Commit Graph

632 Commits

Author SHA1 Message Date
teastep
8ef198b3a6 More optimization
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8124 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 18:47:27 +00:00
teastep
b81ae53477 Correct handling of IPSEC; re-order rules slightly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8123 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 16:39:40 +00:00
teastep
2a2a7530c2 Add optimizations in basic chain handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8122 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-30 00:03:25 +00:00
teastep
e75be13ff4 Fix exclusion in zone definition
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8121 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 21:38:18 +00:00
teastep
ed709b56c7 Place zone name in error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8118 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 20:29:27 +00:00
teastep
4be347d1cc Move 'dynamic' jumps to the INPUT and FORWARD chains
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8117 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-28 19:41:23 +00:00
teastep
3cad33ea20 More defense against silly lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8116 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 22:15:07 +00:00
teastep
7b4abdba94 Validate comma-separated lists
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8109 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-26 01:07:57 +00:00
teastep
f960345b51 Catch invalid lists in nat/masq entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8107 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-25 23:52:33 +00:00
teastep
65df4d9f73 Ruleset optimization -- phase I
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8100 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-24 16:22:03 +00:00
teastep
746a00994d Create 'sourceonly' hosts option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8093 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:48:03 +00:00
teastep
03091be09a Allow loose interface matching in more places
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8091 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-22 23:21:44 +00:00
teastep
e2e827cdbc Allow loose match for interfaces names in masq, nat and netmap
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8079 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-19 23:36:27 +00:00
teastep
3f4d773489 Allow DNS names in DEST column of a DNAT rule
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8076 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-17 19:02:40 +00:00
teastep
99a5eba368 Remove delayed insertion of RETURN rules in dnat chain
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-16 23:24:41 +00:00
teastep
6b564e0eb3 Factor out invariant parts of a loop
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8071 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-15 19:02:00 +00:00
teastep
545dd7dbc3 Interface lists in masq and nat files
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8068 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-15 02:39:21 +00:00
teastep
2f96bc5181 More work on DNAT/REDIRECT mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8065 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-14 16:34:26 +00:00
teastep
318b4f002d Consult policies when constructing dnat chains; warning when zone specified on NAT-only rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 18:47:06 +00:00
teastep
55a25721e6 More tweaks to DNAT/REDIRECT thingy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8052 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-13 00:41:10 +00:00
teastep
88a74e40f3 Another look at DNAT/REDIRECT and nested zones
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8051 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 21:11:39 +00:00
teastep
755983b38c Make DNAT/MASQ short-circuit dependent on z->fw policy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8050 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 17:39:14 +00:00
teastep
3d84cec3a3 Fix for DNAT/REDIRECT nested-zone mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8048 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 01:32:18 +00:00
teastep
2583fc3f93 Fix initialization problem in Rules module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8047 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-12 00:35:07 +00:00
teastep
8a22a4e05a Simplify fix to accounting
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8040 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 21:07:07 +00:00
teastep
e68ab78eda Fix a couple of minor problems in Accounting.pm
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8038 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 20:55:27 +00:00
teastep
384e88df43 First step in adding structure to NAT table ruleset
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-10 19:56:44 +00:00
teastep
f959d54cea Fix mangled date in firewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8020 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 23:20:09 +00:00
teastep
f36c1ccd18 Revert fix for broken 'tc'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8016 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 18:50:33 +00:00
teastep
687c9c1a88 Update version to 4.1.4
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8015 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-04 17:51:45 +00:00
teastep
6a2f313246 tweak a comment
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8005 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-03 22:18:24 +00:00
teastep
0588e9f576 Final fix for police fiasco
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7991 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-02 04:25:47 +00:00
teastep
1e6140a59c Work around the 'flowid' vs 'classid' fiasco in 'tc'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7990 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-02 02:54:26 +00:00
teastep
2fa119b30a More do_test() tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7988 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 21:53:29 +00:00
teastep
36096dfff7 Express mark test mask in Hex
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 17:47:58 +00:00
teastep
1a24a6fe78 Final fix for wrong mask in mark tests
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7981 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-01-01 00:27:52 +00:00
teastep
d5073f0b3f Move do_test() fixes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7966 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-29 16:31:49 +00:00
teastep
44545e71fe Release document update; cosmetic change to Shorewall::Tc
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7936 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 22:56:36 +00:00
teastep
d8a0db63bd Always use filters for classifying marked packets
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7934 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 19:14:53 +00:00
teastep
17e75e230f Fix problem with optional interfaces and DETECT_IP_ADDRS
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7933 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-21 19:14:27 +00:00
teastep
c58f3c7eca Generate error if no ipv4 zones or no interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7931 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-18 23:55:20 +00:00
teastep
b030624c68 Fix typo in ADMINISABSENTMINDED=No code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7925 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-18 00:00:59 +00:00
teastep
0e6472a272 Eliminate mark_referenced()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-17 20:53:27 +00:00
teastep
4c81d94097 Undo damage done by RPM expermintation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7910 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:43:42 +00:00
teastep
7d6e67ace9 More rpm expermentation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:23:46 +00:00
teastep
0dd64cab77 Experiment with RPM versions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7906 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 19:08:11 +00:00
teastep
587ca5148f Fix rpm versioning
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7899 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-12 00:25:51 +00:00
teastep
954c1f00ba Documentation and error message tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7894 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-10 22:53:20 +00:00
teastep
8889d86d75 Fix spurios add of alias in nat file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7862 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-08 17:37:04 +00:00
teastep
8b29aa06a6 Implement regression testing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7859 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2007-12-08 00:04:43 +00:00