holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,537 Commits 104 Branches 736 Tags 54 MiB
bac493c2c5
Commit Graph

296 Commits

Author SHA1 Message Date
Tom Eastep
3f5bdfd705
Process the firewall.conf file when running shorewall[6]-lite 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-25 13:32:36 -07:00
Tom Eastep
c9512dfaf8
Make 'show actions' more robust 
- Show all lines, including continuation and compiler directives
- Show both actions and actions.std entries
- The actions file need not reside in /etc/shorewall[6] but may be in
  any directory on the CONFIG_PATH

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-25 11:28:08 -07:00
Tom Eastep
3390897a45
Remove duplicates from the output of 'show actions' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-15 13:13:34 -07:00
Tom Eastep
117e9ba5bd
Change kern.err to daemon.err in logger params 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-13 14:29:48 -07:00
Tom Eastep
aa47554604
Add 'noupdate' DYNAMIC_BLACKLIST option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:14:32 -07:00
Tom Eastep
07160c5ed1
Add 'blacklist!' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-06 10:13:46 -07:00
Tom Eastep
527533ecb6
Add 'log' option to DYNAMIC_BLACKLIST 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 14:28:08 -07:00
Tom Eastep
2646ec79a5
Read the params file when processing an 'allow' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-06-03 11:39:42 -07:00
Tom Eastep
eb5bc3d8a4
Create DBL ipset with 'timeout 0' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-05-31 12:37:42 -07:00
Tuomo Soini
be924ff765
Fix http links to point to current project website 
Also removes deprecated Shorewall6/configfiles/masq

Signed-off-by: Tuomo Soini <tis@foobar.fi>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-27 14:24:37 -07:00
Tom Eastep
d24179173f
Remove obsolete 'load' command from help text 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-08 13:19:46 -07:00
Tom Eastep
b52a330f41
Replace trace, debug and nolock with options 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-07 17:48:10 -08:00
Matt Darfeuille
53495ec0a8
Point exclusively to shorewall.org 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-03-25 11:35:00 -07:00
Tom Eastep
aa94772fc6
Merge branch '5.2.0' 2018-08-06 08:08:39 -07:00
Matt Darfeuille
732ae3ce19
Ipcalc: Fail when missing arguments 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-08-05 10:26:17 -07:00
Tom Eastep
82e84f724d
Use -h rather than -L for checking a symlink 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-08-01 13:58:35 -07:00
Tom Eastep
d829093caa
Use -h rather than -L for checking a symlink 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-07-26 13:57:10 -07:00
Matt Darfeuille
6e32f052c8
Use proper function name on fatal error 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-06-23 09:01:49 -07:00
Tom Eastep
2039f38faf
Fix 'show saves' when there are no saves 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-05-05 13:27:37 -07:00
Matt Darfeuille
bb89d509ea
Ipdecimal: Correct error when missing arguments 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-04-27 14:08:00 -07:00
Tom Eastep
16bb41db15
Document 'getcaps', 'getrc' and 'show rc' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-27 09:54:32 -07:00
Matt Darfeuille
299ea2b41f
Update version to 5.2 
- Remove unneeded punctuation marks

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-24 09:53:02 -07:00
Matt Darfeuille
9b5468cd4a
Add and document the show rc command 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-18 17:36:44 -07:00
Matt Darfeuille
47a59cdd7c
Add and document the remote-getcaps command 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-18 17:36:38 -07:00
Matt Darfeuille
676ca872d6
Add and document the remote-getrc command 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-03-18 17:36:33 -07:00
Tom Eastep
9e002a7689
Be sure that mutex is released when exiting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-28 13:38:30 -08:00
Tom Eastep
8bc97bcd35
Replace ${VARDIR}/firewall with $g_firewall in CLI 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-23 12:40:14 -08:00
Tom Eastep
9a83365986
Remove the USEPKTTYPE capability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-16 11:20:00 -08:00
Tom Eastep
8056b6fd85
Create the 'show saves' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-15 12:42:55 -08:00
Tom Eastep
3903fe5fd9
Remove the 'refresh' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-07 12:38:24 -08:00
Tom Eastep
2e4af68b98
Always report IPSET_MATCH in 'show capabilities' output. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-06 13:41:28 -08:00
Tom Eastep
a9a379c5a5
Implement INPUT SNAT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-22 16:37:38 -08:00
Tom Eastep
92ce1beddc
Move read_yesno_with_timeout() to lib.cli-std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-20 14:26:13 -08:00
Tom Eastep
4d6bf8564e
Avoid unnecessary variable expansion 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-20 14:25:42 -08:00
Tom Eastep
eaccf033c6
Update copyrights for 2018 
- Update some header versions to 5.1

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-07 14:24:01 -08:00
Tom Eastep
196a56ea3c
Permit when firewall stopped when using an ipset for dynamic BL 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 13:26:32 -08:00
Tom Eastep
2c3f121835
Don't call setup_dbl() unconditionally 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 13:11:31 -08:00
Tom Eastep
c8774110c6
Correct typo (rootonly => root_only) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 11:51:42 -08:00
Tom Eastep
6b5889177b
Correct startup_error() inadvertent change 
- Switch ensure_root() back to calling startup_error()

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-30 09:24:21 -08:00
Tom Eastep
d8a22d13dd
Allow non-root to run many 'show' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-28 10:49:09 -08:00
Tom Eastep
c907748b52
Correct typo in 'dump' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-11-30 14:31:33 -08:00
Tom Eastep
f1975ae9b0
More robust detection of empty SPD entries. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-15 08:26:27 -07:00
Tom Eastep
7b9f7c095d
Don't dump SPD entries for the other address family 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-14 13:39:00 -07:00
Tom Eastep
108b169d8d
Treat LOG_TARGET like all other capabilities 
- Previous implementation could generate unworkable script when
  LOAD_HELPERS_ONLY=Yes

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:01:52 -07:00
Tom Eastep
a9fbaa57ed
Pass -$g_family to 'ip xfrm' commands 
- This currently doesn't work correctly, but maybe it will in the future

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:00:29 -07:00
Tom Eastep
317f12041b
Strengthen the test for empty SPD entries 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-30 15:43:17 -07:00
Tom Eastep
ef1353790e
Correct VLSM editing in the 'ipcalc' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:41 -07:00
Tom Eastep
7e3521e221
RESTORE_WAIT_OPTION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 18:56:40 -07:00
Tom Eastep
b4a06e9656
NFLOG_SIZE capability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-25 13:44:26 -07:00
Tom Eastep
d4c016d9c5
'reload' documentation corrections 
- Add command synopsis to the manpage
- Correct command synopsis in help output

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 12:50:30 -08:00