Tom Eastep
f0d101605b
Don't try to combine nat chains that include '-s'.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-02-01 14:24:07 -08:00
Tom Eastep
1981372c94
Make search for "-j ACCEPT" a little tighter
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-31 08:27:30 -08:00
Tom Eastep
f2709dd525
Correct release notes to match implementation
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-30 20:31:39 -08:00
Tom Eastep
3d39a47582
Set $have_ipsec after completing parse of the hosts file.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-30 07:26:35 -08:00
Tom Eastep
659f774451
Sort %detect_capability for easier verification.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-29 13:09:53 -08:00
Tom Eastep
9d2decd26d
Modify determine_capabilities to use detect_capability()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-29 10:38:22 -08:00
Tom Eastep
b8ec2be516
Clean up handling of %detect_capability
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-28 16:39:45 -08:00
Tom Eastep
ecc7861115
Validate LOAD_HELPERS_ONLY before detecting capabilities.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-28 08:05:24 -08:00
Tom Eastep
ebd847ef70
Don't display capabilties if they have not been determined
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-28 08:04:54 -08:00
Tom Eastep
05f2bb4b3a
Correction to last patch.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 17:52:27 -08:00
Tom Eastep
103a1660bc
Update release notes for RC 1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 12:57:47 -08:00
Tom Eastep
9d25318d80
Fix detection of HASHLIMIT_MATCH on old kernels.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 12:53:31 -08:00
Tom Eastep
be117f6638
Remove traffic shaping modules from 'helpers'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 10:37:42 -08:00
Tom Eastep
2069855e44
Restore module loader to lib.base (it is needed by shorecap).
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 10:09:12 -08:00
Tom Eastep
846715b009
Remove module loading code from lib.base
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 09:58:14 -08:00
Tom Eastep
54456de888
Update module versions
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 09:01:00 -08:00
Tom Eastep
c05c1a6f50
Update version to 4.4.7 RC1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-27 06:58:44 -08:00
Tom Eastep
1556002b54
A couple of tweaks to the LOAD_HELPERS_ONLY optimization change.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-25 15:59:31 -08:00
Tom Eastep
fb007bc1c7
Bump version to Beta 4
2010-01-25 12:25:01 -08:00
Tom Eastep
9408a114c6
Don't load unused modules when LOAD_HELPERS_ONLY=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-25 10:50:49 -08:00
Tom Eastep
d933aa602b
Eliminate 'ORIGINAL_POLICY_MATCH'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-25 08:13:22 -08:00
Tom Eastep
90b68a05de
Don't export %capabilities
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-25 07:56:16 -08:00
Tom Eastep
bfdc6719c1
Fix DropBcasts()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-24 12:16:15 -08:00
Tom Eastep
e14d48c2cf
Bump version to 4.4.7-Beta3
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-22 16:46:29 -08:00
Tom Eastep
0d63182ab4
Fix ambiguous syntax in Config.pm
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-22 16:44:45 -08:00
Tom Eastep
199a50e1c7
Update version to 4.4.7 Beta 2
...
Add problems corrected to the release notes.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-22 10:35:27 -08:00
Tom Eastep
8def4d03c3
Document LOAD_HELPERS_ONLY=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 20:17:25 -08:00
Tom Eastep
8f85c75264
Implement LOAD_HELPERS_ONLY for IPv6
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 15:49:44 -08:00
Tom Eastep
efc43b1b24
Add implementation of LOAD_HELPERS_ONLY
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 15:49:35 -08:00
Tom Eastep
a248acb4d4
Add LOAD_HELPERS_ONLY Option
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 15:49:23 -08:00
Tom Eastep
4303ad0a3e
Add Module Helpers File
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 15:48:24 -08:00
Tom Eastep
10fe25050f
Add TC_PRIOMAP fix to change log
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 10:39:40 -08:00
Tom Eastep
a7d4207bf5
Add TC_PRIOMAP to shorewall*.conf
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-21 10:38:32 -08:00
Tom Eastep
6b9afd6a82
Remove "-common" from installer messages
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-19 08:28:08 -08:00
Tom Eastep
9788e057bf
Correct filenames in install.sh -- Take 2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-18 09:29:14 -08:00
Tom Eastep
1716995d75
Correct filenames in install.sh
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-18 09:20:09 -08:00
Tom Eastep
5cc2edf15a
Add the new tc files to the repository
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-18 09:03:05 -08:00
Tom Eastep
8798d3cdb4
Install tcinterfaces and tcpri
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-18 07:39:36 -08:00
Tom Eastep
4453bb7dc8
More updates from 4.5
2010-01-17 16:18:44 -08:00
Tom Eastep
eb790c6d89
Add IPMARK and TPROXY modules to load list
2010-01-17 15:51:19 -08:00
Tom Eastep
e119037dea
Make 'is_isable()' work with 'lo'
2010-01-17 15:38:20 -08:00
Tom Eastep
f072c10b18
Set version to 4.4.7 Beta1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 09:10:48 -08:00
Tom Eastep
957de4b057
Add new options to shorewall[6].conf
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 08:50:32 -08:00
Tom Eastep
146a738e4c
Document TPROXY
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 08:20:15 -08:00
Tom Eastep
f4102417ff
Shorewall::Config changes for TPROXY from 4.5
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 08:15:14 -08:00
Tom Eastep
07cdb8ca82
Backport TPROXY from 4.5
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-17 08:12:44 -08:00
Tom Eastep
47007c5dbd
Allow protocol to be expressed in octal or hex
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 14:20:47 -08:00
Tom Eastep
aad8ea837a
Allow port numbers to be specified in Hex
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 14:00:47 -08:00
Tom Eastep
5ec7759d81
Don't pass an undefined value to fatal_error when numeric conversion fails.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 12:35:18 -08:00
Tom Eastep
fddb85189e
Update release documents for functionality backported from 4.5.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 11:32:50 -08:00
Tom Eastep
4bf0b8e1dd
Add new configuration options and optimization changes from 4.5
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 09:53:53 -08:00
Tom Eastep
d5cc302ad9
Start 4.4.7
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-16 08:11:13 -08:00
Tom Eastep
45d975cb45
Final editing of release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-14 08:25:32 -08:00
Tom Eastep
6e998edd48
Correct typo -- TC_EXPORT -> TC_EXPERT
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-14 07:48:19 -08:00
Tom Eastep
ebf1e55609
Version to 4.4.6
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 15:38:19 -08:00
Tom Eastep
1f1812b786
Document mDNS change in the release notes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 13:24:24 -08:00
Tom Eastep
bffe8ce4c6
Add multicast address to mDNS macro
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 13:20:07 -08:00
Tom Eastep
79f8031267
Add IGMP to the mDNS macro.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 13:03:34 -08:00
Tom Eastep
b8b7555ff9
Add "[ <device> ]" to "show tc" usage syntax
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 12:28:20 -08:00
Tom Eastep
880cd269c7
More mark geometry misses
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 12:16:40 -08:00
Tom Eastep
72de96760f
One more 0xFF -> $globals{TC_MASK} fix
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 12:11:00 -08:00
Tom Eastep
890cbfbd5d
Document TRACK_PROVIDERS change in the release notes.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 10:59:34 -08:00
Tom Eastep
10c5630786
A few more instances of TC_MASK
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 10:50:14 -08:00
Tom Eastep
555133fa3c
Bump version to 4.4.6-Beta2
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 10:14:31 -08:00
Tom Eastep
b4b6dce7c8
Add some comments
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 08:12:00 -08:00
Tom Eastep
4821d5e8b7
Change quantum to 1875 for simple TC SFQ.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-13 08:11:49 -08:00
Tom Eastep
55e41483de
Update Release Documents
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 20:12:31 -08:00
Tom Eastep
db2a1fe749
Add lib.cli changes to 4.4.6
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 18:57:04 -08:00
Tom Eastep
f69a741691
Port Simplified TC to 4.4.6
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 17:01:20 -08:00
Tom Eastep
7e183e8eb4
Change version to 4.4.6-Beta1
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 15:57:55 -08:00
Tom Eastep
57672d096c
Don't invoke 4.5 optimization under 4.4.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 15:47:14 -08:00
Tom Eastep
ae31a09e8b
Move code and add comments:
...
- Declare all of the 'preview' helpers together in Chains.pm
- Add some clarifying comments in the compiler.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 15:32:59 -08:00
Tom Eastep
4420eed8d7
Allow users to preview the generated ruleset.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 15:32:50 -08:00
Tom Eastep
818dfb6295
Document 'show macro' in the release docs.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 13:46:14 -08:00
Tom Eastep
6c62f14749
Add 'show macro' command
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 13:40:25 -08:00
Tom Eastep
4464094773
Update release documents for DHCPfwd
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 07:51:20 -08:00
Tom Eastep
b6a7723c05
Add DHCPfwd macro
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 07:48:55 -08:00
Tom Eastep
baa893773d
Apply Macro changes from Tuomo Soini
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-12 07:35:41 -08:00
Tom Eastep
6b085b7897
Update module versions
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 18:54:23 -08:00
Tom Eastep
5b4e9eb8e6
Revert change with migration issue
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 15:30:33 -08:00
Tom Eastep
0b549c7a15
Suppress mark geometry output
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:55:42 -08:00
Tom Eastep
fc8bfdcbf9
Update release documents
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:49:45 -08:00
Tom Eastep
1a74dbf93e
Add mark geometry changes to Shorewall::Chains and Shorewall::Compiler
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:39:22 -08:00
Tom Eastep
01293427f5
Add Mark Geometry changes to Shorewall::Tc
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:29:34 -08:00
Tom Eastep
4f5bb5e90b
Add new mark geometry changes to Shorewall::Providers
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:22:01 -08:00
Tom Eastep
d2d2912534
Add New mark geometry variables to Shorewall::Config
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-11 14:16:03 -08:00
Tom Eastep
4e50ea14ea
Back out EXMARK detection since it is unused in 4.4.
...
Long overdue change to LIBVERSION
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-09 09:30:25 -08:00
Tom Eastep
b0feeb805d
Fix typo in clear_firewall()
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-09 07:28:57 -08:00
Tom Eastep
54b21365c2
Update release documents for [...] change
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-08 13:58:15 -08:00
Tom Eastep
e6c0c8f6b7
Allow both <...> and [...] for IPv6 Addresses
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-08 13:55:13 -08:00
Tom Eastep
83c2473d78
Correct typo in error message
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-06 08:26:13 -08:00
Tom Eastep
ca4eee3ae4
Correct handling of 'refresh' failures
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-06 08:01:46 -08:00
Tom Eastep
db819b1d3f
Update release notes to qualify when ipsets are restored by 'restore'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-06 07:57:02 -08:00
Tom Eastep
605da92eca
Don't try to restore ipsets when 'restore' is being used to recover
...
from a start/restart failure.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-06 07:44:34 -08:00
Tom Eastep
d362af9fb6
Set CAPSVERSION to 4.4.7 just to be safe.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-05 10:00:29 -08:00
Tom Eastep
ab1dc03986
Implement EXMARK capability
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-05 09:35:11 -08:00
Tom Eastep
d6123a8fbc
Improve IPSET_SAVE restore logic:
...
- Call startup_error() rather than fatal_error()
- Call startup_error when restore-ipsets file exists but Shorewall is running
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 14:23:33 -08:00
Tom Eastep
84051ca19a
Update the release notes regarding SAVE_IPSETS and save/restore
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 12:49:58 -08:00
Tom Eastep
4e0f9b2ef3
Make save/restore work with SAVE_IPSETS=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 12:43:12 -08:00
Tom Eastep
e3c75dcfcc
Document the restoration of SAVE_IPSETS=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 11:54:59 -08:00
Tom Eastep
1aa55779e2
Re-enable SAVE_IPSETS=Yes
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 11:14:45 -08:00
Tom Eastep
b491eae3c0
Document Lenny/xtables-addons hack
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 10:20:40 -08:00
Tom Eastep
a1fd3aa7e3
Add a hack to work around a 'feature' of xtables-addons on Lenny
...
Be more careful about checking for the ipset utility before saving the ipsets
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-04 10:15:27 -08:00
Tom Eastep
f306018159
Update all .conf files to specify 'MODULE_SUFFIX=ko'
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-02 09:33:27 -08:00
Tom Eastep
55e874b23f
Update copyrights
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2010-01-01 12:58:27 -08:00
Tom Eastep
65c282af8b
Delete temporary nat chain used in capabilities detection.
...
Signed-off-by: Tom Eastep <teastep@shorewall.net>
2009-12-31 10:42:21 -08:00
Tom Eastep
ea2ab6e4b6
A better solution to Marcus Limosani's issue
2009-12-29 08:22:15 -08:00
Tom Eastep
f568f3df9e
Final fix for Marcus Limosani's problem
2009-12-28 15:05:54 -08:00
Tom Eastep
738a6de11b
Make use of interface chains deterministic
2009-12-28 07:36:15 -08:00
Tom Eastep
167d86746c
Correct typo in usage output
2009-12-27 11:56:38 -08:00
Tom Eastep
f933816735
Simplify handling of packet clearing
2009-12-26 15:04:41 -08:00
Tom Eastep
d62f3a4fed
Set version to 4.4.6
2009-12-24 08:00:59 -08:00
Tom Eastep
f233b86278
Fix 'forward' interface option in IPv6
2009-12-24 07:51:44 -08:00
Tom Eastep
e38df7efcb
Fix another bug in ROUTE_FILTER Handling
2009-12-23 15:13:43 -08:00
Tom Eastep
e37cf0a370
Fix other issues with rp_filter fix
2009-12-20 15:54:41 -08:00
Tom Eastep
d87d0893d2
Fix typos in the release notes
2009-12-20 12:05:35 -08:00
Tom Eastep
8eb6d136ae
Fix typo in release notes
2009-12-19 18:25:48 -08:00
Tom Eastep
d45dd5387a
Fix type on release notes
2009-12-19 18:23:15 -08:00
Tom Eastep
61b2ed7b57
Fix bug that prevented routefilter=2
2009-12-19 16:57:16 -08:00
Tom Eastep
15a1b39822
Update change log
2009-12-19 16:40:13 -08:00
Tom Eastep
436169f0b2
Update documentation for rp_filter change
2009-12-19 16:09:20 -08:00
Tom Eastep
9cf75a4253
Revert "this is crap"
...
This reverts commit 7be7ef6685
.
2009-12-19 16:05:28 -08:00
Tom Eastep
7be7ef6685
this is crap
2009-12-19 16:05:13 -08:00
Tom Eastep
d5914addd1
Disallow port 00
2009-12-19 14:59:03 -08:00
Tom Eastep
19af1a081c
Handle kernel 2.6.31 and rp_filter
2009-12-19 13:47:12 -08:00
Tom Eastep
4f4d77be48
Add Kernel Version to the capabilities
2009-12-19 12:42:39 -08:00
Tom Eastep
24ddacb4a7
Adjust module versions
2009-12-19 07:35:30 -08:00
Tom Eastep
508e1123bb
Revert change that allowed out of order policies
2009-12-19 07:24:17 -08:00
Tom Eastep
10ae98571b
Revert change that allowed out of order policies
2009-12-19 07:20:00 -08:00
Tom Eastep
182ed24b02
Add a comment to process_rule1()
2009-12-14 15:52:16 -08:00
Tom Eastep
576cd76842
Remove superfluous logic from process_rule1
2009-12-14 14:49:38 -08:00
Tom Eastep
e9d12cfc11
Remove superfluous line of code
2009-12-14 07:17:55 -08:00
Tom Eastep
c8e185554f
Fix typo in MODULESDIR fix
2009-12-13 09:19:52 -08:00
Tom Eastep
43c45a064c
Add current and limit to conntrack table display
2009-12-12 09:10:24 -08:00
Tom Eastep
f938e9789e
More release notes editing
2009-12-11 13:45:24 -08:00
Tom Eastep
beb7634ca6
Correct numerous typos in the release notes
2009-12-11 13:41:24 -08:00
Tom Eastep
9988cfb619
Remove silly logic in expand_rule()
2009-12-10 08:00:18 -08:00
Tom Eastep
a150ed1a72
Update change log
2009-12-08 13:30:55 -08:00
Tom Eastep
3214b14197
Fix macro handling of SOURCE and DEST columns
2009-12-08 13:29:06 -08:00
Tom Eastep
79ce532b69
Document fix for 'reload -c'
2009-12-08 08:30:37 -08:00
Tom Eastep
a321ec6225
Fix DONT_LOAD vs 'reload -c'
2009-12-07 14:44:46 -08:00
Tom Eastep
4076a6bca7
Fix ENHANCED_REJECT and MODULE_SUFFIX
2009-12-07 13:55:49 -08:00
Tom Eastep
5e1f550b69
Fix ENHANCED_REJECT and MODULE_SUFFIX
2009-12-07 13:51:54 -08:00
Tom Eastep
7a6ad80c8a
Make kernel version detection work with non-standard version naming such as found on OpenWRT
2009-12-06 10:42:28 -08:00
Tom Eastep
c8616d4c67
Fix Shorewall6 capability detection
2009-12-05 21:35:05 -08:00
Tom Eastep
01ed97ad94
Describe checking for cls_flow support
2009-12-05 09:05:16 -08:00
Tom Eastep
e18238c665
Update 'flow=' description in the release notes
2009-12-05 08:05:20 -08:00
Tom Eastep
12279e57ed
Add information about 'flow' to the release notes
2009-12-04 15:04:59 -08:00
Tom Eastep
ee2195e745
Allow LOGFILE=/dev/null
2009-12-03 16:30:06 -08:00
Tom Eastep
486f1a3493
Allow /dev/null for LOGFILE
2009-12-03 16:16:13 -08:00
Tom Eastep
a188fec942
Auto-load cls_flow and search .../sched for modules
2009-12-03 12:20:58 -08:00
Tom Eastep
4bf55883ee
Auto-load cls_flow
2009-12-03 12:15:23 -08:00
Tom Eastep
4c7731fee6
Remove change log error for rejected change
2009-12-03 10:44:36 -08:00
Tom Eastep
768da64869
Remove incorrect migration consideration
2009-12-03 07:05:36 -08:00
Tom Eastep
4494272dcd
Improve error message
2009-11-29 09:55:32 -08:00
Tom Eastep
8c033de049
Fix limit check on TC mark values
2009-11-28 14:05:27 -08:00
Tom Eastep
8b2c6853f3
Remove description of reverted change from the release notes
2009-11-28 08:06:01 -08:00
Tom Eastep
e582f222ad
Backout another Patch from the Virtual Zone Sequence and re-apply a couple of small optimizations
2009-11-28 07:25:31 -08:00
Tom Eastep
e5106f10bc
Revert 8ff4d004c0
2009-11-28 07:23:23 -08:00
Tom Eastep
4e8d753682
Revert "Finish Virtual Zones"
...
This reverts commit 222c8cf88f
.
2009-11-28 07:20:52 -08:00
Tom Eastep
d1812b4174
Revert "Fix a couple of bugs in virtual zones"
...
This reverts commit 22991ac9dd
.
2009-11-28 07:20:28 -08:00
Tom Eastep
038b84e775
Revert "Small optimization in virtual zones"
...
This reverts commit 251d7116c8
.
2009-11-28 07:20:01 -08:00
Tom Eastep
f21c71d7a6
Revert "Match section rules to the number of mark rules"
...
This reverts commit 1699d8e941
.
2009-11-28 07:19:41 -08:00
Tom Eastep
0b1621027b
Revert "Make 'virtual' a zone type rather than an option"
...
This reverts commit 18eedf7e34
.
2009-11-28 07:19:10 -08:00
Tom Eastep
f5378e7652
Revert "More doc updates for virtual zones"
...
This reverts commit a37e56d823
.
2009-11-28 07:18:46 -08:00
Tom Eastep
ea2c55a993
Revert "Fix off-by-one problem"
...
This reverts commit 543af8bccb
.
2009-11-28 07:18:07 -08:00
Tom Eastep
f5bf3c9b43
Fix merge conflicts
2009-11-28 07:16:03 -08:00
Tom Eastep
7352771c5d
Fix .spec history to omit false steps
2009-11-27 12:29:11 -08:00
Tom Eastep
8297db4c59
Fix .spec history to omit false steps
2009-11-27 11:41:14 -08:00
Tom Eastep
543af8bccb
Fix off-by-one problem
2009-11-27 08:56:23 -08:00
Tom Eastep
7f16e96167
Set version to 4.4.5 Beta1
2009-11-27 08:52:37 -08:00
Tom Eastep
a37e56d823
More doc updates for virtual zones
2009-11-27 08:49:00 -08:00
Tom Eastep
18eedf7e34
Make 'virtual' a zone type rather than an option
2009-11-27 08:17:18 -08:00
Tom Eastep
1699d8e941
Match section rules to the number of mark rules
2009-11-26 17:12:11 -08:00
Tom Eastep
251d7116c8
Small optimization in virtual zones
2009-11-26 14:48:46 -08:00
Tom Eastep
22991ac9dd
Fix a couple of bugs in virtual zones
2009-11-26 14:19:10 -08:00
Tom Eastep
222c8cf88f
Finish Virtual Zones
2009-11-26 12:14:58 -08:00
Tom Eastep
8ff4d004c0
Better virtual zone implementation
2009-11-25 18:14:14 -08:00
Tom Eastep
8263ea1312
Limit providers to 15
2009-11-25 12:18:08 -08:00
Tom Eastep
d189c08533
Revert "Add 'virtual' zone support"
...
This reverts commit a2cd4bd1f4
.
2009-11-25 11:51:13 -08:00
Tom Eastep
a2cd4bd1f4
Add 'virtual' zone support
2009-11-25 09:42:28 -08:00
Tom Eastep
4c40b205f8
Revert "Experimental explicit CONTINUE"
...
This reverts commit 10056a03d9
.
2009-11-24 13:14:24 -08:00
Tom Eastep
10056a03d9
Experimental explicit CONTINUE
2009-11-24 12:50:53 -08:00
Tom Eastep
cd84efea94
Yet one more change to IPv6 address validation
2009-11-24 08:29:12 -08:00
Tom Eastep
deb45c5a27
Yet another IPv6 Address Normalization fix
2009-11-23 15:57:12 -08:00
Tom Eastep
bdb673a642
More IPv6 fixes
2009-11-23 15:21:25 -08:00
Tom Eastep
1710f9ce7c
Several fixes to IPv6 Address Handling
2009-11-23 14:44:53 -08:00
Tom Eastep
9d85d0ff7a
Allow IPv6 DNS names in net contexts
2009-11-23 13:51:46 -08:00
Tom Eastep
d3d21d4d18
Fix 'show policies' in Shorewall6[-lite]
2009-11-23 13:50:41 -08:00
Tom Eastep
f186c436d4
Improve wording of Problem Corrected #3
2009-11-23 11:48:08 -08:00
Tom Eastep
5610f78a48
Update version of Shorewall::Policy; improve 'expanded' description in Shorewall::Chains
2009-11-23 11:31:38 -08:00
Tom Eastep
cc809eaf78
Complete merge of 4.4 branch into master
2009-11-23 11:15:33 -08:00
Tom Eastep
c17ac8f23f
commit crap for now
2009-11-23 11:13:57 -08:00
Tom Eastep
532105ec39
Allow specific policy to supersede a wildcard policy
2009-11-23 10:02:04 -08:00
Tom Eastep
b30cae89e3
Allow <zone>::<serverport> in the rules file DEST column
2009-11-23 09:56:15 -08:00
Tom Eastep
99a35c1bf0
Allow <zone>::<serverport> in the rules file DEST column
2009-11-23 09:33:16 -08:00
Tom Eastep
d43ba935d1
Simplify port == 0 test
2009-11-22 09:03:01 -08:00
Tom Eastep
5b02ef68a5
Simplify port == 0 test
2009-11-22 09:00:03 -08:00
Tom Eastep
90170d6018
Update changelog
2009-11-22 08:58:06 -08:00
Tom Eastep
d4ff629fd8
Generate error on port == 0
2009-11-22 08:44:11 -08:00