brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Updated changelog, typo, and slight formatting error

master
bbruns 2011-02-18 17:58:02 +00:00
parent 439251e480
commit 31685bd454
3 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@ -2,6 +2,7 @@
- Change IPV6_ROUTEDCLIENTBLOCK so you can specify ranges to - Change IPV6_ROUTEDCLIENTBLOCK so you can specify ranges to
block incoming to. block incoming to.
- Add support for allowing IPV6 critical ICMP messages, on by default - Add support for allowing IPV6 critical ICMP messages, on by default
- Add support for interception of IPv4 packets, aka transparent proxy
0.9.11 - Brielle Bruns <bruns@2mbit.com> 0.9.11 - Brielle Bruns <bruns@2mbit.com>
- Move some of the config clutter to conf/ - you can - Move some of the config clutter to conf/ - you can

2
bin/firewall-sosdg
View File

@ -449,7 +449,7 @@ if [ "$ALLOWEDPROTO" ]; then
fi fi
if [ "$IPV4_INTERCEPT" ]; then if [ "$IPV4_INTERCEPT" ]; then
display_c YELLOW "Adding packet interception rules: " N display_c YELLOW "Adding packet interception rules: "
for i in `grep -v "\#" $IPV4_INTERCEPT`; do for i in `grep -v "\#" $IPV4_INTERCEPT`; do
IFS_OLD=${IFS};IFS=\| IFS_OLD=${IFS};IFS=\|
INTERCEPTADD=($i) INTERCEPTADD=($i)

2
conf/ipv4-intercept.default
View File

@ -3,5 +3,5 @@
# incoming-interface|src-range|dst-range|proto|port|proxy # incoming-interface|src-range|dst-range|proto|port|proxy
# Use ! before IP/range to negate, and put BYPASS in as proxy # Use ! before IP/range to negate, and put BYPASS in as proxy
# want to put in a bypass rule # want to put in a bypass rule
# eth1|192.168.0.0/24|192.168.1.0/24|tcp|80|192.16.1.1:3128 # eth1|192.168.0.0/24|192.168.1.0/24|tcp|80|192.168.1.1:3128
# ORDER MATTERS! # ORDER MATTERS!