443 Commits

Author	SHA1	Message	Date
Tom Eastep	d5914addd1	Disallow port 00	2009-12-19 14:59:03 -08:00
Tom Eastep	19af1a081c	Handle kernel 2.6.31 and rp_filter	2009-12-19 13:47:12 -08:00
Tom Eastep	4f4d77be48	Add Kernel Version to the capabilities	2009-12-19 12:42:39 -08:00
Tom Eastep	24ddacb4a7	Adjust module versions	2009-12-19 07:35:30 -08:00
Tom Eastep	10ae98571b	Revert change that allowed out of order policies	2009-12-19 07:20:00 -08:00
Tom Eastep	182ed24b02	Add a comment to process_rule1()	2009-12-14 15:52:16 -08:00
Tom Eastep	576cd76842	Remove superfluous logic from process_rule1	2009-12-14 14:49:38 -08:00
Tom Eastep	e9d12cfc11	Remove superfluous line of code	2009-12-14 07:17:55 -08:00
Tom Eastep	9988cfb619	Remove silly logic in expand_rule()	2009-12-10 08:00:18 -08:00
Tom Eastep	3214b14197	Fix macro handling of SOURCE and DEST columns	2009-12-08 13:29:06 -08:00
Tom Eastep	5e1f550b69	Fix ENHANCED_REJECT and MODULE_SUFFIX	2009-12-07 13:51:54 -08:00
Tom Eastep	7a6ad80c8a	Make kernel version detection work with non-standard version naming such as found on OpenWRT	2009-12-06 10:42:28 -08:00
Tom Eastep	4bf55883ee	Auto-load cls_flow	2009-12-03 12:15:23 -08:00
Tom Eastep	4494272dcd	Improve error message	2009-11-29 09:55:32 -08:00
Tom Eastep	8c033de049	Fix limit check on TC mark values	2009-11-28 14:05:27 -08:00
Tom Eastep	e582f222ad	Backout another Patch from the Virtual Zone Sequence and re-apply a couple of small optimizations	2009-11-28 07:25:31 -08:00
Tom Eastep	e5106f10bc	Revert 8ff4d004c0	2009-11-28 07:23:23 -08:00
Tom Eastep	4e8d753682	Revert "Finish Virtual Zones" ... This reverts commit 222c8cf88f.	2009-11-28 07:20:52 -08:00
Tom Eastep	d1812b4174	Revert "Fix a couple of bugs in virtual zones" ... This reverts commit 22991ac9dd.	2009-11-28 07:20:28 -08:00
Tom Eastep	038b84e775	Revert "Small optimization in virtual zones" ... This reverts commit 251d7116c8.	2009-11-28 07:20:01 -08:00
Tom Eastep	f21c71d7a6	Revert "Match section rules to the number of mark rules" ... This reverts commit 1699d8e941.	2009-11-28 07:19:41 -08:00
Tom Eastep	0b1621027b	Revert "Make 'virtual' a zone type rather than an option" ... This reverts commit 18eedf7e34.	2009-11-28 07:19:10 -08:00
Tom Eastep	ea2c55a993	Revert "Fix off-by-one problem" ... This reverts commit 543af8bccb.	2009-11-28 07:18:07 -08:00
Tom Eastep	f5bf3c9b43	Fix merge conflicts	2009-11-28 07:16:03 -08:00
Tom Eastep	7352771c5d	Fix .spec history to omit false steps	2009-11-27 12:29:11 -08:00
Tom Eastep	543af8bccb	Fix off-by-one problem	2009-11-27 08:56:23 -08:00
Tom Eastep	7f16e96167	Set version to 4.4.5 Beta1	2009-11-27 08:52:37 -08:00
Tom Eastep	18eedf7e34	Make 'virtual' a zone type rather than an option	2009-11-27 08:17:18 -08:00
Tom Eastep	1699d8e941	Match section rules to the number of mark rules	2009-11-26 17:12:11 -08:00
Tom Eastep	251d7116c8	Small optimization in virtual zones	2009-11-26 14:48:46 -08:00
Tom Eastep	22991ac9dd	Fix a couple of bugs in virtual zones	2009-11-26 14:19:10 -08:00
Tom Eastep	222c8cf88f	Finish Virtual Zones	2009-11-26 12:14:58 -08:00
Tom Eastep	8ff4d004c0	Better virtual zone implementation	2009-11-25 18:14:14 -08:00
Tom Eastep	8263ea1312	Limit providers to 15	2009-11-25 12:18:08 -08:00
Tom Eastep	d189c08533	Revert "Add 'virtual' zone support" ... This reverts commit a2cd4bd1f4.	2009-11-25 11:51:13 -08:00
Tom Eastep	a2cd4bd1f4	Add 'virtual' zone support	2009-11-25 09:42:28 -08:00
Tom Eastep	4c40b205f8	Revert "Experimental explicit CONTINUE" ... This reverts commit 10056a03d9.	2009-11-24 13:14:24 -08:00
Tom Eastep	10056a03d9	Experimental explicit CONTINUE	2009-11-24 12:50:53 -08:00
Tom Eastep	cd84efea94	Yet one more change to IPv6 address validation	2009-11-24 08:29:12 -08:00
Tom Eastep	deb45c5a27	Yet another IPv6 Address Normalization fix	2009-11-23 15:57:12 -08:00
Tom Eastep	bdb673a642	More IPv6 fixes	2009-11-23 15:21:25 -08:00
Tom Eastep	1710f9ce7c	Several fixes to IPv6 Address Handling	2009-11-23 14:44:53 -08:00
Tom Eastep	9d85d0ff7a	Allow IPv6 DNS names in net contexts	2009-11-23 13:51:46 -08:00
Tom Eastep	5610f78a48	Update version of Shorewall::Policy; improve 'expanded' description in Shorewall::Chains	2009-11-23 11:31:38 -08:00
Tom Eastep	99a35c1bf0	Allow <zone>::<serverport> in the rules file DEST column	2009-11-23 09:33:16 -08:00
Tom Eastep	5b02ef68a5	Simplify port == 0 test	2009-11-22 09:00:03 -08:00
Tom Eastep	d4ff629fd8	Generate error on port == 0	2009-11-22 08:44:11 -08:00
Tom Eastep	6e9d9e239d	Apply 4.4.4.1 changes to master	2009-11-22 08:20:07 -08:00
Tom Eastep	4aeee6fd8b	Make 'expanded' apply to all wildcard policies	2009-11-21 14:18:01 -08:00
Tom Eastep	c7de19cf39	Allow specific policy to supersede an expanded one	2009-11-21 13:56:40 -08:00