Barry McCormick
f35de69b28
Merge pull request #605 from JRGTH/rdr_fixes
...
Add rdr pf conf check
2023-10-18 08:53:47 -07:00
Barry McCormick
3355c07dbf
rdr disable directive fix
2023-10-04 10:13:08 -07:00
JRGTH
d6b5733d48
Add rdr pf conf check
...
Prevent shutdown/rdr command stalls.
2023-09-07 08:34:28 -04:00
Christer Edwards
15f2ea8574
Merge branch 'master' of https://github.com/bastillebsd/bastille into 2023_release
2023-07-14 21:02:30 -06:00
Christer Edwards
4efcc5021c
update copyright dates
2023-07-14 21:02:14 -06:00
skenizen
373ccd45d9
changed the occurence of path /etc/pf.conf in the rdr.sh script for reading it as a variable from the bastille configuration.
2023-07-12 10:57:46 +02:00
Christer Edwards
72b8000347
fix rdr issue detecting IP6 when disabled or not set
2023-06-21 20:34:19 -06:00
android-ucet
bf6fbed2b5
add ipv6 rdr support
2023-03-28 15:03:53 +02:00
Lars Engels
64c3b6045e
Allow running bastille and subcomands with help flags as regular user
2023-03-16 20:58:11 +01:00
Chris Wells
dd7f195c1e
Make pf table name and external interface configurable.
...
Closes #508
2022-11-26 23:24:33 -05:00
Andrew Stevenson
797f406a31
Convert tab to spaces
...
Spaces seem to be the convention for these files, for better or worse, so make
things consistent.
2022-07-24 22:16:38 +00:00
Niketh Murali
6e5a566d7f
Extend RDR to support logging
...
PF allows us to log rdr rules. The syntax to enable this is found in
pf.conf under the syntax grammar section for rdr-rule.
This commit extends Bastille's command line interface to allow users
to choose to log their rdr rules using the pf.conf syntax -
``````````````````````````````````````````````````````
tcp|udp host_port jail_port [log ['(' logopts ')'] ]
``````````````````````````````````````````````````````
Here, the syntax after jail_port is optional. This is sufficient to
provide backwards compatibility. The keyword 'log' enables logging with
the default options. The user can also provide custom options -
logopts - whose the syntax and allowed keywords are defined in pf.conf.
It's left to the user to supply correct logopts as the code does not
verify those values or their syntax.
2022-03-01 21:54:34 -05:00
Christer Edwards
aafc2b3323
0.9.20220216 release
2022-02-16 23:28:09 -07:00
Christer Edwards
faf3b2b691
use full path when calling jls binary
2021-12-17 19:09:49 -07:00
Daniel Ziltener
cd054f2a32
Fix for issue #403
2021-09-02 22:44:49 +02:00
Christer Edwards
74fdcbdcb5
rdr now persists rules by default; rdr.sh cleanup
2021-01-09 15:42:24 -07:00
Christer Edwards
cc870b2667
fix %s->%d regression
2021-01-05 18:24:02 -07:00
Christer Edwards
6f043d62e5
add required 'pass' to rdr rules
2021-01-05 18:00:28 -07:00
Christer Edwards
83a83e087e
adding a couple vnet exceptions for ip4.addr checks
2021-01-01 09:23:26 -07:00
Chris Wells
cc513c3bed
Allow port ranges in RDR parameters.
2020-11-25 20:29:15 -05:00
Chris Wells
aaffc882f9
Create and leverage global error functions
2020-08-30 10:57:14 -04:00
Marius van Witzenburg
f28054b47e
Cleanup whitespace
2020-04-14 11:53:11 +02:00
Jose
01eaccc1da
Add double quotes to prevent globbing/word splitting, general code consistency improvements
2020-02-20 18:06:31 -04:00
Jose
7ef65036c6
Return proper warning messages, code cleanup
2020-02-14 11:00:02 -04:00
pc
d8914f9892
Switch from --option to option and fix typos
2020-02-02 00:28:02 +00:00
pc
f65fe999cc
Add dynamic rdr
2020-02-01 15:58:02 +00:00