holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,173 Commits 104 Branches 736 Tags 54 MiB
88547f5140
Commit Graph

1316 Commits

Author SHA1 Message Date
Tom Eastep
7ad7598d5b
Implement LOG_ZONE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-20 15:31:31 -08:00
Tom Eastep
421edccd3f
Delete INLINE_MATCHES from .conf files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-12 19:09:42 -08:00
Tom Eastep
cf8a48f110
Delete deprecated actions and macros 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-12 19:08:18 -08:00
Tom Eastep
221753c3c0
INLINE_MATCHES=No in sample configs 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-08 12:53:20 -08:00
Tom Eastep
27a0f0f7a0
Make TRACK_PROVIDERS=Yes the default 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-10 08:46:01 -08:00
Tom Eastep
02caeb5aa0
Remove sourceroute=0 from IPv6 Universal interface options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-22 13:44:11 -08:00
Tom Eastep
6ba1d5413b
Allow a protocol to be associated with an action 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-02 11:24:08 -08:00
Tom Eastep
7289175070
Chop first config dir if non-root or if compiling for export. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-11-23 09:57:12 -08:00
Tom Eastep
5aaf1e53de
IPv6 Samples use logical interface names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-11-22 09:56:45 -08:00
Tom Eastep
91e59c2ed4
Remove the Lite Makefiles 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 11:56:04 -07:00
Tom Eastep
90f33dd436
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:48:14 -07:00
Tom Eastep
34e4fffd7d
Module suffix changes 
- Re-order default list in the compiler to match lib.common
- MODULE_SUFFIX="ko ko.xz" in standard .conf files.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 12:44:23 -07:00
Tom Eastep
0603f8e355
Serialize start of IPv4 and IPv6 under systemd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 12:48:18 -07:00
Tom Eastep
657215f9b5
Add sample enabled and disabled scripts 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-03 12:50:49 -07:00
Tom Eastep
9d160d4342
Add RESTORE_DEFAULT_ROUTE to shorewall6.conf samples 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-27 15:50:56 -07:00
Tom Eastep
1301848315
Change .conf files to specify USE_NFLOG_SIZE=No 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-26 10:46:16 -07:00
Tom Eastep
61b6898782
Add dropBcasts action 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-25 18:36:54 -07:00
Tom Eastep
ff2323b249
Add the USE_NFLOG_SIZE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-25 16:54:14 -07:00
Tom Eastep
987e54cd54
Move shorewall6-proxyndp.xml to Shorewall/manpages/shorewall-proxyndp.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-17 09:07:28 -07:00
Tom Eastep
42a46d42b6
Centralize the complete list of manpages in shorewall(8) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-16 17:11:43 -07:00
Tom Eastep
1061644ac7
Clean up links in the manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-08 15:43:59 -07:00
Tom Eastep
4a262c0e1b
Add FIN action 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-05-31 08:28:27 -07:00
Tom Eastep
a775fdcb7c
Remove stutter from the .conf manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-05-31 08:21:45 -07:00
Tom Eastep
6338aa42b0
Add BLACKLIST to IPv6 actions.std file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-05-26 07:39:09 -07:00
Tom Eastep
12a32d3a6b
Update LOGFORMAT documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-05-26 07:33:34 -07:00
Tom Eastep
bb70a3637b
Add PERL_HASH_SEED option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-05-02 07:51:37 -07:00
Tom Eastep
d2392c3a9b
Add IPv6 UPnP Support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-24 09:54:36 -07:00
Tom Eastep
561efa595c
Correct typo in the Shorewall6 sample .conf files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-15 08:55:41 -07:00
Tom Eastep
c5c4211081
Unify actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-13 14:54:25 -07:00
Tom Eastep
24a014655b
Quote all _DEFAULT settings in the sample .conf files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-13 11:00:29 -07:00
Tom Eastep
5729be6431
Add dropInvalid to BLACKLIST_DEFAULT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-10 09:06:41 -08:00
Tom Eastep
c534c458dd
Revert "Remove Multicast from IPv6 Policy Actions" 
This reverts commit 85d571d013.
 2017-03-10 08:53:54 -08:00
Tom Eastep
61435936fe
Correct CONFIG_PATH in IPv6 Universal sample 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 14:06:47 -08:00
Tom Eastep
85d571d013
Remove Multicast from IPv6 Policy Actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 13:12:03 -08:00
Tom Eastep
fdb78898fc
Make TC_ENABLED=Shared the default in the samples 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 13:06:55 -08:00
Tom Eastep
3d8d5aa469
quote $LOG_LEVEL in shorewall[6].conf files 
- Delete AllowICMPs from IPv4 policy action settings

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-08 14:16:24 -08:00
Tom Eastep
4f869c3506
More manpage updates for tcp:!syn 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-07 11:13:58 -08:00
Tom Eastep
e8a0142480
Document tcp:!syn support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-07 10:48:24 -08:00
Tom Eastep
5f1370f1b4
Clear the firewall on Debian systemd 'stop' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-06 11:22:55 -08:00
Tom Eastep
71d9a03697
Update shorewall[6]-rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-05 14:29:57 -08:00
Tom Eastep
80d93235b5
Eliminate builtin actions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-05 12:09:33 -08:00
Matt Darfeuille
06c6a017d5
Use a specific parameter file for systemd script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:25 -08:00
Matt Darfeuille
75fd8ccb37
Use a specific parameter file for sysvinit script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:21 -08:00
Matt Darfeuille
8c7e6fddfd
Use a common uninstaller for Sw and Sw6 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:11 -08:00
Matt Darfeuille
783e438b4a
Be more verbose while uninstalling Shorewall 
- Remove version file as a file and not as a directory.

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:00 -08:00
Matt Darfeuille
c58efe7698
Unify the uninstallers 
- Clean up code
 - Use the .service suffix

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:55:36 -08:00
Matt Darfeuille
f6f7e691d0
Fail if the rc file can not be loaded 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:54:40 -08:00
Matt Darfeuille
a9048b63f2
Correct typos 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:54:36 -08:00
Matt Darfeuille
20cc56f2f1
Load uninstallers's common functions 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:53:39 -08:00
Matt Darfeuille
a6eebc8ecf
Replace product names by product vars 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 16:40:41 -08:00