552 Commits

Author	SHA1	Message	Date
Tom Eastep	ea2ab6e4b6	A better solution to Marcus Limosani's issue	2009-12-29 08:22:15 -08:00
Tom Eastep	f568f3df9e	Final fix for Marcus Limosani's problem	2009-12-28 15:05:54 -08:00
Tom Eastep	738a6de11b	Make use of interface chains deterministic	2009-12-28 07:36:15 -08:00
Tom Eastep	f933816735	Simplify handling of packet clearing	2009-12-26 15:04:41 -08:00
Tom Eastep	d62f3a4fed	Set version to 4.4.6	2009-12-24 08:00:59 -08:00
Tom Eastep	f233b86278	Fix 'forward' interface option in IPv6	2009-12-24 07:51:44 -08:00
Tom Eastep	e38df7efcb	Fix another bug in ROUTE_FILTER Handling	2009-12-23 15:13:43 -08:00
Tom Eastep	e37cf0a370	Fix other issues with rp_filter fix	2009-12-20 15:54:41 -08:00
Tom Eastep	61b2ed7b57	Fix bug that prevented routefilter=2	2009-12-19 16:57:16 -08:00
Tom Eastep	d5914addd1	Disallow port 00	2009-12-19 14:59:03 -08:00
Tom Eastep	19af1a081c	Handle kernel 2.6.31 and rp_filter	2009-12-19 13:47:12 -08:00
Tom Eastep	4f4d77be48	Add Kernel Version to the capabilities	2009-12-19 12:42:39 -08:00
Tom Eastep	24ddacb4a7	Adjust module versions	2009-12-19 07:35:30 -08:00
Tom Eastep	10ae98571b	Revert change that allowed out of order policies	2009-12-19 07:20:00 -08:00
Tom Eastep	182ed24b02	Add a comment to process_rule1()	2009-12-14 15:52:16 -08:00
Tom Eastep	576cd76842	Remove superfluous logic from process_rule1	2009-12-14 14:49:38 -08:00
Tom Eastep	e9d12cfc11	Remove superfluous line of code	2009-12-14 07:17:55 -08:00
Tom Eastep	9988cfb619	Remove silly logic in expand_rule()	2009-12-10 08:00:18 -08:00
Tom Eastep	3214b14197	Fix macro handling of SOURCE and DEST columns	2009-12-08 13:29:06 -08:00
Tom Eastep	5e1f550b69	Fix ENHANCED_REJECT and MODULE_SUFFIX	2009-12-07 13:51:54 -08:00
Tom Eastep	7a6ad80c8a	Make kernel version detection work with non-standard version naming such as found on OpenWRT	2009-12-06 10:42:28 -08:00
Tom Eastep	4bf55883ee	Auto-load cls_flow	2009-12-03 12:15:23 -08:00
Tom Eastep	4494272dcd	Improve error message	2009-11-29 09:55:32 -08:00
Tom Eastep	8c033de049	Fix limit check on TC mark values	2009-11-28 14:05:27 -08:00
Tom Eastep	e582f222ad	Backout another Patch from the Virtual Zone Sequence and re-apply a couple of small optimizations	2009-11-28 07:25:31 -08:00
Tom Eastep	e5106f10bc	Revert 8ff4d004c0	2009-11-28 07:23:23 -08:00
Tom Eastep	4e8d753682	Revert "Finish Virtual Zones" ... This reverts commit 222c8cf88f.	2009-11-28 07:20:52 -08:00
Tom Eastep	d1812b4174	Revert "Fix a couple of bugs in virtual zones" ... This reverts commit 22991ac9dd.	2009-11-28 07:20:28 -08:00
Tom Eastep	038b84e775	Revert "Small optimization in virtual zones" ... This reverts commit 251d7116c8.	2009-11-28 07:20:01 -08:00
Tom Eastep	f21c71d7a6	Revert "Match section rules to the number of mark rules" ... This reverts commit 1699d8e941.	2009-11-28 07:19:41 -08:00
Tom Eastep	0b1621027b	Revert "Make 'virtual' a zone type rather than an option" ... This reverts commit 18eedf7e34.	2009-11-28 07:19:10 -08:00
Tom Eastep	ea2c55a993	Revert "Fix off-by-one problem" ... This reverts commit 543af8bccb.	2009-11-28 07:18:07 -08:00
Tom Eastep	f5bf3c9b43	Fix merge conflicts	2009-11-28 07:16:03 -08:00
Tom Eastep	7352771c5d	Fix .spec history to omit false steps	2009-11-27 12:29:11 -08:00
Tom Eastep	543af8bccb	Fix off-by-one problem	2009-11-27 08:56:23 -08:00
Tom Eastep	7f16e96167	Set version to 4.4.5 Beta1	2009-11-27 08:52:37 -08:00
Tom Eastep	18eedf7e34	Make 'virtual' a zone type rather than an option	2009-11-27 08:17:18 -08:00
Tom Eastep	1699d8e941	Match section rules to the number of mark rules	2009-11-26 17:12:11 -08:00
Tom Eastep	251d7116c8	Small optimization in virtual zones	2009-11-26 14:48:46 -08:00
Tom Eastep	22991ac9dd	Fix a couple of bugs in virtual zones	2009-11-26 14:19:10 -08:00
Tom Eastep	222c8cf88f	Finish Virtual Zones	2009-11-26 12:14:58 -08:00
Tom Eastep	8ff4d004c0	Better virtual zone implementation	2009-11-25 18:14:14 -08:00
Tom Eastep	8263ea1312	Limit providers to 15	2009-11-25 12:18:08 -08:00
Tom Eastep	d189c08533	Revert "Add 'virtual' zone support" ... This reverts commit a2cd4bd1f4.	2009-11-25 11:51:13 -08:00
Tom Eastep	a2cd4bd1f4	Add 'virtual' zone support	2009-11-25 09:42:28 -08:00
Tom Eastep	4c40b205f8	Revert "Experimental explicit CONTINUE" ... This reverts commit 10056a03d9.	2009-11-24 13:14:24 -08:00
Tom Eastep	10056a03d9	Experimental explicit CONTINUE	2009-11-24 12:50:53 -08:00
Tom Eastep	cd84efea94	Yet one more change to IPv6 address validation	2009-11-24 08:29:12 -08:00
Tom Eastep	deb45c5a27	Yet another IPv6 Address Normalization fix	2009-11-23 15:57:12 -08:00
Tom Eastep	bdb673a642	More IPv6 fixes	2009-11-23 15:21:25 -08:00
Tom Eastep	1710f9ce7c	Several fixes to IPv6 Address Handling	2009-11-23 14:44:53 -08:00
Tom Eastep	9d85d0ff7a	Allow IPv6 DNS names in net contexts	2009-11-23 13:51:46 -08:00
Tom Eastep	5610f78a48	Update version of Shorewall::Policy; improve 'expanded' description in Shorewall::Chains	2009-11-23 11:31:38 -08:00
Tom Eastep	99a35c1bf0	Allow <zone>::<serverport> in the rules file DEST column	2009-11-23 09:33:16 -08:00
Tom Eastep	5b02ef68a5	Simplify port == 0 test	2009-11-22 09:00:03 -08:00
Tom Eastep	d4ff629fd8	Generate error on port == 0	2009-11-22 08:44:11 -08:00
Tom Eastep	6e9d9e239d	Apply 4.4.4.1 changes to master	2009-11-22 08:20:07 -08:00
Tom Eastep	4aeee6fd8b	Make 'expanded' apply to all wildcard policies	2009-11-21 14:18:01 -08:00
Tom Eastep	c7de19cf39	Allow specific policy to supersede an expanded one	2009-11-21 13:56:40 -08:00
Tom Eastep	cbe944c354	Open the 4.5.0 Thread	2009-11-21 11:41:10 -08:00
Tom Eastep	ecf6a0ec4a	Open 4.4.5	2009-11-21 11:08:50 -08:00
Tom Eastep	bce4d51a18	Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes	2009-11-21 07:54:42 -08:00
Tom Eastep	c5bb493b29	Fix class number assignment when WIDE_TC_MARKS=Yes	2009-11-20 12:25:15 -08:00
Tom Eastep	0df84cf8b5	Remove superfluous line of code	2009-11-19 10:54:58 -08:00
Tom Eastep	a23632f45e	Mostly cosmetic cleanup of Shorewall::Chains	2009-11-19 10:35:25 -08:00
Tom Eastep	c39a9fb5eb	Fix typo in shorewall-rules(5)	2009-11-18 19:55:20 -08:00
Tom Eastep	4579a71574	More massaging of redundant test suppression	2009-11-17 11:14:02 -08:00
Tom Eastep	831611e792	Update version of Shorewall::Policy	2009-11-16 20:24:01 -08:00
Tom Eastep	5f70b261b6	Update version of Shorewall::Compiler	2009-11-16 20:21:59 -08:00
Tom Eastep	5ec4f8d82c	Unconditionally include route marking and sticky chains	2009-11-16 14:15:01 -08:00
Tom Eastep	2a910ebddf	Suppress redundant tests for provider availability in route rules processing	2009-11-16 12:43:44 -08:00
Tom Eastep	016537f631	Don't add route rules when interface is down	2009-11-16 10:58:38 -08:00
Tom Eastep	dd543a2934	Tweak policies display	2009-11-16 09:30:37 -08:00
Tom Eastep	f5a019becc	Implement 'show policies' command	2009-11-15 09:24:56 -08:00
Tom Eastep	b662718eec	Replace canonical_chain by rules_chain	2009-11-14 07:07:19 -08:00
Tom Eastep	10affb1cde	Set version to 4.4.4	2009-11-13 13:52:49 -08:00
Tom Eastep	fa3bdde214	Set version to Beta2	2009-11-13 12:39:41 -08:00
Tom Eastep	0e6c9abb5b	A fix for COPY handling	2009-11-12 16:45:39 -08:00
Tom Eastep	f904866336	More minor cleanup of chain name change	2009-11-12 12:30:08 -08:00
Tom Eastep	2d53f8cb0c	Delete unnecessary function	2009-11-11 16:35:46 -08:00
Tom Eastep	b943f09e37	Fix indentation	2009-11-11 12:34:15 -08:00
Tom Eastep	4e6b8f8f42	Set version to 4.4.4-Beta1	2009-11-11 10:58:22 -08:00
Tom Eastep	0f078e7440	Ignore empty port in INTERFACE column	2009-11-11 10:52:14 -08:00
Tom Eastep	a4eb581d44	Document full logical interface implementation	2009-11-11 10:45:01 -08:00
Tom Eastep	06d3b2c692	Allow wildcard logical names in COPY column	2009-11-11 10:17:53 -08:00
Tom Eastep	6987cd15c5	Avoid dereference of null variable	2009-11-11 10:10:45 -08:00
Tom Eastep	ba8ad6346a	More use of logical chain name	2009-11-11 10:06:06 -08:00
Tom Eastep	893a847c87	Suppress extra COMMENT warnings	2009-11-10 17:17:55 -08:00
Tom Eastep	bf8c38e054	Add ZONE2ZONE option to shorewall.conf	2009-11-10 14:12:55 -08:00
Tom Eastep	7120a73f0e	Minor efficiency improvement in move_rules()	2009-11-10 08:08:02 -08:00
Tom Eastep	c9e57c93a2	Insure uniqueness of physical names; use logical name when constructing the name of a chain	2009-11-10 07:24:14 -08:00
Tom Eastep	4e2f2923b6	Update ::Config::VERSION	2009-11-09 13:16:40 -08:00
Tom Eastep	79b5cb49df	Fix over-zealous use of physical name; Correct syntax errors	2009-11-09 12:38:00 -08:00
Tom Eastep	893a0c9d42	Remove order dependency in interface OPTIONS processing	2009-11-09 11:15:08 -08:00
Tom Eastep	9b127e6e06	Improve performance of logical->physical mapping	2009-11-09 07:27:14 -08:00
Tom Eastep	92208251b7	Add undocumented LOGICAL_NAMES option	2009-11-09 07:01:25 -08:00
Tom Eastep	dda6f06883	Update module versions	2009-11-08 09:01:30 -08:00
Tom Eastep	4d977306f9	Make 'physical' work as a general logical name facility	2009-11-08 08:37:03 -08:00
Tom Eastep	83621ff416	Add logical->physical mapping to Shorewall::Chains	2009-11-08 07:11:38 -08:00
Tom Eastep	09f1b6501c	Add logical->physical mapping to Shorewall::Providers	2009-11-08 07:00:43 -08:00
Tom Eastep	ca1dd1416d	Add logical->physical mapping to Shorewall::Tc	2009-11-08 06:26:47 -08:00
Tom Eastep	1238b771a2	Apply logical->physical mapping to /proc settings	2009-11-07 18:59:10 -08:00
Tom Eastep	b1706e10e3	Correct typo	2009-11-07 07:58:15 -08:00
Tom Eastep	bcd4887d84	Correct capitalization in error message; remove unused variable	2009-11-07 07:39:28 -08:00
Tom Eastep	7f54a6fea9	Make non-wild physical work correctly	2009-11-07 07:19:52 -08:00
Tom Eastep	496cfc391e	Make parsing of zone options tighter	2009-11-06 15:51:53 -08:00
Tom Eastep	b491745f1c	More physical interface changes	2009-11-06 13:10:19 -08:00
Tom Eastep	4ef45ff665	Generate an error if a bridge port is configured as a provider interface	2009-11-06 09:22:16 -08:00
Tom Eastep	73eab1fa55	Report physical name in zone reports rather than logical name	2009-11-06 08:40:53 -08:00
Tom Eastep	d73ebb8a6a	Add comment explaining the purpose of dump_zone_contents()	2009-11-06 08:11:18 -08:00
Tom Eastep	7014bd3ea0	Add 'physical' interface option for bridge ports	2009-11-06 08:07:13 -08:00
Tom Eastep	89bdcf9a3d	Implement 'physical' option	2009-11-06 07:27:44 -08:00
Tom Eastep	a98195e156	Back out fix for multiple bridges with wildcard ports	2009-11-05 16:34:41 -08:00
Tom Eastep	fb3477b8b5	A couple of additional tweaks to the two-bridge fix	2009-11-05 13:40:03 -08:00
Tom Eastep	b4199fd068	Document ICMP codes	2009-11-05 11:44:40 -08:00
Tom Eastep	28b660c853	Avoid reporting bogus duplicate interface with two bridges and wildcard ports	2009-11-05 11:04:14 -08:00
Tom Eastep	4548db58da	Relax port list limitation in /etc/shorewall/routestopped	2009-11-03 11:36:32 -08:00
Tom Eastep	25549b176c	Update version to 4.4.4	2009-11-03 10:06:29 -08:00
Tom Eastep	5a525134ea	Be sure that startup log is secured 0600	2009-11-03 09:34:21 -08:00
Tom Eastep	f2f91ce7dd	Some optimizations	2009-11-03 09:28:34 -08:00
Tom Eastep	c893ba6ffa	Remove dependence of Shorewall::Rules on Scalar::Util	2009-11-03 07:40:06 -08:00
Tom Eastep	45653ffe79	A couple of more move_rules() tweaks	2009-11-02 15:35:00 -08:00
Tom Eastep	f97e0c5989	Flesh out fix for Perl run-time errors	2009-11-02 07:15:20 -08:00
Tom Eastep	11ddfa92e9	Eliminate Perl run-time errors out of move_rules()	2009-11-01 17:14:42 -08:00
Tom Eastep	59d01ccf97	A couple of tweaks to 'limit' class option	2009-10-27 12:33:14 -07:00
Tom Eastep	105754823a	Raise max limit to 128	2009-10-26 13:03:26 -07:00
Tom Eastep	f0b4b1f42e	Add limit option to tcclasses	2009-10-26 12:23:32 -07:00
Tom Eastep	cc0adc218f	Update comments and release documentation	2009-10-26 10:03:51 -07:00
Tom Eastep	8251948d2a	Add a comment	2009-10-24 15:55:56 -07:00
Tom Eastep	b3571261dd	Fix optional providers	2009-10-24 12:05:44 -07:00
Tom Eastep	3e2cf982a3	Correct messages issued when a provider is not added	2009-10-24 08:50:15 -07:00
Tom Eastep	86df82a29a	Fix IPv6 address validation error	2009-10-23 13:41:51 -07:00
Tom Eastep	46896e7dce	Fix for Ipv6	2009-10-23 11:34:13 -07:00
Tom Eastep	d0cda6b6ea	Add TRACK_PROVIDERS option	2009-10-20 13:24:17 -07:00
Tom Eastep	49f361124e	Make 'track' the default	2009-10-20 12:24:28 -07:00
Tom Eastep	7adb9b12bb	Move all function declarations from prog.footer6 to prog.header6	2009-10-19 07:37:49 -07:00
Tom Eastep	a0482132c6	Move all function declarations from prog.footer6 to prog.header6	2009-10-19 07:28:30 -07:00
Tom Eastep	abc9ab061a	Remove superfluous variables from generated script	2009-10-19 07:25:03 -07:00
Tom Eastep	65e4a5ff66	Move all functions from prog.footer to prog.header; minor tweaks elsewhere	2009-10-18 08:47:20 -07:00
Tom Eastep	0a74320bc2	Fix progress message	2009-10-17 14:23:11 -07:00
Tom Eastep	30dbfdc949	Fix intentation problem introduces with config-detection fix	2009-10-17 11:08:34 -07:00
Tom Eastep	e6755b7172	Merge nested zone fix into master	2009-10-17 10:59:41 -07:00
Tom Eastep	44c5ebcfa4	Fix initialization	2009-10-15 13:06:04 -07:00
Tom Eastep	19a90db09f	Back out last unnecessary change	2009-10-14 07:13:52 -07:00
Tom Eastep	990a9f0fdc	Fix RETAIN_ALIASES	2009-10-13 14:36:47 -07:00
Tom Eastep	80f41779f8	Replace keyword 'object' with 'script'	2009-10-12 08:24:47 -07:00
Tom Eastep	7064b8dd08	Update version of changed modules	2009-10-08 15:49:54 -07:00
Tom Eastep	3f7a1f9574	Rename a variable	2009-10-08 09:48:15 -07:00
Tom Eastep	83a9d8dd1b	Rename 'object' to 'script'	2009-10-05 15:43:29 -07:00
Tom Eastep	dc643c67e9	Move declaration to inner block where it is used	2009-10-05 14:23:43 -07:00