holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,611 Commits 104 Branches 736 Tags 54 MiB
e4c2122532
Commit Graph

214 Commits

Author SHA1 Message Date
Roberto C. Sanchez
a8885844ae Fix typos 2014-06-13 07:25:54 -04:00
Tom Eastep
238aa68b28 Describe the mangle file in the config file basics article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-02-27 15:54:05 -08:00
Tom Eastep
a1222d10cb change 'marks' file to 'mangle' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-12-28 10:03:23 -08:00
Tom Eastep
9b0b3d4b70 Correct ICMPV6 type name translation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-05-28 08:03:19 -07:00
Tom Eastep
82bfb5ac50 Document @caller. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-30 16:32:25 -07:00
Tom Eastep
b6ceb96ebe Add 'initdone' to the config file list in the conf basics article. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-04-22 07:57:18 -07:00
Tom Eastep
ca5a70aa6f Clarify the <variable> forms allowed in a ?SET directive. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-02 11:08:29 -08:00
Tom Eastep
f403420926 Allow setting chain variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-19 10:52:11 -08:00
Tom Eastep
af83989465 Update copyright dates. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-11 16:01:10 -08:00
Tom Eastep
975fb8992e Add warnings about line continuation vs. comments 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-09 08:00:59 -08:00
Tom Eastep
41b4485310 Implement ?COMMENT directive 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-22 15:47:03 -08:00
Tom Eastep
6c1369a5a8 Minor tweaks to the documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-22 09:51:51 -08:00
Tom Eastep
96b61ea05c Update documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-21 16:13:23 -08:00
Tom Eastep
7abebb72e4 Document Shorewall::Config::set_action_param(). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-21 15:13:51 -08:00
Tom Eastep
da0261cb91 Document @1, @2,...@n 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-20 09:46:24 -08:00
Tom Eastep
df7785f2e9 Implement user-defined address variables. 
- Also correct handling of ${0} & ${chain} in a SWITCH column.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-18 17:58:20 -08:00
Tom Eastep
e8720e9f78 Add a section Id to the Shorewall Variables section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 09:48:33 -08:00
Tom Eastep
1dc0f8b170 Split the Shell Variables section into multiple sections. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-16 08:45:46 -08:00
Tom Eastep
10237e01b2 Document ?set and ?reset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-12-09 11:46:51 -08:00
Tom Eastep
172c1a5b44 Update the alternative column specification table. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-11-29 07:43:48 -08:00
Tom Eastep
c16dfc609d Documentation updates for VARLIB 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-09-02 15:43:52 -07:00
Tom Eastep
c2cd031285 Mention the conntrack file in the config basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-08-02 11:31:25 -07:00
Tom Eastep
74f831a73e Improve the readability of the ?ELSIF example 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-07-02 11:51:14 -07:00
Tom Eastep
0bf2753472 Re-implement conditional inclusion 
- Correct defects
- Add ?ELSIF support
- Allow Perl-compatible expressions in ?IF
 2012-06-27 15:15:44 -07:00
Tom Eastep
ee467a4877 Allow embedded shell/Perl directives to have leading '?' 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-06-05 07:32:43 -07:00
Tom Eastep
cb72948739 Add Geoip match to config basics doc. Clarify variable search algorithm. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-18 07:27:33 -07:00
Tom Eastep
3d541f50c8 Use "(S)" consistently in column headings. 
- add synonyms so both the singular and plural forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-11 12:42:04 -07:00
Tom Eastep
2cbf1e86ad Allow synonyms for column names in alternate specification formats 
- gateway and gateways in the tunnels file
- mark and action in the tcrules file

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 11:59:47 -07:00
Tom Eastep
7453b70666 Add emphasis to the 'required' option in the config basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-05-07 07:14:56 -07:00
Tom Eastep
55cd81747d Add emphasis in some examples; correct a typo. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-07 07:38:38 -07:00
Tom Eastep
97cc4930cf Deimplement option leading ? in embedded directives 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-06 16:26:05 -07:00
Tom Eastep
f85321e201 Clean up conditional include documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-06 11:50:22 -07:00
Tom Eastep
85fce606dc Give all config files access to shorewallrc variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-04-01 13:19:38 -07:00
Tom Eastep
0063de1564 Add capabilities to conditionals 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-19 11:57:33 -07:00
Tom Eastep
72e6330ff4 Revert "Add capabilities to ?IF conditionals" 
This reverts commit 0d71c590e4.
 2012-03-19 07:20:31 -07:00
Tom Eastep
0d71c590e4 Add capabilities to ?IF conditionals 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-18 08:48:26 -07:00
Tom Eastep
81714ee81f Document '!' in ?IF 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-17 16:58:25 -07:00
Tom Eastep
ab13fbe95e Allow conditional compilation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-16 08:16:12 -07:00
Tom Eastep
a3219f71c9 Add a restriction to the SHELL and PERL directives. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-03-13 12:27:04 -07:00
Tom Eastep
47453a20f7 Tweak to Run-time gateway variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-24 09:02:04 -08:00
Tom Eastep
7273f4d8d4 Implement run-time gateway variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-02-23 13:36:00 -08:00
Tom Eastep
58a0b9b5c1 Rename route_rules to rtrules -- phase 2 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-01-09 07:19:10 -08:00
Tom Eastep
57d0550311 Document use of .conf options as variables. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-12-17 07:40:43 -08:00
Tom Eastep
809f27decd More alternate-specification fixes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-10-09 07:06:01 -07:00
Tom Eastep
109bed7037 Add proxyndp to 'pairs' documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-10-07 15:07:09 -07:00
Tom Eastep
0a5d5821ec Support additional forms of column/value pair specification 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-10-02 11:45:55 -07:00
Tom Eastep
072f4752fc Get rid of minimum column requirement 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-10-01 09:56:25 -07:00
Tom Eastep
a3d4edfd1f Reorganize Shorewall Lite docs 2011-09-27 18:13:57 -07:00
Tom Eastep
2b7515f434 Refer manpage readers to the 'Pairs' information 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-09-26 10:16:52 -07:00
Tom Eastep
9a4dfc4394 Implement an alternate way of specifying column contents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-09-25 17:08:53 -07:00
Tom Eastep
dbf5f17b41 More tweaks to switch implementation. 
1) Switch names may be 30 characters long.
2) Switch settings are retained over restart.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-09-24 07:34:58 -07:00
Tom Eastep
12bfc14c5f More SWTICH changes. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-09-23 14:44:20 -07:00
Tom Eastep
caddd65412 Rename condition->switch and add more documentation. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-09-23 12:33:55 -07:00
Tom Eastep
7cb3392e3d Expand explaination of rate limiting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-07-08 09:53:56 -07:00
Tom Eastep
a8fd3281d9 Add CONFIG_PATH section 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-05-22 08:59:05 -07:00
Tom Eastep
cc633c5bd9 Shorewall 4.4.19 Changes 2011-04-03 09:56:30 -07:00
Tom Eastep
ac13be4ed4 Add rate-limiting example to rules manpages 2011-02-03 13:26:41 -08:00
Tom Eastep
156b04c380 Implement Run-time Address Variables 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2011-01-26 09:08:48 -08:00
Tom Eastep
3a2da73808 Document INCLUDE changes in the basics doc 2011-01-15 15:56:20 -08:00
Tom Eastep
265ca85d02 Allow INCLUDE in extension scripts 2011-01-15 15:43:45 -08:00
Tom Eastep
08f09d7de0 Deprecate EXPORTPARAMS 2011-01-09 10:12:36 -08:00
Tom Eastep
2f70c0b71a Add Optional/Required interface section to the config basics doc 2010-12-09 10:04:52 -08:00
Tom Eastep
a1e3683651 Documentation updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-11-10 14:38:55 -08:00
Tom Eastep
8c1bdc803b Fix typo in address-type section; add faq 94 2010-11-04 09:57:33 -07:00
Tom Eastep
e9b7b8acad Add address-type info to config file basics doc 2010-11-03 16:31:50 -07:00
Tom Eastep
8d63e04926 Yet more docunentation updates 2010-09-06 20:37:34 -07:00
Tom Eastep
c6f58ba924 Enhance SELinux support: 
- Add state match
- Add user/group match
- Add examples to the man pages
 2010-09-06 09:06:40 -07:00
Tom Eastep
1510e111c4 Fix typo in conf basics doc 2010-08-13 20:27:14 -07:00
Tom Eastep
7f4a7372ef Remove nic registration requirement for IRC channel 2010-07-24 16:04:21 -07:00
Tom Eastep
9ab66c3b07 More config basic doc tweaks 2010-07-24 07:09:02 -07:00
Tom Eastep
039ac17fe6 Correct SOURCE/DEST section 2010-07-23 14:32:11 -07:00
Tom Eastep
93e5fc2deb Correct SOURCE/DEST section 2010-07-23 14:19:05 -07:00
Tom Eastep
c2717b9eec Correct SOURCE/DEST section 2010-07-23 14:17:38 -07:00
Tom Eastep
ed72afd8a0 Add comment about the unfortunate name of the tcrules file 2010-06-25 06:33:14 -07:00
Tom Eastep
f412f96153 Add introduction to config file basics document 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-06-06 08:24:28 -07:00
Tom Eastep
0553f232b5 Remove apparent restriction on files where shell variables can be used 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-05-31 10:25:53 -07:00
Tom Eastep
0a9b7c75d0 Delete misleading wording in the explaination of rate limiting 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-04-16 06:24:35 -07:00
Tom Eastep
3b6b7a4099 Add simple tc files to basics doc 2010-04-11 17:00:19 -07:00
Tom Eastep
696f7d6b2b Update copyright on basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-07 09:34:27 -08:00
Tom Eastep
a963c8f955 Don't export CONFDIR or SHAREDIR 
Document CONFDIR, SHAREDIR and VARDIR
Add FILEMODE to the old reserved variable names

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 11:46:23 -08:00
Tom Eastep
49c1350aa0 Documentation for final cleanup of variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-03 10:28:09 -08:00
Tom Eastep
2656a9b0c7 Eliminate use of PRODUCT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 12:34:36 -08:00
Tom Eastep
5613d0105a Remove all reliance on HOSTNAME 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 11:59:38 -08:00
Tom Eastep
55e1124bbe Update docs regarding VERSION 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 08:18:01 -08:00
Tom Eastep
5fc6d58e19 Eliminate STOPPING variable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-03-02 07:37:30 -08:00
Tom Eastep
53c73bc8e9 Eliminate VERBOSE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-28 17:58:01 -08:00
Tom Eastep
061d850c16 Rename RESTOREPATH to g_restorepath 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-26 08:35:50 -08:00
Tom Eastep
c1ac19a81e Correct a couple of typos 2010-02-25 16:35:19 -08:00
Tom Eastep
8aaddf368b More reserved variable names documented 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-25 12:37:22 -08:00
Tom Eastep
570497766b Add COMMAND to the list of reserved variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-23 07:18:54 -08:00
Tom Eastep
4320ebb8b0 Add SW_* to the list of reserved variable names 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-23 06:57:29 -08:00
Tom Eastep
efa41d1801 Correct a typo 2010-02-22 08:36:31 -08:00
Tom Eastep
8bc6f2144a Remove mention of variable name change in 4.4.8 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-21 15:14:40 -08:00
Tom Eastep
8c3bb22511 Additions to reserved shell variables 2010-02-21 08:34:21 -08:00
Tom Eastep
c030bc900c List variable names to be avoided in manpages and config file basics doc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-19 08:12:56 -08:00
Tom Eastep
ba01cecbcd Explain RATE and BURST in the basics doc 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-02-14 08:54:34 -08:00
Tom Eastep
28b1139ef7 Add 'Tips and Hints' as an alias for the config file basics doc -- Take 2 2010-02-06 17:08:00 -08:00
Tom Eastep
b449d8168e Add 'Tips and Hints' as an alias for the config file basics doc 2010-02-06 17:03:22 -08:00
Tom Eastep
f74771a118 More LOAD_HELPERS_ONLY documentation 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-21 20:30:35 -08:00
Tom Eastep
505a2bac22 Make it clear that the variable expansion restriction applies to config files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-13 08:38:16 -08:00