holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
10,081 Commits 104 Branches 736 Tags 54 MiB
fb442cebbe
Commit Graph

834 Commits

Author SHA1 Message Date
Tom Eastep
4464094773 Update release documents for DHCPfwd 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-12 07:51:20 -08:00
Tom Eastep
fc8bfdcbf9 Update release documents 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-11 14:49:45 -08:00
Tom Eastep
54b21365c2 Update release documents for [...] change 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-08 13:58:15 -08:00
Tom Eastep
e3c75dcfcc Document the restoration of SAVE_IPSETS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 11:54:59 -08:00
Tom Eastep
b491eae3c0 Document Lenny/xtables-addons hack 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2010-01-04 10:20:40 -08:00
Tom Eastep
15a1b39822 Update change log 2009-12-19 16:40:13 -08:00
Tom Eastep
9cf75a4253 Revert "this is crap" 
This reverts commit 7be7ef6685.
 2009-12-19 16:05:28 -08:00
Tom Eastep
7be7ef6685 this is crap 2009-12-19 16:05:13 -08:00
Tom Eastep
508e1123bb Revert change that allowed out of order policies 2009-12-19 07:24:17 -08:00
Tom Eastep
43c45a064c Add current and limit to conntrack table display 2009-12-12 09:10:24 -08:00
Tom Eastep
9988cfb619 Remove silly logic in expand_rule() 2009-12-10 08:00:18 -08:00
Tom Eastep
a150ed1a72 Update change log 2009-12-08 13:30:55 -08:00
Tom Eastep
79ce532b69 Document fix for 'reload -c' 2009-12-08 08:30:37 -08:00
Tom Eastep
4076a6bca7 Fix ENHANCED_REJECT and MODULE_SUFFIX 2009-12-07 13:55:49 -08:00
Tom Eastep
c8616d4c67 Fix Shorewall6 capability detection 2009-12-05 21:35:05 -08:00
Tom Eastep
ee2195e745 Allow LOGFILE=/dev/null 2009-12-03 16:30:06 -08:00
Tom Eastep
a188fec942 Auto-load cls_flow and search .../sched for modules 2009-12-03 12:20:58 -08:00
Tom Eastep
4c7731fee6 Remove change log error for rejected change 2009-12-03 10:44:36 -08:00
Tom Eastep
e5106f10bc Revert 8ff4d004c0 2009-11-28 07:23:23 -08:00
Tom Eastep
4e8d753682 Revert "Finish Virtual Zones" 
This reverts commit 222c8cf88f.
 2009-11-28 07:20:52 -08:00
Tom Eastep
222c8cf88f Finish Virtual Zones 2009-11-26 12:14:58 -08:00
Tom Eastep
8ff4d004c0 Better virtual zone implementation 2009-11-25 18:14:14 -08:00
Tom Eastep
8263ea1312 Limit providers to 15 2009-11-25 12:18:08 -08:00
Tom Eastep
d189c08533 Revert "Add 'virtual' zone support" 
This reverts commit a2cd4bd1f4.
 2009-11-25 11:51:13 -08:00
Tom Eastep
a2cd4bd1f4 Add 'virtual' zone support 2009-11-25 09:42:28 -08:00
Tom Eastep
d3d21d4d18 Fix 'show policies' in Shorewall6[-lite] 2009-11-23 13:50:41 -08:00
Tom Eastep
cc809eaf78 Complete merge of 4.4 branch into master 2009-11-23 11:15:33 -08:00
Tom Eastep
c17ac8f23f commit crap for now 2009-11-23 11:13:57 -08:00
Tom Eastep
532105ec39 Allow specific policy to supersede a wildcard policy 2009-11-23 10:02:04 -08:00
Tom Eastep
b30cae89e3 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:56:15 -08:00
Tom Eastep
99a35c1bf0 Allow <zone>::<serverport> in the rules file DEST column 2009-11-23 09:33:16 -08:00
Tom Eastep
90170d6018 Update changelog 2009-11-22 08:58:06 -08:00
Tom Eastep
720442b400 Fix merge screwup 2009-11-22 08:43:32 -08:00
Tom Eastep
bd9c0ac285 Generate error on port == 0 2009-11-22 08:39:03 -08:00
Tom Eastep
c8209f4ce2 Apply bridge fix to 4.4 2009-11-22 08:18:23 -08:00
Tom Eastep
c7de19cf39 Allow specific policy to supersede an expanded one 2009-11-21 13:56:40 -08:00
Tom Eastep
cbe944c354 Open the 4.5.0 Thread 2009-11-21 11:41:10 -08:00
Tom Eastep
ecf6a0ec4a Open 4.4.5 2009-11-21 11:08:50 -08:00
Tom Eastep
bce4d51a18 Allow wide MARK values in tcclasses when WIDE_TC_MARKS=Yes 2009-11-21 07:54:42 -08:00
Tom Eastep
c5bb493b29 Fix class number assignment when WIDE_TC_MARKS=Yes 2009-11-20 12:25:15 -08:00
Tom Eastep
9d5dd2ad3a Implement an '-l' option to the 'show' command 2009-11-16 15:14:24 -08:00
Tom Eastep
2a910ebddf Suppress redundant tests for provider availability in route rules processing 2009-11-16 12:43:44 -08:00
Tom Eastep
31f01fe765 Document fixing route rule addition code 2009-11-16 11:20:02 -08:00
Tom Eastep
f5a019becc Implement 'show policies' command 2009-11-15 09:24:56 -08:00
Tom Eastep
893a847c87 Suppress extra COMMENT warnings 2009-11-10 17:17:55 -08:00
Tom Eastep
bf8c38e054 Add ZONE2ZONE option to shorewall.conf 2009-11-10 14:12:55 -08:00
Tom Eastep
89bdcf9a3d Implement 'physical' option 2009-11-06 07:27:44 -08:00
Tom Eastep
28b660c853 Avoid reporting bogus duplicate interface with two bridges and wildcard ports 2009-11-05 11:04:14 -08:00
Tom Eastep
4548db58da Relax port list limitation in /etc/shorewall/routestopped 2009-11-03 11:36:32 -08:00
Tom Eastep
4f5c602d5f Fix .spec error and document logrotate files 2009-11-03 10:12:38 -08:00
Tom Eastep
11ddfa92e9 Eliminate Perl run-time errors out of move_rules() 2009-11-01 17:14:42 -08:00
Tom Eastep
23d0806da2 Change Shorewall6 default STARTUP_LOG and LOG_VERBOSITY 2009-11-01 11:09:17 -08:00
Tom Eastep
f0b4b1f42e Add limit option to tcclasses 2009-10-26 12:23:32 -07:00
Tom Eastep
b3571261dd Fix optional providers 2009-10-24 12:05:44 -07:00
Tom Eastep
3e2cf982a3 Correct messages issued when a provider is not added 2009-10-24 08:50:15 -07:00
Tom Eastep
86df82a29a Fix IPv6 address validation error 2009-10-23 13:41:51 -07:00
Tom Eastep
d0cda6b6ea Add TRACK_PROVIDERS option 2009-10-20 13:24:17 -07:00
Tom Eastep
49f361124e Make 'track' the default 2009-10-20 12:24:28 -07:00
Tom Eastep
abc9ab061a Remove superfluous variables from generated script 2009-10-19 07:25:03 -07:00
Tom Eastep
f3043f1453 Document nested zone fix 2009-10-17 11:06:36 -07:00
Tom Eastep
b38841798e Fix initialization 2009-10-15 13:43:46 -07:00
Tom Eastep
990a9f0fdc Fix RETAIN_ALIASES 2009-10-13 14:36:47 -07:00
Tom Eastep
83a9d8dd1b Rename 'object' to 'script' 2009-10-05 15:43:29 -07:00
Tom Eastep
ab4e7cffcf Document fix to routestopped 2009-10-03 10:53:53 -07:00
Tom Eastep
beac09e45f STARTUP_LOG changes 2009-10-02 16:10:14 -07:00
Tom Eastep
964cba79a9 Initialize 4.4.3 2009-10-02 11:31:08 -07:00
Tom Eastep
393673a884 Allow MARK in action body -- take 2 2009-09-25 16:15:56 -04:00
Tom Eastep
428c3d1e4e Hack to make new LIMIT stuff work on ancient iptables releases 2009-09-20 09:12:35 -04:00
Tom Eastep
120aade417 Allow Extension Scripts for Accounting Chains 2009-09-15 12:22:51 -07:00
Tom Eastep
a5f3a05341 Fix typo in the Introduction 2009-09-14 13:43:32 -07:00
Tom Eastep
8fdebf0c38 Add new columns to macros 2009-09-13 08:09:40 -07:00
Tom Eastep
07d8872823 Indicate that Squeeze 'will' include 4.4 2009-09-12 09:20:38 -07:00
Tom Eastep
9b0a9e8ecd Add -<family> to 'ip route del default' command 2009-09-12 08:48:52 -07:00
Tom Eastep
8c2a228a7d Apply Jesse Shrieve's SNAT patch 2009-09-11 07:47:31 -07:00
Tom Eastep
7c1dd35a00 Update release documents 2009-09-09 12:18:31 -07:00
Tom Eastep
bb83db3eb9 Don't call compile_stop_firewall() during 'check'; call process_routestopped() instead - change log 2009-09-08 12:55:14 -07:00
Tom Eastep
b03d502bbb Allow comments on continued lines 2009-09-06 16:17:22 -07:00
Tom Eastep
70ebe17cb3 Reimplement MAPOLDACTIONS=Yes 2009-09-06 13:37:24 -07:00
Tom Eastep
ec94ed638e Better modularization of Chains and Actions 2009-09-05 08:43:14 -07:00
Tom Eastep
03821dc22c Process routestopped file during 'check' 2009-09-03 19:27:25 -07:00
Tom Eastep
f3455b107d 4.4.2 release doc initialization and update 2009-09-03 14:58:46 -07:00
Tom Eastep
62b1dbcd7f Document portlist-splitting change 2009-09-02 15:30:26 -07:00
Tom Eastep
fbfa4b4e49 Update release documents and make minor change to faq 2009-08-31 14:19:15 -07:00
Tom Eastep
2bb92a79f3 Fix silly hole in zones file parsing 2009-08-30 08:05:10 -07:00
Tom Eastep
d31721a066 Fix rule generated by MULTICAST=Yes -- release documents 2009-08-29 09:34:16 -07:00
Tom Eastep
1ef00c547b Disallow 'nets=' in a multi-zone interface definition 2009-08-29 07:41:27 -07:00
Tom Eastep
4809314fc1 Allow extending a zone defined with nets= 2009-08-29 07:20:16 -07:00
Tom Eastep
acfdc7e481 nets= allows multicast 2009-08-28 15:17:10 -07:00
Tom Eastep
5db7e77462 Turn off IP forwarding in the standalone example -- update release docs 2009-08-28 08:31:48 -07:00
Tom Eastep
383f3e8bcf Fix nested IPSEC zones 2009-08-26 12:44:10 -07:00
Tom Eastep
1b26c65cbc Fix logging in rules at the end of INPUT and OUTPUT 2009-08-25 09:22:26 -07:00
Tom Eastep
088e164f18 Redefine 'full' when used in a sub-class definition 2009-08-24 11:56:16 -07:00
Tom Eastep
e24dbb9aea Add 'clean' target to Makefiles 2009-08-23 10:43:01 -07:00
Tom Eastep
622db3655f More updates/corrections to change notes 2009-08-18 08:50:50 -07:00
Tom Eastep
4bc1fb145a Update change notes 2009-08-18 08:44:55 -07:00
Tom Eastep
0557148bec Avoid double globals initialization for IPv6 2009-08-16 09:24:51 -07:00
Tom Eastep
55f75604b3 Add support for 'persistent' 2009-08-15 08:15:38 -07:00
Tom Eastep
883f415e53 Start 4.4.1 2009-08-14 14:46:31 -07:00
Tom Eastep
2bac824207 Fix provider number in masq entry 2009-08-12 13:52:56 -07:00
Tom Eastep
55c879e4e6 Fix log record displays 2009-08-07 13:33:07 -07:00
Tom Eastep
70f46c02cc Fix logging NAT rules 2009-08-05 12:48:14 -07:00
Tom Eastep
999a00dc77 Remove need for '-v-1' when compiling to stdout 2009-08-03 11:20:34 -07:00
Tom Eastep
4af6c7650e Correct handling of nested IPSEC zone 2009-07-29 14:35:27 -07:00
Tom Eastep
8d8920e7ad Disallow ipsec zones nested within an ip zone 2009-07-29 07:49:06 -07:00
Tom Eastep
f2f8cab962 Make 'any' a reserved zone name 2009-07-26 12:29:37 -07:00
Tom Eastep
26cb2b1eeb Allow Shorewall6 to recognize TC, IP and IPSET 2009-07-26 12:26:49 -07:00
Tom Eastep
c77f462d2d Delete prog.functions and prog.functions6 2009-07-24 14:51:24 -07:00
Tom Eastep
4fd338f3ca Fix 'rpm -U' from earlier versions 2009-07-21 12:32:25 -07:00
Tom Eastep
f16b2300b6 Remove references to Shorewall-shell, Shorewall-perl and prior Shorewall versions from the manpages 2009-07-15 17:50:55 -07:00
Tom Eastep
8e9bef0a61 Fix routing with no providers 2009-07-15 13:03:49 -07:00
Tom Eastep
887a643f9e Initiate RC1 2009-07-12 10:06:57 -07:00
Tom Eastep
f88048ebe4 More revert conflicts 2009-07-06 18:23:23 -07:00
Tom Eastep
bc85b615ba More new macros 2009-06-29 21:05:23 -07:00
Tom Eastep
050375b211 Delete DISABLE_IPV6 option 2009-06-29 18:33:13 -07:00
Tom Eastep
9dbafc59d0 Fix 'findgw' 2009-06-29 08:14:53 -07:00
Tom Eastep
40bb8283d2 Verify the availability of the LOG target 2009-06-25 13:50:27 -07:00
Tom Eastep
f4338b52fe Fix 'show dynamic' 2009-06-24 15:28:43 -07:00
Tom Eastep
6eb202666c Fix for mis-configured interfaces 2009-06-24 08:58:37 -07:00
Tom Eastep
bd55a545b5 Rename lib.user to lib.private 2009-06-20 09:35:08 -07:00
Tom Eastep
01d046fac9 Add lib.user extension script 2009-06-19 14:39:45 -07:00
Tom Eastep
117116eb4e Add USER/GROUP column to /etc/shorewall/masq 2009-06-19 08:00:26 -07:00
Tom Eastep
dcb4ca61a5 Add iptrace/noiptrace commands 2009-06-17 12:03:05 -07:00
Tom Eastep
abe07c9fae Add 'upnpclient' interface option 2009-06-15 13:34:35 -07:00
Tom Eastep
4f675e2e18 Update release documents 2009-06-15 06:49:57 -07:00
Tom Eastep
a6d2497653 Integerize r2q before using it in a 'qdisc add' command 2009-06-14 14:29:12 -07:00
Tom Eastep
265e4fa546 First cut at 4.4 2009-06-12 15:51:43 -07:00
Tom Eastep
ee0667c9da Fix mnemonic handling in tcfilters 2009-06-12 07:27:08 -07:00
Tom Eastep
d079e69a1b Correct Typo in 2-interface IPv6 Sample shorewall6.conf 2009-06-09 07:59:23 -07:00
Tom Eastep
91b0e5aaa1 Update version and release docs to start work on 4.3.13 2009-06-07 10:52:53 -07:00
Tom Eastep
c370dc650c Remove support for 'norfc1918' and it's associated settings in shorewall.conf 2009-06-05 10:51:30 -07:00
Tom Eastep
7621859e0f Fix 'findgw' 2009-06-04 13:03:56 -07:00
Tom Eastep
7b20cf2af9 Fix 'shorewall reset' 2009-05-31 10:21:37 -07:00
Tom Eastep
d33532d6cd Add TOS field to tcfilters 2009-05-28 16:41:14 -07:00
Tom Eastep
97fa7a0513 Add LENGTH column to tcfilters file 2009-05-28 14:29:33 -07:00
Tom Eastep
7418e27308 Deimplement ipset binding support 2009-05-28 07:22:48 -07:00
Tom Eastep
a0071a21e8 Tweak and document HFSC implementation 2009-05-24 10:06:36 -07:00
Tom Eastep
4cf2c1b59f Avoid 'large quantum' warnings during start/restart 2009-05-23 09:04:06 -07:00
Tom Eastep
20805a6e46 Add Traceroute Macro for IPv6 2009-05-15 17:22:33 -07:00
Tom Eastep
f75f4158b3 Add 'findgw' user exit 2009-05-11 14:35:20 -07:00
Tom Eastep
887fee7618 Merge branch 'master' of ssh://teastep@shorewall.git.sourceforge.net/gitroot/shorewall 
Conflicts:

	Shorewall/changelog.txt
	Shorewall/releasenotes.txt
 2009-05-09 10:03:33 -07:00
Tom Eastep
be9573d30f Fix 'start' with AUTOMAKE=Yes 2009-05-09 10:00:33 -07:00
Tom Eastep
e1771ebead Externalize the 'flow' classifier 2009-05-08 14:05:27 -07:00
Tom Eastep
ff26ff4697 Fix 'iprange' command 2009-05-07 07:21:46 -07:00
Tom Eastep
11962560fe Start 4.3.11 release documentation 2009-05-05 14:21:34 -07:00
Tom Eastep
8f6130cca4 Update to nested classes; document nested classes in the release docs 2009-05-04 16:03:14 -07:00
Tom Eastep
5b6769a722 Fix release documents re IPMARK; correct encode/decode 2009-05-04 12:04:04 -07:00
Tom Eastep
f533468da0 Resolve merge conflicts 2009-05-03 09:56:13 -07:00
Tom Eastep
90b07d849d Fix compile for export 2009-05-03 09:01:33 -07:00
Tom Eastep
16826aeb31 Remove IPMARK support 2009-05-03 08:38:27 -07:00
Tom Eastep
3e0a55f072 Fix 'all' in the SOURCE of DNAT- rules 2009-05-02 13:23:29 -07:00
Tom Eastep
c1cf1695c0 Deprecate interface names in the SOURCE column of /etc/shorewall/masq 2009-04-29 15:13:22 -07:00
Tom Eastep
7cf5c32358 Treat Class IDs as hex rather than as decimal numbers 2009-04-23 12:43:57 -07:00
Tom Eastep
b6090948dd Allow compile to STDOUT 2009-04-21 09:41:23 -07:00
Tom Eastep
34791612b5 Implement WIDE_TC_MARKS. Fix problems reported by Steven Springl. 2009-04-20 13:26:47 -07:00
Tom Eastep
aa4afa6b66 Prepare 4.3.10 2009-04-19 17:37:36 -07:00
teastep
e934ce9d85 Document IPMARK support in release documents 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9938 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-19 17:25:14 +00:00
teastep
985c551d26 Add IP, TC and IPSET configuration options 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9932 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:28:25 +00:00
teastep
be41b99ae8 Allow Shorewall6 on kernel 4.2.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9929 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-18 16:19:31 +00:00
teastep
0cc60ea021 Avoid 'Invalid BROADCAST address' errors 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9919 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 22:57:59 +00:00
teastep
fd7108784f Allow Shorewall6 on kernel 4.2.24 
Signed-off-by: Tom Eastep <teastep@shorewall.net>


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9908 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-17 16:04:54 +00:00
teastep
347090da6e Correct netmask generation in tcfilters 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9850 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-12 15:22:00 +00:00
teastep
ae169f00a7 Implement rules that also log as a separate chain. Preserve original target in logging rules 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9833 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-09 18:45:21 +00:00
teastep
cd1f5d3c83 Document the hashlimit feature 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9827 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-07 17:35:06 +00:00
teastep
8a9af0acf5 Fix LOG_MARTIANS=Yes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9784 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 16:33:56 +00:00
teastep
d950fa27f2 Allow <pathname> to be omitted from the 'compile' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-02 01:12:34 +00:00
teastep
dbf23f64e2 Removal of SAME support 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9774 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-04-01 01:31:04 +00:00
teastep
6c205d922a Add AUTOMAKE option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9767 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-31 17:31:23 +00:00
teastep
cddd1b1ae9 Use iptables[6]-restore to instantiate the 'stopped' ruleset 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9761 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-30 00:49:00 +00:00
teastep
b663644d0d Ignore leading white space on certain continuation lines 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9740 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-27 16:55:51 +00:00
teastep
9328f0fc4c Detect dhclient dynamic gateway 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9734 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-24 20:58:04 +00:00
teastep
6013e8b53d Improve error message for startup errors. Document in release documents. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9730 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-23 22:51:05 +00:00
teastep
6dac69554f Apply Tuomo Soini's patch for USE_DEFAULT_RT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-19 14:04:57 +00:00
teastep
5ea4f651eb Update version 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9697 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-17 18:51:17 +00:00
teastep
f91a5dbf0c Document the deprecation of the old parameter macro syntax. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9696 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-16 18:01:42 +00:00
teastep
ec52331dfc More port OPTIONS changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9622 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-07 20:22:20 +00:00
teastep
d83334a1d1 Document dynamic zones; add 'list' command to list dynamic zone content 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9613 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-06 20:25:59 +00:00
teastep
062c7ec822 Change 'Provides' for Shorewall6-lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-05 16:18:58 +00:00
teastep
3adff7f550 release doc update; add comments to prog.* 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9574 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-03-02 03:25:16 +00:00
teastep
698d6fc97e Fix Shorewall6 compilation issues -- Documentation 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9553 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-27 01:17:59 +00:00
teastep
d1bbc2e820 Fix split_list1() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9542 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 16:53:33 +00:00
teastep
08ba35ca29 Port changes from branches/4.2 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9541 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-26 16:34:31 +00:00
teastep
08c12ccd36 Finish SAME -- Document 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9527 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-25 17:39:32 +00:00
teastep
dba858068c Add nets= OPTION to the interfaces file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9520 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-23 23:39:46 +00:00
teastep
c355ec2509 More combining of products 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9489 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 17:43:56 +00:00
teastep
01c45b8897 Rename Shorewall-common to Shorewall 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9487 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2009-02-22 17:27:58 +00:00
teastep
46364902e3 Move Shorewall to Shorewall-common 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5817 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-04-03 01:33:28 +00:00
teastep
8f5d49a517 Fix ipsecnat tunnels 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5637 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-22 22:27:26 +00:00
teastep
b0030d80d9 Commit fix to built-in actions wrt 'none' 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5626 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-22 17:27:02 +00:00
teastep
f136f6c26d Update lib.cli to account for mindless renaming of /proc/net/ip_conntrack to /proc/net/nf_conntrack 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5565 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-18 02:57:30 +00:00
teastep
2f7c8f9120 Update modules for kernel 2.6.20 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5564 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-18 02:53:58 +00:00
teastep
b3ae34d7be Fix CRITICALHOSTS bug 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5547 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-15 16:03:31 +00:00
teastep
6cc17e8a32 Fix CONTINUE policy bug and document other changes 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5525 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-14 19:33:31 +00:00
teastep
6ad67cfb80 Rest of the fix for proxy arp clearing 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5492 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-11 16:37:53 +00:00
teastep
310a1cb688 Don't clear proxy arp unconditionally 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5456 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-07 16:28:29 +00:00
teastep
f6178d50de Fix obscure bug in rule activation when zone exclusion is present 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5452 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-06 03:51:14 +00:00
teastep
052739fcfd Restore missing function merge_macro_source_dest() 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5449 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-03-02 16:26:04 +00:00
teastep
423610a24d Add missing ! logic 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5445 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-26 16:48:24 +00:00
teastep
418e2bf49c Update verions to 3.4.0-RC3 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5441 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-25 16:09:36 +00:00
teastep
fa1df2ecf8 Fix IMPLICIT_CONTINUE intra-zone policy 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5433 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-23 17:07:13 +00:00
teastep
179625239c Fix exit status from start/restart 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5426 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-20 17:52:29 +00:00
teastep
64872be247 Fix restoration of iprange dynamic blacklist entries 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5423 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-20 16:43:45 +00:00
teastep
32ab96b953 Don't ignore route_rules file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5411 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-16 16:05:36 +00:00
teastep
a4220f667e Add warning about balance and loose -- Release Documents 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5397 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-11 17:30:09 +00:00
teastep
fd1c74ca9f Add EXPORTPARAMS option 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5376 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-09 16:15:08 +00:00
teastep
53af71374f Add missing modules 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5368 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-06 21:29:30 +00:00
teastep
88cf980c52 More release document updates 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5358 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-04 17:25:26 +00:00
teastep
d42db46a4c Document 'compile' extension script 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5348 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-02-03 01:28:29 +00:00
teastep
0136dbbea8 Fix INCLUDE in params file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5326 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-30 17:57:10 +00:00
teastep
b2e012dc02 Document maclist fix 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5309 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-26 16:44:17 +00:00
teastep
a29f012303 Rename SixXS macro 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5300 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-25 18:28:16 +00:00
teastep
cfa26973d0 Document LITEDIR in release docs 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5284 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-24 17:34:04 +00:00
teastep
9b1e179b6b Update Version to Beta3 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-22 16:04:11 +00:00
teastep
ac3bb774b4 ipsecnat now implies ipsecnat:noah 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5249 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-17 23:41:59 +00:00
teastep
cb2287437f Improve error message on maclist upgraded record 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-15 19:27:15 +00:00
teastep
cffd08c0fe Fix handling of ipp2p:udp in an action body 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5209 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-09 15:55:47 +00:00
teastep
f6800555b6 Rename shorewall.conf->shorewall-lite.conf -- phase II 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5188 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-02 21:25:35 +00:00
teastep
949c6d2983 Allow both Shorewall and Shorewall Lite on the same system without file conflicts 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-02 16:01:46 +00:00
teastep
a0b42400a3 Add wait4ifup 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5180 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2007-01-01 00:40:42 +00:00
teastep
8558d49676 Fix for missing 'init' file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5172 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-30 18:04:15 +00:00
teastep
46cffe3dd3 Fix for empty blacklist file 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5171 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-30 17:30:53 +00:00
teastep
052158b6e9 Remove additional noise from log messages 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5142 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-20 16:14:31 +00:00
teastep
72ab052ef1 Correct silly typo that caused masq file to be ignored when nat file was empty 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-20 15:39:39 +00:00
teastep
9d431a0292 Document new failure logging 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5092 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-10 20:40:25 +00:00
teastep
75554a06be Allow tcrules in the POSTROUTING chain 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5066 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-08 22:43:46 +00:00
teastep
12cac4cb0d Change for OpenWRT compatibility 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5061 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-05 21:24:49 +00:00
teastep
9749b617ef Allow 'capabilities' file to be used with Shorewall 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5046 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-04 16:31:48 +00:00
teastep
7ad776f23e Restore 'try' command and improve 'safe-' commands 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5041 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-03 18:18:21 +00:00
teastep
bae18e9a67 Make colon after system name optional in the 'export' command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5036 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-02 17:11:33 +00:00
teastep
5af734ca77 Eliminate 'try' command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5029 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-12-01 16:36:17 +00:00
teastep
0ca8d0281c Second fix for .safe 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5022 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-30 00:23:33 +00:00
teastep
adfa31c8e4 Use multiport match in tcrules 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5018 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-29 00:38:10 +00:00
teastep
b8c694e86f Use fwmark classifier for unknown interfaces 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5013 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-28 00:05:52 +00:00
teastep
aa4fb4ff11 Use modules file in export directory if any 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4997 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-24 02:28:08 +00:00
teastep
f6323ea466 Remove command-specific help; add -t option to show command 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4969 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-21 22:52:07 +00:00
teastep
c17e322820 Remove /etc/shorewall/Documentation; strip documentation from shorewall.conf 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4957 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-20 23:39:46 +00:00
teastep
5054e21730 update release notes to start 3.3.6; fix typo 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4951 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-20 15:42:20 +00:00
teastep
84142f6148 Update version for 3.3.5 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4947 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-19 22:33:13 +00:00
teastep
1356944d23 Add Makefile just for /usr/share/shorewall/configfiles 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4859 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-12 18:19:17 +00:00
teastep
ab51f029cc Don't return error status on 'start' if Shorewall[-lite] is already started 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-11 16:20:59 +00:00
teastep
2a94144472 Don't create ingress qdisc for device with IN-BANDWIDTH == 0 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4831 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-10 18:53:12 +00:00
teastep
084063e760 Implement -c option to [re]load 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4818 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-09 15:57:58 +00:00
teastep
bad66d0f1a Move DNAT/REDIRECT processing code to lib.nat 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4817 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-09 04:18:49 +00:00
teastep
60aec9802d Fix whitespace in LOGFORMAT 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4808 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-08 00:16:30 +00:00
teastep
df38698709 Rename Documentation file in /etc/shorewall -- update release documents 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4804 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-06 18:20:48 +00:00
teastep
5551fe4589 Avoid compiling traffic shaping twice 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4781 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-01 18:57:35 +00:00
teastep
bbb71aacc5 Don't generate superfluous policy matches 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4780 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-11-01 17:15:23 +00:00
teastep
63ab99a28e Fix restoration of route with a metric 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4768 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-10-30 19:25:39 +00:00
teastep
c5f6d11acf Restore default route when last 'balance' provider is deleted 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4765 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-10-30 18:22:46 +00:00
teastep
cb1ec8d932 First cut at backing out routing changes from multiple providers 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4754 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-10-29 17:19:11 +00:00
teastep
2ed3d8611d Rename lib.commands to lib.cli and update makeshorewall to copy it to Shorewall Lite 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4746 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
 2006-10-28 14:46:43 +00:00