcee4a3d08 Commit updates from Git 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9625 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-08 01:40:35 +00:00
teastep
94bd270bcd Delete 'routefilter' from valid hosts file options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9623 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 23:30:19 +00:00
teastep
ec52331dfc More port OPTIONS changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 20:22:20 +00:00
teastep
3d92f7a016 More tweaks to ipset management 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9615 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 00:39:04 +00:00
teastep
2f1f376d50 Replace 'list' with 'show dynamic' and add support in shorewall-lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9614 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 20:43:46 +00:00
teastep
d83334a1d1 Document dynamic zones; add 'list' command to list dynamic zone content 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9613 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 20:25:59 +00:00
teastep
a7126b6b4c First working dynamic zone implementation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9612 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 17:00:38 +00:00
teastep
f788e4ecb3 Reincarnation of Dynamic Zones -- Phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9611 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 04:08:07 +00:00
teastep
3795f02f70 Reincarnation of Dynamic Zones -- Phase I 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9610 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 00:14:42 +00:00
teastep
be8e9990bd Back out silly part of last change 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9608 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 20:27:22 +00:00
teastep
410e551a69 Re-enable list-valued return from validate_4address() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 19:56:24 +00:00
teastep
062c7ec822 Change 'Provides' for Shorewall6-lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 16:18:58 +00:00
teastep
14673e4ab5 Detect bogus DNAT- rule 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9600 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 04:03:05 +00:00
teastep
661029a38e Cosmetic Change 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9599 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 04:02:03 +00:00
teastep
cd2172e7e4 Put all Perl components in a common directory -- Phase IV 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9598 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 22:52:05 +00:00
teastep
ea270c1769 Put all Perl components in a common directory -- Phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9596 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 22:45:07 +00:00
teastep
36b87dff49 Put all Perl components in a common directory -- Phase I 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9595 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 22:41:56 +00:00
teastep
ebc18a86cf Move unsupported example files into Contrib 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9593 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 16:44:44 +00:00
teastep
06d0c36e22 Move init to configfiles/ 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9592 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 16:34:55 +00:00
teastep
3c5a26ee31 Change file permissions 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9591 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 16:32:37 +00:00
teastep
62cb1a2544 Remove 'ipsec' file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9590 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 01:32:28 +00:00
teastep
675d6f5822 Move overlooked file to configfiles 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9589 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 01:26:23 +00:00
teastep
4fb45619d4 Move overlooked file to configfiles 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9588 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 01:23:55 +00:00
teastep
fb1c418336 Correct a miss in install.sh 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9587 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 01:20:52 +00:00
teastep
a7f958b739 Create a configfiles directory in SVN to help unclutter the product directory 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9586 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 01:15:51 +00:00
teastep
5a26d80d19 Create a Macros directory in SVN to help unclutter the product directory 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9585 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 00:46:31 +00:00
teastep
6cce1fc03d Fix comments in prog.xxx6 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9584 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-03 23:41:30 +00:00
teastep
0438e5ca74 Correct typo in install script 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9583 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-03 23:38:56 +00:00
teastep
fe7a5e5a3f Correct optimization from 4.3.6 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9581 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-03 04:07:33 +00:00
teastep
1ea1af793d Fix two typos 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9575 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-02 16:02:15 +00:00
teastep
3adff7f550 release doc update; add comments to prog.* 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9574 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-02 03:25:16 +00:00
teastep
cb078a416e Rename 'shorewall' to 'shorewall.sh' to avoid Cygwin issues 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9573 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 21:38:43 +00:00
teastep
2883479e53 Initial 4.3.7 changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9572 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 19:46:30 +00:00
teastep
c6f1cb605d Restore SHAREDIRPL to it's 4.2 value 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9571 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-01 18:09:38 +00:00
teastep
5767a96005 Apply 4.2.6.1 fix to trunk 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9566 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-28 17:40:39 +00:00
teastep
dba14fdf91 Update README files 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9558 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 17:24:01 +00:00
teastep
d34d0a5dfa Update release notes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9557 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 16:52:31 +00:00
teastep
e6fa6a5153 Delete jumps to empty chains 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9556 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 16:19:36 +00:00
teastep
fa4fc86e18 Update version to 4.3.6 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9555 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 15:19:42 +00:00
teastep
698d6fc97e Fix Shorewall6 compilation issues -- Documentation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9553 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 01:17:59 +00:00
teastep
dccbc5a283 Fix Shorewall6 compilation issues 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9552 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 01:13:39 +00:00
teastep
c61a82b7aa Final (hopefully) fix for expand_rule() and PREROUTE_RESTRICT 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9551 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 00:50:03 +00:00
teastep
b8d7ee040e Remove nonsensical logic in expand_rule() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9550 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 22:28:27 +00:00
teastep
00afd5b142 The real fix for Makeitso's problem 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9548 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 22:05:20 +00:00
teastep
f801c7cbfc Fix expand_rule() handling of PREROUTING_RESTRICTION 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9547 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 21:46:03 +00:00
teastep
a5a3b4c3e7 Make split_list1() a little more robust 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9543 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 17:12:55 +00:00
teastep
d1bbc2e820 Fix split_list1() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9542 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 16:53:33 +00:00
teastep
08ba35ca29 Port changes from branches/4.2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9541 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 16:34:31 +00:00
teastep
f238b6a5aa Purge stale SAME recent entries 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9534 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 23:47:38 +00:00
teastep
aae03b6c8b New upload script for 4.4 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9532 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 21:45:26 +00:00
teastep
1705c42746 Allow SAME in the OUTPUT chain 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9531 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 21:04:17 +00:00
teastep
08c12ccd36 Finish SAME -- Document 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9527 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 17:39:32 +00:00
teastep
3ab9ace61a Finish SAME 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9526 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 17:23:55 +00:00
teastep
99deb41bbc First cut at pinning local clients to providers 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9525 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 16:56:48 +00:00
teastep
af24d35973 Split out host options from interface options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9522 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-24 01:11:47 +00:00
teastep
dba858068c Add nets= OPTION to the interfaces file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9520 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-23 23:39:46 +00:00
teastep
3245169faf Update License 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9517 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-23 16:39:18 +00:00
teastep
362bc5e2b6 More comments in compiler() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9516 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-23 16:08:10 +00:00
teastep
4e99718744 Fix 'prog.' pathname construction 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9515 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-23 15:48:37 +00:00
teastep
8ba4ef2ca9 Remove 'firewall' from SVN 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9511 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 22:35:41 +00:00
teastep
af54588fec Add shorewall-shell to the obsoletes list 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9508 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 21:36:43 +00:00
teastep
415b9be4d8 Add Raw.pm 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9505 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 21:15:05 +00:00
teastep
00712204e4 Fixes for install.sh 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9497 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 19:58:15 +00:00