Tom Eastep
|
b4946dcf65
|
Enforce a couple of accounting restrictions
|
2011-02-18 16:47:12 -08:00 |
|
Tom Eastep
|
e47cb61c33
|
Introduce 'accountfwd' chain for forwarded accounting in sectioned configuration
|
2011-02-18 15:44:55 -08:00 |
|
Tom Eastep
|
2e2472a15a
|
Tighen up an RE
|
2011-02-17 17:56:29 -08:00 |
|
Tom Eastep
|
58e480b502
|
Correct defects in the prior commit
|
2011-02-17 17:35:56 -08:00 |
|
Tom Eastep
|
993bdc740d
|
Make it invalid to to use a config file name as a chain name
|
2011-02-17 16:31:22 -08:00 |
|
Tom Eastep
|
b06630091d
|
Make procedure to delete a chain plus references to it; make exclusion chains begin with '~'
|
2011-02-17 14:53:39 -08:00 |
|
Tom Eastep
|
6f00f2127c
|
Delete optimize_okay() and add a couple of assertions
|
2011-02-17 10:48:46 -08:00 |
|
Tom Eastep
|
5634b08e22
|
Don't clear dont_optimize flag in accounting in sectioned configuration
|
2011-02-17 10:47:57 -08:00 |
|
Tom Eastep
|
300d931922
|
Assert correctness in decrement_reference_count()
|
2011-02-16 13:16:42 -08:00 |
|
Tom Eastep
|
fa8c8f5850
|
Dont optimize chains with RETURN
|
2011-02-16 13:15:29 -08:00 |
|
Tom Eastep
|
030839e4a4
|
Remove recursive_delete_references
|
2011-02-16 12:49:04 -08:00 |
|
Tom Eastep
|
2974167f06
|
Finally fix issue with copy_rules()
|
2011-02-16 10:08:11 -08:00 |
|
Tom Eastep
|
b03e3b94ef
|
More optimization fixes
|
2011-02-15 19:24:14 -08:00 |
|
Tom Eastep
|
99f38bfca1
|
Make the source-net and dest-match routines more readable
|
2011-02-14 20:11:38 -08:00 |
|
Tom Eastep
|
32f341c279
|
Correct optimization fix
|
2011-02-14 16:54:27 -08:00 |
|
Tom Eastep
|
6a9ca303d1
|
Remove masking declaration
|
2011-02-14 15:56:02 -08:00 |
|
Tom Eastep
|
4ad9a83996
|
Centralize handling of MACs in the Chains module
|
2011-02-14 15:34:11 -08:00 |
|
Tom Eastep
|
0fa027802f
|
Don't allow accounting or manual changes to have the name of a builtin target
|
2011-02-14 10:50:04 -08:00 |
|
Tom Eastep
|
3b7232a5fa
|
Fix a bug in the optimizer
|
2011-02-14 10:00:28 -08:00 |
|
Tom Eastep
|
59e361e93e
|
Split the 'restriction' member into two members
|
2011-02-14 09:22:27 -08:00 |
|
Tom Eastep
|
e64070f9e1
|
Restore loop detection in sectioned accounting rules
|
2011-02-13 16:38:01 -08:00 |
|
Tom Eastep
|
dd81eedb42
|
Fix another accounting sectioning bug
|
2011-02-13 14:32:11 -08:00 |
|
Tom Eastep
|
46a99a7cd9
|
Correct Config.pm version again
|
2011-02-13 11:46:56 -08:00 |
|
Tom Eastep
|
567824b7e2
|
Correct Config.pm version
|
2011-02-13 11:45:46 -08:00 |
|
Tom Eastep
|
95f8100696
|
Cosmetic change
|
2011-02-13 11:34:53 -08:00 |
|
Tom Eastep
|
b1abb3f554
|
Don't do unref/loop detection when accounting file is sectioned
|
2011-02-13 11:13:43 -08:00 |
|
Tom Eastep
|
a1eefea224
|
Fix FORWARD chain jumps with sectioning
|
2011-02-13 08:23:48 -08:00 |
|
Tom Eastep
|
1438332bbe
|
Remove hard-coded 0.0.0.0/0 from Providers.pm
|
2011-02-13 08:13:22 -08:00 |
|
Tom Eastep
|
5c0b592934
|
Section the accounting file
|
2011-02-12 12:47:15 -08:00 |
|
Tom Eastep
|
195903444d
|
Insist that SECTION headers have exactly two columns
|
2011-02-12 07:54:20 -08:00 |
|
Tom Eastep
|
677bd08d5d
|
Add more targets
|
2011-02-11 17:13:48 -08:00 |
|
Tom Eastep
|
4acdc5314a
|
Add 'NG' value for ACCOUNTING
|
2011-02-11 17:01:10 -08:00 |
|
Tom Eastep
|
9e921beb49
|
Fix a tri-value bug
|
2011-02-11 16:53:49 -08:00 |
|
Tom Eastep
|
af363888ab
|
Alphabetize the builtin target list
|
2011-02-10 16:55:04 -08:00 |
|
Tom Eastep
|
64614b7464
|
Add CLASSIFY to the builtin targets
|
2011-02-10 16:46:44 -08:00 |
|
Tom Eastep
|
2885081d86
|
Add more keywords to %builtin_targets
|
2011-02-10 13:11:58 -08:00 |
|
Tom Eastep
|
a3232516bb
|
Detect loops in accounting chain jumps
|
2011-02-09 15:43:19 -08:00 |
|
Tom Eastep
|
88244dc132
|
Don't allow MAC addresses in the accounting file
|
2011-02-07 17:12:43 -08:00 |
|
Tom Eastep
|
b4b59119ef
|
Don't allow non-accounting chain in the CHAIN accounting column
|
2011-02-07 16:32:38 -08:00 |
|
Tom Eastep
|
6e66736d28
|
Make IPv6 logic safer; cosmetic improvements in the generated script
|
2011-02-06 08:57:48 -08:00 |
|
Tom Eastep
|
2c2fdab0fe
|
Rename USE_LOCAL_MODULES to EXPORTMODULES
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:42:35 -08:00 |
|
Tom Eastep
|
2b8579c090
|
Tweak USE_LOCAL_MODULES change
Make the "Other than /usr/share" test dependent on export
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:28:10 -08:00 |
|
Tom Eastep
|
106f23634c
|
Make use of USE_LOCAL_MODULES independent of export
Signed-off-by: Tom Eastep <teastep@shorewall.net>
|
2011-02-06 08:15:16 -08:00 |
|
Tom Eastep
|
88bce4100a
|
Initiate 4.4.18
|
2011-02-05 16:41:34 -08:00 |
|
Tom Eastep
|
c557ec3740
|
Bump version of Tc module
|
2011-02-04 07:46:35 -08:00 |
|
Tom Eastep
|
ea2c72d1b1
|
Prepare for 4.4.17
|
2011-02-04 06:44:02 -08:00 |
|
Tom Eastep
|
838c7ac57b
|
Change a comment
|
2011-02-03 17:22:04 -08:00 |
|
Tom Eastep
|
23eef3b215
|
Normalize IPv6 addresses in decompose_net
|
2011-02-03 09:57:47 -08:00 |
|
Tom Eastep
|
4ed4443abb
|
Do a fancier job of comparing networks
|
2011-02-03 09:44:46 -08:00 |
|
Tom Eastep
|
27684908c4
|
Catch mis-matched nets in per-IP accounting rules
|
2011-02-03 09:25:13 -08:00 |
|