Michael Rash ef9498f783 [server] Implement garbage cleanup mode for rule deletion ...

This is a significant commit that allows fwknopd to delete expired rules
from the firewall policy regardless of whether fwknopd is tracking them.
That is, a third party program could insert rules into the fwknopd
chains (iptables for now, but this will be extended to the other
firewalls) in order to take advantage of fwknopd rule deletion.

2015-07-13 21:29:16 -04:00

..

access.c

[server] start on sudo usage for command exec (issue #159)

2015-07-02 23:44:16 -04:00

access.conf

Keep the documentation consistent

2014-11-29 15:14:31 +10:30

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

Fixed file permissions

2014-12-31 09:51:08 +01:00

cmd_opts.h

[server] start on sudo usage for command exec (issue #159)

2015-07-02 23:44:16 -04:00

config_init.c

[server] start on sudo usage for command exec (issue #159)

2015-07-02 23:44:16 -04:00

config_init.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

extcmd.c

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00

extcmd.h

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00

fw_util_firewalld.c

[server / test suite] cleaner SNAT MASQUERADE support

2015-04-22 01:00:57 -07:00

fw_util_firewalld.h

[server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain

2015-04-18 05:38:35 -07:00

fw_util_ipf.c

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_ipf.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_ipfw.c

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_ipfw.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_iptables.c

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

fw_util_iptables.h

[server] add NAT rule existence detection for --no-ipt-check support (issue #162)

2015-07-07 08:28:16 -04:00

fw_util_pf.c

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util_pf.h

Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive

2014-11-29 15:05:06 +10:30

fw_util.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util.h

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

fwknopd_common.h

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

fwknopd_errors.c

[server] add --dump-serv-err-codes for test coverage

2014-05-02 22:59:05 -04:00

fwknopd_errors.h

[server] add --exit-parse-config option, man page updates (minor formatting change)

2014-05-04 09:17:27 -04:00

fwknopd.8.in

man page updates

2015-05-22 15:31:18 -04:00

fwknopd.c

[server] minor --udp-server option handling update for completeness

2015-06-30 17:44:07 -07:00

fwknopd.conf

[server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain

2015-04-18 05:38:35 -07:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

incoming_spa.c

[server] switch from abs() to labs() for time difference calculation

2015-04-19 17:48:18 -07:00

incoming_spa.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

log_msg.c

[test suite] add SYSLOG_FACILITY tests

2014-07-07 21:35:27 -05:00

log_msg.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

Makefile.am

Remove commented out entries from the client and server Makefile.am.

2015-02-14 12:40:58 -05:00

pcap_capture.c

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

pcap_capture.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

process_packet.c

[server] bug fix to exclude pcap.h only in --enable-udp-server mode

2015-02-18 19:37:37 -05:00

process_packet.h

autoconf update to ensure libpcap is not linked against in --enable-udp-server mode

2014-09-29 11:42:11 -04:00

replay_cache.c

[server] remove unncessary NULL check spotted by Coverity

2015-04-19 19:44:43 -07:00

replay_cache.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

sig_handler.c

consolidate signal handling a bit, UDP server msg size updates

2014-09-28 22:06:34 -04:00

sig_handler.h

consolidate signal handling a bit, UDP server msg size updates

2014-09-28 22:06:34 -04:00

tcp_server.c

add CODE_COVERAGE macro for ./configure --enable-profile-coverage

2014-11-06 20:23:40 -05:00

tcp_server.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

udp_server.c

[server] Implement garbage cleanup mode for rule deletion

2015-07-13 21:29:16 -04:00

udp_server.h

first cut at UDP server mode

2014-09-28 11:49:04 -04:00

utils.c

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00

utils.h

[server] default to not returning partial line when collecting the output of an external command

2015-07-10 22:45:44 -04:00