holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
9,079 Commits 104 Branches 736 Tags 54 MiB
cbb524b067
Commit Graph

789 Commits

Author SHA1 Message Date
teastep
22526979db Make generation of 'stop' ruleset activation more foolproof. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 19:58:26 +00:00
teastep
b215f91d4a Pass input directly to iptables[6]-restore during stop 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9763 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:33:30 +00:00
teastep
715554e579 Cleanup of iptables-restore/stop code. Don't purge ipsets on stop. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9762 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 18:00:23 +00:00
teastep
cddd1b1ae9 Use iptables[6]-restore to instantiate the 'stopped' ruleset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 00:49:00 +00:00
teastep
7210e8c15e Move generation of stop_firewall() to the end of the compilation sequence 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9760 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-29 17:52:24 +00:00
teastep
adb9830e9e Move 'compile_stop_firewall' to Shorewall::Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9743 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-28 19:22:15 +00:00
teastep
d9622dabfe Centralize iptables knowledge in the Chains module -- first phase 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9742 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-28 19:21:36 +00:00
teastep
b663644d0d Ignore leading white space on certain continuation lines 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-27 16:55:51 +00:00
teastep
d67c94de9c Move extension script handling to generate_script_1() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-26 18:18:09 +00:00
teastep
9328f0fc4c Detect dhclient dynamic gateway 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-24 20:58:04 +00:00
teastep
6013e8b53d Improve error message for startup errors. Document in release documents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9730 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-23 22:51:05 +00:00
teastep
1545d62ba9 Update version by hand 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9729 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-23 22:50:04 +00:00
teastep
1ff093b1c0 Minor tweak to Shorewall::Zones 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9724 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-21 22:46:16 +00:00
teastep
bb8e562d18 Detect IP configuration early in start/restart so that stopping the fireawall isn't necessary in the case of failure. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9722 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-21 16:45:27 +00:00
teastep
6dac69554f Apply Tuomo Soini's patch for USE_DEFAULT_RT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-19 14:04:57 +00:00
teastep
2734d2b8cb Change 'flow' filter rule (which still doesn't work :-() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9702 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-18 21:33:28 +00:00
teastep
08cd0684ec Use new syntax in standard actions. Add additional comments in Shorewall::Config 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9695 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-16 16:37:21 +00:00
teastep
fc3a2fc386 Add explanation of maximum zone length 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-15 15:54:29 +00:00
teastep
229e573c3c Make zone type numeric for faster comparison 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9684 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-13 22:59:49 +00:00
teastep
e75789d894 A few minor changes in Shorewall::Chains. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9682 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-11 01:16:45 +00:00
teastep
77444634e1 Correct fatal error message generated by assert() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9675 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 21:45:30 +00:00
teastep
ce5efc5dfa Add a comment 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9674 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 21:45:18 +00:00
teastep
5a6d66f263 Replace discrete tests with calls to fatal_error() with calls to assert(); 
second batch

Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9673 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 20:57:18 +00:00
teastep
b987ea4940 Replace discrete tests with fatal_error() calls with assert() calls. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9672 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 20:56:53 +00:00
teastep
70570c4a18 Change policy->{is_optional} to policy->{provisional} 
Signed-off-by: Tom Eastep <teastep@ursa.(none)>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9668 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-09 16:28:29 +00:00
teastep
faa8a9ec2d Cosmetic changes to four Perl Modules 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-08 16:51:22 +00:00
teastep
dcee4a3d08 Commit updates from Git 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9625 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-08 01:40:35 +00:00
teastep
94bd270bcd Delete 'routefilter' from valid hosts file options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9623 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 23:30:19 +00:00
teastep
ec52331dfc More port OPTIONS changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 20:22:20 +00:00
teastep
3d92f7a016 More tweaks to ipset management 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9615 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 00:39:04 +00:00
teastep
a7126b6b4c First working dynamic zone implementation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9612 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 17:00:38 +00:00
teastep
f788e4ecb3 Reincarnation of Dynamic Zones -- Phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9611 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 04:08:07 +00:00
teastep
3795f02f70 Reincarnation of Dynamic Zones -- Phase I 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9610 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 00:14:42 +00:00
teastep
be8e9990bd Back out silly part of last change 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9608 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 20:27:22 +00:00
teastep
410e551a69 Re-enable list-valued return from validate_4address() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9606 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 19:56:24 +00:00
teastep
062c7ec822 Change 'Provides' for Shorewall6-lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 16:18:58 +00:00
teastep
14673e4ab5 Detect bogus DNAT- rule 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9600 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 04:03:05 +00:00
teastep
661029a38e Cosmetic Change 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9599 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 04:02:03 +00:00
teastep
36b87dff49 Put all Perl components in a common directory -- Phase I 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9595 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-04 22:41:56 +00:00