Jérémy Lecour
6e6a2d9a82
Release 22.03
2022-03-15 16:37:20 +01:00
Jérémy Lecour
c36be1c9c9
Add variables and documentation for sysctl variables ( fixes #7 )
2022-03-15 16:27:26 +01:00
Jérémy Lecour
be023616a5
more comments
2022-03-15 16:27:26 +01:00
Jérémy Lecour
0b3ed7ae25
Backward compatible mode
2021-12-11 10:13:38 +01:00
Jérémy Lecour
e7aaefef9a
Release 21.12
2021-12-06 17:32:21 +01:00
Ludovic Poujol
7f3f69329f
Don't throw ipv6 to iptables in the squid macro
2021-12-03 11:29:32 +01:00
Jérémy Lecour
30838eb892
rename variables for readability
2021-09-14 12:47:17 +02:00
Jérémy Lecour
a600d03ab4
split configuration and includes
2021-09-14 12:37:04 +02:00
Jérémy Lecour
48983bfa2d
fix mistakes
...
* forgotten chains
* wrong variable names
* baf field separator for awk
2021-09-14 12:36:43 +02:00
Jérémy Lecour
cfa1c20332
Add IPv6 support on many macros
2021-09-14 11:05:59 +02:00
Ludovic Poujol
351158891e
Add sort, to source files in alphanumerical order as expected
2021-09-14 09:44:58 +02:00
Ludovic Poujol
79c1790564
WIP - IPv6 Handleing for output authorisation
2021-09-14 09:12:08 +02:00
Ludovic Poujol
c31288f318
Correct is_ipv6
2021-09-14 08:54:52 +02:00
Jérémy Lecour
d811e5647d
Show version once for each action
2021-09-06 14:33:22 +02:00
Jérémy Lecour
ef18fccc96
Add version
2021-09-06 14:02:03 +02:00
Jérémy Lecour
9ae2a03955
proxy: simplification de la boucle
2021-06-04 14:06:37 +02:00
Jérémy Lecour
f87bbe5442
add macro for proxy
2021-05-26 13:20:12 +02:00
Jérémy Lecour
275a4c5bab
Add macro for backup servers
2021-05-26 13:12:56 +02:00
Jérémy Lecour
9be97b2436
store includes in /etc/minifirewall.d
2021-05-26 13:09:50 +02:00
Jérémy Lecour
800448ff97
update verison
2021-05-22 23:22:31 +02:00
Jérémy Lecour
dfc91a0689
syntax and readability
2021-05-22 23:14:40 +02:00
Jérémy Lecour
773d7086fc
source configuration with functions
2021-05-22 23:14:27 +02:00
Jérémy Lecour
c9eecabdf8
more expressive variable names
2021-05-22 23:13:00 +02:00
Jérémy Lecour
e071610a37
check for commands
2021-05-22 23:12:09 +02:00
Jérémy Lecour
9477d47938
Use function to tets ipv6 and docker
2021-05-22 22:46:02 +02:00
Jérémy Lecour
597042ebf7
more expressive variable names
2021-05-22 22:45:48 +02:00
Jérémy Lecour
c4f9e78677
all variables must be defined
2021-05-22 22:44:47 +02:00
Jérémy Lecour
372ad8f1d1
whitespaces
2021-05-22 09:46:22 +02:00
Jérémy Lecour
8eb0180b51
compact syntax for loops
2021-05-22 09:41:29 +02:00
Jérémy Lecour
a3ab1a4f2e
variables with better names
2021-05-22 09:35:51 +02:00
Jérémy Lecour
e02be5b852
Surround variable names with curly braces
2021-05-22 09:34:35 +02:00
Jérémy Lecour
9a9fc7fd44
squid command seems obsolete
2021-05-22 09:23:31 +02:00
Jérémy Lecour
72e3729a78
Extract main functions
2021-05-22 09:23:14 +02:00
Jérémy Lecour
c48534146a
Source files in /etc/default/minifirewall.d
2021-05-22 09:11:49 +02:00
Jérémy Lecour
7126d70982
Update copyright and add version number
2020-12-01 22:55:59 +01:00
Ludovic Poujol
7c384a777b
Better handling of Docker to match the usual minifirewall behaviour
...
Revert some changes from 0ec2cb2f4b
like the SERVICESTCP4 SERVICESUDP4
Instead, we'll re-create the usual behaviour of public, privileged and
trusted ports for docker when the variable DOCKER is set to "on"
2020-07-27 10:33:40 +02:00
Ludovic Poujol
0ec2cb2f4b
Make it compatible with docker
...
Add a new variable "DOCKER" that should be set to "on" when this is a
docker machine.
It will
- Disable the nat tables flush on stop/restart
Reason : Not breaking outgoing networking for containers
- Create the "DOCKER-USER" chain, and add a DROP
By default everything is closed and we don't expose services to the
outside world
- Add rules in the "DOCKER-USER" chain to open services to the outside
world.
Untested with swarm
2020-02-25 16:33:24 +01:00
Ludovic Poujol
30041b8949
Fix IPV6 var not being defined on stop
2020-02-21 16:26:41 +01:00
Ludovic Poujol
60ca9f67b2
Update project URL in comment
2020-02-17 10:54:01 +01:00
Victor LABORIE
e80979e04d
Minifirewall is now under GPLv3 license
2019-06-04 16:53:34 +02:00
Tristan PILAT
979b7e2d03
Add missing variables in SMTPSECUREOK and SMTPOK loops
2018-08-28 15:39:58 +02:00
Benoît S.
b6a47dea0d
Added quote to $IPV6 variables.
2015-10-21 10:45:39 +02:00
Tristan PILAT
02d6447a10
Fix bug with IPv6.
...
When IPv6=off don't use ip6tables in stop and reset function.
2015-10-19 10:59:00 +02:00
Gregory Colpart
2943a7d58c
Improve output messages
2015-09-13 20:31:04 +02:00
Gregory Colpart
52f177303c
Fix bug in old config detection
2015-09-13 20:21:55 +02:00
Gregory Colpart
2f561a6172
Improve descriptions / comments (switch all in english, etc.)
2015-09-13 18:37:53 +02:00
Gregory Colpart
9579cfe991
Fix #1565 . Use now /etc/default/minifirewall for config file!
2015-09-13 17:15:40 +02:00
Benoît S.
5275f8d7e2
Moves rules from firewall.rc to minifirewall core.
2014-05-22 17:38:00 +02:00
Benoît S.
705c4683a2
Allow all output on lo interface for IPv6.
2014-03-12 16:22:15 +01:00
Gregory Colpart
7d3d928e02
Improve new UDP rules to DROP by default
2012-11-14 00:55:35 +01:00