holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
7,423 Commits 104 Branches 736 Tags 54 MiB
c20bc85dcf
Commit Graph

7423 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
c20bc85dcf Another go-around with the macro.template file 2009-04-18 06:49:13 -07:00
Tom Eastep
910c260cb3 Document FORMAT 2 and the ORIGINAL DEST column 2009-04-18 06:49:13 -07:00
Tom Eastep
2e5c5264bb Add 'FORMAT 2' to the macro template file 2009-04-18 06:49:13 -07:00
Tom Eastep
2e516f7518 Update web site for 4.2.8; fix broken link 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2009-04-18 06:49:13 -07:00
paulgear
3d4c87cfd5 Help out the newbies with better log messages 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9923 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 02:02:35 +00:00
paulgear
e9d056796d A little consistency for the sample shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9922 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 01:59:53 +00:00
teastep
4bab073494 Fix minor typo 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9920 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 23:05:03 +00:00
teastep
0cc60ea021 Avoid 'Invalid BROADCAST address' errors 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 22:57:59 +00:00
teastep
536025e44e Remove SUBSYSLOCK value from sample configs 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9915 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 18:30:59 +00:00
teastep
5248f59356 Remove extraneous character from sample rules file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9914 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 18:30:30 +00:00
teastep
64cea700da Document Shorewall6 support on kernel 2.6.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9913 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 18:27:37 +00:00
teastep
fd7108784f Allow Shorewall6 on kernel 4.2.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:54 +00:00
teastep
eb87f69ad4 Update web site for 4.2.8 -perl fiasco 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9907 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:34 +00:00
teastep
e0d1fff7e1 Update for 4.3.8 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9906 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:18 +00:00
teastep
058e03e791 Another go-around with the macro.template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9905 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:04 +00:00
teastep
dcd5038c12 Fix bug in manpage6 generation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9904 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:03:48 +00:00
teastep
850fe6e691 Document FORMAT 2 and the ORIGINAL DEST column 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9903 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:03:32 +00:00
teastep
5d5b73dafc Add 'FORMAT 2' to the macro template file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9902 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:03:16 +00:00
teastep
bcb6096afd Update web site for 4.2.8; fix broken link 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9901 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:02:59 +00:00
teastep
62b9472711 Clarify the usage of the GATEWAY column when USE_DEFAULT_RT = Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9864 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 23:25:53 +00:00
teastep
bd9ea3c47f Make the mss interface option clear 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9863 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 23:25:19 +00:00
teastep
905c226f76 Add a connection rate limiting doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9862 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 23:24:40 +00:00
el_cubano
c861b34d57 Typo fix. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9860 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-14 22:38:54 +00:00
teastep
69c99bae2c Add a link in the download page. Improve readability of the LEAF/Bering bullet 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9854 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 17:13:37 +00:00
teastep
665cce0f20 Update download page to include Ben Montgomery's Ubuntu Repository 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9853 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 16:21:08 +00:00
teastep
b5f7d9308d Update the Download page to mention the Git repository 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9852 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 16:20:50 +00:00
teastep
ade958dd51 Add undocumented LOGMARK log level 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9851 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 15:22:19 +00:00
teastep
347090da6e Correct netmask generation in tcfilters 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 15:22:00 +00:00
teastep
97e61965c0 Fix another inversion case 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9846 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 21:48:34 +00:00
teastep
de037034a5 Bump version to 4.3.9 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9845 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 15:31:25 +00:00
teastep
9bfc7b6d99 Tiny optimization. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-11 15:28:50 +00:00
teastep
c39fcc4db7 Optimization of log rule code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9843 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 20:36:22 +00:00
teastep
b734d3af31 Fix subtle bug introduced in last commit 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9842 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 20:36:09 +00:00
teastep
20cfd0033c Fix a 4.3 bug in expand_rule(). 
Don't repeat matches on target rule when log chain is used.

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9841 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 19:47:39 +00:00
teastep
28e84a6aba Break up long port lists in jump to logging chain 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9840 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:31:04 +00:00
teastep
e0040f4011 Small optimizations in expand_rule() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9837 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:16:25 +00:00
teastep
ff014f328b Correct usage text 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-10 16:15:36 +00:00
teastep
8278203e03 Remove one argument from expand_rule() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9835 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 22:21:48 +00:00
teastep
f20013898e Don't use -g when the target might not be terminating 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9834 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 20:18:11 +00:00
teastep
ae169f00a7 Implement rules that also log as a separate chain. Preserve original target in logging rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 18:45:21 +00:00
teastep
c8b48a9bbd Update man pages to allow interface name in DEST column of notrack file. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9832 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-08 22:45:51 +00:00
teastep
7d2b410904 Correct rule generation when an interface is specified as the destination of a PREROUTING rule. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-08 03:37:15 +00:00
teastep
28b6fd8033 Simplify hashlimit match code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9830 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 18:15:51 +00:00
teastep
fe16576258 Document the fact that ":<burst>: is optional in LIMIT:BURST 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9829 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 18:15:38 +00:00
teastep
36e0c85f5f Require the Hashlimit Match capability for per-IP rate limiting 
Use the current key words in the generated hashlimit match

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9828 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:36:23 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:35:06 +00:00
teastep
c545e65cea First part of 'hashlimit' implemenation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:23:01 +00:00
teastep
b1e9453c62 The other half of the re-implementation of 'enable/disable_object' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9825 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:49 +00:00
teastep
0744df13d6 Reimplement object_enable/disable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9824 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:30 +00:00
teastep
b6053d8577 Fix second bug regarding ADD_IP_ALIASES=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:16 +00:00