holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
9,333 Commits 104 Branches 736 Tags 54 MiB
8cdbe5f88d
Commit Graph

732 Commits

Author SHA1 Message Date
Tom Eastep
64bf772594 Set OUTPUT policy to ACCEPT when optimize_chain deletes all of its rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 13:38:38 -07:00
Tom Eastep
b0b39cfc39 Document optimization level 2 fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-22 11:55:13 -07:00
Tom Eastep
8c09f21e5d Implement 'show log <token>' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-19 10:20:28 -07:00
Tom Eastep
938cfd7ba4 Don't create fw-><bport> chains and rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 12:29:51 -07:00
Tom Eastep
aeb90969f7 Optimize 8 Documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-14 17:12:25 -07:00
Tom Eastep
91a711b34f Document startup log fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-10 11:54:54 -07:00
Tom Eastep
2f3f591af1 Document removal of fallback scripts. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-09 07:43:36 -07:00
Tom Eastep
3937c10251 Keep rule arrays compressed during optimization 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-08 11:35:15 -07:00
Tom Eastep
9126cc63d9 Delete unused rules arrays 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-08 10:55:31 -07:00
Tom Eastep
c668707aac Update release docs with optimize 4 fix. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-07 20:18:56 -07:00
Tom Eastep
9d7d7e06d8 Update release documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-07 14:43:50 -07:00
Tom Eastep
3b317afb2f Add mDNS macro from Vincent Smeets. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-03 15:57:50 -07:00
Tom Eastep
3b07053d3b Document new 'trace' facility 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-28 14:37:22 -07:00
Tom Eastep
5a36606167 Document fix of EXTERNAL handling in proxyarp. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-25 12:13:52 -07:00
Tom Eastep
05752dcf0b Auto-detection of bridges -- release documents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-23 08:58:44 -07:00
Tom Eastep
914d829a49 Don't optimize the 'blacklst' chain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-22 06:47:39 -07:00
Tom Eastep
6fc347b9be Prepare 4.4.9-Beta1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-20 07:06:47 -07:00
Tom Eastep
b22b279bd1 Some additional idiot-proofing. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-19 10:01:02 -07:00
Tom Eastep
91bc3b3293 Mark a restored configuration as 'Restored' rather than 'Started'. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-17 10:10:56 -07:00
Tom Eastep
a01fa345b7 Add support for UDP Lite 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-16 09:42:50 -07:00
Tom Eastep
a2ac726ce9 Add changelog entry 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-11 18:16:31 -08:00
Tom Eastep
57dc5731b2 Add change log entry 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-10 17:31:35 -08:00
Tom Eastep
f246f728e7 Flag '-' used as a port range separator 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 08:36:26 -08:00
Tom Eastep
5d87983803 Update change log. Remove anacronistic comment. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 16:14:15 -08:00
Tom Eastep
169f97d76b Fix typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 11:28:54 -08:00
Tom Eastep
8cfcacc862 Update release document with fix for multiple policy matches 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 08:40:20 -08:00
Tom Eastep
c9c957c5b8 HKP Macro 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-28 07:37:16 -08:00
Tom Eastep
3c4b41fbe0 Implement -s option in the major installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-27 11:48:39 -08:00
Tom Eastep
7fe7ebc891 Fix Handling of NFQUEUE(queue-num) in policies 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 08:44:28 -08:00
Tom Eastep
5696742ef3 Update release Document with 4.4.7.5 changes and Debian Init Script Fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-20 08:34:47 -08:00
Tom Eastep
ea8a6c837f Document per-IP rate change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 15:41:12 -08:00
Tom Eastep
115ce7b87d Update release documents for bug fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 06:49:13 -08:00
Tom Eastep
ec95e5b32c Document fix for rate limiting of NAT rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 09:11:14 -08:00
Tom Eastep
5a96771e07 Start 4.4.8 Beta 1 2010-02-11 15:46:57 -08:00
Tom Eastep
21d4c8ba21 Document workaround for lack of 'flow' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-08 10:03:10 -08:00
Tom Eastep
f4e175f149 Fix IPv6 'nosmurfs'. Make 'nosmurfs' logging more efficient. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-03 15:03:15 -08:00
Tom Eastep
9d288241da Fix issues in generate_matrix(). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-02 19:42:54 -08:00
Tom Eastep
ede17e2da0 Set ADD_IP_ALIASES=No in all shorewall.conf files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-02 08:16:41 -08:00
Tom Eastep
dd60f04a9f Work around lack of MARK Target support 2010-02-01 16:22:57 -08:00
Tom Eastep
9408a114c6 Don't load unused modules when LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-25 10:50:49 -08:00
Tom Eastep
8def4d03c3 Document LOAD_HELPERS_ONLY=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-21 20:17:25 -08:00
Tom Eastep
10fe25050f Add TC_PRIOMAP fix to change log 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-21 10:39:40 -08:00
Tom Eastep
146a738e4c Document TPROXY 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-17 08:20:15 -08:00
Tom Eastep
fddb85189e Update release documents for functionality backported from 4.5. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-16 11:32:50 -08:00
Tom Eastep
d5cc302ad9 Start 4.4.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-16 08:11:13 -08:00
Tom Eastep
55e41483de Update Release Documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 20:12:31 -08:00
Tom Eastep
4420eed8d7 Allow users to preview the generated ruleset. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 15:32:50 -08:00
Tom Eastep
818dfb6295 Document 'show macro' in the release docs. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 13:46:14 -08:00
Tom Eastep
4464094773 Update release documents for DHCPfwd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 07:51:20 -08:00
Tom Eastep
fc8bfdcbf9 Update release documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-11 14:49:45 -08:00
Tom Eastep
54b21365c2 Update release documents for [...] change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-08 13:58:15 -08:00
Tom Eastep
e3c75dcfcc Document the restoration of SAVE_IPSETS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 11:54:59 -08:00
Tom Eastep
b491eae3c0 Document Lenny/xtables-addons hack 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 10:20:40 -08:00
Tom Eastep
15a1b39822 Update change log 2009-12-19 16:40:13 -08:00
Tom Eastep
9cf75a4253 Revert "this is crap" 
This reverts commit 7be7ef6685.
 2009-12-19 16:05:28 -08:00
Tom Eastep
7be7ef6685 this is crap 2009-12-19 16:05:13 -08:00
Tom Eastep
508e1123bb Revert change that allowed out of order policies 2009-12-19 07:24:17 -08:00
Tom Eastep
43c45a064c Add current and limit to conntrack table display 2009-12-12 09:10:24 -08:00
Tom Eastep
9988cfb619 Remove silly logic in expand_rule() 2009-12-10 08:00:18 -08:00
Tom Eastep
a150ed1a72 Update change log 2009-12-08 13:30:55 -08:00
Tom Eastep
79ce532b69 Document fix for 'reload -c' 2009-12-08 08:30:37 -08:00
Tom Eastep
4076a6bca7 Fix ENHANCED_REJECT and MODULE_SUFFIX 2009-12-07 13:55:49 -08:00
Tom Eastep
c8616d4c67 Fix Shorewall6 capability detection 2009-12-05 21:35:05 -08:00
Tom Eastep
ee2195e745 Allow LOGFILE=/dev/null 2009-12-03 16:30:06 -08:00
Tom Eastep
a188fec942 Auto-load cls_flow and search .../sched for modules 2009-12-03 12:20:58 -08:00
Tom Eastep
4c7731fee6 Remove change log error for rejected change 2009-12-03 10:44:36 -08:00
Tom Eastep
e5106f10bc Revert 8ff4d004c0 2009-11-28 07:23:23 -08:00
Tom Eastep
4e8d753682 Revert "Finish Virtual Zones" 
This reverts commit 222c8cf88f.
 2009-11-28 07:20:52 -08:00
Tom Eastep
222c8cf88f Finish Virtual Zones 2009-11-26 12:14:58 -08:00
Tom Eastep
8ff4d004c0 Better virtual zone implementation 2009-11-25 18:14:14 -08:00
Tom Eastep
8263ea1312 Limit providers to 15 2009-11-25 12:18:08 -08:00
Tom Eastep
d189c08533 Revert "Add 'virtual' zone support" 
This reverts commit a2cd4bd1f4.
 2009-11-25 11:51:13 -08:00
Tom Eastep
a2cd4bd1f4 Add 'virtual' zone support 2009-11-25 09:42:28 -08:00
Tom Eastep
d3d21d4d18 Fix 'show policies' in Shorewall6[-lite] 2009-11-23 13:50:41 -08:00
Tom Eastep
cc809eaf78 Complete merge of 4.4 branch into master 2009-11-23 11:15:33 -08:00
Tom Eastep
c17ac8f23f commit crap for now 2009-11-23 11:13:57 -08:00
Tom Eastep
532105ec39 Allow specific policy to supersede a wildcard policy 2009-11-23 10:02:04 -08:00
Tom Eastep
b30cae89e3 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:56:15 -08:00
Tom Eastep
99a35c1bf0 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:33:16 -08:00
Tom Eastep
90170d6018 Update changelog 2009-11-22 08:58:06 -08:00
Tom Eastep
720442b400 Fix merge screwup 2009-11-22 08:43:32 -08:00
Tom Eastep
bd9c0ac285 Generate error on port == 0 2009-11-22 08:39:03 -08:00
Tom Eastep
c8209f4ce2 Apply bridge fix to 4.4 2009-11-22 08:18:23 -08:00
Tom Eastep
c7de19cf39 Allow specific policy to supersede an expanded one 2009-11-21 13:56:40 -08:00
Tom Eastep
cbe944c354 Open the 4.5.0 Thread 2009-11-21 11:41:10 -08:00
Tom Eastep
ecf6a0ec4a Open 4.4.5 2009-11-21 11:08:50 -08:00
Tom Eastep
bce4d51a18 Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes 2009-11-21 07:54:42 -08:00
Tom Eastep
c5bb493b29 Fix class number assignment when WIDE_TC_MARKS=Yes 2009-11-20 12:25:15 -08:00
Tom Eastep
9d5dd2ad3a Implement an '-l' option to the 'show' command 2009-11-16 15:14:24 -08:00
Tom Eastep
2a910ebddf Suppress redundant tests for provider availability in route rules processing 2009-11-16 12:43:44 -08:00
Tom Eastep
31f01fe765 Document fixing route rule addition code 2009-11-16 11:20:02 -08:00
Tom Eastep
f5a019becc Implement 'show policies' command 2009-11-15 09:24:56 -08:00
Tom Eastep
893a847c87 Suppress extra COMMENT warnings 2009-11-10 17:17:55 -08:00
Tom Eastep
bf8c38e054 Add ZONE2ZONE option to shorewall.conf 2009-11-10 14:12:55 -08:00
Tom Eastep
89bdcf9a3d Implement 'physical' option 2009-11-06 07:27:44 -08:00
Tom Eastep
28b660c853 Avoid reporting bogus duplicate interface with two bridges and wildcard ports 2009-11-05 11:04:14 -08:00
Tom Eastep
4548db58da Relax port list limitation in /etc/shorewall/routestopped 2009-11-03 11:36:32 -08:00
Tom Eastep
4f5c602d5f Fix .spec error and document logrotate files 2009-11-03 10:12:38 -08:00
Tom Eastep
11ddfa92e9 Eliminate Perl run-time errors out of move_rules() 2009-11-01 17:14:42 -08:00
Tom Eastep
23d0806da2 Change Shorewall6 default STARTUP_LOG and LOG_VERBOSITY 2009-11-01 11:09:17 -08:00