holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity
14,855 Commits 104 Branches 736 Tags 54 MiB
ff2323b249
Commit Graph

749 Commits

Author SHA1 Message Date
Tom Eastep
0c66e5f1b2 More Openwrt support in Shorewall-init from Matt Darfeuille 
- Also, various cleanup in install/uninstall scripts

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2016-01-04 15:45:21 -08:00
Tom Eastep
89d91d37a1 Add Shorewall-init installer support for OpenWRT 
- Supply sysconfig files for all products

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-12-27 16:47:31 -08:00
Tom Eastep
0bc250ba11 More configure/install/uninstall fixes from Matt Darfeuille 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-12-06 12:04:34 -08:00
Tom Eastep
4139c932a4 More configure/install/uninstall fixes from Matt Darfeuille 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-12-05 08:31:22 -08:00
Tom Eastep
6f560bda38 More OpenWRT tweaks from Matt Darfeuille 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-11-06 14:01:02 -08:00
Tom Eastep
3d4cde76aa OpenWRT support in the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-11-04 13:29:59 -08:00
Tom Eastep
d1bad364e9 Correct syntax error in installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-31 17:54:20 -07:00
Tom Eastep
1358ec2d87 Remove ${SYSCONFDIR}/$PRODUCT in the -lite uninstallers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-31 13:37:08 -07:00
Tom Eastep
209d5d0766 Make the -lite uninstallers work on OpenWRT 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-31 13:23:19 -07:00
Tom Eastep
aa680d8472 Avoid double slashes in pathnames within the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-31 12:57:33 -07:00
Tom Eastep
073b2992cc Require the 'install' utility in the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-10-31 12:43:01 -07:00
Tom Eastep
bb538a7c10 Merge branch 'master' into 5.0.0 
Conflicts:
	Shorewall-core/lib.common
	Shorewall-core/shorewallrc.debian.systemd
	Shorewall-lite/shorewall-lite.service.debian
	Shorewall/Perl/Shorewall/Chains.pm
	Shorewall/Perl/Shorewall/Compiler.pm
	Shorewall/Perl/Shorewall/Config.pm
	Shorewall/Perl/Shorewall/Misc.pm
	Shorewall/Perl/Shorewall/Raw.pm
	Shorewall/Perl/Shorewall/Tc.pm
	Shorewall/Perl/compiler.pl
	Shorewall/Perl/prog.footer
	Shorewall/lib.cli-std
	Shorewall/manpages/shorewall-mangle.xml
	Shorewall/manpages/shorewall.conf.xml
	Shorewall/manpages/shorewall.xml
	Shorewall/shorewall.service.debian
	Shorewall6-lite/shorewall6-lite.service.debian
	Shorewall6/manpages/shorewall6-mangle.xml
	Shorewall6/manpages/shorewall6.conf.xml
	Shorewall6/manpages/shorewall6.xml
	Shorewall6/shorewall6.service.debian
	docs/MultiISP.xml
	docs/Shorewall_Squid_Usage.xml
 2015-10-12 10:55:36 -07:00
Tom Eastep
3b59e46799 Restore Debian-specific service files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-12 10:19:07 -07:00
Tom Eastep
ef9e75753a Restore .214 files 
- Also merge Debian changes from 4.6.12

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-08-01 11:23:35 -07:00
Tom Eastep
67589cab69 More version changes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-28 10:59:11 -07:00
Tom Eastep
f40373d60c Update config file version and copyrights 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-28 10:50:19 -07:00
Tom Eastep
cecc81ce82 Update .service files 
- make the .214 versions the default and remove the ones name *.214
- Add 'ExecReload' to all but Shorewall-init
- Create Debian-specific versions with /etc/default rather than /etc/sysconfig
 2015-07-26 10:58:03 -07:00
Tom Eastep
f9ec0c6930 New 'reload' and 'restart' semantics 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-07-26 09:59:49 -07:00
Tom Eastep
0414166d6d 'show connections' enhancement 
- Allow tayloring of the entries displayed by specifying conntrack
  -L options.
 2015-06-29 14:55:47 -07:00
Tom Eastep
bbdbdf7c47 Clean up 'call' description in the manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-25 07:06:17 -07:00
Tom Eastep
ba7afcaeae Make 'call' a supported command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-05-21 10:38:35 -07:00
Tom Eastep
2cea78e6df Add the 'reenable' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-28 13:02:12 -07:00
Tom Eastep
b128c30813 Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code 
Get Tuomo Soini's fix for serviced startup
 2015-04-11 07:33:15 -07:00
Tuomo Soini
194252afd3 systemd: fix shorewall startup by adding Wants=network-online.target 
Before shorewall failed to load if there were interfaces which were required
but there wasn't any other service which wanted network-online.target.
By adding Wants=network-online.target we make sure shorewall[6]* startup
won't fail if there are required interfaces

Signed-off-by: Tuomo Soini <tis@foobar.fi>
 2015-04-11 10:50:54 +03:00
Tom Eastep
16e3cb1b43 More manpage updates 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-07 10:14:42 -07:00
Tom Eastep
27c1ffc5fb Include full syntax in lists of CLI commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-07 09:23:58 -07:00
Tom Eastep
0e54a86e82 Add descriptions of 'list' and 'ls' to the CLI manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-06 09:39:41 -07:00
Tom Eastep
eb3a162560 Apply Matt Darfeuille's fix for fatal_error() 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-04-02 13:26:51 -07:00
Tom Eastep
0c11870e46 Implement the 'savesets' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-17 10:03:12 -07:00
Tom Eastep
86d6d6900e Improve 'close' and 'show opens' commands 
- close accepts a rule number
- list opens displays rule numbers

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-14 08:54:30 -07:00
Tom Eastep
d7a1ca41f9 Another attempt to correct the formatting of the manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-07 07:56:34 -08:00
Tom Eastep
1e6c266b51 Formatting fix (I hope) 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 15:37:56 -08:00
Tom Eastep
095e523c9f Add 'show opens' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 13:10:23 -08:00
Tom Eastep
2817060edb Improvements to the 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-06 08:13:44 -08:00
Tom Eastep
30e750608b Fix broken links 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-05 16:23:49 -08:00
Tom Eastep
a85fdc45ac Implement 'open' and 'close' commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-03-05 16:20:54 -08:00
Orion Poplawski
9ad0b297e2 Supporting xz compressed kernel modules 
- I've attached a patch that adds xz support to the default MODULE_SUFFIX.
- I'm wondering it wouldn't be better to not have MODULE_SUFFX=ko in various
sample configs so that the default value is used instead:

./Shorewall/configfiles/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/Universal/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/three-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/two-interfaces/shorewall.conf:MODULE_SUFFIX=ko
./Shorewall/Samples/one-interface/shorewall.conf:MODULE_SUFFIX=ko
./docs/MultiISP.xml:MODULE_SUFFIX=ko
./docs/MyNetwork.xml:MODULE_SUFFIX=ko
./Shorewall6/configfiles/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/Universal/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/three-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/two-interfaces/shorewall6.conf:MODULE_SUFFIX=ko
./Shorewall6/Samples6/one-interface/shorewall6.conf:MODULE_SUFFIX=ko

- Is:

MODULE_SUFFIX=

sufficient to use the default value or does it need to be commented out?

Thanks,

  Orion

--
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion@nwra.com
Boulder, CO 80301                   http://www.nwra.com

>From f13edf8fc07c7b62825408b8665b10d6014d368d Mon Sep 17 00:00:00 2001
From: Orion Poplawski <orion@cora.nwra.com>
Date: Mon, 26 Jan 2015 09:48:48 -0700
Subject: [PATCH] Support xz compressed modules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2015-02-06 12:51:00 -08:00
Tom Eastep
93285e2798 Cleanup of preceding fix 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 14:05:43 -08:00
Tom Eastep
2430796495 Document the -c option of 'show routing' 
Correct choice in show commands to 'req'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 12:15:28 -08:00
Tom Eastep
06ef7596cd Document the -c 'dump' option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-26 11:57:24 -08:00
Tom Eastep
c0f7d0e65d Start firewall after the network-online target has been reached 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-12-23 15:37:22 -08:00
Thomas D
664e3bb0a8 Installer: $INITDIR already starts with a "/", so no need for, "$DESTDIR/$INITDIR" 
Hi,

before the patch (DESTDIR = "/tmp/shorewall-4.6.5"; INITDIR =
"/etc/init.d"),

> [...]
> SysV init script init.gentoo.sh installed in /tmp/shorewall-4.6.5//etc/init.d/shorewall-lite

after the patch

> [...]
> SysV init script init.gentoo.sh installed in /tmp/shorewall-4.6.5/etc/init.d/shorewall-lite

-Thomas

From e7a192397323bb6cb66d08a6f24e7edfee044f31 Mon Sep 17 00:00:00 2001
From: Thomas D <whissi@whissi.de>
Date: Sat, 15 Nov 2014 16:38:05 +0100
Subject: [PATCH] $INITDIR already starts with a "/", so no need for
 "$DESTDIR/$INITDIR"

Before the patch (DESTDIR = "/tmp/shorewall-4.6.5"; INITDIR = "/etc/init.d"),

  > [...]
  > SysV init script init.gentoo.sh installed in /tmp/shorewall-4.6.5//etc/init.d/shorewall-lite

after the patch

  > [...]
  > SysV init script init.gentoo.sh installed in /tmp/shorewall-4.6.5/etc/init.d/shorewall-lite

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-15 07:55:14 -08:00
Tom Eastep
f9932d2b08 Correct typos in the -lite manpages 
- Remove redundant 'a specify'.
- Change reference to /etc/shorewall[6]/started.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-11 07:48:57 -08:00
Tom Eastep
2f545012a6 More documentation updates for -C 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-02 09:25:58 -08:00
Tom Eastep
8fb73026c8 Replace SAVE_COUNTERS with the -C command option 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-11-01 09:37:57 -07:00
Tom Eastep
b7ab82dba4 Implement -f option in the -lite products' start command 
- Remove 'recover' command

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 10:42:39 -07:00
Tom Eastep
113f95c11e Provide STARTOPTIONS and RESTARTOPTIONS in all cases 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-30 10:22:39 -07:00
Tom Eastep
e3b10343a5 Change SYSTEMDDIR to SERVICEDIR 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-13 11:56:26 -07:00
Tom Eastep
42363da458 Add new .service files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-09 10:00:53 -07:00
Tom Eastep
c5074bddb2 Rename the .service files to .service.214 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-09 09:45:52 -07:00
Tom Eastep
12458d111a Adjust the .service files 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-08 17:28:22 -07:00
Tom Eastep
815e93e80c Rename SYSTEMD to SYSTEMDDIR 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-07 16:46:16 -07:00
Tom Eastep
e3a7a4fc98 Fix typo in the -lite installer 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 17:48:20 -07:00
Tom Eastep
e36b34ce15 Fix -lite installer for MANDIR 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 14:26:12 -07:00
Tom Eastep
c9fd390782 Final cleanup of the uninstallers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 14:07:33 -07:00
Tom Eastep
3206021278 Another round of uninstall fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 13:50:39 -07:00
Tom Eastep
8571e0dca0 Another round of uninstall fixes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 13:29:51 -07:00
Tom Eastep
9dc2bba025 More uninstall corrections. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 09:39:03 -07:00
Tom Eastep
2fce05b3ab Correct a couple of errors 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 09:11:29 -07:00
Tom Eastep
00b0489047 Implement SANDBOX variable in the installers/uninstallers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-04 07:50:30 -07:00
Tom Eastep
f9a21bd90e Add -n option to the uninstallers. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-03 17:10:36 -07:00
Tom Eastep
f2cc68b93b Correct -lite installer and uninstaller 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-03 16:41:27 -07:00
Tom Eastep
8a5e71a56f Implement the -n option in the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-03 07:59:41 -07:00
Tom Eastep
483ea3e437 Create INITDIR in -lite installs. 
- Also don't link the init script if it isn't installed.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-02 17:42:08 -07:00
Tom Eastep
2ec3adcc44 Don't link the init script if SYSTEMD is set. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-10-02 16:23:26 -07:00
Tuomo Soini
a03f00bf0f systemd services: multi-user is not same as old runlevel 3 so use basic 
add conflicts to obviously conflicting services
remove old version number from init files
remove legacy syslog.target which is not needed on modern systems
fix formatting of email address onold Copyright text

Signed-off-by: Tuomo Soini <tis@foobar.fi>
 2014-09-23 16:44:03 +03:00
Tuomo Soini
8f05d0f16d install.sh: support install on centos7 and foobar7 
Signed-off-by: Tuomo Soini <tis@foobar.fi>
 2014-09-23 13:19:09 +03:00
Tom Eastep
e49832f4b5 Run the 'init' script in the 'run' command. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-30 10:25:00 -07:00
Tom Eastep
31e5aeeaea Refine the 'run' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-29 10:30:07 -07:00
Tom Eastep
aae23d7a9e Bring the -lite manpages up to date 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-28 08:31:20 -07:00
Tom Eastep
a7b18ca875 Implement 'run' command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-28 07:04:56 -07:00
Tom Eastep
53dda803e2 More Cygwin64 changes 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-07-09 11:28:45 -07:00
Tom Eastep
966926fac5 RHE7 support -- first cut 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-19 15:15:52 -07:00
Tom Eastep
bcbb48d16e Update install files to secure the .service files as 644 rather than 600. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-05-01 11:43:00 -07:00
Tom Eastep
44e0d48fc5 Add <refmiscinfo>...</refmiscinfo> to remaining manpages 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-01-16 08:32:57 -08:00
Tom Eastep
42dd8dfee9 Change license to GPLv2+ and update copyrights 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2014-01-04 09:48:27 -08:00
Tom Eastep
5f37b5bde6 Correct install scripts 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-10-25 06:53:51 -07:00
Roberto C. Sanchez
12563c55a8 Add '. /lib/lsb/init-functions' to the Debian-specific init scripts, as recommended by lintian 2013-10-05 16:31:45 -04:00
Tom Eastep
308aaad8d4 Use insserv on Debian 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-29 09:28:22 -07:00
Tom Eastep
5bc0931ee4 Merge branch 'master' of ssh://server.shorewall.net/home/teastep/shorewall/code 2013-09-17 08:24:40 -07:00
Tom Eastep
4524281163 Apply Thomas D's Gentoo support patch 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-17 08:22:52 -07:00
Tom Eastep
4b9728effe Correct test for the existance of coreversion in install.sh 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-12 13:55:30 -07:00
Tom Eastep
14bd1a9061 Don't require SYSCONFFILE for all products 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-10 08:24:27 -07:00
Tom Eastep
50411e638c Report the name of the SysV init file installed. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-09 08:11:45 -07:00
Tom Eastep
a40b3102d7 Look for coreversion in ${SHAREDIR} rather than in /usr/share/ 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-09-09 07:40:18 -07:00
Tom Eastep
39e348997f Add SERVICEFILE variable to shoreallrc. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-18 14:27:26 -07:00
Tom Eastep
156ed38b23 Correct installation of $SYSCONFFILE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-18 08:30:11 -07:00
Tom Eastep
1e245a4832 Correct syntax errors in the -lite uninstaller 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-15 16:29:41 -07:00
Tom Eastep
a298817201 Improve INITSOURCE handling in the installers 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-15 06:51:27 -07:00
Tom Eastep
32763e998b Make -v work with the status command 
- Also document exit status

Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-13 06:52:46 -07:00
Tom Eastep
fc5c92cabc Use /etc/os-release to determine build host 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-08 17:44:40 -07:00
Tom Eastep
a10aea280b Add some abbreviations for common commands 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-08-06 07:05:47 -07:00
Tom Eastep
d6d0cad2f9 Add 'show event[s]' to manpages. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-07-12 10:37:27 -07:00
Roberto C. Sanchez
a0228e9d3b Fix typos in manpages 2013-05-03 12:19:45 -04:00
Tom Eastep
e486c16513 Correct all configpath files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-14 15:10:21 -08:00
Evangelos Foutras
c9247c8074 Remove Arch Linux init file 
Arch Linux only supports systemd now.

Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-02-01 10:13:54 -08:00
Tom Eastep
b5cb27e84e Correct .service files. 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2013-01-20 15:15:46 -08:00
Tom Eastep
f24e194819 Don't display chains with no matched entries when -b 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-22 14:15:37 -07:00
Paul Gear
cf68379c4c Document brief option for show command 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-20 07:11:56 -07:00
Tom Eastep
880e63064b Make the -lite installers consistent with the others WRT SYSTEMD and INITFILE 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
 2012-10-08 07:35:47 -07:00