eurephia.git/plugin/firewall, branch release/1.1

Updated copyright dates

2012-10-08T00:18:14+00:00

Signed-off-by: David Sommerseth

efw-iptables: Use the iptables conntrack module

2010-12-24T10:47:19+00:00

Make use of the iptables conntrack module instead of the older state module
for stateful firewalling.

Signed-off-by: David Sommerseth

Implemented proper TUN support in eurephia

2010-12-14T17:47:58+00:00

Now eurephia will support both TUN and TAP configurations in
OpenVPN.

Thanks to Tavis Paquette and Matthew Gyurgyik for their willingness
to test out this patch.

Signed-off-by: David Sommerseth

Add preliminary support for using IP addresses in the firewall module

2010-11-30T23:10:35+00:00

The current implementation uses the MAC address of the client's VPN
interface.  This also restricts eurephia to use TAP mode.

This patch adds preliminary support for also accepting the clients
IP address when updating the firewall rules.  But the complete support
for TUN mode is not completed yet.

Signed-off-by: David Sommerseth

Update efw-iptables version number and API version

2010-11-30T21:51:17+00:00

As the firewall API has changed in regards to moving a way from
a string based implementation to a struct based implementation, the
older eurephia firewall module will not work any longer.

To make sure nothing bad happens, enforce that the efw-iptables
module is at least using API version 2.  Also updated the module
version to reflect some changes as well.

Signed-off-by: David Sommerseth

Move daemonize() code to be called in the firewall child thread only

2010-11-26T21:05:28+00:00

The eurephia plug-in would daemonize the OpenVPN process by calling
daemonize() too early.  This patch renames daemoinze() to efw_daemonize()
and calls it only in the firewall child process.

Signed-off-by: David Sommerseth

Updated wrong log entries

2010-08-29T14:42:09+00:00

Removed old and obsolete expressions used to reference the eurephia database driver.

Signed-off-by: David Sommerseth

Fixed some issues with the firewall implementation

2010-08-26T15:56:39+00:00

- OpenVPN would not exit gracefully due to mq_send() returns 0 on success

- On-the-fly blacklisting with new API failed due to wrong value checking
  The request->rule_destination is empty when request->mode==BLACKLIST, so
  the check for rule_destination was moved to the appropriate place.

Signed-off-by: David Sommerseth

Fixed Doxygen complaints

2010-08-26T15:55:38+00:00

Removed some #defines which was not needed and added missing comments.

Signed-off-by: David Sommerseth

Completed the needed changes for the new firewall plug-in API

2010-08-25T17:22:10+00:00

Moved over the missing pieces to use the eFWupdateRequest struct.  This is
a continuation of the work started in commit bdd956adcccd91ff553278fd73cea7

Signed-off-by: David Sommerseth