holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
15,549 Commits 104 Branches 736 Tags 54 MiB
f8b7815375
Commit Graph

15549 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Eastep
8b99f8caac
Merge branch 'master' into 5.2.4 
# Conflicts:
#	docs/SharedConfig.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 13:50:05 -08:00
Tom Eastep
8b2c79e5ce
Merge branch '5.2.3' into 5.2.4 
# Conflicts:
#	docs/Introduction.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-03-01 13:48:45 -08:00
Tom Eastep
dcde2bfa4a
Correct logic that decides if a reload is necessary during enable 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-26 15:22:17 -08:00
Tom Eastep
1ec81b7d7b
Add correct html.css file to code/docs/ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-26 11:39:58 -08:00
Tom Eastep
387b861759
Correct handling of ORIGDEST with OLD_CONNTRACK_MATCH 
- Also correct detection of OLD_CONNTRACK_MATCH in shorewall6

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-25 13:08:58 -08:00
Tom Eastep
f4e6d2fa56
Merge branch '5.2.3' of ssh://gitlab.com/shorewall/code into 5.2.3 
# Conflicts:
#	Shorewall/Perl/Shorewall/Chains.pm
#	Shorewall/Perl/Shorewall/Compiler.pm
 2020-02-24 15:40:07 -08:00
Tom Eastep
6798c2f2b0
Accomodate both DOCKER-ISOLATION and DOCKER-ISOLATION-STAGE-* 
Previously, the code assumed that either DOCKER-ISOLATION or
DOCKER-ISOLATION-STAGE-* would exist but not both. That has been corrected
 2020-02-24 15:35:50 -08:00
Tom Eastep
caa7475483
Accomodate both DOCKER-ISOLATION and DOCKER-ISOLATION-STAGE-* 
Previously, the code assumed that either DOCKER-ISOLATION or
DOCKER-ISOLATION-STAGE-* would exist but not both. That has been corrected
 2020-02-22 11:31:19 -08:00
Tom Eastep
3f5e1b5b60
Update interface file example in the Introduction article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-22 11:26:19 -08:00
Tom Eastep
e8f49bc9c7
Merge branch '5.2.3' 2020-02-18 11:11:53 -08:00
Tom Eastep
5021154867
Delete incorrect .css file from the code repository 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-18 11:10:28 -08:00
Tom Eastep
f831d9a988
Correct mal-formed entries in Build.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-16 11:02:37 -08:00
Tom Eastep
31b558b7f9
Filter out LIBVIRT rules when saving Docker Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-16 10:36:16 -08:00
Tom Eastep
367a5f7d97
Filter out LIBVIRT rules when saving Docker Rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-16 10:33:18 -08:00
Tom Eastep
4efac2fda1
Handle essential IPv6-ICMP types when firewall is stopped 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-06 15:21:51 -08:00
Tom Eastep
5f50b70618
Merge branch '5.2.3' into 5.2.4 
# Conflicts:
#	docs/SharedConfig.xml

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-06 14:08:33 -08:00
Tom Eastep
b437f609e5
Merge branch '5.2.3' 2020-02-01 11:01:59 -08:00
Matt Darfeuille
b897fe2b9d
Update build article 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-01 11:01:06 -08:00
Matt Darfeuille
802ff1da4e
Harmonize permissions 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-01 11:00:41 -08:00
Tom Eastep
f05bd969af Revert "Add targetname files" 
This reverts commit c9eb443574.
 2020-02-01 09:46:05 -08:00
Tom Eastep
7aaa04149e Merge branch '5.2.3' 
# Conflicts:
#	Shorewall/manpages/shorewall-files.xml
#	docs/SharedConfig.xml
 2020-02-01 09:45:33 -08:00
Matt Darfeuille
093e55083c Ignore empty target files 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-02-01 09:42:07 -08:00
Tom Eastep
c9eb443574 Add targetname files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2020-01-29 10:41:55 -08:00
Tom Eastep
0aabb81c03
Merge branch '5.2.4' 2020-01-09 09:22:31 -08:00
Tom Eastep
c763525e78
Update Install.xml to point to new location of the GPG key 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-31 13:13:51 -08:00
Tom Eastep
533e2472da
Update Install.xml to point to new location of the GPG key 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-31 13:12:23 -08:00
Tom Eastep
08da235896
Correct IPv6 Address Range parsing 
Previously, such ranges were required to be of the form [<addr1>-<addr2>]
rather than the more standard form [<addr1>]-[<addr2>]. In the snat file
(and in nat actions), the latter form was actually flagged as an error
while in other contexts, it resulted in a less obvious error being raised.

With this change, both forms are accepted.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-23 10:02:48 -08:00
Tom Eastep
77cad81ba7
Clean up comments 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-12-23 09:59:29 -08:00
Tom Eastep
9213d7e707
Clean up Shorewall6[-lite] manpage links 
- there were many links pointing to /manpages6/shorewall6... that should
  have been updated to point to /manpages/shorewall...

- this commit corrects those links

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-11-27 15:46:57 -08:00
Tom Eastep
157abcbd37
Allow NFQUEUE 'bypass' in the policy file 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-21 14:41:02 -07:00
Tom Eastep
6da498510c
Correct mss specification when using ipcomp 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-16 11:45:08 -07:00
Tom Eastep
2b7a37e42a
Minor cleanup of the Chains module 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-16 11:44:02 -07:00
Tom Eastep
84a220a651
Correct mss specification when using ipcomp 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-10-16 11:41:21 -07:00
Tom Eastep
51b9589c48
Merge branch 'more-bitcoin-ports' of ssh://teastep@git.code.sf.net/u/talkless/shorewall 2019-09-10 08:10:53 -07:00
Vincas Dargis
762df5e18c Add macros for Bitcoin's Testnet and Regtest 
Add additional macros for Bitcoin daemon running in Testnet and Regtest
modes.
 2019-09-07 16:36:42 +03:00
Tom Eastep
cb56991fee
Merge branch '5.2.3' 2019-09-03 07:45:57 -07:00
Tom Eastep
54c7e1a607
Correct typo in FTP.xml 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-09-03 07:42:06 -07:00
Tom Eastep
c4d5bb904b
Correct description of 'bypass' in shorewall-rules(5). 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-08-26 15:45:26 -07:00
Tom Eastep
40f6192e19
Make 'AUTOMAKE=No' the update default 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-08-25 14:20:54 -07:00
Tom Eastep
7051daeb08
Correct handle of multi-queue NFQUEUE when passed to a macro 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-08-25 14:18:54 -07:00
Tom Eastep
a9c42e1eaa
Correct NFQUEUE policy with per-CPU queues 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-08-25 14:18:06 -07:00
Tom Eastep
8df70406df
Update the Shorewall Lite documentation to use 'remote-' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-04-28 10:49:52 -07:00
Tom Eastep
8b0cfdf779
Clarify SWITCH settings and reload 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-04-25 14:26:18 -07:00
Tom Eastep
c127cec76c
Merge branch '5.2.3' 2019-04-14 14:35:09 -07:00
Tom Eastep
6b21135ade
Correct handling of an ipset in the SPORT column 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-04-11 18:37:27 -07:00
Tom Eastep
2f66381a4a
Allow multiple protocols to be specified for a helper 
- the protocol list is specified in the %helpers hash as an array reference
  e.g., "[UDP,TCP]". Note that those are protocol *numbers*, not names.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-04-01 15:14:34 -07:00
Tom Eastep
aa97b1b283
Clean up the Introduction article 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-04-01 15:10:27 -07:00
Matt Darfeuille
53495ec0a8
Point exclusively to shorewall.org 
Signed-off-by: Matt Darfeuille <matdarf@gmail.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-03-25 11:35:00 -07:00
Tom Eastep
2f3f6ffa15
Revert "Make $update global in Config.pm" 
This reverts commit b9d0821acb.
 2019-03-17 08:02:53 -07:00
Tom Eastep
60f2f3b0d0
Allow variable expansion when processing shorewallrc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2019-03-14 20:38:10 -07:00