holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,174 Commits 104 Branches 736 Tags 54 MiB
c1a74b54fc
Commit Graph

460 Commits

Author SHA1 Message Date
Tom Eastep
9a83365986
Remove the USEPKTTYPE capability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-16 11:20:00 -08:00
Tom Eastep
bc65d29650
Add shorewallrc.sandbox 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-15 13:10:53 -08:00
Tom Eastep
9d3e8d6f6c
Tabify shorewalrc.debian.systemd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-15 13:08:43 -08:00
Tom Eastep
8056b6fd85
Create the 'show saves' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-15 12:42:55 -08:00
Tom Eastep
3903fe5fd9
Remove the 'refresh' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-07 12:38:24 -08:00
Tom Eastep
2e4af68b98
Always report IPSET_MATCH in 'show capabilities' output. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-02-06 13:41:28 -08:00
Tom Eastep
a9a379c5a5
Implement INPUT SNAT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-22 16:37:38 -08:00
Tom Eastep
92ce1beddc
Move read_yesno_with_timeout() to lib.cli-std 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-20 14:26:13 -08:00
Tom Eastep
4d6bf8564e
Avoid unnecessary variable expansion 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-20 14:25:42 -08:00
Tom Eastep
1bc90beb01
Update copyrights 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-07 15:01:46 -08:00
Tom Eastep
eaccf033c6
Update copyrights for 2018 
- Update some header versions to 5.1

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-07 14:24:01 -08:00
Tom Eastep
196a56ea3c
Permit when firewall stopped when using an ipset for dynamic BL 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 13:26:32 -08:00
Tom Eastep
2c3f121835
Don't call setup_dbl() unconditionally 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 13:11:31 -08:00
Tom Eastep
c8774110c6
Correct typo (rootonly => root_only) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2018-01-02 11:51:42 -08:00
Tom Eastep
6b5889177b
Correct startup_error() inadvertent change 
- Switch ensure_root() back to calling startup_error()

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-30 09:24:21 -08:00
Tom Eastep
d8a22d13dd
Allow non-root to run many 'show' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-28 10:49:09 -08:00
Tom Eastep
65371437b5
Correct installer for case where SHAREDIR != /usr/share/ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-12-26 15:36:38 -08:00
Tom Eastep
c907748b52
Correct typo in 'dump' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-11-30 14:31:33 -08:00
Tom Eastep
8dfa0be611
Add shorewall-logging(5) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-11-02 15:26:14 -07:00
Tom Eastep
f1975ae9b0
More robust detection of empty SPD entries. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-15 08:26:27 -07:00
Tom Eastep
7b9f7c095d
Don't dump SPD entries for the other address family 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-14 13:39:00 -07:00
Tom Eastep
108b169d8d
Treat LOG_TARGET like all other capabilities 
- Previous implementation could generate unworkable script when
  LOAD_HELPERS_ONLY=Yes

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:01:52 -07:00
Tom Eastep
a9fbaa57ed
Pass -$g_family to 'ip xfrm' commands 
- This currently doesn't work correctly, but maybe it will in the future

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-10-06 08:00:29 -07:00
Tom Eastep
317f12041b
Strengthen the test for empty SPD entries 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-30 15:43:17 -07:00
Tom Eastep
c39bc7b65f
Update version of lib.*installer 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:09:35 -07:00
Tom Eastep
2548e8741d
Update version and copyright dates in lib.common 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:07:37 -07:00
Tom Eastep
0a31fba6bb
Update version and copyright dates in lib.core 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 13:00:50 -07:00
Tom Eastep
9701c9c522
Update version and copyright dates in lib.base 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:57:02 -07:00
Tom Eastep
973d352209
Update shorewall script 
- Update copyright dates
- Add a comment about PRODUCT setting

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-18 12:51:27 -07:00
Tom Eastep
ef1353790e
Correct VLSM editing in the 'ipcalc' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-09-12 10:53:41 -07:00
Tom Eastep
90f33dd436
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 12:48:14 -07:00
Tom Eastep
6f475cde3f
Eliminate MODULE_SUFFIX 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 10:19:25 -07:00
Tom Eastep
6053a40af0
Apply Tuomo Soini's loadmodule patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-23 09:20:50 -07:00
Tom Eastep
2e98d4375b
Correct check for module already loaded 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-21 10:27:29 -07:00
Tom Eastep
7e3521e221
RESTORE_WAIT_OPTION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-08-13 18:56:40 -07:00
Tom Eastep
975a14b94f
Allow configure.pl to recognize $SOURCE_DATE_EPOCH 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 14:48:40 -07:00
Tom Eastep
cf3c304078
Apply Bernhard M. Wiedemann's patch for configure... 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-20 14:19:39 -07:00
Tom Eastep
d1a21fb678
Revert "Add SHARED_CONFIG option to shorewallrc" 
This reverts commit 4e978b687d.
 2017-07-20 12:23:59 -07:00
Tom Eastep
4e978b687d
Add SHARED_CONFIG option to shorewallrc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-07-07 08:25:33 -07:00
Tom Eastep
b4a06e9656
NFLOG_SIZE capability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-25 13:44:26 -07:00
Tom Eastep
42a46d42b6
Centralize the complete list of manpages in shorewall(8) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-06-16 17:11:43 -07:00
Tom Eastep
2d4c1411bd
Delete the -n option from remote-reload in shorewall(8) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 13:17:23 -08:00
Tom Eastep
d4c016d9c5
'reload' documentation corrections 
- Add command synopsis to the manpage
- Correct command synopsis in help output

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-09 12:50:30 -08:00
Matt Darfeuille
fec967a41d
Do not display where an executable is located 
Use only the exit status of the function mywhich to determine which
command should be used to remove sysvinit script.

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-03-04 09:03:29 -08:00
Matt Darfeuille
7644e1d49f
Update version and fix comment lines in rc files 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:29 -08:00
Matt Darfeuille
06c6a017d5
Use a specific parameter file for systemd script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:25 -08:00
Matt Darfeuille
75fd8ccb37
Use a specific parameter file for sysvinit script 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:21 -08:00
Matt Darfeuille
e6ed4d425d
core: Uninstall manpages 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:06 -08:00
Matt Darfeuille
783e438b4a
Be more verbose while uninstalling Shorewall 
- Remove version file as a file and not as a directory.

Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:56:00 -08:00
Matt Darfeuille
a496edef54
Use a function to fail on fatal error 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2017-02-22 17:55:50 -08:00