Commit Graph

1000 Commits

Author SHA1 Message Date
teastep
96b02007a1 Apply Lennart Sorensen's patch to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8791 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-20 14:34:52 +00:00
teastep
1814ef0201 Add time match support in /etc/shorewall/rules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8783 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-14 19:37:35 +00:00
teastep
11fa1bc259 Allow Shorewall to work with iptables 1.4.1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8762 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-08 21:30:05 +00:00
teastep
8bd24599ff Update version -- delete extra history entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-08 17:03:41 +00:00
teastep
043ae450a7 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8760 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-08 16:55:31 +00:00
teastep
3615fcd221 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8759 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-08 16:54:57 +00:00
teastep
35fd52c42b Finish CONNLIMIT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8758 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-08 16:54:08 +00:00
teastep
28cc9eec76 Add CONNLIMIT support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8757 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-07 23:23:07 +00:00
teastep
9f9185f002 Fix minor editing issue in CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8753 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-06 15:12:47 +00:00
teastep
e9ad6639ad Set version to final
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-10-03 15:20:51 +00:00
teastep
7451a56c64 Document Debian init fix
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-23 16:15:42 +00:00
teastep
fbf1b8db12 Update version to RC3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8717 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-15 17:40:57 +00:00
teastep
8af65b8a4c More shared MultiISP tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8703 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-08 15:40:53 +00:00
teastep
19345a1fdc Update version to RC2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8702 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-08 14:29:42 +00:00
teastep
ead2773840 Fix conditional route marking
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8699 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-07 20:17:08 +00:00
teastep
fab1a296b8 More 'loose'+'balance'+'USE_DEFAULT_RT'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-06 17:00:49 +00:00
teastep
4ea348205a Fix 'loose'+'balance'+'USE_DEFAULT_RT=Yes' bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8693 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-09-06 15:45:24 +00:00
teastep
52760ff105 Fix typo
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8689 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-08-31 21:20:17 +00:00
teastep
a8ee15b17c Don't complain about missing LOCKFILE directory when compiling for export
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8679 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-08-24 19:39:51 +00:00
teastep
53bc221727 Fix typo that resulted in multiple syntax errors
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8676 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-08-22 14:18:31 +00:00
teastep
e681b27f6e RC1
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8673 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-08-19 23:28:47 +00:00
teastep
46ec09dddf Update Copyrights
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8659 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-27 21:00:08 +00:00
teastep
4ff3572d86 Only list interfaces with an IPv4 configuration in 'show ip' and 'dump'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8636 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-15 16:17:58 +00:00
teastep
50c1896c37 Copy INTERFACE when COPY column non-empty
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-11 16:53:50 +00:00
teastep
6b5724c1d4 Tolerate UTF-8 in the manpages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8617 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-10 14:14:35 +00:00
teastep
c4b5aa780e Slight tweak to USE_DEFAULT_RT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8610 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-07 22:40:54 +00:00
teastep
36e147f57b Add -f option to the restart command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8607 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-06 21:47:59 +00:00
teastep
a01d47579d Change ROUTE_BALANCE to USE_DEFAULT_RT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-06 15:54:20 +00:00
teastep
616fa086be Update version to Beta3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8597 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-03 20:08:13 +00:00
teastep
b64ae44227 Add ROUTE_BALANCE support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8596 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-07-03 20:06:47 +00:00
teastep
c6a52d4fd9 Fix ip forwarding restore bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8581 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-29 23:00:25 +00:00
teastep
8298abbadb Fix bug in obsolete option handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8576 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-19 16:43:38 +00:00
teastep
7501a1f189 Improve handling of options we no longer support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8573 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-16 21:53:21 +00:00
teastep
9f2086530d More DYNAMIC_ZONES erradication
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8572 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-16 21:44:45 +00:00
teastep
9f0d90b946 Fix ipset negation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8567 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-13 21:52:58 +00:00
teastep
0c9fc719b3 Update version of Config Module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8565 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-13 03:48:07 +00:00
teastep
8ba59c803a Update version of Config Module
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8564 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-13 03:46:00 +00:00
teastep
af3aa96964 DYNAMIC_ZONES=Yes is no longer supported by Shorewall-perl
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8563 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-13 02:56:51 +00:00
teastep
c2ee4eb2ba Add HELPER column to tcrules
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8558 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-05 20:39:05 +00:00
teastep
8525c8ccdf Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8551 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-06-02 19:39:35 +00:00
teastep
44472dd288 Allow A-F in hex representaiton of tcclasses MARK column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8496 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-05-13 14:54:35 +00:00
teastep
62b90cfa91 Fix MARK bug in tcclasses
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8495 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-05-12 16:47:57 +00:00
teastep
e6d8eabbc1 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8494 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-05-07 18:28:13 +00:00
teastep
1b6b53bb7b Beta 1 prep
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8493 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-05-04 00:37:55 +00:00
teastep
f1567e6e3d Beta 1 prep
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8492 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-05-04 00:18:47 +00:00
teastep
2b51b76131 Allow installers to run under Cygwin without extra parameters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8489 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-30 15:11:26 +00:00
teastep
0f6d348187 More cleanup of maclist processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8488 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-29 16:58:36 +00:00
teastep
399f08dc22 Better diagnostic on unknown interface in the Maclist file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8487 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-29 15:44:14 +00:00
teastep
e4dd187638 Update version to 4.1.8
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8486 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-28 17:36:56 +00:00
teastep
e1c1468e82 Add the '-p' option to start/restart (purge the conntrack table)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8485 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-28 17:32:31 +00:00
teastep
da78a4d453 Another tiny optimizaiton
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8484 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-28 17:19:18 +00:00
teastep
6c35bd9cc4 Tiny optimizaiton in match_src_net
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8475 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-21 20:34:38 +00:00
teastep
2b67b46f02 Simplify an RE some more
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8474 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-21 20:23:02 +00:00
teastep
03f93c1f5b Simplify an RE
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8473 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-21 20:21:57 +00:00
teastep
039a875b70 Avoid undefined value error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8472 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-21 20:17:04 +00:00
teastep
39eb7a3d1f Fix rate calculation; restore line inadvertently removed yesterday
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8471 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-21 20:09:31 +00:00
teastep
69b61dfc55 Remove extra substitution
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8470 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 23:14:27 +00:00
teastep
9adb6d57f5 Use mac_match() for all MAC matches
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8469 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 22:38:22 +00:00
teastep
41633b4fac Fix silly typo in RE
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8468 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 20:45:27 +00:00
teastep
3fb29bab42 Tiny optimization to last change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8467 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 20:25:17 +00:00
teastep
c805d895b7 Validate MAC addresses
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8466 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 19:48:02 +00:00
teastep
5052246e9c Don't accept rates of zero; accept 'bps'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8465 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 16:51:10 +00:00
teastep
dd8f738a58 Eliminate silly mistake
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8464 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 15:17:57 +00:00
teastep
3b9a7e5f8e More editing of RATE and CEIL
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8463 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-20 14:34:46 +00:00
teastep
a23c9d4044 Insist that RATE and CEIL expressions consist of numbers, parens, and arithmetic operators before trying to compile them
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8447 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-19 23:47:09 +00:00
teastep
b268776cd6 Fix routestopped with ADMINISABSENTMINDED=No
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8440 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-19 17:23:59 +00:00
teastep
8985536d4b Don't allow rates > full
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8439 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-19 00:43:34 +00:00
teastep
7240cd1e9b Catch Rate Calculation Errors
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8438 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 23:27:05 +00:00
teastep
a16cd8f28e Undo the effects of NULL_ROUTE_RFC1918 during restart/stop
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8433 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 15:07:15 +00:00
teastep
c7db0435eb Catch absurd MARK contents
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:43:23 +00:00
teastep
aee1f94ce4 Generate correct match for CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8429 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:11:56 +00:00
teastep
3d3f0a71c5 Handling missing 'min' in connbytes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8428 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-18 00:09:06 +00:00
teastep
8761025201 Handle ':' as the entry in the MARK column
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8427 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-17 23:57:06 +00:00
teastep
4b5273c6bb Some minor changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8424 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-15 00:34:44 +00:00
teastep
b1c5eefb6b Add accounting-rule sanity check
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8422 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 02:46:17 +00:00
teastep
4c4b58d9cc Reword error message
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8421 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 02:13:25 +00:00
teastep
485d4f51e2 Stop Accounting rule violations -- Take 3
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8420 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 01:48:05 +00:00
teastep
a5811aa4d4 Stop Accounting rule violations -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8419 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 01:03:34 +00:00
teastep
adf068c510 Stop Accounting rule violations
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8418 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-11 01:01:12 +00:00
teastep
b46bcd39a1 Formalize zone dynamic chain naming
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8417 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:54:52 +00:00
teastep
5d459daa75 Avoid undefined var error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8416 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:29:19 +00:00
teastep
8463d54580 Fix one bug plus clean up more chain-to-chain jump generation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 23:09:22 +00:00
teastep
0927fcb95c Add some insurance
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8414 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 20:37:17 +00:00
teastep
15915994f6 Fix silly duplicate-rule problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8411 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-10 00:12:15 +00:00
teastep
9d4ec13e47 Some editing cleanup
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8410 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 22:56:23 +00:00
teastep
699571a083 Back out unnecessary patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8407 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:30:40 +00:00
teastep
ed538add0e Make logging work correctly in ESTABLISHED and RELATED sections
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8406 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 21:09:43 +00:00
teastep
1c83016385 Back out FASTACCEPT/IPSEC change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8404 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 15:07:09 +00:00
teastep
a7a8b413ef Avoid creating extra policy chains with EXPAND_POLICIES=Yes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8403 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-09 06:00:08 +00:00
teastep
dacc29c577 Disallow FASTACCEPT with IPSEC
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8401 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 22:58:46 +00:00
teastep
92481b4e36 Reverse inadvertent change to Zones.pm
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8400 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 16:09:22 +00:00
teastep
ebd9ce70d0 Fix another ':' parsing bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8399 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-08 16:08:13 +00:00
teastep
2cfe94c879 Don't respond to IGMP with an ICMP
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8396 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-06 22:46:53 +00:00
teastep
0064bcb5b5 Defer setting up forwarding
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8395 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-04-06 22:45:32 +00:00
teastep
f3323ef6fb Add NULL_ROUTE_RFC1918 option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8375 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-29 00:35:00 +00:00
teastep
8f47e47efa Clean up RFC 1918 change
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8373 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-28 01:47:40 +00:00
teastep
a141478319 Resolve RFC 1918 Mess
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8372 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-28 00:05:25 +00:00
teastep
df41b69a04 Deprecate 'norfc1918' in favor of built-in actions
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8367 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-27 19:45:23 +00:00
teastep
bbc8577a30 Yet another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8364 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 16:16:56 +00:00
teastep
5288b1d64d Another ':' parsing issue
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8362 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:56:50 +00:00
teastep
c0dd4f3911 Better fix for policy parsing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8361 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:36:23 +00:00
teastep
b2d2ee253a Fix policy parsing problem
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-26 15:15:34 +00:00
teastep
eadad9a363 Fix priority mingling in tc filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8356 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-25 15:45:26 +00:00
teastep
a59c0db7f0 Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8353 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:50:40 +00:00
teastep
b2e603c3c8 Add MANGLE_ENABLED option -- sample configs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8352 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:49:53 +00:00
teastep
2a6b894bd4 Add MANGLE_ENABLED option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8351 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 22:36:48 +00:00
teastep
a91bca8e9e Fix perl run-time error
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8347 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 17:35:52 +00:00
teastep
507d58ea0c Add 'avgpkt' to CONNBYTES code (it was already documented)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8346 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-24 14:56:37 +00:00
teastep
3d55331074 Finish CONNBYTES
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8345 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 22:23:12 +00:00
teastep
148415f23a Avoid unnecessary calls to getprotobynumber()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8344 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 20:56:29 +00:00
teastep
5986d4db32 Default gateway detection in /etc/shorewall/init
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8342 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 16:08:34 +00:00
teastep
680788433d Rename a variable
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8341 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-23 15:18:32 +00:00
teastep
5ea18e3624 Fix number of columns detection -- Take 2
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8340 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:41:12 +00:00
teastep
bd5f8195e9 Fix number of columns detection
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8339 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 17:35:46 +00:00
teastep
942d6bf6f5 Fix service validation
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8332 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 14:54:10 +00:00
teastep
3bf59ff03a Add error when ICMP specifies SOURCE PORT(S) in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8331 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-22 03:01:01 +00:00
teastep
6c0d7d055d More tinkering with expand_port_range()
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8330 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 21:03:46 +00:00
teastep
a672e03a82 Clean up range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8325 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:42:15 +00:00
teastep
d33f6583ad Fix bug in range expansion
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:32:22 +00:00
teastep
9b048e836e Allow port ranges in /etc/shorewall/tcfilters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8323 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 17:08:55 +00:00
teastep
dc17a6976d Support port lists in tcfilters file
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8321 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-21 14:59:14 +00:00
teastep
0dce5fd379 Last change was a bit too optimized (omitted certain rules)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8319 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 22:18:35 +00:00
teastep
63e7eb6147 Combine u32 tables for same protocol
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8318 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 21:54:27 +00:00
teastep
c3df5ed89e Remove BROKEN_ROUTING option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:59:46 +00:00
teastep
e4878466f7 Add Tuomo's patch for adding 'src' to default route
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8315 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-20 18:54:40 +00:00
teastep
4756d4ef13 Eliminate vlsm_to_mask table
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8311 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:40:03 +00:00
teastep
88b3d01914 Start u32 table numbers at 1 rather than 64
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8310 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 22:25:41 +00:00
teastep
93d87dd01b More u32 tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8307 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:32:08 +00:00
teastep
f7e5b3124b Clean up of u32 filter code
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8306 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:15:03 +00:00
teastep
affa4684b8 First truly working u32 filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8305 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-19 16:02:16 +00:00
teastep
2daa5705d9 More tcfilters pretty-up
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8304 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 23:54:41 +00:00
teastep
3bc1c7f188 Fix bug with < 3 zones, one or more of them complex
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8303 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 22:49:43 +00:00
teastep
aead0c60e5 Add BROKEN_NEXTHDR configuration option
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8302 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 22:10:11 +00:00
teastep
d3e94d44c3 Add some progress messages; suppress output from 'tc add....mirred'
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8301 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 16:46:30 +00:00
teastep
c0836b8df2 Fix for new Macro syntax when macro name contains non-word characters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8299 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-17 15:44:15 +00:00
teastep
a6354f9748 More IFB changes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8297 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 23:57:58 +00:00
teastep
693dc4ae37 More IFB stuff
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8296 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 20:31:50 +00:00
teastep
6e3469ee89 Initial working version of IFB support with tc filters
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8295 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-16 16:51:53 +00:00
teastep
1fd17db3ca Finish phase 1 support for IFBs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8294 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 19:26:09 +00:00
teastep
5c530522f8 Correct defect in last large patch
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8291 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 02:33:23 +00:00
teastep
da18254d2a Update version
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8290 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 02:18:59 +00:00
el_cubano
bbe6dfb5fd "Fix" bashisms (at least they are bashims according to the Debian people)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8289 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-14 02:07:28 +00:00
teastep
b0a5c577f4 Support for IFB (but don't document it yet)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8288 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-13 23:27:29 +00:00
teastep
9f37f6a4ca Improve behavior of 'norfc1918' in the absense of CONNTRACK_MATCH
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8287 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-13 02:11:18 +00:00
teastep
10e2cb3751 Fix rule generation for '- <interface>' entries in /etc/shorewall/interfaces
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8282 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-12 22:34:21 +00:00
teastep
846f251825 Avoid generating 'non-existant variable' errors on the SCP and RSH commands in shorewall.conf
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8280 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-11 23:04:11 +00:00
teastep
fcea8abc60 Add L2TP Tunnel support
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8273 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-08 20:49:41 +00:00
teastep
1e7c0d0947 Bring 4.0 changes to trunk
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8271 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-07 00:36:16 +00:00
teastep
77be234a24 Add experimental support for IFBs
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8267 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-05 16:16:04 +00:00
teastep
392b6eb8d1 Handle empty action properly
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8261 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2008-03-02 17:14:03 +00:00