Commit Graph

744 Commits

Author SHA1 Message Date
teastep
b46bcd39a1 Formalize zone dynamic chain naming
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8417 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:54:52 +00:00
teastep
5d459daa75 Avoid undefined var error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8416 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:29:19 +00:00
teastep
8463d54580 Fix one bug plus clean up more chain-to-chain jump generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:09:22 +00:00
teastep
0927fcb95c Add some insurance
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8414 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 20:37:17 +00:00
teastep
15915994f6 Fix silly duplicate-rule problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8411 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 00:12:15 +00:00
teastep
9d4ec13e47 Some editing cleanup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8410 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 22:56:23 +00:00
teastep
699571a083 Back out unnecessary patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8407 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:30:40 +00:00
teastep
ed538add0e Make logging work correctly in ESTABLISHED and RELATED sections
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8406 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:09:43 +00:00
teastep
1c83016385 Back out FASTACCEPT/IPSEC change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8404 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 15:07:09 +00:00
teastep
a7a8b413ef Avoid creating extra policy chains with EXPAND_POLICIES=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8403 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 06:00:08 +00:00
teastep
dacc29c577 Disallow FASTACCEPT with IPSEC
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 22:58:46 +00:00
teastep
92481b4e36 Reverse inadvertent change to Zones.pm
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8400 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 16:09:22 +00:00
teastep
ebd9ce70d0 Fix another ':' parsing bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8399 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 16:08:13 +00:00
teastep
2cfe94c879 Don't respond to IGMP with an ICMP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8396 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-06 22:46:53 +00:00
teastep
0064bcb5b5 Defer setting up forwarding
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8395 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-06 22:45:32 +00:00
teastep
f3323ef6fb Add NULL_ROUTE_RFC1918 option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8375 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-29 00:35:00 +00:00
teastep
8f47e47efa Clean up RFC 1918 change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8373 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-28 01:47:40 +00:00
teastep
a141478319 Resolve RFC 1918 Mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8372 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-28 00:05:25 +00:00
teastep
df41b69a04 Deprecate 'norfc1918' in favor of built-in actions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8367 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-27 19:45:23 +00:00
teastep
bbc8577a30 Yet another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8364 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 16:16:56 +00:00
teastep
5288b1d64d Another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8362 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:56:50 +00:00
teastep
c0dd4f3911 Better fix for policy parsing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8361 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:36:23 +00:00
teastep
b2d2ee253a Fix policy parsing problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:15:34 +00:00
teastep
eadad9a363 Fix priority mingling in tc filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8356 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-25 15:45:26 +00:00
teastep
a59c0db7f0 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8353 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:50:40 +00:00
teastep
b2e603c3c8 Add MANGLE_ENABLED option -- sample configs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8352 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:49:53 +00:00
teastep
2a6b894bd4 Add MANGLE_ENABLED option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8351 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:36:48 +00:00
teastep
a91bca8e9e Fix perl run-time error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8347 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 17:35:52 +00:00
teastep
507d58ea0c Add 'avgpkt' to CONNBYTES code (it was already documented)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8346 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 14:56:37 +00:00
teastep
3d55331074 Finish CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8345 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 22:23:12 +00:00
teastep
148415f23a Avoid unnecessary calls to getprotobynumber()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8344 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 20:56:29 +00:00
teastep
5986d4db32 Default gateway detection in /etc/shorewall/init
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8342 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 16:08:34 +00:00
teastep
680788433d Rename a variable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8341 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 15:18:32 +00:00
teastep
5ea18e3624 Fix number of columns detection -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8340 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:41:12 +00:00
teastep
bd5f8195e9 Fix number of columns detection
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8339 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:35:46 +00:00
teastep
942d6bf6f5 Fix service validation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8332 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 14:54:10 +00:00
teastep
3bf59ff03a Add error when ICMP specifies SOURCE PORT(S) in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8331 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 03:01:01 +00:00
teastep
6c0d7d055d More tinkering with expand_port_range()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8330 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 21:03:46 +00:00
teastep
a672e03a82 Clean up range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8325 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:42:15 +00:00
teastep
d33f6583ad Fix bug in range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:32:22 +00:00
teastep
9b048e836e Allow port ranges in /etc/shorewall/tcfilters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8323 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:08:55 +00:00
teastep
dc17a6976d Support port lists in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8321 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 14:59:14 +00:00
teastep
0dce5fd379 Last change was a bit too optimized (omitted certain rules)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8319 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 22:18:35 +00:00
teastep
63e7eb6147 Combine u32 tables for same protocol
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8318 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 21:54:27 +00:00
teastep
c3df5ed89e Remove BROKEN_ROUTING option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:59:46 +00:00
teastep
e4878466f7 Add Tuomo's patch for adding 'src' to default route
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8315 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:54:40 +00:00
teastep
4756d4ef13 Eliminate vlsm_to_mask table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8311 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:40:03 +00:00
teastep
88b3d01914 Start u32 table numbers at 1 rather than 64
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8310 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:25:41 +00:00
teastep
93d87dd01b More u32 tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8307 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:32:08 +00:00
teastep
f7e5b3124b Clean up of u32 filter code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:15:03 +00:00