holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
8,557 Commits 104 Branches 736 Tags 54 MiB
b69e61a510
Commit Graph

8557 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
b69e61a510 Bring CORRECT RE to 4.4.7 Branch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 13:39:51 -08:00
Tom Eastep
479e4e323a Bring change to RE in add_jump() to 4.4.7 Branch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 13:38:54 -08:00
Tom Eastep
f8b4246cef Add fwlogwatch info 2010-03-01 12:16:36 -08:00
Tom Eastep
81902a6fa5 Update release documents for fix for multiple policy matches 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 08:38:43 -08:00
Tom Eastep
47e0ef4816 Avoid multiple policy matches with OPTIMIZE=7 and not KLUDGEFREE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-01 08:33:30 -08:00
Tom Eastep
09b6fca867 Correct handling of NFQUEUE(queue-num) in policies 2010-02-25 08:51:16 -08:00
Tom Eastep
db39402e75 Correct handling of NFQUEUE(queue-num) in a policy 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 08:46:20 -08:00
Tom Eastep
141f93f4c5 Update release documents for NFQUEUE issue. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 07:57:55 -08:00
Tom Eastep
223e1e434a Correct handling of NFQUEUE(queue-num) as a policy. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 07:51:40 -08:00
Tom Eastep
99ec099c98 Apply debian init script change to the other packages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-21 16:35:21 -08:00
Tom Eastep
422dbaa902 Bump the version to 4.4.7.6. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-20 08:19:21 -08:00
Tom Eastep
181c757614 Return failure status when a supported command fails. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-20 08:10:13 -08:00
Tom Eastep
cc5c312421 Correct release notes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-19 16:36:36 -08:00
Tom Eastep
5cafb22c15 Add ACCEPT+ to problems corrected and Known Problems. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-19 14:13:12 -08:00
Tom Eastep
8eb3de7db2 Don't apply rate limiting twice in ACCEPT+ rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-19 13:57:45 -08:00
Tom Eastep
5b77f378e5 Use Hex representation of device numbers > 9 in simple TC. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-18 12:50:56 -08:00
Tom Eastep
b3ae035302 Update Known Problems 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-18 10:10:38 -08:00
Tom Eastep
7eddb8310a Clean up rate limiting fixes (documentation) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-18 07:09:22 -08:00
Tom Eastep
6db2c5fbe3 Document change to hashlimit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 15:38:38 -08:00
Tom Eastep
579f4d4698 Create a unique hashtable for each instance of a per-IP rate limit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 15:34:14 -08:00
Tom Eastep
b8fc1a9b22 Fix Typo 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 09:23:11 -08:00
Tom Eastep
f5c954295d Final (hopefully) fix for SFQ handle assignment 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 09:20:33 -08:00
Tom Eastep
4299e6db3b Another tweak to SFQ handle assignment. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 08:01:24 -08:00
Tom Eastep
37720d7f25 Improve assignment of class ID for SFQ classses 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 07:46:43 -08:00
Tom Eastep
69d0bb69b8 Avoid duplicate SFQ class numbers. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-17 06:42:30 -08:00
Tom Eastep
9d7bd3f651 Avoid duplicate SFQ class numbers 2010-02-17 06:38:06 -08:00
Tom Eastep
af2fb42cf8 Add --hashlimit-htable-expire if the units are minutes or larger 2010-02-16 22:54:59 -08:00
Tom Eastep
c3842aeeab Prepare for 4.4.7.5. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-15 14:48:40 -08:00
Tom Eastep
e8807f3e7e Correction to logging rule fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-15 14:41:01 -08:00
Tom Eastep
eb8d96135e Don't create log chain for 'RETURN' rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-15 14:25:40 -08:00
Tom Eastep
16bf45fce4 Add $remote_fs to Required-start and Required-stop for Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-15 07:05:47 -08:00
Tom Eastep
d72855e8f9 Prepare 4.4.7.3 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 12:11:11 -08:00
Tom Eastep
a6ba499cca Fix FLOW_FILTER detection with LOAD_HELPERS_ONLY=Yes 2010-02-14 12:03:54 -08:00
Tom Eastep
53902b058e Explain RATE and BURST in the basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 08:53:58 -08:00
Tom Eastep
da4b2049c7 Fix typo in known problems 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 08:53:31 -08:00
Tom Eastep
11b86e99e6 Fix detection of FLOW_FILTER when LOAD_HELPERS_ONLY=No 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 07:55:41 -08:00
Tom Eastep
09f8011a49 Create 4.4.7.2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 07:28:52 -08:00
Tom Eastep
a88be42a73 Fix for OLD_HL_MATCH. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 07:23:46 -08:00
Tom Eastep
b5859d63c9 Delete redundant change log entry 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 09:17:25 -08:00
Tom Eastep
602dcd1bab Set version to 4.4.7.1 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 07:28:22 -08:00
Tom Eastep
b8453c4bda Document per-IP rate limiting bug. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 07:26:49 -08:00
Tom Eastep
53069ebf27 Don't apply rate limiting twice in NAT rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-13 07:22:06 -08:00
Tom Eastep
8224a2971e Prepare 4.4.7.1 in case it is needed 2010-02-11 15:25:46 -08:00
Tom Eastep
757fea7467 Update documentation regarding FLOW_FILTER 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-11 14:35:12 -08:00
Tom Eastep
b35f20b403 Avoid CAPVERSION bump to implement FLOW_FILTER detection 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-11 07:29:41 -08:00
Tom Eastep
b8c195f570 Accurately detect 'flow' availability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-10 14:50:26 -08:00
Tom Eastep
b1c64913b4 Reformat column header in tcinterfaces 2010-02-10 12:00:17 -08:00
Tom Eastep
433fc385bc 'bridge' implies 'routeback' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-09 14:04:36 -08:00
Tom Eastep
add302d02a Correct typo in manpages 2010-02-09 06:49:30 -08:00
Tom Eastep
76f053246a Add description of bandwidth specification to the tcinterfaces man pages 2010-02-09 06:42:31 -08:00