Michael Rash 795b1de4dd [server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency ...

The RULES_CHECK_THRESHOLD variable defines the number of times firewall rule
expiration times must be checked before a "deep" check is run. This allows
fwknopd to remove rules that contain a proper '_exp_<time>' even if a third party
program added them instead of fwknopd. The default value for this variable is 20,
and this typically results in this check being run every two seconds or so. To
disable this type of checking altogether, set this variable to zero.

2015-07-18 10:37:17 -07:00

..

access.c

[server] start on sudo usage for command exec (issue #159)

2015-07-02 23:44:16 -04:00

access.conf

Keep the documentation consistent

2014-11-29 15:14:31 +10:30

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

Fixed file permissions

2014-12-31 09:51:08 +01:00

cmd_opts.h

[server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency

2015-07-18 10:37:17 -07:00

config_init.c

[server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency

2015-07-18 10:37:17 -07:00

config_init.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

extcmd.c

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00

extcmd.h

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00

fw_util_firewalld.c

[server] fix is_digits() logic and add tests

2015-07-17 21:28:02 -07:00

fw_util_firewalld.h

[server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain

2015-04-18 05:38:35 -07:00

fw_util_ipf.c

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_ipf.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_ipfw.c

[server] fix is_digits() logic and add tests

2015-07-17 21:28:02 -07:00

fw_util_ipfw.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_iptables.c

[server] fix is_digits() logic and add tests

2015-07-17 21:28:02 -07:00

fw_util_iptables.h

[server] add stronger 'no -C' support for firewalld systems (issue #162)

2015-07-16 11:39:14 -07:00

fw_util_pf.c

[server] fix is_digits() logic and add tests

2015-07-17 21:28:02 -07:00

fw_util_pf.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util.h

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

fwknopd_common.h

[server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency

2015-07-18 10:37:17 -07:00

fwknopd_errors.c

[server] add --dump-serv-err-codes for test coverage

2014-05-02 22:59:05 -04:00

fwknopd_errors.h

[server] add --exit-parse-config option, man page updates (minor formatting change)

2014-05-04 09:17:27 -04:00

fwknopd.8.in

man page updates

2015-05-22 15:31:18 -04:00

fwknopd.c

[server] minor --udp-server option handling update for completeness

2015-06-30 17:44:07 -07:00

fwknopd.conf

[server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain

2015-04-18 05:38:35 -07:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

incoming_spa.c

[server] switch from abs() to labs() for time difference calculation

2015-04-19 17:48:18 -07:00

incoming_spa.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

log_msg.c

[test suite] add SYSLOG_FACILITY tests

2014-07-07 21:35:27 -05:00

log_msg.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

Makefile.am

Remove commented out entries from the client and server Makefile.am.

2015-02-14 12:40:58 -05:00

pcap_capture.c

[server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency

2015-07-18 10:37:17 -07:00

pcap_capture.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

process_packet.c

[server] Calculate payload length from IP header

2015-07-16 23:02:50 -07:00

process_packet.h

[server] Calculate payload length from IP header

2015-07-16 23:02:50 -07:00

replay_cache.c

[server] remove unncessary NULL check spotted by Coverity

2015-04-19 19:44:43 -07:00

replay_cache.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

sig_handler.c

consolidate signal handling a bit, UDP server msg size updates

2014-09-28 22:06:34 -04:00

sig_handler.h

consolidate signal handling a bit, UDP server msg size updates

2014-09-28 22:06:34 -04:00

tcp_server.c

add CODE_COVERAGE macro for ./configure --enable-profile-coverage

2014-11-06 20:23:40 -05:00

tcp_server.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

udp_server.c

[server] Added RULES_CHECK_THRESHOLD to define 'deep' rule expiration check frequency

2015-07-18 10:37:17 -07:00

udp_server.h

first cut at UDP server mode

2014-09-28 11:49:04 -04:00

utils.c

minor change to remove debugging statement

2015-07-17 12:17:48 -07:00

utils.h

[server] make sure fw _exp_NNN... strings contain only digits after the _exp_ prefix

2015-07-17 12:15:01 -07:00