xmw 14/11/18 12:54:56
Added: shorewallrc-r1 shorewall-init.readme shorewallrc
shorewall-lite.systemd shorewall6.systemd
shorewall.confd shorewall-init.initd
shorewall.systemd shorewall6-lite.initd
shorewall6.confd shorewall-init.systemd
shorewall6-lite.systemd shorewall-lite.initd
shorewall6.initd shorewall.initd
shorewall-init-01_remove-ipset-functionality.patch
shorewall-lite.confd shorewall6-lite.confd
shorewall-init.confd
Log:
Version bump (big thanks to whissi, bug 522278).
(Portage version: 2.2.14/cvs/Linux x86_64, signed Manifest commit with key
62EEF090)
Revision Changes Path
1.1 net-firewall/shorewall/files/4.6/shorewallrc-r1
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewallrc-r1?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewallrc-r1?rev=1.1&content-type=text/plain
Index: shorewallrc-r1
===================================================================
#
# Gentoo Shorewall 4.6 rc file
#
BUILD= #Default is to detect the build system
HOST=gentoo #Gentoo GNU Linux
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level
directory for shared files, libraries, etc.
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl
module directory
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory
where subsystem configurations are installed
SBINDIR=${PREFIX}/sbin #Directory where system administration
programs are installed
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are
installed.
INITFILE=${PRODUCT} #Name of the product's installed SysV
init script
INITSOURCE=init.gentoo.sh #Name of the distributed file to be
installed as the SysV init script
ANNOTATED= #If non-zero, annotated configuration
files are installed
SERVICEDIR=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory
where .service files are installed (systems running systemd only)
SERVICEFILE=gentoo.service #Name of the distributed file to be
installed as systemd service file
SYSCONFFILE=default.gentoo #Name of the distributed file to be
installed in $SYSCONFDIR
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter
files are installed
SPARSE= #If non-empty, only install
$PRODUCT/$PRODUCT.conf in $CONFDIR
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory
where product variable data is stored.
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data
is stored.
1.1 net-firewall/shorewall/files/4.6/shorewall-init.readme
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.readme?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.readme?rev=1.1&content-type=text/plain
Index: shorewall-init.readme
===================================================================
shorewall-init from upstream offers two features (taken from [1]):
1. It can 'close' the firewall before the network interfaces are
brought up during boot.
2. It can change the firewall state as the result of interfaces
being brought up or taken down.
On Gentoo we only support the first feature -- the firewall lockdown during
boot.
We do not support the second feature, because Gentoo doesn't support a
if-{up,down}.d folder like other distributions do. If you would want to use
such a feature, you would have to add a custom action to /etc/conf.d/net
(please refer to the Gentoo Linux Handbook [2] for more information).
If you are able to add your custom {pre,post}{up,down} action, your are
also able to specify what shorewall{6,-lite,6-lite} should do, so there is
no need for upstream's scripts in Gentoo.
If you disagree with us, feel free to open a bug [3] and contribute your
solution for Gentoo.
Upstream's original init script also supports saving and restoring of
ipsets. Please use the init script from net-firewall/ipset if you need
such a feature.
[1] http://www.shorewall.net/Shorewall-init.html
[2] http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=4&chap=5
[3] https://bugs.gentoo.org
1.1 net-firewall/shorewall/files/4.6/shorewallrc
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewallrc?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewallrc?rev=1.1&content-type=text/plain
Index: shorewallrc
===================================================================
#
# Gentoo Shorewall 4.6 rc file
#
BUILD= #Default is to detect the build system
HOST=gentoo #Gentoo GNU Linux
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level
directory for shared files, libraries, etc.
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl
module directory
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory
where subsystem configurations are installed
SBINDIR=${PREFIX}/sbin #Directory where system administration
programs are installed
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are
installed.
INITFILE=${PRODUCT} #Name of the product's installed SysV
init script
INITSOURCE=init.gentoo.sh #Name of the distributed file to be
installed as the SysV init script
ANNOTATED= #If non-zero, annotated configuration
files are installed
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory
where .service files are installed (systems running systemd only)
SERVICEFILE=gentoo.service #Name of the distributed file to be
installed as systemd service file
SYSCONFFILE=default.gentoo #Name of the distributed file to be
installed in $SYSCONFDIR
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter
files are installed
SPARSE= #If non-empty, only install
$PRODUCT/$PRODUCT.conf in $CONFDIR
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory
where product variable data is stored.
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data
is stored.
1.1 net-firewall/shorewall/files/4.6/shorewall-lite.systemd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.systemd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.systemd?rev=1.1&content-type=text/plain
Index: shorewall-lite.systemd
===================================================================
#
# The Shoreline Firewall Lite (Shorewall-Lite) Packet Filtering Firewall
- V4.6
#
[Unit]
Description=Shorewall IPv4 firewall lite
Documentation=man:shorewall-lite(8)
http://www.shorewall.net/Documentation_Index.html
After=network-online.target
Conflicts=iptables.service firewalld.service
[Service]
Type=oneshot
RemainAfterExit=yes
EnvironmentFile=/etc/conf.d/shorewall-lite
StandardOutput=syslog
ExecStart=/usr/sbin/shorewall-lite $OPTIONS start $STARTOPTIONS
ExecStop=/usr/sbin/shorewall-lite $OPTIONS stop $STOPOPTIONS
[Install]
WantedBy=basic.target
1.1 net-firewall/shorewall/files/4.6/shorewall6.systemd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.systemd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.systemd?rev=1.1&content-type=text/plain
Index: shorewall6.systemd
===================================================================
#
# The Shoreline Firewall 6 (Shorewall6) Packet Filtering Firewall - V4.6
#
[Unit]
Description=Shorewall IPv6 firewall
Documentation=man:shorewall6(8)
http://www.shorewall.net/Documentation_Index.html
After=network-online.target
Conflicts=ip6tables.service firewalld.service
[Service]
Type=oneshot
RemainAfterExit=yes
EnvironmentFile=/etc/conf.d/shorewall6
StandardOutput=syslog
ExecStart=/usr/sbin/shorewall6 $OPTIONS start $STARTOPTIONS
ExecStop=/usr/sbin/shorewall6 $OPTIONS stop $STOPOPTIONS
[Install]
WantedBy=basic.target
1.1 net-firewall/shorewall/files/4.6/shorewall.confd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.confd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.confd?rev=1.1&content-type=text/plain
Index: shorewall.confd
===================================================================
# Global start/restart/stop options
#
OPTIONS="-tvv"
# Start options
#
STARTOPTIONS=""
# Stop options
#
STOPOPTIONS=""
# Restart options
#
RESTARTOPTIONS=""
1.1 net-firewall/shorewall/files/4.6/shorewall-init.initd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.initd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.initd?rev=1.1&content-type=text/plain
Index: shorewall-init.initd
===================================================================
#!/sbin/openrc-run
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header:
/var/cvsroot/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.initd,v
1.1 2014/11/18 12:54:56 xmw Exp $
SHOREWALLRC_FILE="@GENTOO_PORTAGE_EPREFIX@/usr/share/shorewall/shorewallrc"
CONFIG_FILE="@GENTOO_PORTAGE_EPREFIX@/etc/conf.d/${SVCNAME}"
description="Puts Shorewall in a safe state at boot time"
description="${description} prior to bringing up the network."
required_files="$SHOREWALLRC_FILE"
depend() {
need localmount
before net
after bootmisc ipset tmpfiles.setup ulogd
}
. $SHOREWALLRC_FILE
checkconfig() {
local PRODUCT=
if [ -z "${VARLIB}" ]; then
eerror "\"VARLIB\" isn't defined or empty! Please check" \
"\"${SHOREWALLRC_FILE}\"."
return 1
fi
if [ -z "${PRODUCTS}" ]; then
eerror "${SVCNAME} isn't configured! Please check" \
"\"${CONFIG_FILE}\"."
return 1
fi
for PRODUCT in ${PRODUCTS}; do
if [ ! -x ${SBINDIR}/${PRODUCT} ]; then
eerror "Invalid product \"${PRODUCT}\" specified" \
"in \"${CONFIG_FILE}\"!"
eerror "Maybe \"${PRODUCT}\" isn't installed?"
return 1
fi
done
return 0
}
check_firewall_script() {
if [ ${PRODUCT} = shorewall -o ${PRODUCT} = shorewall6 ]; then
ebegin "Checking \"${STATEDIR}/firewall\""
${SBINDIR}/${PRODUCT} compile -c 1>/dev/null
eend $?
fi
if [ ! -x ${STATEDIR}/firewall ]; then
eerror "\"${PRODUCT}\" isn't configured!"
if [ ${PRODUCT} = shorewall-lite -o ${PRODUCT} =
shorewall6-lite ]; then
eerror "Please go to your 'administrative system'" \
"and deploy the compiled firewall" \
"configuration for this system."
fi
return 1
fi
return 0
}
is_allowed_to_be_executed() {
# This is not a real service. shorewall-init is an intermediate
# script to put your Shorewall-based firewall into a safe state
# at boot time prior to bringing up the network.
# Please read /usr/share/doc/shorewall-init-*/README.gentoo.gz
# for more information.
# When your system is up, there is no need to call shorewall-init.
# Please call shorewall{,6,-lite,6-lite} directly. That's the
# reason why we are preventing start, stop or restart here.
local PRODUCT=
if [ "${RC_RUNLEVEL}" != "boot" -a "${RC_CMD}" = "start" ]; then
# Starting shorewall-init is only allowed at boot time
eerror "This is a boot service, which can only be started" \
"at boot."
eerror "If you want to get your shorewall-based firewall" \
"into the same safe boot state again, run"
eerror ""
eindent
for PRODUCT in ${PRODUCTS}; do
eerror "/etc/init.d/${PRODUCT} stop"
done
eoutdent
eerror ""
eerror "Yes, \"stop\" and not start."
eerror ""
return 1
fi
if [ "${RC_RUNLEVEL}" != "shutdown" -a "${RC_CMD}" = "stop" ]; then
# Stopping shorewall-init is only allowed at shutdown
eerror "This is a boot service, which cannot be stopped."
eerror "If you really want to stop your Shorewall-based" \
"firewall the same way this service would stop" \
"Shorewall at shutdown, please run"
eerror ""
eindent
for PRODUCT in ${PRODUCTS}; do
eerror "/etc/init.d/${PRODUCT} clear"
done
eoutdent
eerror ""
eerror "Keep in mind that this will clear (=bring down)" \
"your firewall!"
eerror ""
return 1
fi
if [ "${RC_CMD}" = "restart" ]; then
eerror "This is a boot service, which cannot be restarted."
eerror "If you want to restart any of your Shorewall-based" \
"firewalls, run"
eerror ""
eindent
for PRODUCT in ${PRODUCTS}; do
eerror "/etc/init.d/${PRODUCT} restart"
done
eoutdent
eerror ""
return 1
fi
return 0
}
set_statedir() {
STATEDIR=
local VARDIR=
if [ -f ${CONFDIR}/${PRODUCT}/vardir ]; then
STATEDIR=$( . ${CONFDIR}/${PRODUCT}/vardir && echo ${VARDIR} )
fi
[ ! -n "${STATEDIR}" ] && STATEDIR=${VARLIB}/${PRODUCT}
}
start_pre() {
checkconfig || return 1
is_allowed_to_be_executed || return 1
}
start() {
local PRODUCT=
local STATEDIR=
for PRODUCT in ${PRODUCTS}; do
set_statedir
check_firewall_script || return 1
ebegin "Initializing \"${PRODUCT}\""
${STATEDIR}/firewall stop 1>/dev/null
eend $?
done
}
stop_pre() {
checkconfig || return 1
is_allowed_to_be_executed || return 1
}
stop() {
local PRODUCT=
local STATEDIR=
for PRODUCT in ${PRODUCTS}; do
set_statedir
check_firewall_script || return 1
ebegin "Clearing \"${PRODUCT}\""
${STATEDIR}/firewall clear 1>/dev/null
eend $?
done
}
1.1 net-firewall/shorewall/files/4.6/shorewall.systemd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.systemd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.systemd?rev=1.1&content-type=text/plain
Index: shorewall.systemd
===================================================================
#
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.6
#
[Unit]
Description=Shorewall IPv4 firewall
Documentation=man:shorewall(8) http://www.shorewall.net/Documentation_Index.html
After=network-online.target
Conflicts=iptables.service firewalld.service
[Service]
Type=oneshot
RemainAfterExit=yes
EnvironmentFile=/etc/conf.d/shorewall
StandardOutput=syslog
ExecStart=/usr/sbin/shorewall $OPTIONS start $STARTOPTIONS
ExecStop=/usr/sbin/shorewall $OPTIONS stop $STOPOPTIONS
[Install]
WantedBy=basic.target
1.1 net-firewall/shorewall/files/4.6/shorewall6-lite.initd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.initd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.initd?rev=1.1&content-type=text/plain
Index: shorewall6-lite.initd
===================================================================
#!/sbin/openrc-run
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header:
/var/cvsroot/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.initd,v
1.1 2014/11/18 12:54:56 xmw Exp $
description='The Shoreline Firewall 6 Lite, more commonly known as "Shorewall6
Lite", is'
description="${description} a high-level tool for configuring Netfilter."
extra_commands="clear"
extra_started_commands="reset"
description_clear="Clear will remove all rules and chains installed by"
description_clear="${description_clear} Shorewall6 Lite. The firewall is"
description_clear="${description_clear} then wide open and unprotected."
description_reset="All the packet and byte counters in the firewall are reset."
command="/usr/sbin/shorewall6-lite"
depend() {
need net
provide firewall
after ulogd
}
status() {
local _retval
${command} status 1>/dev/null
_retval=$?
if [ ${_retval} = '0' ]; then
einfo 'status: started'
mark_service_started "${SVCNAME}"
return 0
else
einfo 'status: stopped'
mark_service_stopped "${SVCNAME}"
return 3
fi
}
start() {
ebegin "Starting shorewall6-lite"
${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
eend $?
}
stop() {
ebegin "Stopping shorewall6-lite"
${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
eend $?
}
restart() {
# shorewall comes with its own control script that includes a
# restart function, so refrain from calling svc_stop/svc_start
# here. Note that this comment is required to fix bug 55576;
# runscript.sh greps this script... (09 Jul 2004 agriffis)
ebegin "Restarting shorewall6-lite"
${command} status 1>/dev/null
if [ $? != 0 ] ; then
svc_start
else
${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
fi
eend $?
}
clear() {
# clear will remove all the rules and bring the system to an
unfirewalled
# state. (21 Nov 2004 eldad)
ebegin "Clearing all shorewall6-lite rules and setting policy to ACCEPT"
${command} ${OPTIONS} clear 1>/dev/null
eend $?
}
reset() {
# reset the packet and byte counters in the firewall
ebegin "Resetting the packet and byte counters in shorewall6-lite"
${command} ${OPTIONS} reset 1>/dev/null
eend $?
}
1.1 net-firewall/shorewall/files/4.6/shorewall6.confd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.confd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.confd?rev=1.1&content-type=text/plain
Index: shorewall6.confd
===================================================================
# Global start/restart/stop options
#
OPTIONS="-tvv"
# Start options
#
STARTOPTIONS=""
# Stop options
#
STOPOPTIONS=""
# Restart options
#
RESTARTOPTIONS=""
1.1 net-firewall/shorewall/files/4.6/shorewall-init.systemd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.systemd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.systemd?rev=1.1&content-type=text/plain
Index: shorewall-init.systemd
===================================================================
#
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.6
#
[Unit]
Description=shorewall-init
Documentation=http://www.shorewall.net/Shorewall-init.html
Before=network-pre.target
Wants=network-pre.target
Conflicts=iptables.service firewalld.service
[Service]
Type=oneshot
RemainAfterExit=yes
StandardOutput=syslog
ExecStart=/usr/sbin/shorewall-init start
ExecStop=/usr/sbin/shorewall-init stop
[Install]
WantedBy=basic.target
1.1 net-firewall/shorewall/files/4.6/shorewall6-lite.systemd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.systemd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.systemd?rev=1.1&content-type=text/plain
Index: shorewall6-lite.systemd
===================================================================
#
# The Shoreline Firewall 6 Lite (Shorewall6-Lite) Packet Filtering
Firewall - V4.6
#
[Unit]
Description=Shorewall IPv6 firewall lite
Documentation=man:shorewall6-lite(8)
http://www.shorewall.net/Documentation_Index.html
After=network-online.target
Conflicts=ip6tables.service firewalld.service
[Service]
Type=oneshot
RemainAfterExit=yes
EnvironmentFile=/etc/conf.d/shorewall6-lite
StandardOutput=syslog
ExecStart=/usr/sbin/shorewall6-lite $OPTIONS start $STARTOPTIONS
ExecStop=/usr/sbin/shorewall6-lite $OPTIONS stop $STOPOPTIONS
[Install]
WantedBy=basic.target
1.1 net-firewall/shorewall/files/4.6/shorewall-lite.initd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.initd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.initd?rev=1.1&content-type=text/plain
Index: shorewall-lite.initd
===================================================================
#!/sbin/openrc-run
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header:
/var/cvsroot/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.initd,v
1.1 2014/11/18 12:54:56 xmw Exp $
description='The Shoreline Firewall Lite, more commonly known as "Shorewall
Lite", is'
description="${description} a high-level tool for configuring Netfilter."
extra_commands="clear"
extra_started_commands="reset"
description_clear="Clear will remove all rules and chains installed by"
description_clear="${description_clear} Shorewall Lite. The firewall is"
description_clear="${description_clear} then wide open and unprotected."
description_reset="All the packet and byte counters in the firewall are reset."
command="/usr/sbin/shorewall-lite"
depend() {
need net
provide firewall
after ulogd
}
status() {
local _retval
${command} status 1>/dev/null
_retval=$?
if [ ${_retval} = '0' ]; then
einfo 'status: started'
mark_service_started "${SVCNAME}"
return 0
else
einfo 'status: stopped'
mark_service_stopped "${SVCNAME}"
return 3
fi
}
start() {
ebegin "Starting shorewall-lite"
${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
eend $?
}
stop() {
ebegin "Stopping shorewall-lite"
${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
eend $?
}
restart() {
ebegin "Restarting shorewall-lite"
${command} status 1>/dev/null
if [ $? != 0 ] ; then
svc_start
else
${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
fi
eend $?
}
clear() {
ebegin "Clearing all shorewall-lite rules and setting policy to ACCEPT"
${command} ${OPTIONS} clear 1>/dev/null
eend $?
}
reset() {
ebegin "Resetting the packet and byte counters in shorewall-lite"
${command} ${OPTIONS} reset 1>/dev/null
eend $?
}
1.1 net-firewall/shorewall/files/4.6/shorewall6.initd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.initd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.initd?rev=1.1&content-type=text/plain
Index: shorewall6.initd
===================================================================
#!/sbin/openrc-run
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header:
/var/cvsroot/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6.initd,v 1.1
2014/11/18 12:54:56 xmw Exp $
description='The Shoreline Firewall 6, more commonly known as "Shorewall6", is'
description="${description} a high-level tool for configuring Netfilter."
extra_commands="check clear"
extra_started_commands="refresh reset"
description_check="Checks if the configuration will compile or not."
description_clear="Clear will remove all rules and chains installed by"
description_clear="${description_clear} Shorewall6. The firewall is then"
description_clear="${description_clear} wide open and unprotected."
description_refresh="The mangle table will be refreshed along with the"
description_refresh="${description_refresh} blacklist chain (if any)."
description_reset="All the packet and byte counters in the firewall are reset."
command="/usr/sbin/shorewall6"
depend() {
need net
provide firewall
after ulogd
}
status() {
local _retval
${command} status 1>/dev/null
_retval=$?
if [ ${_retval} = '0' ]; then
einfo 'status: started'
mark_service_started "${SVCNAME}"
return 0
else
einfo 'status: stopped'
mark_service_stopped "${SVCNAME}"
return 3
fi
}
start() {
ebegin "Starting shorewall6"
${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
eend $?
}
stop() {
ebegin "Stopping shorewall6"
${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
eend $?
}
restart() {
# shorewall comes with its own control script that includes a
# restart function, so refrain from calling svc_stop/svc_start
# here. Note that this comment is required to fix bug 55576;
# runscript.sh greps this script... (09 Jul 2004 agriffis)
ebegin "Restarting shorewall6"
${command} status 1>/dev/null
if [ $? != 0 ] ; then
svc_start
else
${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
fi
eend $?
}
clear() {
# clear will remove all the rules and bring the system to an
unfirewalled
# state. (21 Nov 2004 eldad)
ebegin "Clearing all shorewall rules and setting policy to ACCEPT"
${command} ${OPTIONS} clear 1>/dev/null
eend $?
}
reset() {
# reset the packet and byte counters in the firewall
ebegin "Resetting the packet and byte counters in shorewall6"
${command} ${OPTIONS} reset 1>/dev/null
eend $?
}
refresh() {
# refresh the rules involving the broadcast addresses of firewall
# interfaces, the black list, traffic control rules and
# ECN control rules
ebegin "Refreshing shorewall6 rules"
${command} ${OPTIONS} refresh 1>/dev/null
eend $?
}
check() {
# perform cursory validation of the zones, interfaces, hosts, rules
# and policy files. CAUTION: does not parse and validate the generated
# iptables commands.
ebegin "Checking shorewall6 configuration"
${command} ${OPTIONS} check 1>/dev/null
eend $?
}
1.1 net-firewall/shorewall/files/4.6/shorewall.initd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.initd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.initd?rev=1.1&content-type=text/plain
Index: shorewall.initd
===================================================================
#!/sbin/openrc-run
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header:
/var/cvsroot/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall.initd,v 1.1
2014/11/18 12:54:56 xmw Exp $
description='The Shoreline Firewall, more commonly known as "Shorewall", is'
description="${description} a high-level tool for configuring Netfilter."
extra_commands="check clear"
extra_started_commands="refresh reset"
description_check="Checks if the configuration will compile or not."
description_clear="Clear will remove all rules and chains installed by"
description_clear="${description_clear} Shorewall. The firewall is then"
description_clear="${description_clear} wide open and unprotected."
description_refresh="The mangle table will be refreshed along with the"
description_refresh="${description_refresh} blacklist chain (if any)."
description_reset="All the packet and byte counters in the firewall are reset."
command="/usr/sbin/shorewall"
depend() {
need net
provide firewall
after ulogd
}
status() {
local _retval
${command} status 1>/dev/null
_retval=$?
if [ ${_retval} = '0' ]; then
einfo 'status: started'
mark_service_started "${SVCNAME}"
return 0
else
einfo 'status: stopped'
mark_service_stopped "${SVCNAME}"
return 3
fi
}
start() {
ebegin "Starting shorewall"
${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
eend $?
}
stop() {
ebegin "Stopping shorewall"
${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
eend $?
}
restart() {
ebegin "Restarting shorewall"
${command} status 1>/dev/null
if [ $? != 0 ] ; then
svc_start
else
${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
fi
eend $?
}
clear() {
ebegin "Clearing all shorewall rules and setting policy to ACCEPT"
${command} ${OPTIONS} clear 1>/dev/null
eend $?
}
reset() {
ebegin "Resetting the packet and byte counters in shorewall"
${command} ${OPTIONS} reset 1>/dev/null
eend $?
}
refresh() {
# refresh the rules involving the broadcast addresses of firewall
# interfaces, the black list, traffic control rules and
# ECN control rules
ebegin "Refreshing shorewall rules"
${command} ${OPTIONS} refresh 1>/dev/null
eend $?
}
check() {
# perform cursory validation of the zones, interfaces, hosts, rules
# and policy files. CAUTION: does not parse and validate the generated
# iptables commands.
ebegin "Checking shorewall configuration"
${command} ${OPTIONS} check 1>/dev/null
eend $?
}
1.1
net-firewall/shorewall/files/4.6/shorewall-init-01_remove-ipset-functionality.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init-01_remove-ipset-functionality.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init-01_remove-ipset-functionality.patch?rev=1.1&content-type=text/plain
Index: shorewall-init-01_remove-ipset-functionality.patch
===================================================================
--- shorewall-init.old 2013-09-08 23:25:36.364924304 +0200
+++ shorewall-init 2013-09-08 23:29:27.418736392 +0200
@@ -79,10 +79,6 @@
fi
done
- if [ -n "$SAVE_IPSETS" -a -f "$SAVE_IPSETS" ]; then
- ipset -R < "$SAVE_IPSETS"
- fi
-
return 0
}
@@ -100,13 +96,6 @@
fi
done
- if [ -n "$SAVE_IPSETS" ]; then
- mkdir -p $(dirname "$SAVE_IPSETS")
- if ipset -S > "${SAVE_IPSETS}.tmp"; then
- grep -qE -- '^(-N|create )' "${SAVE_IPSETS}.tmp" && mv -f
"${SAVE_IPSETS}.tmp" "$SAVE_IPSETS"
- fi
- fi
-
return 0
}
1.1 net-firewall/shorewall/files/4.6/shorewall-lite.confd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.confd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-lite.confd?rev=1.1&content-type=text/plain
Index: shorewall-lite.confd
===================================================================
# Global start/restart/stop options
#
OPTIONS="-tvv"
# Start options
#
STARTOPTIONS=""
# Stop options
#
STOPOPTIONS=""
# Restart options
#
RESTARTOPTIONS=""
1.1 net-firewall/shorewall/files/4.6/shorewall6-lite.confd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.confd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall6-lite.confd?rev=1.1&content-type=text/plain
Index: shorewall6-lite.confd
===================================================================
# Global start/restart/stop options
#
OPTIONS="-tvv"
# Start options
#
STARTOPTIONS=""
# Stop options
#
STOPOPTIONS=""
# Restart options
#
RESTARTOPTIONS=""
1.1 net-firewall/shorewall/files/4.6/shorewall-init.confd
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.confd?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-firewall/shorewall/files/4.6/shorewall-init.confd?rev=1.1&content-type=text/plain
Index: shorewall-init.confd
===================================================================
# List the Shorewall products Shorewall-init should
# initialize (space-separated list).
#
# Sample: PRODUCTS="shorewall shorewall6-lite"
#
PRODUCTS=""
