[leaf-commits] src/bering-uclibc4/source/shorewall shorewall-4.4.15-RC1.tgz, NONE, 1.1 buildtool.cfg, 1.12, 1.13 buildtool.mk, 1.6, 1.7 common.cfg, 1.7, 1.8 shorewall-config.diff, 1.4, 1.5
KP Kirchd?rfer <[email protected]> Sun, 28 Nov 2010 17:07:49 +0000
| Newsgroups | gmane.linux.leaf.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/leaf/src/bering-uclibc4/source/shorewall In directory sfp-cvsdas-2.v30.ch3.sourceforge.com:/tmp/cvs-serv27940 Modified Files: buildtool.cfg buildtool.mk common.cfg shorewall-config.diff Added Files: shorewall-4.4.15-RC1.tgz Log Message: new upstream version 4.4.15-RC1 fix macro syntax (Ticket 6) Index: shorewall-config.diff =================================================================== RCS file: /cvsroot/leaf/src/bering-uclibc4/source/shorewall/shorewall-config.diff,v retrieving revision 1.4 retrieving revision 1.5 diff -C2 -d -r1.4 -r1.5 *** shorewall-config.diff 1 Nov 2010 13:11:53 -0000 1.4 --- shorewall-config.diff 28 Nov 2010 17:07:42 -0000 1.5 *************** *** 1,74 **** ! diff -urN shorewall-4.4.14.orig/configfiles/interfaces shorewall-4.4.14/configfiles/interfaces ! --- shorewall-4.4.14.orig/configfiles/interfaces 2010-10-28 20:41:38.000000000 +0200 ! +++ shorewall-4.4.14/configfiles/interfaces 2010-11-01 14:02:23.668564971 +0100 @@ -8,3 +8,5 @@ # ############################################################################### #ZONE INTERFACE BROADCAST OPTIONS ! +net eth0 detect dhcp ! +loc eth1 detect dhcp ! diff -urN shorewall-4.4.14.orig/configfiles/policy shorewall-4.4.14/configfiles/policy ! --- shorewall-4.4.14.orig/configfiles/policy 2010-10-28 20:41:38.000000000 +0200 ! +++ shorewall-4.4.14/configfiles/policy 2010-11-01 14:03:19.137259196 +0100 @@ -9,3 +9,11 @@ ############################################################################### #SOURCE DEST POLICY LOG LIMIT: CONNLIMIT: # LEVEL BURST MASK ! +loc net ACCEPT ! +net all DROP info ! +# If you want open access to the Internet from your Firewall ! +# remove the comment from the following line. ! +#fw net ACCEPT ! +# THE FOLLOWING POLICY MUST BE LAST ! +# +all all REJECT info ! diff -urN shorewall-4.4.14.orig/configfiles/zones shorewall-4.4.14/configfiles/zones ! --- shorewall-4.4.14.orig/configfiles/zones 2010-10-28 20:41:38.000000000 +0200 ! +++ shorewall-4.4.14/configfiles/zones 2010-11-01 14:04:00.533286029 +0100 @@ -10,3 +10,6 @@ #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS fw firewall ! +net ipv4 ! +loc ipv4 ! +#dmz ipv4 ! diff -urN shorewall-4.4.14.orig/configfiles/rules shorewall-4.4.14/configfiles/rules ! --- shorewall-4.4.14.orig/configfiles/rules 2010-10-28 20:41:38.000000000 +0200 ! +++ shorewall-4.4.14/configfiles/rules 2010-11-01 14:05:20.808595550 +0100 @@ -12,3 +12,28 @@ #SECTION ESTABLISHED #SECTION RELATED SECTION NEW ! +# Accept DNS connections from the firewall to the network ! +# and from the local network to the firewall (in case dnsmasq is running) ! +DNS/ACCEPT fw net ! +DNS/ACCEPT loc fw ! + ! +# Accept SSH connections from the local network for administration ! +# ! +SSH/ACCEPT loc fw ! + ! +# Allow Ping to Firewall ! +# ! +Ping/ACCEPT net fw ! +Ping/ACCEPT loc fw ! +# ! +# Allow all ICMP types (including ping) from firewall ! +ACCEPT fw loc icmp ! +ACCEPT fw net icmp ! +# Allow local network to access weblet/webconf ! +# ! +HTTP/ACCEPT loc fw ! +HTTPS/ACCEPT loc fw ! +# timeserver (allow syncing with time servers (default: pool.ntp.org)) ! +NTP/ACCEPT fw net ! +# timeserver (allow LAN clients to sync with the time service on the router) ! +# NTP/ACCEPT loc fw ! diff -urN shorewall-4.4.14.orig/configfiles/masq shorewall-4.4.14/configfiles/masq ! --- shorewall-4.4.14.orig/configfiles/masq 2010-10-28 20:41:38.000000000 +0200 ! +++ shorewall-4.4.14/configfiles/masq 2010-11-01 14:05:33.768600383 +0100 @@ -9,3 +9,4 @@ ############################################################################### #INTERFACE:DEST SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/ # GROUP ! +eth0 192.168.1.0/24 --- 1,74 ---- ! diff -urN shorewall-4.4.15-RC1.orig/configfiles/interfaces shorewall-4.4.15-RC1/configfiles/interfaces ! --- shorewall-4.4.15-RC1.orig/configfiles/interfaces 2010-11-24 20:23:37.000000000 +0100 ! +++ shorewall-4.4.15-RC1/configfiles/interfaces 2010-11-28 10:58:25.083550298 +0100 @@ -8,3 +8,5 @@ # ############################################################################### #ZONE INTERFACE BROADCAST OPTIONS ! +net eth0 detect dhcp ! +loc eth1 detect dhcp ! diff -urN shorewall-4.4.15-RC1.orig/configfiles/policy shorewall-4.4.15-RC1/configfiles/policy ! --- shorewall-4.4.15-RC1.orig/configfiles/policy 2010-11-24 20:23:37.000000000 +0100 ! +++ shorewall-4.4.15-RC1/configfiles/policy 2010-11-28 10:59:43.951505215 +0100 @@ -9,3 +9,11 @@ ############################################################################### #SOURCE DEST POLICY LOG LIMIT: CONNLIMIT: # LEVEL BURST MASK ! +loc net ACCEPT ! +net all DROP info ! +# If you want open access to the Internet from your Firewall ! +# remove the comment from the following line. ! +#fw net ACCEPT ! +# THE FOLLOWING POLICY MUST BE LAST ! +# +all all REJECT info ! diff -urN shorewall-4.4.15-RC1.orig/configfiles/zones shorewall-4.4.15-RC1/configfiles/zones ! --- shorewall-4.4.15-RC1.orig/configfiles/zones 2010-11-24 20:23:37.000000000 +0100 ! +++ shorewall-4.4.15-RC1/configfiles/zones 2010-11-28 11:00:28.647060465 +0100 @@ -10,3 +10,6 @@ #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS fw firewall ! +net ipv4 ! +loc ipv4 ! +#dmz ipv4 ! diff -urN shorewall-4.4.15-RC1.orig/configfiles/rules shorewall-4.4.15-RC1/configfiles/rules ! --- shorewall-4.4.15-RC1.orig/configfiles/rules 2010-11-24 20:23:37.000000000 +0100 ! +++ shorewall-4.4.15-RC1/configfiles/rules 2010-11-28 11:05:50.199060028 +0100 @@ -12,3 +12,28 @@ #SECTION ESTABLISHED #SECTION RELATED SECTION NEW ! +# Accept DNS connections from the firewall to the network ! +# and from the local network to the firewall (in case dnsmasq is running) ! +DNS(ACCEPT) fw net ! +DNS(ACCEPT) loc fw ! + ! +# Accept SSH connections from the local network for administration ! +# ! +SSH(ACCEPT) loc fw ! + ! +# Allow Ping to Firewall ! +# ! +Ping(ACCEPT) net fw ! +Ping(ACCEPT) loc fw ! +# ! +# Allow all ICMP types (including ping) from firewall ! +ACCEPT fw loc icmp ! +ACCEPT fw net icmp ! +# Allow local network to access weblet/webconf ! +# ! +HTTP(ACCEPT) loc fw ! +HTTPS(ACCEPT) loc fw ! +# timeserver (allow syncing with time servers (default: pool.ntp.org)) ! +NTP(ACCEPT) fw net ! +# timeserver (allow LAN clients to sync with the time service on the router) ! +# NTP(ACCEPT) loc fw ! diff -urN shorewall-4.4.15-RC1.orig/configfiles/masq shorewall-4.4.15-RC1/configfiles/masq ! --- shorewall-4.4.15-RC1.orig/configfiles/masq 2010-11-24 20:23:37.000000000 +0100 ! +++ shorewall-4.4.15-RC1/configfiles/masq 2010-11-28 11:06:16.651059755 +0100 @@ -9,3 +9,4 @@ ############################################################################### #INTERFACE:DEST SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/ # GROUP ! +eth0 192.168.1.0/24 Index: common.cfg =================================================================== RCS file: /cvsroot/leaf/src/bering-uclibc4/source/shorewall/common.cfg,v retrieving revision 1.7 retrieving revision 1.8 diff -C2 -d -r1.7 -r1.8 *** common.cfg 28 Jun 2010 22:30:20 -0000 1.7 --- common.cfg 28 Nov 2010 17:07:42 -0000 1.8 *************** *** 35,38 **** --- 35,45 ---- <File> + Filename = usr/share/shorewall/getparams + Source = usr/share/shorewall/getparams + Permissions = 755 + Type = binary + </File> + + <File> Filename = usr/share/shorewall/version Source = usr/share/shorewall/version Index: buildtool.cfg =================================================================== RCS file: /cvsroot/leaf/src/bering-uclibc4/source/shorewall/buildtool.cfg,v retrieving revision 1.12 retrieving revision 1.13 diff -C2 -d -r1.12 -r1.13 *** buildtool.cfg 1 Nov 2010 13:11:53 -0000 1.12 --- buildtool.cfg 28 Nov 2010 17:07:42 -0000 1.13 *************** *** 1,3 **** ! <File shorewall-4.4.14.tgz> Server = cvs4-sourceforge Revision = HEAD --- 1,3 ---- ! <File shorewall-4.4.15-RC1.tgz> Server = cvs4-sourceforge Revision = HEAD *************** *** 46,50 **** <shorwall> packagename=shorwall ! Version 4.4.14 Revision = 1 --- 46,50 ---- <shorwall> packagename=shorwall ! Version 4.4.15-RC1 Revision = 1 Index: buildtool.mk =================================================================== RCS file: /cvsroot/leaf/src/bering-uclibc4/source/shorewall/buildtool.mk,v retrieving revision 1.6 retrieving revision 1.7 diff -C2 -d -r1.6 -r1.7 *** buildtool.mk 29 Oct 2010 15:08:35 -0000 1.6 --- buildtool.mk 28 Nov 2010 17:07:42 -0000 1.7 *************** *** 9,13 **** TARGET_DIR=$(BT_BUILD_DIR)/shorewall ! SHOREWALL_DIR:=shorewall-4.4.14 $(SHOREWALL_DIR)/.source: --- 9,13 ---- TARGET_DIR=$(BT_BUILD_DIR)/shorewall ! SHOREWALL_DIR:=shorewall-4.4.15-RC1 $(SHOREWALL_DIR)/.source: --- NEW FILE: shorewall-4.4.15-RC1.tgz --- (This appears to be a binary file; contents omitted.) ------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev