eurephia.git/plugin/firewall, branch master

FreeBSD compile fixes

2012-11-06T19:17:26+00:00

- Only Linux have MADV_DONTFORK, so make it Linux specific
- Added a few missing include files which Linux included through their
  include chains

Signed-off-by: David Sommerseth

Updated copyright dates

2012-10-08T00:18:14+00:00

Signed-off-by: David Sommerseth

efw-iptables: Use the iptables conntrack module

2010-12-24T10:47:19+00:00

Make use of the iptables conntrack module instead of the older state module
for stateful firewalling.

Signed-off-by: David Sommerseth

Implemented proper TUN support in eurephia

2010-12-14T17:47:58+00:00

Now eurephia will support both TUN and TAP configurations in
OpenVPN.

Thanks to Tavis Paquette and Matthew Gyurgyik for their willingness
to test out this patch.

Signed-off-by: David Sommerseth

Add preliminary support for using IP addresses in the firewall module

2010-11-30T23:10:35+00:00

The current implementation uses the MAC address of the client's VPN
interface.  This also restricts eurephia to use TAP mode.

This patch adds preliminary support for also accepting the clients
IP address when updating the firewall rules.  But the complete support
for TUN mode is not completed yet.

Signed-off-by: David Sommerseth

Update efw-iptables version number and API version

2010-11-30T21:51:17+00:00

As the firewall API has changed in regards to moving a way from
a string based implementation to a struct based implementation, the
older eurephia firewall module will not work any longer.

To make sure nothing bad happens, enforce that the efw-iptables
module is at least using API version 2.  Also updated the module
version to reflect some changes as well.

Signed-off-by: David Sommerseth

Move daemonize() code to be called in the firewall child thread only

2010-11-26T21:05:28+00:00

The eurephia plug-in would daemonize the OpenVPN process by calling
daemonize() too early.  This patch renames daemoinze() to efw_daemonize()
and calls it only in the firewall child process.

Signed-off-by: David Sommerseth

Updated wrong log entries

2010-08-29T14:42:09+00:00

Removed old and obsolete expressions used to reference the eurephia database driver.

Signed-off-by: David Sommerseth

Fixed some issues with the firewall implementation

2010-08-26T15:56:39+00:00

- OpenVPN would not exit gracefully due to mq_send() returns 0 on success

- On-the-fly blacklisting with new API failed due to wrong value checking
  The request->rule_destination is empty when request->mode==BLACKLIST, so
  the check for rule_destination was moved to the appropriate place.

Signed-off-by: David Sommerseth

Fixed Doxygen complaints

2010-08-26T15:55:38+00:00

Removed some #defines which was not needed and added missing comments.

Signed-off-by: David Sommerseth