holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
10,121 Commits 104 Branches 736 Tags 54 MiB
da261ad315
Commit Graph

1423 Commits

Author SHA1 Message Date
Tom Eastep
facfd53bc3 Correct deletion of ipv6 'shorewall' chain 2011-05-17 10:50:08 -07:00
Tom Eastep
6c0bc5aae5 Add a warning message when an entire table is reloaded 2011-05-16 16:29:38 -07:00
Tom Eastep
511aa7bdc0 Fix typos 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-16 13:58:11 -07:00
Tom Eastep
bf9309e441 Don't generate refresh rules unless the command is 'refresh' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-16 13:09:27 -07:00
Tom Eastep
68136ea53a Avoid inconsistencies and errors in refresh -- Take 2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-16 12:24:55 -07:00
Tom Eastep
d79a9a4afa Avoid inconsistencies and errors in refresh 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-16 10:47:31 -07:00
Tom Eastep
f741b8a225 Issue warning on missing IPSET 2011-05-15 11:52:26 -07:00
Tom Eastep
b776668fe9 Don't emit degenerate tcfilters 2011-05-15 09:15:52 -07:00
Tom Eastep
6233296917 Don't allow non-leaf default class 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-13 07:15:18 -07:00
Tom Eastep
928c472175 Issue warnings and ignore non-leaf class in tcfilters and tcrules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-13 07:14:58 -07:00
Tom Eastep
00c9f17280 Correct Config.pm VERSION 2011-05-11 10:13:05 -07:00
Tom Eastep
2cadee412a Disallow degenerate tcpri entry 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-10 17:51:48 -07:00
Tom Eastep
4736956f13 Correct earlier patch 2011-05-08 15:46:49 -07:00
Tom Eastep
9a0894f44a Revert "Automatically specify the output interface on CLASSIFY tcrule" 
This reverts commit a41ae6af76.
 2011-05-08 15:39:18 -07:00
Tom Eastep
a41ae6af76 Automatically specify the output interface on CLASSIFY tcrule 2011-05-08 14:22:50 -07:00
Tom Eastep
631a2a7092 Merge branch '4.4.19' of ssh://shorewall.git.sourceforge.net/gitroot/shorewall/shorewall into 4.4.19 2011-05-08 05:59:13 -07:00
Tom Eastep
1685fc116e Ensure USER/GROUP is only specified when SOURCE in $FW 2011-05-08 05:58:37 -07:00
Tom Eastep
0bfb7ecc6d Ensure route to gateway in the main table 2011-05-08 05:35:03 -07:00
Tom Eastep
fb442cebbe Document fix for 'gawk' 2011-05-07 09:29:43 -07:00
Tom Eastep
6bb0881d7c Fix issues with 'gawk' 2011-05-07 09:21:37 -07:00
Tom Eastep
873f8c38aa Simplify the fix for double exclusion in ipset lists 2011-05-06 14:28:22 -07:00
Tom Eastep
277493058d Refinement to fix for double exclusion 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-06 07:29:00 -07:00
Tom Eastep
d02269e53c Correct double-exclusion fix 2011-05-05 16:18:04 -07:00
Tom Eastep
d79f1766b5 Let tcfilters deal correctly with hex device numbers 2011-05-04 17:14:34 -07:00
Tom Eastep
97d795b3b1 Complain if there is no default class defined 2011-05-04 16:20:54 -07:00
Tom Eastep
51e89a41ef Enforce limits on device and class numbers 2011-05-04 08:03:22 -07:00
Tom Eastep
e7831d5a15 Detect double exclusion in ipset expressions 2011-05-03 13:24:41 -07:00
Tom Eastep
953c7db1c4 Correct Comment 2011-05-03 07:43:42 -07:00
Tom Eastep
e1b3a79aa9 Back out part of TC change 2011-05-02 17:22:06 -07:00
Tom Eastep
1ffc4ece34 Don't require '0x' on devnum > 10 in tcclasses 2011-05-02 16:29:12 -07:00
Tom Eastep
e69ca0bffe Fix another couple of bugs with device numbers > 9 2011-05-02 15:34:35 -07:00
Tom Eastep
7cf5072777 Normalize hex numbers before using them in string comparisons 2011-05-02 10:07:01 -07:00
Tom Eastep
453eba2f54 Correct patch for > 9 interfaces with tcfilters 2011-05-02 09:52:31 -07:00
Tom Eastep
46e2a02fe4 More fixes for TC 2011-05-02 09:35:42 -07:00
Tom Eastep
4c27c68c43 Don't allow IFB classes in tcrules 2011-05-02 09:35:31 -07:00
Tom Eastep
f2b9851282 Fix bug in tcfilters with device numbers > 9 2011-05-02 09:34:52 -07:00
Tom Eastep
a58303c199 Correct some TC issues 2011-05-01 06:19:57 -07:00
Tom Eastep
2db87891ec Support ipsets in the ORIGINAL DEST column for DNAT and REDIRECT rules. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-28 09:29:54 -07:00
Tom Eastep
bcb1aede20 Prepare for 4.4.19.2 2011-04-16 11:28:44 -07:00
Tom Eastep
4f5970b5f2 Use 'ip route list' rather than 'ip route ls' for busybox compatability 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-15 11:15:32 -07:00
Tom Eastep
d42a65fd11 Correct one more default route save/restore defect 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-15 07:09:34 -07:00
Tom Eastep
dff405683c Correct default route save/restore 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-14 12:25:33 -07:00
Tom Eastep
96af7bfed6 Fix the prior commit 2011-04-13 17:56:15 -07:00
Tom Eastep
9a8f411531 Update version to 4.4.19.1 and document corrected problems 2011-04-13 17:22:07 -07:00
Tom Eastep
9008cd960c Fix a silly masq bug 2011-04-13 17:01:22 -07:00
Tom Eastep
16276b9900 Don't assume that all nexthop routes are default routes 2011-04-13 13:57:22 -07:00
Tom Eastep
a0b16e2803 Delete duplicate rule 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-04-13 06:56:17 -07:00
Tom Eastep
5919c234f4 Update version of IPAddrs.pm 2011-04-12 07:21:24 -07:00
Tom Eastep
53571043c0 Fix another proto editing defect 2011-04-11 17:18:39 -07:00
Tom Eastep
18f4b11b09 Don't allow '\!0' in the PROTO column 2011-04-11 16:25:19 -07:00