Commit Graph

10314 Commits

Author SHA1 Message Date
Tom Eastep
94dbfff034 Be sure to detect IPSET_MATCH before OLD_IPSET_MATCH.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-19 13:29:35 -07:00
Tom Eastep
68199083fe Correct version when :<burst> was added 2011-06-17 13:14:48 -07:00
Tom Eastep
d5c9da2257 Remove some whitespace 2011-06-16 16:46:00 -07:00
Tom Eastep
25994d85a5 Correct spelling error in shorewall6-interfaces(5)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-15 14:00:07 -07:00
Tom Eastep
cca0ae25a9 Initiate 4.4.20.4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-15 13:36:29 -07:00
Tom Eastep
5ddc7b5f2a Document CONFIG_PATH search with AUTOMAKE.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-15 13:30:17 -07:00
Tom Eastep
3c80439a39 Update known problems with problems corrected in 4.4.20.3
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-15 13:28:16 -07:00
Tom Eastep
dd16805fa8 Have AUTOMAKE follow CONFIG_PATH
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-15 13:25:12 -07:00
Tom Eastep
1b5207861d Odd capitalization to make annotate.pl work
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-14 07:40:07 -07:00
Tom Eastep
cb701795f1 Update release notes.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-14 07:18:07 -07:00
Tom Eastep
7ee8e2eb03 Don't generate INPUT hairpin rules
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-14 07:17:57 -07:00
Tom Eastep
f04321592c Document wildcard interface sfilter exemption.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-14 06:51:17 -07:00
Tom Eastep
4d08ad0eea Exempt wildcard interfaces from sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-14 06:46:02 -07:00
Tom Eastep
fb8f66af61 Apply Tuomo's patch for the .conf manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-13 07:04:07 -07:00
Tom Eastep
73b9198d6d Quell compiler warnings from Perl 5.14.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-13 06:39:38 -07:00
Tom Eastep
5d8e6ac6d3 Version to .3 2011-06-12 15:41:48 -07:00
Tom Eastep
9e913e77e9 Document dropping of deprecated options 2011-06-12 14:00:21 -07:00
Tom Eastep
fa2e2807d4 Delete deprecated options from the .conf files
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-12 13:47:19 -07:00
Tom Eastep
156f1bcc7d Apply Tuomo Soini's patch
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-12 07:23:05 -07:00
Tom Eastep
a82c3f1471 Improvements to interfaces manpages
- Indicate when 'routefilter' cannot be used.
- Clarify use of 'sfilter'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-11 06:42:03 -07:00
Tom Eastep
c5aa17017d Make zones with multiple interfaces complex
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-10 13:00:58 -07:00
Tom Eastep
051f09c35d Set the interface routeback option if there are any IP host groups with 'routeback'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-10 10:29:21 -07:00
Tom Eastep
c633cb2743 Correct manpages: filter->sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-10 06:04:11 -07:00
Tom Eastep
60b8e92dc1 Don't leave unused sfilter chains in the config
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 17:09:53 -07:00
Tom Eastep
f5bda84e79 Couple of tweaks 2011-06-09 16:54:32 -07:00
Tom Eastep
76e68bd04b Jump (don't go) to sfilter1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 14:15:29 -07:00
Tom Eastep
41a500c342 Update release docs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 13:59:36 -07:00
Tom Eastep
e76835504b Don't move rules from a chain with references
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 13:35:49 -07:00
Tom Eastep
251da23cb5 Fix FORWARD with ipsec dest
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 09:57:45 -07:00
Tom Eastep
6a04e242ac Update release docs
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 07:41:02 -07:00
Tom Eastep
fe0bedacfc Exempt ipsec from sfilter
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-09 07:40:40 -07:00
Tom Eastep
4ce751469b Correct typo in the shorewall-providers manpage
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-08 14:38:18 -07:00
Tom Eastep
94cdf24c7f Improve wording in release notes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-08 11:03:47 -07:00
Tom Eastep
b0c47d4f47 Document application of sfilters to INPUT traffic.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-08 11:02:39 -07:00
Tom Eastep
6f3f49e45a Apply sfilter to INPUT as well as FORWARD
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-08 09:41:11 -07:00
Tom Eastep
78004dae80 Update known problems and release notes 2011-06-07 16:58:44 -07:00
Tom Eastep
57398c683a Initiate 4.4.20.2
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-07 13:23:27 -07:00
Tom Eastep
deb7d92ded Correct sfq handle assignment
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-07 13:23:12 -07:00
Tom Eastep
e69f22725f Add fix inadvertently dropped from 4.4.19.4
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-07 12:50:24 -07:00
Tom Eastep
9c2c562bf5 Correct autorepeat wart
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-07 06:45:50 -07:00
Tom Eastep
cf0275a049 Make FAKE_AUDIT work again 2011-06-06 16:08:29 -07:00
Tom Eastep
59c11e205b Update release notes
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 15:48:26 -07:00
Tom Eastep
642319d706 Change annotated documentation default
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 15:40:21 -07:00
Tom Eastep
cfb3d6a801 Merge branch '4.4.20' 2011-06-06 14:09:26 -07:00
Tom Eastep
6136e986cf Update version to 4.4.20.1
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 14:08:25 -07:00
Tom Eastep
186f89f387 Merge branch '4.4.20' 2011-06-06 13:23:47 -07:00
Tom Eastep
e8f61e2109 Restate vulnerability
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 13:19:40 -07:00
Tom Eastep
447d0f0b2d Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 09:46:52 -07:00
Tom Eastep
c42c6864b4 Don't modify the .conf file installed in configfiles.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2011-06-06 09:46:22 -07:00
Tom Eastep
2803d3ee0b Merge branch '4.4.20' 2011-06-06 07:02:57 -07:00