holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
7,579 Commits 104 Branches 736 Tags 54 MiB
c5a98fe4da
Commit Graph

7579 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
teastep
36e0c85f5f Require the Hashlimit Match capability for per-IP rate limiting 
Use the current key words in the generated hashlimit match

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9828 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:36:23 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:35:06 +00:00
teastep
c545e65cea First part of 'hashlimit' implemenation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9826 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:23:01 +00:00
teastep
b1e9453c62 The other half of the re-implementation of 'enable/disable_object' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9825 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:49 +00:00
teastep
0744df13d6 Reimplement object_enable/disable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9824 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:30 +00:00
teastep
b6053d8577 Fix second bug regarding ADD_IP_ALIASES=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9823 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:16 +00:00
teastep
eb533d8b00 Make SHOREWALL_COMPILER=perl explicit in shorewall.conf 
Send SHOREWALL_COMPILER errors to STDERR

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9822 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:22:02 +00:00
teastep
010680d207 Belatedly update News for Shorewall 4.2.7 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9821 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:21:49 +00:00
teastep
749d1c837f Update Documentation Index for "Fool's Firewall" Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9820 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 03:21:33 +00:00
teastep
b6091361cb Add "The Fool's Firewall" Article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9814 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 21:31:09 +00:00
teastep
2fd359c459 More "Fools Firewall" changes/additions 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9813 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 20:33:06 +00:00
teastep
69bde82800 Add another "Fool's Firewall" Graphic 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9812 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 20:32:30 +00:00
teastep
edc9509e1f Add "Fool's Firewall" graphic 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9811 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 19:43:56 +00:00
teastep
7ce546bc80 More minor doc updates. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9810 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:47 +00:00
teastep
738e33f7f5 More Build doc fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9809 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:26 +00:00
teastep
d56e907150 A couple of additional changes for Git and the Build doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9808 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 18:31:10 +00:00
teastep
a5f37c860f Update Build document to reflect migration to Git 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9807 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:44:06 +00:00
teastep
9d03fe20e0 Minor documentation updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9806 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:29 +00:00
teastep
4b419186bc Add note about documentation to release highlights 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9805 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:17 +00:00
teastep
52b0b4e602 More removal of SAVE_IPSETS=Yes logic 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9804 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:22:06 +00:00
teastep
455cf4ab0b Update buildshorewall to reflect move of Samples to branches/4.2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9803 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:21:54 +00:00
teastep
50cbe499e2 Add article about Dynamic Zones 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9802 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 17:21:41 +00:00
teastep
5b48b00bcc Remove remaining potential point of confusion in Squid documentation. 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9801 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:48:50 +00:00
teastep
844bb448c7 Fix inversion rules (omitted hunk) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9797 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:09:17 +00:00
teastep
e2c5ad441a Generate inversion that satisfies iptables 1.4.3. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9796 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 15:09:04 +00:00
teastep
07c579562e Explain how to exclude certain hosts from transparent proxy 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9795 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 14:28:23 +00:00
teastep
421c5fba05 Fix generation of shorewall6 manpages in html doc package 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9793 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 02:52:22 +00:00
teastep
1710621aeb Fix generation of manpages for the html doc package 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9792 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 00:27:33 +00:00
teastep
9f90a9e38b More factorization. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9791 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 00:27:22 +00:00
teastep
278d3f6451 More duplicate code factoring 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9790 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 00:27:11 +00:00
teastep
8dc6be749d Factor much-duplicated code 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9789 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-04 00:26:59 +00:00
teastep
77bbd88ab4 Cosmetic improvement in generated code for arp and route filtering. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9787 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-03 14:36:16 +00:00
teastep
54620a962e Small optimization in "logmartians" fix. Update manpage to reflect new implementation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9786 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-03 14:31:21 +00:00
teastep
8a9af0acf5 Fix LOG_MARTIANS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 16:33:56 +00:00
teastep
180925173b Ignore AUTOMAKE setting when a <directory> is given to start/restart 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9782 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 14:24:23 +00:00
teastep
d950fa27f2 Allow <pathname> to be omitted from the 'compile' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 01:12:34 +00:00
teastep
29c8098d37 Cosmetic improvement in generated script. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9780 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 19:53:38 +00:00
teastep
7b6da582ef Large update to Multi-ISP doc for 4.4 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9779 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 19:53:25 +00:00
teastep
ef50c0be25 More removal of SAME target 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9775 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 01:31:16 +00:00
teastep
dbf23f64e2 Removal of SAME support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9774 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 01:31:04 +00:00
teastep
35790476a3 Fix bug in Shorewall::Rules::process_rule1() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9773 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 00:04:04 +00:00
teastep
d3a54e626c De-implement $Shorewall::Config::object_enabled and associated methods 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 00:03:51 +00:00
teastep
d00f52f933 Fix run-time error in Shorewall::process_rules1() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9771 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 22:42:49 +00:00
teastep
39131f3809 Some optimizations in Shorewall::Rules::compile_stop_firewall() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9770 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 22:42:37 +00:00
teastep
48155417b1 Make AUTOMAKE apply to 'restart' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9769 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 18:54:53 +00:00
teastep
238ff4550f AUTOMAKE also applies to 'restart' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9768 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 18:54:00 +00:00
teastep
6c205d922a Add AUTOMAKE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9767 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 17:31:23 +00:00
teastep
22526979db Make generation of 'stop' ruleset activation more foolproof. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 19:58:26 +00:00
teastep
b215f91d4a Pass input directly to iptables[6]-restore during stop 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9763 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:33:30 +00:00
teastep
715554e579 Cleanup of iptables-restore/stop code. Don't purge ipsets on stop. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9762 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:00:23 +00:00