holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
3,706 Commits 104 Branches 736 Tags 54 MiB
7ee4c844c3
Commit Graph

56 Commits

Author SHA1 Message Date
teastep
3d81581c01 Bring 3.2.2 Changes forward 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4320 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-08-08 23:03:06 +00:00
teastep
b4ded2a9ac Remove dynamic zones (again) 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-07-18 13:27:28 +00:00
teastep
3f9c8996bb Back out all post 3.2 changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4229 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-07-16 23:06:18 +00:00
teastep
8c9e8cc75c Normal start of new development thread (remove dynamic zones :-) 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4219 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-07-13 22:38:22 +00:00
teastep
6fdd96fddb Add 'load' command; together with the 'reload' command, this allows users to operate shorewall/shorewall-lite without caring where the 'firewall' script is stored 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4132 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-17 17:17:45 +00:00
teastep
fb89790044 Add 'shorewall show config' command to display distribution-specific defaults 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4130 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-17 15:58:48 +00:00
teastep
13da154569 Add LITEDIR to configpath so that distributions can define where the 'firewall' script is stored on Shorewall Lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4128 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-17 15:28:51 +00:00
teastep
35453c86e3 Move the Shorewall Lite firewall script from /usr/share/shorewall-lite to /var/lib/shorewall-lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-16 14:59:41 +00:00
teastep
6574995249 Another 'reload' tweak 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4101 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-14 19:46:37 +00:00
teastep
1a58eafd64 Add 'reload' command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4099 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-14 17:25:37 +00:00
teastep
90ad8341ba More Lite tweaks -- will they ever end? 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4081 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-13 00:04:15 +00:00
teastep
906f11c814 Deimplement distribution-specific compilation in favor of Shorewall Lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3979 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-06-03 17:05:43 +00:00
teastep
d0afc17db7 Add -m option to 'show' and 'logwatch' commands to display MAC addresses 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3798 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-04-17 22:24:18 +00:00
teastep
965b61d525 Remove traffic shaping reconfiguration from 'shorewall refresh' -- help file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3783 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-04-10 22:53:20 +00:00
teastep
f0372d9209 Add 'logdrop' and 'logreject' commands for dynamic blacklisting with logging 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3715 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-03-23 16:37:45 +00:00
teastep
9e3b8d446a Fix 'help compile' to mention '-d redhat' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3611 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-03-01 17:39:58 +00:00
teastep
0e6e03940f Correct typo in help file ('help drop') 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3476 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-11 15:03:48 +00:00
teastep
e1535337d4 Fix and document 'check -e' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3466 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-10 18:45:05 +00:00
teastep
c4271f4578 Apply Steven Springl's patch for help 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3441 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-04 16:04:07 +00:00
teastep
900fd6c8a2 Add support for compilations targeted for other distributions 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3426 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-03 17:08:37 +00:00
teastep
eeab23353c Clean up superfluous command options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3425 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-03 15:27:54 +00:00
teastep
7085f1d417 Remove sensless synonyms from command set 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3424 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-02-03 15:10:46 +00:00
teastep
0c084c3055 Some headway on safe/restore 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3374 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-25 00:13:45 +00:00
teastep
1f9d9629c8 More rationalization of options and commands 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3322 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-18 20:17:58 +00:00
teastep
14cd6a770b Restore COPYING 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3298 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-16 15:19:10 +00:00
teastep
01e38957e0 Update versions from 3.0 to 3.2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3297 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-16 15:15:43 +00:00
teastep
e9423d9c04 Allow remote compiles 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3269 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-12 23:26:37 +00:00
teastep
248b26a7d8 Re-add dynamic zone capability 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3264 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-11 23:30:33 +00:00
teastep
cfe0e4ee7b Avoid local exploitability with compile output file. Add 'compile' as a synonym for 'generate' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3254 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-07 22:52:15 +00:00
teastep
ab7c5cdff9 Implement 'reload' command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3243 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-07 06:04:16 +00:00
teastep
d4a248373a Let people know what they are in for... 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3240 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-07 04:12:29 +00:00
teastep
1898b6cb8a Implement new generate syntax 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3239 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-07 04:05:16 +00:00
teastep
d81f2ca29e First releast of 'shorewall generate' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3237 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-01-07 01:08:23 +00:00
teastep
1cb2d888e8 Remove dynamic zone capability from development branch 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3196 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-12-24 21:23:10 +00:00
teastep
7f39d760b7 Add 'ipdecimal' command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-12-02 23:58:57 +00:00
teastep
f6a233c35a Fix help text for restore. Add -q to help for safe-start and safe-restart 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3095 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-11-29 21:38:43 +00:00
teastep
7b401c9036 Deprecate 'show tos' in favor of 'show mangle' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3086 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-11-27 23:09:36 +00:00
teastep
ffae7b5646 shorewall show macros 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3083 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-11-27 20:59:47 +00:00
teastep
0bf8e6b293 Add '-n' option to the 'try' command and add to help text 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2687 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-09-15 01:07:12 +00:00
teastep
738b45ad9e Update the version number to 3.0 in all files 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-31 15:27:22 +00:00
teastep
6a47756293 'shorewall check' now checks the nat and providers files 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2594 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-30 20:29:42 +00:00
teastep
e949e18749 'shorewall check' now checks the proxyarp file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2593 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-30 17:42:21 +00:00
teastep
124af9a046 'shorewall check' now checks the masq file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2592 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-30 15:54:29 +00:00
teastep
ac1983a5da Large cleanup patch from Tuomo Soini 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-08-02 16:46:30 +00:00
teastep
b828793da9 Recombine the 'status' and 'state' commands 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2434 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-30 21:59:12 +00:00
teastep
9feb547b6e /sbin/shorewall status rework -- take 2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-29 18:32:50 +00:00
teastep
989e1e87a5 Fix syntax error in 'help' file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2428 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-28 14:45:59 +00:00
teastep
2a52d3342d Fix Makefile; rename status to dump and create a real status command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2427 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-28 14:37:56 +00:00
teastep
b66929a65e Large merge of function from EXPERIMENTAL to HEAD. 
1) Elimination of the "shorewall monitor" command.

2) The /etc/shorewall/ipsec and /etc/shorewall/zones file are combined into
a single /etc/shorewall/zones file. This is done in an upwardly-compatible
way so that current users can continue to use their existing files.

3) Support has been added for the arp_ignore interface option.

4) DROPINVALID has been removed from shorewall.conf. Behavior is as if
DROPINVALID=No was specified.

5) The 'nobogons' option and BOGON_LOG_LEVEL are removed.

6) Error and warning messages have been made easier to spot by using
capitalization (e.g., ERROR: and WARNING:).

7) The /etc/shorewall/policy file now contains a new connection policy and a
policy for ESTABLISHED packets. Useful for users of snort-inline who want to
pass all packets to the QUEUE target.

8) A new 'critical' option has been added to /etc/shorewall/routestopped.
Shorewall insures communication between the firewall and 'critical' hosts
throughout start, restart, stop and clear. Useful for diskless firewall's
with NFS-mounted file systems, LDAP servers, Crossbow, etc.

9) Macros. Macros are very similar to actions but are easier to use, allow
parameter substitution and are more efficient. Almost all of the standard
actions have been converted to macros in the EXPERIMENTAL branch.

10) The default value of ADD_IP_ALIASES in shorewall.conf is changed to No.

11) If you have 'make' installed on your firewall, then when you use
the '-f' option to 'shorewall start' (as happens when you reboot),
if your /etc/shorewall/ directory contains files that were modified
after Shorewall was last restarted then Shorewall is started using
the config files rather than using the saved configuration.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2409 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-25 23:08:09 +00:00
teastep
aaecd53a29 Add 'shorewall show actions command' 
Make it possible for the 'stopped' extension script to save commands in
the 'restore-tail' file by calling 'run_and_save_command' and
'save_command'


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2005-07-24 16:27:21 +00:00