aboutsummaryrefslogtreecommitdiffstats
path: root/main/shorewall-shell
Commit message (Collapse)AuthorAgeFilesLines
* main/shorewall-shell: fix redirect excludesNatanael Copa2012-07-112-2/+19
| | | | | | | | | | | | Fixes this error: Setting up Rules... Bad argument `10.12.96.1' Try `iptables -h' or 'iptables --help' for more information. ERROR: Command "/sbin/iptables -t nat -A D_96_dnat -p tcp -d ! 10.12.96.1 --dport 80 -j REDIRECT --to-port 8080" Failed on rule: REDIRECT:info D_96 8080 tcp 80 - !10.12.96.1
* main/shorewall-shell: remove unused post-installNatanael Copa2012-06-261-6/+0
|
* main/shorewall-shell: add option to disable saving/restoring default routeNatanael Copa2012-06-263-2/+23
| | | | | | | | | When starting, shorewall will save all default routes. When stop, it will try to restore it. But does it badly. On multiisp setups with pingu it will break things. We (ab)use the RESTORE_DEFAULT_ROUTE to make it possible to avoid restoring the default route.
* main/shorewall-shell: do not remove ip rule from addr when no gatewayNatanael Copa2012-01-032-2/+13
| | | | We should not remove any ip rule that we have not created our selves
* main/shorewall-shell: set all/rp_filter based on ROUTE_FILTERNatanael Copa2011-12-082-2/+21
| | | | | | | | | | | | The kernel changed behavior around 2.6.31. We need a way to turn off rp_filter. details: http://article.gmane.org/gmane.comp.security.shorewall/23329/match=rp_filter This will disable routefilter if ROUTE_FILTER=no in /etc/shorewall/shorewall.conf default. To enable you will need set the routefilter option in /etc/shorewall/interfaces
* main/shorewall-shell: do not restore default gw that you never modifiedNatanael Copa2011-10-142-2/+13
| | | | | | | Shorewall's restore default gw will intentinally break multi routes When no 'balance' option is specified shorewall does not change the default gw so there is no point in restoring (breaking) it either.
* main/shorewall-shell: add support for "none" gateway in providersNatanael Copa2011-10-132-2/+31
| | | | | This will make shorewall not add or delete any routes to the providers route table
* main/shorewall-shell: upgrade to 4.2.11, add patch for ipsetNatanael Copa2011-10-052-10/+26
|
* main: mass-rebuild of packages missing arch in .PKGINFONatanael Copa2011-03-311-1/+1
| | | | this is needed for apk-tools-2.1 migration
* Set all packages with arch="x86 x86_64" to arch="all".William Pitcock2011-01-131-1/+1
|
* main/*: add archNatanael Copa2010-12-131-0/+1
|
* main/shorewall-shell: add policy routing related patchTimo Teräs2010-11-012-3/+62
| | | | | To allow creation of routing tables to be managed by an external component (e.g. quagga or opennhrp).
* moved extra/* to main/Natanael Copa2009-07-241-0/+17
and fixed misc build issues