2023-10-09 Joost van Baal-Ilić * uruk/NEWS, uruk/bootstrap: bootstrap: upgrade from automake 1.15 to 1.16. 2023-10-09 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: ship it: version 20231009 - The Vyttila - Kakkanad Release 2023-10-06 Joost van Baal-Ilić * uruk/NEWS: record plan to fix yet another longstanding bug: "deal sane with nics with : or - in their name" 2023-10-06 Joost van Baal-Ilić * uruk/NEWS: record changes 2023-02-13 Joost van Baal-Ilić * uruk/README: drop empty last line 2021-12-26 Joost van Baal-Ilić * uruk/NEWS: record changes 2020-07-12 Joost van Baal-Ilić * uruk/TODO: more to do: spdx 2020-02-10 Joost van Baal-Ilić * uruk/script/uruk.in: By default, don't set $iptables to /sbin/iptables and don't set $ip6tables to /sbin/ip6tables, but set these to "iptables" and "ip6tables": assume PATH is sane. Users who wish not to rely on PATH, are invited to set URUK_IPTABLES and URUK_IP6TABLES. This fixes problems with usrmerge (https://wiki.debian.org/UsrMerge and https://packages.debian.org/usrmerge). This partly addresses Debian Bug #925297 "uruk: migrate from iptables and ip6tables to nftables" and it closes Debian Bug #951049 "uruk: ip[6]tables has been moved to /usr/sbin/ip[6]tables" (thanks Casper Gielen). (Closes: #951049) 2019-11-16 Joost van Baal-Ilić * uruk/script/uruk-save: add comment 2019-11-13 Joost van Baal-Ilić * uruk/script/uruk-save: uruk-save: add some comments listing iptables defaults 2019-11-13 Joost van Baal-Ilić * uruk/NEWS: stuff to do 2019-11-13 Joost van Baal-Ilić * : commit 9c4eec93dce4b3cc388c6fa1d747e4e5ded1660a Author: Joost van Baal-Ilić Date: Wed Nov 13 10:38:46 2019 +0100 2019-01-21 Joost van Baal-Ilić * uruk/NEWS: start and name next release: tussen Oud Gastel, Klundert en Oudenbosch 2019-01-21 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20190121 - The van Keistoep naar Heisteeg Release 2018-11-19 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: ignore IPs which have "deprecated nodad" 2018-11-19 Joost van Baal-Ilić * uruk/NEWS: start and name next release 2018-11-16 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20181116 - The Lombardijen Release 2018-11-16 Joost van Baal-Ilić * uruk/NEWS, uruk/man/Makefile.am: buildsystem: man/Makefile.am: MAINTAINERCLEANFILES: add $(man_MANS), remove undefined $(manazms). 2018-11-16 Joost van Baal-Ilić * uruk/NEWS: name this release: Baroeg, since 1981 2018-11-13 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: Not "*:*") but *:*) in case statement. 2018-11-13 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20181113 - The Alfama Release 2018-11-13 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: name this release: al-hamma (الحمّة) (Thanks Jelena) deal even more properly with IPv4 addresses: previous version 20181112 failed on some RHEL 6.10 systems with bash 4.1.2. 2018-11-13 Joost van Baal-Ilić * uruk/init/autodetect-ips: add more debugging info 2018-11-12 Joost van Baal-Ilić * uruk/NEWS: version 20181112 - The Plantagedok Release 2018-11-12 Joost van Baal-Ilić * uruk/NEWS: name this release: Anarchist Bookfair Amsterdam 2018 @ https://plantagedok.nl/ 2018-11-12 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: properly deal with IPs assigned to virtual interfaces like eth0:1 2018-11-09 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20181109 - The Catharijnepoort Release 2018-11-09 Joost van Baal-Ilić * uruk/init/autodetect-ips: another bugfix 2018-11-09 Joost van Baal-Ilić * uruk/init/autodetect-ips: fix bug introduced with previous commit: for IPv6, _do_ test for global scope 2018-11-09 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: In case run time configuration of IPs to network interfaces is available and differs from what's specified in /etc/network/interfaces or /etc/sysconfig/network-scripts/ifcfg-*, use the runtime information. Therefore, you might now observe different uruk behaviour if you use e.g. udev to assign IPs to your network interfaces. Thanks Lars Biemans and Wessel Dankers for joining the discussion on how to deal with this issue. Also: name the upcoming release ( https://nl.wikipedia.org/wiki/Catharijnepoort_(Utrecht)#/media/File:Catharijnepoort-Hardenbergh.jpg ) 2018-11-09 Joost van Baal-Ilić * uruk/init/autodetect-ips: add some comments on how to debug this scripts 2018-11-07 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20181107 - The Daničareva Release 2018-11-07 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: init/autodetect-ips: drop support for ancient bash 3.2. (Red Hat EL 6.10 ships bash 4.1. Debian jessie ships bash 4.3.) Fix bug: when some needed IPs are not defined in /etc/sysconfig/network-scripts/ifcfg-* (Red Hat) or /etc/network/interfaces (Debian), and autodetect-ips needs to parse output from ip(8), it is reported to use scope link IPv6 adresses where it should have used scope global IPv6 addresses. Thanks Lars Biemans for reporting. 2018-10-26 Joost van Baal-Ilić * uruk/NEWS: start next release: named after the http://oosm.org/ street 2018-10-08 Joost van Baal-Ilić * uruk/TODO: bug reported by Wessel, patch incoming 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20181006 - The Tidal Basin, Washington, D.C. Release 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: name upcoming release, after the Wilbur Mills - Fanne Fox october 7, 1974 incident 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: rsn: fix 2 bugs; previous release not ready for debian 2018-10-05 Joost van Baal-Ilić * uruk/NEWS, uruk/bootstrap: start next release 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: ship it: uruk version 20181005 - The Dampad Release 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: almost ready for release 2018-10-05 Joost van Baal-Ilić * uruk/NEWS: documenting... 2018-10-04 Joost van Baal-Ilić * uruk/NEWS: document 2018-09-04 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: document 2018-09-04 Joost van Baal-Ilić * uruk/TODO, uruk/init/uruk.service: init/uruk.service: remove 'DefaultDependencies=no' from [Unit]. Before this change, uruk would start too early, before /tmp and ip6table_filter.ko are available. (If we ever would re-enable 'DefaultDependencies=no', we'd have to make sure to also specify After= stanzas, e.g. local-fs.target.) Thanks Wessel Dankers for bugreport and proposed fix. 2018-09-04 Joost van Baal-Ilić * uruk/TODO: yet another systemd-related bug found. tnx Wessel Dankers 2018-05-28 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20180528 - The Verliefd Laantje Release 2018-05-28 Joost van Baal-Ilić * uruk/NEWS: named this release. (crosses De Kleine Overbrug, which features https://www.monumenten.nl/monument/20427) 2018-05-28 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: more to do 2018-05-25 Joost van Baal-Ilić * uruk/NEWS, uruk/init/uruk.service: Add Install section to uruk's unit configuration file for systemd, in order to act sane upon "systemctl disable uruk" and "systemctl enable uruk". 2016-05-13 Joost van Baal-Ilić * uruk/NEWS: record news 2016-05-13 Joost van Baal-Ilić * uruk/init/autodetect-ips: use proper whitespace around is-equal comparison in test. Fixes problem finding IPv6 addresses. Reported and patch supplied by Casper Gielen. 2016-03-09 Joost van Baal-Ilić * uruk/TODO: more to do, tnx Casper Message-ID: <56DFF6A1.8000203@uvt.nl> 2016-02-19 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20160219 - The Speurgt Release 2016-02-19 Joost van Baal-Ilić * uruk/NEWS: record changes 2016-02-19 Joost van Baal-Ilić * uruk/script/uruk.in: Fix bug: when uruk-save is enabled, loading saved active ruleset fails with Loading iptables ruleset: load "active"Bad argument `REASON=invalid' Patch contributed by Wessel Dankers. 2016-02-18 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20160218 - The Snijders-Chaam Release 2016-02-18 Joost van Baal-Ilić * uruk/NEWS, uruk/bootstrap: upgrade from automake 1.14 to 1.15 2016-02-18 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: record changes 2016-02-18 Joost van Baal-Ilić * uruk/doc/default, uruk/script/urukctl: doc/default: set enable_uruk_save to true. script/urukctl: no longer assign obsolete variable enable_uruk_save_warning, get rid of warn_uruk_save() function. 2016-02-18 Joost van Baal-Ilić * uruk/NEWS: start next release 2015-12-09 Joost van Baal-Ilić * uruk/TODO: test-case 2015-12-09 Joost van Baal-Ilić * uruk/TODO: more to do 2015-11-18 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20151118 - The Āne-wātak Release 2015-11-18 Joost van Baal-Ilić * uruk/TODO, uruk/script/uruk.in: bugreport: "ip6tables logs IPv6 packets with ACK bit set" was invalid; closed. also: uruk is now more verbose when logging blocking of INVALID packets. Thanks Casper Gielen and Wessel Dankers. 2015-11-18 Joost van Baal-Ilić * uruk/TODO: tnx caspar for bugreport: ip6tables logs IPv6 packets with ACK bit set 2015-09-21 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150921 - The Prishtinë Release. Dedicated to DJ Esad from Eindhoven 2015-09-21 Joost van Baal-Ilić * uruk/NEWS: a name for the upcoming release 2015-09-20 Joost van Baal-Ilić * uruk/NEWS: dedication 2015-09-19 Joost van Baal-Ilić * uruk/NEWS: systemd? 2015-09-18 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/init/uruk.service: add Service section to .service file 2015-09-18 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/init/Makefile.am, uruk/init/uruk.service: systemd stuff (WiP) 2015-09-18 Joost van Baal-Ilić * uruk/init/uruk.service: systemd support 2015-09-18 Joost van Baal-Ilić * uruk/NEWS: layout 2015-09-17 Joost van Baal-Ilić * uruk/NEWS: record changes by Wessel Dankers 2015-09-17 Wessel Dankers * uruk/script/uruk.in: Add missing conntrack statements For some reason uruk created conntrack entries for outgoing IPv4 traffic but not for IPv6. Fixed by adding entries for IPv6 as well. And even though conntrack entries were created in the output chain, these were not used. Fixed by adding "--ctstate ESTABLISHED,RELATED" rules, just like in the INPUT chain. 2015-09-17 Wessel Dankers * uruk/script/uruk.in: Always treat IPv6 as a multiple-IPs-per-interface case Even if you do not explicitly configure multiple IPv6 addresses, you still have to deal with the fact that an interface has at least a link-local and a global address. That means you can't simply drop traffic that isn't directed at the primary global address because that will interfere with things like router advertisements. Likewise, in the output chain you have to provide for the fact that sometimes the source address on outgoing traffic will not be the primary global address. This patch removes the code path that would block all traffic not directed at the primary global address as well as outgoing traffic with something other than that primary global address. It will just always apply the simple bogon network range filtering that it used for the explicit multiple address case. 2015-09-16 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: ship it: version 20150916 - The ᎠᏍᎦᏯ ᎩᎦᎨᏱ; Release 2015-09-16 Joost van Baal-Ilić * uruk/NEWS: prepare uruk version 20150916 for release 2015-09-11 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/script/urukctl: fix bug: [ ok ] Checking uruk (): uruk not running. 2015-09-02 Joost van Baal-Ilić * uruk/TODO: ... 2015-09-02 Joost van Baal-Ilić * uruk/TODO: another debian bug reported 2015-08-25 Joost van Baal-Ilić * uruk/NEWS: start next release 2015-08-25 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150825 - The Прибој Release 2015-08-24 Joost van Baal-Ilić * uruk/NEWS: record changes 2015-08-24 Joost van Baal-Ilić * uruk/script/uruk.in: Apply patch contributed by Wessel Dankers: "Fix two cases where $ip6_defined was used without being set." Relevant in cases where more than one IPv6 address is defined on an interface. 2015-08-10 Joost van Baal-Ilić * uruk/NEWS: start next release 2015-08-10 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150810 - The Гoрњи Милановац Release 2015-08-10 Joost van Baal-Ilić * uruk/NEWS: named this release, after chopped down oak tree near planned Koridor 11 2015-08-07 Joost van Baal-Ilić * uruk/NEWS, uruk/init/uruk: no longer inspect obsolete variable $status_active. Now "service uruk status" will no longer report _both_ 'active uruk rules loaded' _and_ 'active ruleset not loaded' when uruk is running. Thanks Casper Gielen for bugreport. 2015-06-08 Joost van Baal-Ilić * uruk/Makefile.am, uruk/NEWS: deprecate bz2, introduce .xz for tar releases 2015-06-08 Joost van Baal-Ilić * uruk/TODO: meer ideeen 2015-06-08 Joost van Baal-Ilić * uruk/TODO: new bug found in rpm on old RHEL 2015-06-08 Joost van Baal-Ilić * uruk/NEWS: start next release 2015-06-08 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150608 - The Oude Leije Release 2015-06-08 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: stuff is fixed, prepare release 2015-06-08 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: bash 3.2 issue: document 2015-06-08 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: make sure it no longer gives syntax error with bash 3.2. thanks Casper Gielen and Wessel Dankers 2015-05-13 Joost van Baal-Ilić * uruk/TODO: snap r niks van...: bug found on Red Hat Enterprise Linux Server release 5.11 (Tikanga) running uruk-20141120-1 rpm, tnx Jeroen Egmond 2015-04-03 Joost van Baal-Ilić * uruk/TODO: record Bug#705687 Provide "uruk diff" 2015-04-03 Joost van Baal-Ilić * uruk/TODO: reprioritization 2015-04-03 Joost van Baal-Ilić * uruk/TODO: bug: enable uruk-save by default: higher prio now 2015-04-03 Joost van Baal-Ilić * uruk/TODO: stuff 2015-04-03 Joost van Baal-Ilić * uruk/TODO: suggested solution of dealing with "service uruk reload" 2015-04-02 Joost van Baal-Ilić * uruk/NEWS: start next release 2015-04-02 Joost van Baal-Ilić * uruk/TODO: another showstopper 2015-04-02 Wessel Dankers * uruk/script/uruk.in: script/uruk.in: fix whitespace 2015-04-01 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150401 - The Gorp en Roovert Release 2015-04-01 Joost van Baal-Ilić * uruk/Makefile.am: wsl is an author: deal with email address stripping 2015-03-30 Wessel Dankers * uruk/script/uruk.in: Don't drop all traffic when multiple addresses are used In uruk there is a bit of code that drops incoming packets for unknown destinations. In the case where there are multiple IP addresses on an interface, it falls back to just restricting the destination address to non-bogon ranges. In theory it could restrict these packets to the set of configured IP addresses, but this would require creating an extra filter chain (something which uruk has avoided so far). In commit 4b2dd0f71bf38dbf1e759d3b078c8c8692328dee the code for handling multiple IP addresses on an interface was changed, which also touched the code mentioned above. In this commit a logic bug was introduced, which caused packets to be dropped unless they had ALL destinations (instead of ANY). Since packets by design only have a single destination address, that meant all packets were dropped on that interface. This patch fixes this showstopper issue by fixing the logic bug, properly keeping track of the number of addresses on an interface, and separating the filters for local and remote addresses. 2015-03-30 Wessel Dankers * uruk/init/uruk: fix improper parameter passing (and typo) 2015-03-30 Joost van Baal-Ilić * uruk/TODO: moar bugs 2015-03-30 Joost van Baal-Ilić * uruk/TODO: tnx Fruit bugreport 2015-03-25 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20150325 - The De Drie Zwaantjes Release 2015-03-25 Joost van Baal-Ilić * uruk/TODO: updated 2015-03-06 Joost van Baal-Ilić * uruk/AUTHORS, uruk/NEWS, uruk/THANKS: Welcome aboard Wessel Dankers 2015-03-06 Wessel Dankers * uruk/NEWS, uruk/script/uruk-save, uruk/script/uruk.in: unify net_* and net6_* Unifies the net_* and net6_ variables just like sources_* and sources6_* (and ip_* and ip6_*). As a nice side-effect this finally allows multiple networks to be specified in net_* (and net6_*). Also expanded the list of bogon networks, based on RFC 6890: 0.0.0.0/8 10.0.0.0/8 100.64.0.0/10 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.0.0.0/24 192.0.2.0/24 192.88.99.0/24 192.168.0.0/16 198.18.0.0/15 198.51.100.0/24 203.0.113.0/24 224.0.0.0/3 64:ff9b::/96 ::ffff:0:0/96 100::/64 200::/7 2001:2::/48 2001:db8::/32 2001:10::/28 fc00::/7 fec0::/10 3ffe::/16 5f00::/8 ::1/128 ::/128 Improved uruk_save() option snooping to accept other syntax variants (-tnat, --table=nat). Made the syntax of uruk-save consistent with that of the main uruk script. Signed-off-by: Joost van Baal-Ilić 2015-03-06 Wessel Dankers * uruk/NEWS, uruk/man/uruk-rc.azm, uruk/script/uruk.in: unify ip_* and ip6_* Just like sources_* and sources6_*, it would be nice if you didn't have to worry about whether addresses on your interfaces are IPv4 or IPv6. This change effects that (backwards compatible, of course). As a side effect this introduces the somewhat peculiar (but useful) feature that you can assign multiple addresses to a {interface}_{name} that will all be treated the same. In effect the name no longer describes a single address but a class of addresses that all get the same rules. This can greatly reduce duplication in configurations with large numbers of addresses (something not unheard of with IPv6). This patch also makes some formatting/style choices more consistent/uniform: * use case statements wherever possible (to reduce quoting issues); * deobfuscate eval statements by removing redundant escaped quotes; * always use short option syntax (when possible) for single-line iptables invocations; * always use long option syntax for iptables invocations that are spread out over multiple lines. Signed-off-by: Joost van Baal-Ilić 2015-02-13 Joost van Baal-Ilić * uruk/NEWS, uruk/doc/rc, uruk/man/uruk-rc.azm: Preparing The De Drie Zwaantjes Release, near Galder 2014-11-20 Joost van Baal-Ilić * uruk/TODO: tnx Fruit 2014-11-20 Joost van Baal-Ilić * uruk/NEWS, uruk/script/Makefile.am: ship it: uruk version 20141120 - The Јадар Release / http://sr.wikipedia.org/wiki/Jадар (притока Дрине) 2014-11-20 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/script/uruk.in: less warnings which are likely bogus (dccp and sctp proto) 2014-11-20 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/script/Makefile.am, uruk/script/{uruk => uruk.in}: uruk offers $uruk_version to rc file now 2014-11-20 Joost van Baal-Ilić * uruk/TODO: another wishlist bug 2014-08-05 Joost van Baal-Ilić * uruk/TODO: patch van Fruit 2014-08-05 Joost van Baal-Ilić * uruk/TODO: tnx Fruit, thijs voor feedback: warning is loos 2014-06-27 Joost van Baal-Ilić * uruk/NEWS: ship it: uruk version 20140627 - The Vlook Release 2014-06-27 Joost van Baal-Ilić * uruk/TODO: another nice thing for upcoming release. tnx Wessel 2014-06-27 Joost van Baal-Ilić * uruk/TODO: tnx casper 2014-06-27 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: cosmetics in NEWS 2014-06-26 Joost van Baal-Ilić * uruk/NEWS: releasing, step 1 of N 2014-06-04 Joost van Baal-Ilić * uruk/NEWS: stuff 2014-06-02 Joost van Baal-Ilić * uruk/NEWS: status of new proto support 2014-05-19 Joost van Baal-Ilić * uruk/NEWS: dccp, sctp docs 2014-05-19 Joost van Baal-Ilić * uruk/NEWS: seems we would have to modprobe for that 2014-05-19 Joost van Baal-Ilić * uruk/NEWS: refer to rfc for dccp and sctp 2014-05-19 Joost van Baal-Ilić * uruk/doc/DCCP.html, uruk/doc/SCTP.html: from http://en.wikipedia.org/wiki/SCTP and http://en.wikipedia.org/wiki/DCCP 2014-05-18 Joost van Baal-Ilić * uruk/TODO: reorder items cf stuff for upcoming release 2014-05-18 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: sctp 2014-05-18 Joost van Baal-Ilić * uruk/NEWS, uruk/script/uruk: uruk: add new protocols dccp sctp to supported ones tcp udp. not yet tested, needs more code. 2014-05-17 Joost van Baal-Ilić * uruk/TODO: ... 2014-05-17 Joost van Baal-Ilić * uruk/TODO: sctp research 2014-05-17 Joost van Baal-Ilić * uruk/TODO: sctp-plan 2014-05-16 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: update NEWS 2014-05-16 Joost van Baal-Ilić * uruk/TODO, uruk/man/uruk-rc.azm: add section IPv4 and IPv6 to uruk-rc(5), about sources_ vs obsolete sources6_ 2014-05-16 Joost van Baal-Ilić * uruk/bootstrap: update from automake 1.11 to 1.14 2014-05-16 Joost van Baal-Ilić * uruk/man/uruk-rc.azm: documenting new-style ipv6 handling 2014-05-16 Joost van Baal-Ilić * uruk/doc/rc: fixed FIXME about ipv6 2014-05-16 Joost van Baal-Ilić * uruk/TODO, uruk/doc/rc: examples/rc now uses new-style way to specify IPv6 sources 2014-05-16 Joost van Baal-Ilić * uruk/TODO: stuff to check on current status: documentation 2014-05-16 Joost van Baal-Ilić * uruk/TODO: some hints on heirloom-mailx usage 2014-05-16 Joost van Baal-Ilić * uruk/TODO: administrativia: how to read bugreports in mails when mutt is not available 2014-04-06 Joost van Baal-Ilić * uruk/NEWS: new release name. Waar nu De Vloek is 2014-03-19 Joost van Baal-Ilić * uruk/NEWS: start next release 2014-03-19 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20140319 - The Alfama Release 2014-03-19 Joost van Baal-Ilić * uruk/NEWS: use IPv6 example range, to be used in documentation, in our documentation. Thanks Wessel Dankers 2014-03-19 Joost van Baal-Ilić * uruk/NEWS: finish NEWS-item 2014-03-15 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: more to do 2014-03-15 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: cosmetics 2014-03-15 Joost van Baal-Ilić * uruk/NEWS: more documentation 2014-03-15 Joost van Baal-Ilić * uruk/NEWS: start documenting new behaviour 2014-03-15 Joost van Baal-Ilić * uruk/doc/uruk-auto.msg, uruk/init/autodetect-ips: Apply patch contributed by Wessel Dankers at Fri, 7 Mar 2014 17:00:20 +0100 in Message-Id: <1394208020-164526-1-git-send-email-wsl@fruit.je>: "[PATCH] autodetect-ips: debian inet6 stanzas default to netmask=64" 2014-03-15 Joost van Baal-Ilić * uruk/doc/uruk-ipv6.msg: patch is applied 2014-03-15 Joost van Baal-Ilić * uruk/script/uruk: Apply patch contributed by Wessel Dankers at Fri, 7 Mar 2014 14:39:00 +0100 in Subject: [PATCH] Use sources_${iface}_${proto}_${service} for IPv6; Message-Id: <1394199540-133252-1-git-send-email-wsl@fruit.je>: "Before this change, uruk required seperate sources_* and sources6_* variables to configure access for v4/v6 sources. With this patch the rules are as follows: 1) If both sources_* and sources6_* are defined (even if they're just empty), each is used for its respective address family. This ensures backwards compatibility. 2) If sources6_* is undefined, sources_* is used for both v4 and v6. 3) In either case, v4 literals in v6 context and v6 literals in v4 context are silently ignored. This patch also fixes the detection of undefined variables, which was broken." 2014-03-15 Joost van Baal-Ilić * uruk/doc/uruk-auto.msg, uruk/doc/uruk-ipv6.msg: 2 patches by Wessel 2014-02-08 Joost van Baal-Ilić * uruk/NEWS: tnx Jelena for choosing this release's name 2014-02-08 Joost van Baal-Ilić * uruk/TODO: some stuff is fixed 2014-02-07 Joost van Baal-Ilić * uruk/NEWS, uruk/bootstrap, uruk/doc/debian-bug-704807.mbox, uruk/doc/debian-bug-720306.mbox, uruk/man/Makefile.am: ERROR: files left in build directory after distclean: ./man/uruk-save.ps ./man/uruk-save.txt ./man/uruk.ps ./man/uruk.txt make[1]: *** [distcleancheck] Gre#ka 1 2014-02-07 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: bugfix documented 2014-02-07 Joost van Baal-Ilić * uruk/TODO, uruk/doc/debian-bug-704807.mbox, uruk/doc/debian-bug-705687.mbox, uruk/doc/debian-bug-720306.mbox: keep some debian bug reports in git, for offline work 2014-02-07 Joost van Baal-Ilić * uruk/TODO: this bug should be fixed now 2014-02-07 Joost van Baal-Ilić * uruk/TODO, uruk/init/uruk: no longer abort script if call "urukctl status" fails. this causes "service uruk force-reload" to fail bad in case uruk "not running" 2014-02-05 Joost van Baal-Ilić * uruk/TODO: the plot thickens 2014-02-05 Joost van Baal-Ilić * uruk/TODO: one bug is fixed 2014-02-05 Joost van Baal-Ilić * uruk/TODO: investigating upgrade-bug 2014-02-05 Joost van Baal-Ilić * uruk/TODO: reproduceer 2014-02-05 Joost van Baal-Ilić * uruk/TODO: tnx Wessel for bugreport 2013-12-15 Joost van Baal-Ilić * uruk/NEWS: start next release 2013-12-13 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20131213 - The Gweek Release 2013-12-13 Joost van Baal-Ilić * uruk/init/uruk: actually _do_ perform a reload when called as "service uruk force-reload" 2013-11-20 Joost van Baal-Ilić * uruk/TODO: tnx fruit 2013-11-20 Joost van Baal-Ilić * uruk/TODO: nog meer ideeen 2013-11-20 Joost van Baal-Ilić * uruk/TODO: tnx Fruit 2013-09-17 Joost van Baal-Ilić * uruk/TODO: init... 2013-09-16 Joost van Baal-Ilić * uruk/TODO: some update-rc.d issues in current debian sid (and jessie) 2013-09-16 Joost van Baal-Ilić * uruk/TODO: cosmetics 2013-09-16 Joost van Baal-Ilić * uruk/TODO: Bug#712869 was fixed in uruk version 20130809 (The Corbeşti Release) with "init/autodetect-ips, man/uruk-rc.azm: detect IPs currently assigned to [...]". 2013-09-16 Joost van Baal-Ilić * uruk/TODO: a bug is fixed 2013-09-15 Joost van Baal-Ilić * uruk/script/urukctl: fix warning about enable_uruk_save_warning is no longer supported 2013-09-15 Joost van Baal-Ilić * uruk/TODO: lintian systemd lsb init hassle 2013-09-13 Joost van Baal-Ilić * uruk/NEWS: start next release 2013-09-13 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: ship it: version 20130913 - The Clochán na bhFomhórach Release 2013-09-13 Joost van Baal-Ilić * uruk/NEWS, uruk/script/urukctl: script/urukctl: don't test running iptables when called with argument "save", enable running "urukctl save active" as non-root, using uruk-save. 2013-09-12 Joost van Baal-Ilić * uruk/TODO: investigating another wishlist bug 2013-09-12 Joost van Baal-Ilić * uruk/TODO: another bug squashed 2013-09-12 Joost van Baal-Ilić * uruk/NEWS: cosmetics 2013-09-12 Joost van Baal-Ilić * uruk/TODO: one bug squashed 2013-09-12 Joost van Baal-Ilić * uruk/NEWS, uruk/doc/default, uruk/script/urukctl: doc/default, script/urukctl: default: explicitly add /sbin to PATH. urukctl: check command line args earlier in execution. Now "urukctl --help" and "urukctl help" e.a. behave better when called as non-root. 2013-09-12 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: fatal bug found 2013-09-12 Joost van Baal-Ilić * uruk/TODO: designing better tests 2013-09-07 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: found another bug: urukctl usage info 2013-09-07 Joost van Baal-Ilić * uruk/NEWS: record changes 2013-09-03 Joost van Baal-Ilić * uruk/NEWS: we have got a name 2013-09-03 Joost van Baal-Ilić * uruk/TODO: more insight in "nf_conntrack: table full, dropping packet" 2013-09-03 Joost van Baal-Ilić * uruk/TODO: tnx jhoeke 2013-09-03 Joost van Baal-Ilić * uruk/bootstrap: bootstrap: upgrade from automake 1.11 to 1.13 2013-09-02 Joost van Baal-Ilić * uruk/script/urukctl: use just initd_status to decide upon status; do not inspect $status_active 2013-08-30 Joost van Baal-Ilić * : commit c2f808ed7491a90c1fc972b834263e004153bcfd Author: Joost van Baal-Ilić Date: Fri Aug 30 20:01:21 2013 +0200 2013-08-30 Joost van Baal-Ilić * uruk/TODO: broken! 2013-08-30 Joost van Baal-Ilić * uruk/NEWS: start next release 2013-08-30 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20130830 - The Dr Syntax's Head Release 2013-08-30 Joost van Baal-Ilić * uruk/NEWS: the release has a name: http://www.esmerel.com/circle/britain/syntax.html 2013-08-21 Joost van Baal-Ilić * uruk/NEWS, uruk/script/uruk: deal with Bug#720306: uruk: incorrectly blocks and logs tcp RSET packets 2013-08-09 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20130809 - The Corbeşti Release 2013-08-09 Joost van Baal-Илић * uruk/NEWS: record changes 2013-08-07 Joost van Baal-Ilić * uruk/init/autodetect-ips: Apply patch contributed by Wessel Dankers: commit 34aee39ea25bcb90c4a6e0463455f59549bcf782 "accept debian interfaces entries that include the netmask". 2013-08-02 Joost van Baal-Ilić * uruk/TODO: stuff is done 2013-08-02 Joost van Baal-Ilić * uruk/script/uruk: update copyright 2013-08-02 Joost van Baal-Ilić * uruk/TODO, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm, uruk/man/urukctl.azm: introduce zoem macro \gplheader, update copyright of all manpages 2013-08-02 Joost van Baal-Ilić * uruk/AUTHORS, uruk/THANKS: update and reshuffle 2013-07-31 Joost van Baal-Ilić * uruk/TODO: more to do. for this release? 2013-07-31 Joost van Baal-Ilić * uruk/man/uruk-rc.azm: cosmetics 2013-07-31 Joost van Baal-Ilić * uruk/man/uruk-save.azm: refer to urukctl, not init script 2013-07-31 Joost van Baal-Ilić * uruk/doc/rc, uruk/man/uruk-rc.azm: use ips_eth0 and ..._eth0_default_... ; one IP per NIC-mode is being phased out 2013-07-31 Joost van Baal-Ilić * uruk/NEWS, uruk/man/uruk.azm: cosmetics 2013-07-31 Joost van Baal-Ilić * uruk/init/autodetect-ips: cosmetics 2013-07-31 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: add cgielen to copyright owners 2013-07-30 Joost van Baal-Ilić * uruk/man/uruk-rc.azm: fix typo 2013-07-30 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: list changes 2013-07-30 Joost van Baal-Ilić * uruk/man/urukctl.azm: finished urukctl(8) manpage 2013-07-30 Joost van Baal-Ilić * uruk/doc/default, uruk/man/urukctl.azm: urukctl config file: update documentation 2013-07-30 Joost van Baal-Ilić * uruk/NEWS: cosmetics 2013-07-30 Joost van Baal-Ilić * uruk/init/autodetect-ips: cosmetics 2013-07-30 Joost van Baal-Ilić * uruk/init/autodetect-ips: fix serbian 2013-07-29 Joost van Baal-Ilić * uruk/NEWS: english 2013-07-29 Joost van Baal-Ilić * uruk/TODO: cosmetics 2013-07-29 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: cosmetics 2013-07-29 Joost van Baal-Ilić * uruk/script/urukctl: remove useless comments 2013-07-29 Joost van Baal-Ilić * uruk/NEWS: cosmetics 2013-07-28 Joost van Baal-Ilić * uruk/init/autodetect-ips: refer to documentation 2013-07-28 Joost van Baal-Ilić * uruk/man/uruk-rc.azm: document new autodetec-ips features 2013-07-28 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: only use scope global IPv6 addresses 2013-07-28 Joost van Baal-Ilić * uruk/man/uruk-rc.azm: start documenting new autodetect-ips features 2013-07-28 Joost van Baal-Ilić * uruk/init/autodetect-ips: update copyright 2013-07-28 Joost van Baal-Ilić * uruk/TODO, uruk/init/autodetect-ips: fix typo 2013-07-28 Joost van Baal-Ilić * uruk/init/autodetect-ips: detect IPs currently assigned to interfaces, not listed in config files 2013-07-27 Joost van Baal-Ilić * uruk/NEWS, uruk/init/autodetect-ips: Corbeşti near Petriş 2013-07-27 Joost van Baal-Ilić * uruk/TODO, uruk/init/autodetect-ips: working on improving autodetect-ips: use ip(1) if needed. in progress 2013-07-27 Joost van Baal-Ilić * uruk/NEWS: cosmetics 2013-07-27 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/init/autodetect-ips: working on improving autodetect-ips: use ip(1) if needed, found more bugs in autodetect-ips 2013-07-27 Joost van Baal-Ilić * uruk/TODO, uruk/init/autodetect-ips: working on improving autodetect-ips: use ip(1) if needed 2013-07-26 Joost van Baal-Ilić * uruk/TODO: improved todo-item, tnx Wessel 2013-07-26 Joost van Baal-Ilić * uruk/TODO: verduidiljk 2013-07-26 Joost van Baal-Ilić * uruk/TODO: idee: check soms niet op destination-ip 2013-06-28 Joost van Baal-Илић * : commit be0e4385d2c97734bb7000d9beff745d11ce91b5 Author: Joost van Baal-Илић Date: Fri Jun 28 12:38:02 2013 +0200 2013-06-28 Joost van Baal-Ilić * uruk/TODO: discussion irl 2013-06-28 Joost van Baal-Илић * uruk/TODO: [...] 2013-06-27 Joost van Baal-Илић * uruk/man/urukctl.azm: urukctl(8) 2013-06-27 Joost van Baal-Илић * uruk/NEWS: more stuff to add to NEWS 2013-06-27 Joost van Baal-Илић * uruk/man/urukctl.azm: still improving urukctl manpage 2013-06-27 Joost van Baal-Илић * uruk/NEWS: record changes 2013-06-25 Joost van Baal-Ilić * uruk/TODO: record debian Bug#712869, tnx Casper and Wessel 2013-06-19 Joost van Baal-Илић * uruk/TODO, uruk/man/urukctl.azm: syntax urukctl(8) manpage 2013-06-19 Joost van Baal-Илић * uruk/doc/default, uruk/man/urukctl.azm: moving documentation for /etc/default/uruk to proper manpage 2013-06-19 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: found a bug in git 2013-06-19 Joost van Baal-Илић * uruk/NEWS: tnx wessel 2013-06-18 Joost van Baal-Илић * uruk/init/uruk, uruk/script/urukctl: source /etc/default/uruk in urukctl, not in init script 2013-06-18 Joost van Baal-Илић * uruk/README: minor improvement 2013-06-18 Joost van Baal-Илић * uruk/man/urukctl.azm: minor improvements 2013-06-18 Joost van Baal-Илић * uruk/man/uruk.azm: suggest to use urukctl, one no longer should call /etc/init.d/uruk 2013-06-18 Joost van Baal-Илић * uruk/README: fix some minor typos 2013-06-18 Joost van Baal-Ilić * uruk/TODO: another bug in urukctl? 2013-06-18 Joost van Baal-Ilić * uruk/NEWS, uruk/script/urukctl: Fix bug in urukctl, introduced 2013-05-29: be sure to assign variables ($libdir e.a.) on time. No longer fails with "mkdir: cannot create directory `': No such file or directory". Thanks Casper Gielen for bugreport. 2013-06-18 Joost van Baal-Ilić * uruk/man/include.zmm.in, uruk/man/urukctl.azm: layout urukctl(8) 2013-06-18 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20130619 - The Het De Siptenpad Release 2013-06-18 Joost van Baal-Ilić * uruk/NEWS, uruk/man/urukctl.azm: urukctl(8) no longer alpha but beta 2013-06-18 Joost van Baal-Ilić * uruk/init/uruk: bugfix: change DAEMON from /usr/sbin/uruk to /sbin/uruk 2013-06-18 Joost van Baal-Илић * uruk/NEWS, uruk/TODO, uruk/man/urukctl.azm: ship it: uruk version 20130618 - The Sterreke Release 2013-06-18 Joost van Baal-Илић * uruk/NEWS, uruk/TODO, uruk/man/urukctl.azm: fixing urukctl.azm syntax, part 1 2013-06-18 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: more ideas, more to do 2013-06-18 Joost van Baal-Илић * uruk/NEWS, uruk/TODO, uruk/bootstrap: make sure no email addresses show up in ChangeLog (really) 2013-06-18 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: tweak 2013-06-18 Joost van Baal-Илић * uruk/NEWS: state rationale of changes 2013-05-31 Joost van Baal-Илић * uruk/init/uruk: fix "start", "stop" and "status" by calling urukctl 2013-05-31 Joost van Baal-Илић * uruk/NEWS: tweak 2013-05-31 Joost van Baal-Илић * uruk/NEWS: document changes, first shot at it 2013-05-31 Joost van Baal-Илић * uruk/Makefile.am: (again) make sure no email adresses show up in ChangeLog 2013-05-29 Joost van Baal-Илић * uruk/TODO, uruk/init/uruk: calling initscript with arg save|create|load|reload|clear|halt|flush is deprecated (but still supported for now) 2013-05-29 Joost van Baal-Илић * uruk/TODO, uruk/init/uruk: init script is borken in case wrong argument passed 2013-05-29 Joost van Baal-Илић * uruk/script/urukctl: no longer requires root-access always 2013-05-29 Joost van Baal-Илић * uruk/init/uruk, uruk/man/urukctl.azm, uruk/script/urukctl: move usage info to manpage 2013-05-29 Joost van Baal-Илић * uruk/script/urukctl: s/log_failure_msg/echo/ 2013-05-29 Joost van Baal-Илић * uruk/init/uruk: $iptables_command not available in init-script: remove call 2013-05-29 Joost van Baal-Илић * uruk/init/uruk, uruk/script/urukctl: source lsb/init-functions, /etc/default/uruk in init script 2013-05-29 Joost van Baal-Илић * uruk/init/uruk, uruk/script/urukctl: move some log_failure_msg log_success_msg calls from urukctl to init/uruk. add "start", "stop", "restart", "force-reload" to init/uruk. 2013-05-25 Joost van Baal-Илић * uruk/man/Makefile.am, uruk/man/urukctl.azm, uruk/script/Makefile.am, uruk/{init => script}/urukctl: start work on new urukctl(8) manpage, urukctl now in SCRIPTS 2013-05-25 Joost van Baal-Илић * uruk/TODO, uruk/init/{uruk => urukctl}: new script: urukctl. it will be the main interface for "save", "create", "load", "clear", "halt" and "flush" actions. the init script will call urukctl 2013-05-25 Joost van Baal-Илић * uruk/TODO, uruk/init/uruk: cosmetics; move init/purge bugreport to TODO 2013-05-24 Joost van Baal-Илић * uruk/init/uruk: update comments about lsb specs 2013-05-22 Joost van Baal-Ilić * uruk/init/uruk: more facts about removed-uruk behaviour 2013-05-22 Joost van Baal-Ilić * uruk/init/uruk: Wessel reported a bug: uruk init script behaves weird in case uruk package is removed from debian (not purged). draft plan for fix 2013-04-13 Joost van Baal-Илић * uruk/NEWS: start next release 2013-04-11 Joost van Baal-Илић * uruk/NEWS: ship it: version 20130426 - The Sy Release (10th anniversary release) 2013-04-11 Joost van Baal-Илић * uruk/NEWS: document changes 2013-04-11 Joost van Baal-Ilić * uruk/script/uruk: do 11 11:04 < joostvb> vertel hier maar ff wat je in ip6_noroute_ranges wilt hebben do 11 11:04 < casper> ip6_noroute_ranges='::1/128 ::ffff:0:0/96 fc00::/7 fec0::/10 0200::/7 2001:0db8::/32' do 11 11:04 < casper> dus ::ffff:0:0/96 met de puntjes voorop do 11 11:04 < joostvb> zeker? do 11 11:04 < casper> ja closes: #705202 2013-04-10 Joost van Baal-Илић * uruk/NEWS: tweak NEWS 2013-04-10 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: prepare migrating to new meaning for enable_ipv6 2013-04-10 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: uruk-save no longer considered experimental 2013-04-10 Joost van Baal-Илић * uruk/doc/default, uruk/init/uruk, uruk/man/uruk.azm: The enable_uruk_save_warning variable (set in e.g. /etc/default/uruk) is deprecated. The uruk init script will display a warning if it finds it. 2013-03-22 Joost van Baal-Ilić * uruk/TODO: 1ste amandement 2013-03-22 Joost van Baal-Ilić * uruk/TODO: idea from Wessel for blocking ipv6-traffic 2013-03-22 Joost van Baal-Ilić * uruk/TODO: 2 more things to do before release 2013-03-17 Joost van Baal-Илић * uruk/NEWS: name upcoming release 2013-03-14 Joost van Baal-Ilić * uruk/NEWS: refer to debian bug number 2013-03-14 Joost van Baal-Ilić * uruk/NEWS, uruk/README, uruk/man/uruk.azm, uruk/script/uruk: apply patch contributed by Thijs Kinkhorst, 1 Mar 2013, in <1362140354-7012-1-git-send-email-thijs@uvt.nl>: "Replace obsolete 'state' module usage with 'conntrack'." 2013-02-26 Joost van Baal-Ilić * uruk/NEWS: start next release 2013-02-26 Joost van Baal-Ilić * uruk/NEWS: ship it: uruk version 20130226 - The Vlist Release 2013-02-26 Joost van Baal-Ilić * uruk/NEWS: record changes 2013-02-16 Joost van Baal-Ilić * uruk/init/autodetect-ips: Apply patch contributed by Wessel Dankers in Message-Id: <20130215160813.18E6312F3E@homsar.uvt.nl>, Fri, 15 Feb 2013: "typo in autodetect-ips breekt situaties met eth0:0" 2012-12-06 Joost van Baal-Илић * uruk/man/uruk-rc.azm: fix spelling error, tnx Debian lintian 2012-12-06 Joost van Baal-Илић * uruk/man/uruk-rc.azm: escape -: do not output as hyphen but as minus sign. first shot. 2012-12-05 Joost van Baal-Ilić * uruk/NEWS: start next release 2012-12-05 Joost van Baal-Ilić * uruk/NEWS: ship it 2012-12-05 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/man/uruk-save.azm: document uruk-save patch; some stuff is done 2012-12-04 Joost van Baal-Илић * uruk/TODO: some stuff is done 2012-12-04 Joost van Baal-Илић * uruk/TODO: some stuff is done 2012-12-04 Joost van Baal-Илић * uruk/TODO, uruk/init/uruk: cleanup: consistent way of testing booleans (variables enable_foo) in shell 2012-12-04 Joost van Baal-Илић * uruk/man/uruk-rc.azm: tweak manpage more 2012-12-04 Joost van Baal-Илић * uruk/man/uruk-rc.azm: tweak manpage 2012-12-04 Joost van Baal-Илић * uruk/man/uruk-rc.azm: 2nd shot at documenting autodetect-ips in uruk-rc(5) 2012-12-04 Joost van Baal-Илић * uruk/man/uruk-rc.azm: first shot at documenting autodetect-ips in uruk-rc(5) 2012-12-03 Joost van Baal-Илић * uruk/NEWS, uruk/init/autodetect-ips, uruk/init/enable-ipv6: add shell shbang 2012-11-30 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: ship it 2012-11-30 Joost van Baal-Ilić * uruk/NEWS: preparing the Вршац Release 2012-11-30 Joost van Baal-Ilić * uruk/TODO: some stuff is done 2012-11-30 Joost van Baal-Ilić * uruk/doc/default, uruk/doc/rc, uruk/init/Makefile.am, uruk/init/autodetect-ips: doc/default: call helper enable-ipv6; doc/rc: add example /lib/uruk/init/autodetect-ips usage; init/Makefile.am: install autodetect-ips and enable-ipv6 in /lib/uruk/init/ 2012-11-30 Joost van Baal-Ilić * uruk/init/autodetect-ips, uruk/init/enable-ipv6: my preferred indent style 2012-11-30 Joost van Baal-Ilić * uruk/init/autodetect-ips, uruk/init/enable-ipv6: more usage info, tweaking interface 2012-11-30 Joost van Baal-Ilić * uruk/{script => init}/autodetect-ips: to be installed in /usr/share/uruk/init/autodetect-ips 2012-11-30 Joost van Baal-Ilić * uruk/{script/uruk-ipv6 => init/enable-ipv6}, uruk/script/autodetect-ips: © 2012-11-30 Joost van Baal-Ilić * uruk/TODO: ideas from coffee meeting with Wessel 2012-11-29 Joost van Baal-Ilić * uruk/TODO: usage 2012-11-29 Joost van Baal-Ilić * uruk/TODO: do 29 17:39 < joostvb> Fruit: rc-experimental: "GPL-3 of later" ? do 29 17:39 < Fruit> ook ok 2012-11-29 Joost van Baal-Ilić * uruk/TODO: one more nice hack by Wessel 2012-11-29 Joost van Baal-Ilić * uruk/script/uruk-ipv6: helper for /etc/default/uruk, by Wessel Dankers 2012-11-29 Joost van Baal-Ilić * uruk/script/uruk: bugfix, by Wessel Dankers in <20121128162113.38CA411E2C@homsar.uvt.nl> 2012-11-29 Joost van Baal-Ilić * uruk/script/uruk-save: update copyright 2012-11-29 Joost van Baal-Ilić * uruk/script/uruk, uruk/script/uruk-save: Apply patch contributed by Wessel Dankers in <1354116979-10246-1-git-send-email-wsl@fruit.je>: "allow access to different tables (nat, mangle, raw) in uruk-save". Thanks. 2012-11-29 Joost van Baal-Илић * uruk/script/uruk-save: replace obsolete note about arch.gna.org with note about git. thanks Wessel Dankers 2012-10-26 Joost van Baal-Илић * uruk/NEWS: fix typo in NEWS entry, thanks Adam D. Barratt 2012-10-23 Joost van Baal-Ilić * uruk/TODO: tnx Fruit for bugreport 2012-10-23 Joost van Baal-Ilić * uruk/man/uruk.azm: di 23 15:48 < Fruit> joostvb: However, if you don't use any hooks in your rc file, you're save. di 23 15:48 < Fruit> typo 2012-10-23 Joost van Baal-Илић * uruk/TODO: another issue found 2012-10-23 Joost van Baal-Ilić * uruk/NEWS: ship it 2012-10-23 Joost van Baal-Ilić * uruk/NEWS: record changes 2012-10-22 Joost van Baal-Ilić * uruk/THANKS: tnx Thijs 2012-10-22 Joost van Baal-Ilić * uruk/script/uruk: Apply patch contributed by Thijs Kinkhorst in Message-Id: <1350907287-15481-1-git-send-email-thijs@uvt.nl>: Uruk implemented RFC 4890 section 4.3: Recommendations for ICMPv6 Transit Traffic. However uruk is used in some (many?) cases not as a transit firewall but as a host firewall for destination entities. Therefore, also the recommentations from section 4.4: Recommendations for ICMPv6 Local Configuration Traffic need to be added. 2012-10-17 Joost van Baal-Илић * uruk/TODO: more to do 2012-10-09 Joost van Baal-Илић * uruk/TODO: some stuff is done 2012-10-05 Joost van Baal-Ilić * uruk/NEWS: start next release 2012-10-05 Joost van Baal-Ilić * uruk/NEWS: ship it (really) 2012-10-05 Joost van Baal-Ilić * uruk/Makefile.am: fix syntax error in private target "publish" 2012-10-05 Joost van Baal-Ilić * uruk/NEWS: ship it 2012-10-05 Joost van Baal-Ilić * uruk/NEWS: record changes 2012-10-05 Joost van Baal-Ilić * uruk/init/uruk: remove "mountkernfs" from "Required-Start: mountkernfs $local_fs". Add "Required-Stop: $local_fs". We need /var in both start and stop. (We don't need /usr (i.e. remote_fs)). 2012-09-18 Joost van Baal-Илић * uruk/man/include.zmm.in: uruk generally is installed in /sbin/uruk, not /usr/sbin/uruk. (and update my name) 2012-09-17 Joost van Baal-Илић * uruk/TODO: plan for dealing with init script /var issue 2012-09-17 Joost van Baal-Илић * uruk/Makefile.am: workaround in ChangeLog email address stripping 2012-09-17 Joost van Baal-Илић * uruk/TODO: tested fix for "uruk init-script dependency's zijn 72 MB" as reported Fri, 23 Mar 2012 11:00:06 +0100 by Thijs Kinkhorst in <201203231100.09625@incagijs.uvt.nl> 2012-09-17 Joost van Baal-Илић * uruk/NEWS, uruk/configure.ac: include lsb/ in dist 2012-09-17 Joost van Baal-Илић * uruk/NEWS: credit 2012-09-17 Joost van Baal-Илић * uruk/NEWS, uruk/TODO: record changes 2012-09-16 Joost van Baal-Илић * uruk/NEWS: NEWS: fixme 2012-09-16 Joost van Baal-Илић * uruk/Makefile.am, uruk/init/uruk, uruk/lsb/Makefile.am: install lsb stuff, load it from init script 2012-09-16 Joost van Baal-Илић * uruk/TODO, uruk/init/uruk, uruk/lsb/init-functions: uruk/lsb/init-functions: uruk compliant. init/uruk: fixme 2012-09-16 Joost van Baal-Илић * uruk/lsb/init-functions: use uruk implementation if Red Hat one is not available 2012-09-16 Joost van Baal-Илић * uruk/TODO, uruk/lsb/init-functions: copy from /lib/lsb/init-functions as shipped with redhat-lsb-4.0-3.el6.x86_64, by Lawrence Lim e.a. 2012-09-16 Joost van Baal-Илић * uruk/NEWS: a name for this release 2012-09-15 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: started reimplementing lsb for RHEL machines 2012-09-15 Joost van Baal-Ilić * uruk/lsb/lsb_killproc, uruk/lsb/lsb_log_message, uruk/lsb/lsb_pidofproc, uruk/lsb/lsb_start_daemon: copy from /etc/redhat-lsb/* as shipped with redhat-lsb-4.0-3.el6.x86_64 2012-09-14 Joost van Baal-Илић * uruk/TODO: ... 2012-09-14 Joost van Baal-Илић * uruk/TODO: omlossing, tnx Fruit 2012-09-14 Joost van Baal-Ilić * uruk/TODO: grrr 2012-09-14 Joost van Baal-Ilić * uruk/TODO: todo: try to be more nice on RHEL. tnx Thijs 2012-09-14 Joost van Baal-Ilić * uruk/Makefile.am, uruk/NEWS: start next release, fix private target "publish" 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: ship it 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/init/uruk: stop uruk when switching to single-user mode (runlevel 1), not just when rebooting the system (runlevel 6) or halting the system (runlevel 0). 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/man/uruk-rc.azm: fix zoem syntax 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/man/uruk-rc.azm, uruk/script/uruk: document allowing proto 41 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/init/uruk: be nice to people calling e.g. awk when starting uruk (and relying on /usr/bin being in the PATH) 2012-09-14 Joost van Baal-Ilić * uruk/script/uruk: Fix bug: vr 14 15:21 < Fruit> ip6tables v1.4.8: unknown option `--tcp-flags' 2012-09-14 Joost van Baal-Ilić * uruk/NEWS: we got a name for this release 2012-09-14 Joost van Baal-Ilić * uruk/NEWS, uruk/script/uruk: fix for http://bugs.debian.org/687621 : FIN ACK incorrectly blocked 2012-06-12 Joost van Baal-Ilić * uruk/NEWS, uruk/init/uruk: more strict init requirements 2012-06-12 Joost van Baal-Ilić * : merge NEWS 2012-06-08 Joost van Baal-Ilić * uruk/NEWS: start next releae 2012-06-08 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20120608 - The Hooidonk Release 2012-06-08 Joost van Baal-Ilić * uruk/TODO, uruk/script/uruk: No longer block, but allow ICMPv6 type 137 Redirect Message [RFC4861]. These are needed for Duplicate Address Detection in IPv6 autoconfiguration: RFC 4429 says: "the router should [...] provide the ON with an ICMP Redirect, which may include a Target Link-Layer Address Option (TLLAO)." Thanks Casper Gielen. 2012-06-08 Joost van Baal-Ilić * uruk/init/uruk: Apply patch for uruk init script: -# Required-Start: $network $remote_fs -# Required-Stop: $network $remote_fs +# Required-Start: mountkernfs $local_fs +# Required-Stop: -# Default-Stop: 0 1 6 +# Default-Stop: 0 6 +# X-Start-Before: networking +# X-Stop-Before: Contributed by Wessel Dankers in Message-ID: <20120606170607.GA2280837@fruit.je>. Thank! 2012-06-08 Joost van Baal-Ilić * uruk/TODO: tnx cgielen 2012-06-05 Joost van Baal-Ilić * uruk/NEWS: start next release 2012-06-05 Joost van Baal-Ilić * uruk/NEWS: ship it: version 20120605 - The Pickensteeg Release 2012-06-05 Joost van Baal-Ilić * uruk/configure.ac: no longer die if zoem, col and/or groff are not found. require autoconf 2.67 (was: 2.53) 2012-06-05 Joost van Baal-Ilić * uruk/NEWS: record some changes 2012-05-31 Joost van Baal-Ilić * uruk/TODO: etc/network/if-up.d/uruk shipped by debian package 2012-05-30 Joost van Baal-Ilić * uruk/Makefile.am, uruk/NEWS: start next release 2012-05-30 Joost van Baal-Ilić * uruk/NEWS: ship it: release 20120530 2012-05-30 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO: document changes 2012-05-30 Joost van Baal-Ilić * uruk/README: document: zoem generally no longer needed 2012-05-30 Joost van Baal-Ilić * uruk/init/Makefile.am, uruk/man/Makefile.am, uruk/script/Makefile.am: installing from tarball no longer builds docs: now shipped with tarball. no longer needs zoem on buildhost (just on maintainer-host) 2012-05-30 Joost van Baal-Ilić * uruk/init/uruk: got rid of some more AC_DEFINE_DIR expansions 2012-05-30 Joost van Baal-Ilić * uruk/bootstrap, uruk/configure.ac: we no longer rely upon expansion of BIN_PATH SBIN_PATH DATA_PATH SYSCONF_PATH LOCALSTATE_PATH using AC_DEFINE_DIR, as defined in GNU Autoconf Macro Archive's ac_define_dir.m4: remove obsolete code 2012-05-30 Joost van Baal-Ilić * uruk/man/include.zmm.in: no longer expand @SBIN_PATH@ @SYSCONF_PATH@ @PACKAGE_TARNAME@ @LOCALSTATE_PATH@ @DATA_PATH@. due to AC_DEFINE_DIR macro being obsolete 2012-05-30 Joost van Baal-Ilić * uruk/configure.ac, uruk/script/{uruk.in => uruk}, uruk/script/{uruk-save.in => uruk-save}: no longer expand @SYSCONF_PATH@ and @PACKAGE_TARNAME@ in uruk scripts: hardcode /etc/ and uruk. due to AC_DEFINE_DIR macro being obsolete 2012-05-30 Joost van Baal-Ilić * uruk/configure.ac, uruk/init/Makefile.am, uruk/init/{uruk.in => uruk}: no longer expand @SYSCONF_PATH@ and @PACKAGE_TARNAME@ in uruk init script: hardcode /etc/ and uruk. due to AC_DEFINE_DIR macro being obsolete 2012-02-02 Joost van Baal-Ilić * uruk/TODO: found "the right way" to deal with ac_define_dir issue 2012-02-02 Joost van Baal-Ilić * uruk/TODO: more TODO: bootstrap fails on debian wheezy due to autoconf-archive 20111221-1 changes 2012-02-02 Joost van Baal-Ilić * uruk/script/uruk.in: icmpv6: DROP some. based upon rfc4890-icmpv6-firewall.sh 2011-12-30 Joost van Baal-Ilić * uruk/doc/Makefile.am: ship and install rfc4890-icmpv6-firewall.sh, contributed by Suresh Krishnan 2011-12-30 Joost van Baal-Ilić * uruk/doc/rfc4890-icmpv6-firewall.sh, uruk/doc/rfc4890.license.msg: rfc4890-icmpv6-firewall.sh is free software. thanks a lot Suresh Krishnan! 2011-12-30 Joost van Baal-Ilić * uruk/doc/rfc4890.txt: http://www.rfc-editor.org/rfc/rfc4890.txt 2011-12-29 Joost van Baal-Ilić * uruk/TODO: should we fork? 2011-12-29 Joost van Baal-Ilić * uruk/TODO: use rfc 4890 for icmp v6 filtering 2011-12-07 Joost van Baal-Ilić * uruk/TODO: major overhaul needed 2011-12-07 Joost van Baal-Ilić * uruk/TODO: progress on ifup/ifdown support in debian package 2011-08-31 Joost van Baal-Ilić * uruk/NEWS: ship it: uruk version 20110831 2011-08-31 Joost van Baal-Ilić * uruk/Makefile.am: uruk homepage now hosted at beskar.soleus.nu 2011-08-31 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/man/Makefile.am: get rid of hardcoded ZOEMSEARCHPATH=/usr/share/aephea 2011-06-08 Joost van Baal-Ilić * uruk/NEWS: ship it! The IPv6 Day release! 2011-06-07 Joost van Baal-Ilić * uruk/TODO, uruk/doc/default: change examples in default file to display non-default value: just uncomment the line to change behaviour. tnx Thijs Kinkhorst for sharing ideas 2011-06-07 Joost van Baal-Ilić * uruk/TODO: thijs found a bug. tnx 2011-06-04 Joost van Baal-Ilić * uruk/TODO: document test-procedure 2011-06-04 Joost van Baal-Ilić * uruk/NEWS, uruk/TODO, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm: Fix some more zoem >= 10-265-1 (cosmetic) issues. 2011-06-02 Joost van Baal-Ilić * uruk/NEWS: ship it: uruk 20110602 2011-05-20 Joost van Baal-Ilić * uruk/NEWS, uruk/script/uruk.in: fix bug in generating warning about suspicious rc file 2011-05-19 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/script/uruk.in: first shot at behaving more gracefully on suspicious rc file 2011-05-16 Joost van Baal-Ilić * uruk/NEWS, uruk/bootstrap: newer automake 2011-05-16 Joost van Baal-Ilić * uruk/man/uruk-save.azm: more zoem conversion 2011-05-16 Joost van Baal-Ilić * uruk/NEWS: document changes, preparing next release 2011-05-16 Joost van Baal-Ilić * uruk/man/Makefile.am, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm: convert manpages to zoem >= 10-265-1 format 2011-05-12 Joost van Baal * uruk/man/uruk.azm: converting to zoem >= 10-265-1 + aephea >= 10.008-1. needs ZOEMSEARCHPATH=/usr/share/aephea/pud:/usr/share/aephea 2011-02-15 Joost van Baal * uruk/TODO: add hint on how to improve flushing rules. tnx Wessel 2011-02-13 Joost van Baal * uruk/NEWS: ship it: release 20110213 2011-02-13 Joost van Baal * uruk/man/uruk.azm, uruk/script/uruk.in: ipv6 filtering enabled by default: update docs 2011-02-13 Joost van Baal * uruk/README, uruk/TODO: added upgrade instructions to README file 2011-02-13 Joost van Baal * uruk/TODO: cleanup 2011-02-13 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/doc/default, uruk/init/uruk.in: IPv6 packet filtering now enabled by default 2011-02-13 Joost van Baal * uruk/TODO: more stuff to do about ipv6. Thanks Wessel 2010-10-08 Joost van Baal * uruk/script/uruk.in: assume we have ip6tables connection tracking support. iptables as shipped with debian etch has it 2010-08-31 Joost van Baal * uruk/NEWS: version 20100831: ship it 2010-08-31 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/doc/rc, uruk/script/uruk.in: fix example rc file. Thanks ﻢﻫﺪﻳ ﺎﻟﺩڤﻱ at http://lists.debian.org/debian-release/2010/08/msg01587.html 2010-08-23 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/script/uruk.in: new iptables syntax, and another 20100823 release 2010-08-23 Joost van Baal * uruk/TODO: found another issue which should be fixed before uploading 2010-08-23 Joost van Baal * uruk/NEWS, uruk/README: oops, fix bug in upgrade instructions 2010-08-23 Joost van Baal * uruk/README: add upgrade instructions now that IPv6 is enabled by default 2010-08-22 Joost van Baal * uruk/script/uruk.in: some layout fixes, update copyright statement 2010-08-21 Joost van Baal * uruk/NEWS: ship it: 20100821 2010-08-21 Joost van Baal * uruk/TODO: add a suggestion by Casper Gielen, send in Date: Fri, 20 Aug 2010 17:27:18 +0200, Message-ID: <4C6E9ED6.9070400@uvt.nl>, From 4e6b6a2ac6451369945e710f62a0b5d750b6657e Mon Sep 17 00:00:00 2001, Date: Fri, 20 Aug 2010 17:14:37 +0200, Subject: [PATCH 7/8] Move IPv6 multicast comment to TODO 2010-08-21 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/script/uruk.in: bugfix: fatal syntax error in /usr/sbin/uruk 2010-08-20 Joost van Baal * uruk/NEWS, uruk/script/uruk.in: Use connection tracking for IPv6 If support for IPv6 connection tracking is available use it to restrict full processing to IP packets with the NEW flag set. Packets that are part of an established connection (or related to one) get a free pass. Patch contributed by Casper Gielen in Date: Fri, 20 Aug 2010 16:56:55 +0200, Message-Id: <1282316215-21616-1-git-send-email-cgielen@uvt.nl> 2010-08-20 Joost van Baal * uruk/NEWS: ship it: 20100820 2010-08-20 Joost van Baal * uruk/script/uruk.in: Drop unroutable IPv6 traffic Patch supplied by Casper Gielen in Message-Id: <1282308925-17493-1-git-send-email-cgielen@uvt.nl>, Date: Fri, 20 Aug 2010 14:55:25 +0200 2010-08-20 Joost van Baal * uruk/TODO: one more issue tackled 2010-08-20 Joost van Baal * uruk/NEWS, uruk/init/uruk.in: require $remote_fs for init scripts 2010-08-20 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/init/uruk.in: no need to special case runlevel 1 2010-08-20 Joost van Baal * uruk/TODO: found out more problems with lsb headers. thanks Debian lintian 2010-08-20 Joost van Baal * uruk/README, uruk/TODO: update README: instructions about git, not arch 2010-08-20 Joost van Baal * uruk/AUTHORS, uruk/Makefile.am, uruk/README, uruk/TODO, uruk/bootstrap, uruk/configure.ac, uruk/contrib/Makefile.am, uruk/doc/Makefile.am, uruk/doc/default, uruk/doc/rc, uruk/init/Makefile.am, uruk/man/Makefile.am, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm, uruk/script/Makefile.am, uruk/script/uruk.in, uruk/setversion: replace arch headers by commented note about git 2010-08-20 Casper Gielen * uruk/script/uruk.in: Drop traffic that is not to/from us Signed-off-by: Joost van Baal 2010-08-20 Casper Gielen * uruk/script/uruk.in: Reject unwanted IPv6 traffic with a proper reset package. Signed-off-by: Joost van Baal 2010-08-20 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/doc/rc, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm, uruk/script/uruk.in: IPv6-support is no longer considered experimental 2010-08-20 Joost van Baal * uruk/init/uruk.in: No longer mention obsolete Red Hat EL AS rel 2.1. Update arch-header to git. 2010-08-20 Joost van Baal * uruk/NEWS, uruk/TODO, uruk/init/uruk.in: Fix LSB init header. Partially closes http://bugs.debian.org/581659. Thanks Petter Reinholdtsen 2010-07-27 Joost van Baal * uruk/TODO: fixed homepage at http://mdcc.cx/uruk : now talks about git (not GNU Arch) 2010-07-17 Joost van Baal * uruk/TODO: another bug to fix 2010-07-17 Joost van Baal * uruk/Makefile.am, uruk/NEWS: some tweaking of buildsystem 2010-07-17 Joost van Baal * uruk/NEWS: release 20100717 2010-07-17 Joost van Baal * uruk/TODO: set prios for upcoming release 2010-07-17 Joost van Baal * uruk/bootstrap: adjust to updated autoconf-archive debian package layout 2010-07-17 Joost van Baal * uruk/script/uruk.in: and now finally apply Casper's patch 2010-07-17 Joost van Baal * uruk/THANKS, uruk/TODO: updated 2010-07-17 Joost van Baal * uruk/TODO: new plans 2010-07-17 Joost van Baal * uruk/Makefile.am, uruk/README, uruk/bootstrap: generate ChangeLog from git commit messages 2010-06-24 Joost van Baal * uruk/{ChangeLog => ChangeLog.2004}: convert from arch to git; move ChangeLog from arch era out of the way 2010-03-02 Joost van Baal * uruk/ChangeLog, uruk/NEWS: record changes record changes git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-179 2010-03-02 Joost van Baal * uruk/ChangeLog: use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-178 2010-03-02 Joost van Baal * uruk/ChangeLog: use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-177 2010-03-02 Joost van Baal * uruk/ChangeLog: use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-176 2010-03-02 Joost van Baal * uruk/ChangeLog: use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> use IPv6 connection tracking if available. patch contributed by Casper Gielen in Message-ID: <4B8D3D30.50201@uvt.nl> git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-175 2009-09-08 Joost van Baal * uruk/ChangeLog: tnx Fruit tnx Fruit git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-174 2009-09-04 Joost van Baal * uruk/ChangeLog: a better way to fix this a better way to fix this git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-173 2009-09-04 Joost van Baal * uruk/ChangeLog, uruk/TODO: a better way to fix this a better way to fix this git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-172 2009-09-04 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/rc, uruk/script/uruk.in: first shot at using abbreviated notation for IP addresses first shot at using abbreviated notation for IP addresses git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-171 2009-08-29 Joost van Baal * uruk/ChangeLog, uruk/TODO: tnx fvos for wishlist bug tnx fvos for wishlist bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-170 2009-08-29 Joost van Baal * uruk/ChangeLog, uruk/TODO: another feature request, tnx Wessel another feature request, tnx Wessel git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-169 2009-08-29 Joost van Baal * uruk/ChangeLog: s/tla/git/ s/tla/git/ git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-168 2009-08-29 Joost van Baal * uruk/ChangeLog, uruk/TODO: s/tla/git/ s/tla/git/ git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-167 2008-11-24 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: fix typo: its vs it's fix typo: its vs it's git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-166 2008-10-13 Joost van Baal * uruk/ChangeLog, uruk/TODO: tnx Fruit for tips on if-up.d usage tnx Fruit for tips on if-up.d usage git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-165 2008-04-17 Joost van Baal * uruk/ChangeLog, uruk/TODO: found another design bug :( found another design bug :( git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-164 2008-03-30 Joost van Baal * uruk/ChangeLog, uruk/NEWS: release 20080330 release 20080330 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-163 2008-03-29 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: document changes document changes git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-162 2008-03-28 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: bugfix Be very sure we _never_ trigger ip6tables v1.3.6: Unknown arg `--destination' Try `ip6tables -h' or 'ip6tables --help' for more information. by running /sbin/ip6tables -A INPUT -j LOG --log-level debug --log-prefix 'ip6tables: ' -i eth0 --destination . git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-161 2008-03-08 Joost van Baal * uruk/ChangeLog, uruk/TODO: did some testing did some testing git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-160 2008-03-08 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-159 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: release 20080307: this is a prerelease release 20080307: this is a prerelease git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-158 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/script/uruk.in: implement support for multiple rc_a files implement support for multiple rc_a files git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-157 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: document upcoming support for multiple rc_a files document upcoming support for multiple rc_a files git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-156 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: workaround zoem typesetting issue in "allowing any traffic on an interface" heading workaround zoem typesetting issue in "allowing any traffic on an interface" heading git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-155 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/TODO: another wishlist bug by Wessel Dankers: multiple rc_a's another wishlist bug by Wessel Dankers: multiple rc_a's git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-154 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: fix bug showing up when loglevel between 20 and 40 and ipv6 enabled: it caused errors like "ip6tables v1.3.6: host/network 10.1.2.3 not found". these did NOT compromise the firewall rules, btw fix bug showing up when loglevel between 20 and 40 and ipv6 enabled: it caused errors like "ip6tables v1.3.6: host/network 10.1.2.3 not found". these did NOT compromise the firewall rules, btw git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-153 2008-03-07 Joost van Baal * uruk/ChangeLog, uruk/TODO: one bug has been squashed earlier. another was reported one bug has been squashed earlier. another was reported git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-152 2008-01-20 Joost van Baal * uruk/ChangeLog, uruk/TODO: more bugs found git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-151 2008-01-18 Joost van Baal * uruk/ChangeLog, uruk/TODO: Tnx Fruit for another wishlist bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-150 2007-11-26 Joost van Baal * uruk/ChangeLog, uruk/TODO: another idea for improvement: urukconfig git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-149 2007-11-04 Joost van Baal * uruk/ChangeLog, uruk/TODO: upload to Debian done. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-148 2007-11-04 Joost van Baal * uruk/ChangeLog, uruk/TODO: another test done git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-147 2007-11-03 Joost van Baal * uruk/ChangeLog, uruk/TODO: adjusted test plan git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-146 2007-11-03 Joost van Baal * uruk/ChangeLog, uruk/man/uruk.azm: mention $interfaces_unprotect in section on Debian ifupdown: we now offer better support. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-145 2007-11-03 Joost van Baal * uruk/ChangeLog, uruk/TODO: did another test-install and a fresh test-install, found two more bugs git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-144 2007-11-03 Joost van Baal * uruk/ChangeLog, uruk/TODO: did another test-install, found a possible bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-143 2007-11-03 Joost van Baal * uruk/ChangeLog, uruk/TODO: did another test-install, found a bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-142 2007-11-02 Joost van Baal * uruk/ChangeLog, uruk/contrib/fw_2007-10.xsd, uruk/contrib/sample.xml: minor fixes by Fred Vos git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-141 2007-11-02 Joost van Baal * uruk/ChangeLog: fix permissions in VC repo: world-readable please git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-140 2007-11-02 Joost van Baal * uruk/ChangeLog, uruk/TODO: plan for tests git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-139 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/NEWS: release 20071101 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-138 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: cosmetics in printed messages git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-137 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/NEWS: recorded some changes git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-136 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: always clean up tmpfiles: use trap git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-135 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: fix behaviour of "reload" in case uruk not running git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-134 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: LSB compliancy: consider stopping a stopped uruk as success. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-133 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: made force-reload a no-op in case uruk not running git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-132 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: removed some dead and obfuscating code git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-131 2007-11-01 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: Found out this: root@nagy:~# invoke-rc.d uruk stop Autosaving iptables ruleset: save "active" with counters. Loading iptables ruleset: load "inactive". Shutting down uruk (iptables) root@nagy:~# invoke-rc.d uruk status; echo $? Checking uruk (iptables): uruk not running invoke-rc.d: initscript uruk, action "status" failed. 3 is LSB-compliant behaviour. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-130 2007-10-31 Joost van Baal * uruk/ChangeLog, uruk/contrib/Makefile.am: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-129 2007-10-31 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-128 2007-10-31 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: add description for status when printing help git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-127 2007-10-31 Joost van Baal * uruk/ChangeLog, uruk/contrib/README, uruk/contrib/fw2dot.xsl: Added another contribution from Fred Vos: fw2dot.xsl: generating a dot file (for graphiz) from an XML-ed uruk rc file. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-126 2007-10-30 Joost van Baal * uruk/ChangeLog, uruk/contrib/README: Refer to Fred Vos's website on his Uruk XML stuff. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-125 2007-10-30 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/doc/rc: release 20071030 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-124 2007-10-30 Joost van Baal * uruk/ChangeLog, uruk/Makefile.am, uruk/configure.ac, uruk/contrib/Makefile.am: make sure stuff in contrib/ gets distributed and installed git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-123 2007-10-30 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/contrib/README, uruk/contrib/fw2urukrc.xsl, uruk/contrib/fw_2007-10.xsd, uruk/contrib/fw_firewall_2007-10.xsd, uruk/contrib/sample.xml: Add XML stuff contributed by Fred Vos, including some preliminary documentation (in Dutch). Could be used to transform an XML-file describing uruk rules to an uruk rc file. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-122 2007-10-21 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: fixed some bugs in "status" argument git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-121 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: found a bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-120 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/NEWS: layout git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-119 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: document LSB-stuff in init script in NEWS git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-118 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: exit with LSB-compliant status code in case "status" was requested git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-117 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: implemented "status" argument git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-116 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: more ideas for "status" git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-115 2007-10-20 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: LSB compliancy: exit with status code 2 in case wrong arguments are passed. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-114 2007-10-19 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-113 2007-10-19 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: use exit 5 and exit 6 if required by LSB git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-112 2007-10-19 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in, uruk/script/uruk.in: Work on support for Linux Standard Base Specification 3.1 in uruk init script: Added LSB comments (for LSB's install_initd and remove_initd), source /lib/lsb/init-functions. call LSB's log_success_msg and log_warning_msg, add support for finegrained exit code (not yet completed), start working on support for argument "status". git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-111 2007-09-26 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: Documented support for unprotecting an interface git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-110 2007-09-26 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/doc/rc, uruk/script/uruk.in: Added support for unprotecting an interface: introduced variable interfaces_unprotect. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-109 2007-09-25 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/script/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-108 2007-09-25 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/man/uruk.azm: documented "ACCEPT traffic on lo earlier in the uruk ruleset". Thanks to Wessel Dankers for the idea. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-107 2007-09-25 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: moved accepting packets on lo to beginning of rules, before rc_a is sourced: that's more efficient. (it used to be between the sourcing of rc_d and rc_e.) if you'd like to add rules at the absolute beginning, stick these in your rc file (not in rc_a). traffic on lo is accepted _before_ rc_a is sourced. if your loglevel is fascist, traffic on lo will no longer be logged. rc_e is now obsolete. use rc_d instead. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-106 2007-09-23 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: finished documenting "uruk internals: the gory details" in uruk(8). git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-105 2007-09-23 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/man/uruk.azm: started documenting uruk internals: the gory details in uruk(8) git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-104 2007-09-23 Joost van Baal * uruk/ChangeLog, uruk/NEWS: started documenting the rescheduling of handling lo traffic git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-103 2007-09-23 Joost van Baal * uruk/ChangeLog, uruk/NEWS: in sync with current ChangeLog git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-102 2007-09-23 Joost van Baal * uruk/ChangeLog, uruk/TODO: reprioritized stuff to do for upcoming release git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-101 2007-09-22 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/bootstrap, uruk/configure.ac, uruk/doc/rc, uruk/init/uruk.in, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm, uruk/script/uruk.in: Uruk is now licensed under GPLv3 (or any later version). git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-100 2007-09-21 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-99 2007-09-20 Joost van Baal * uruk/ChangeLog, uruk/TODO: prioritized todo-items for upcoming release git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-98 2007-09-20 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-97 2007-09-20 Joost van Baal * uruk/ChangeLog, uruk/TODO: added wishlist bug reported by Fred Vos. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-96 2007-09-14 Joost van Baal * uruk/ChangeLog, uruk/man/Makefile.am: no longer try to support non-ascii characters in .txt manpages. col, as shipped with bsdutils 1:2.13-2 Debian packages chokes on output of groff, as shipped with 1.18.1.1-12 Debian package. See also Debian bug Bug#441659. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-95 2006-03-11 Joost van Baal * uruk/ChangeLog, uruk/TODO: added some more received wishlist bugs git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-94 2006-01-16 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: improved way to unprotect an interface, thanks Wessel Dankers git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-93 2006-01-10 Joost van Baal * uruk/ChangeLog, uruk/TODO: add idea for a better way to unsupport an interface. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-92 2006-01-10 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: add note on how to unprotect an interface git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-91 2006-01-10 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: Finetuning of manpage. Thanks Wessel Dankers. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-90 2006-01-06 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: force-reload breaks when nat or mangle table are used. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-89 2005-12-21 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-88 2005-11-30 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: maintenance on manpages, mainly cosmetic git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-87 2005-11-29 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/man/uruk-rc.azm: release 20051129 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-86 2005-11-29 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-85 2005-11-27 Joost van Baal * uruk/ChangeLog, uruk/README, uruk/man/include.zmm.in: build-depend upon zoem >= 05-328 : new tr semantics and better 'make distcheck' behaviour. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-84 2005-11-27 Joost van Baal * uruk/ChangeLog, uruk/NEWS: release 20051127 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-83 2005-11-27 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/init/uruk.in: document bug: window of opportunity during system boot. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-82 2005-11-27 Joost van Baal * uruk/ChangeLog, uruk/TODO: more issues with init-script git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-81 2005-11-25 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: on Red Hat, run start uruk initscript _after_ /etc/init.d/network (and stop before /etc/init.d/network). network has S10network and K90network. This is needed since we build our rules from the uruk rc file (not the saved rules files). Building rules from an rc file might need a configured network interface: some users like to invoke /sbin/ip to learn about the current IP. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-80 2005-11-24 Joost van Baal * uruk/ChangeLog, uruk/TODO: found new referral to lsb stuff git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-79 2005-10-27 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/README: release 20051027 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-78 2005-10-27 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: fix bug in version check in uruk script: if version was unset, and /bin/sh is not bash, it would give: Loading IPv4 uruk rules/usr/sbin/uruk: line 51: test: : integer expression expected . git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-77 2005-10-26 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-rc.azm: uruk-rc html manpage now holds link to uruk html manpage git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-76 2005-10-26 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/doc/rc, uruk/man/include.zmm.in: release 20051026 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-75 2005-10-23 Joost van Baal * uruk/ChangeLog, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm: improved notes on debugging git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-74 2005-10-23 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-save.azm: fix zoem syntax errors in uruk-save(8) git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-73 2005-10-23 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-72 2005-10-23 Joost van Baal * uruk/ChangeLog, uruk/README, uruk/init/uruk.in, uruk/man/uruk.azm: move quick setup guide from README to uruk(8) git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-71 2005-10-23 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/rc: add some IPv6 examples git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-70 2005-10-22 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/README, uruk/TODO, uruk/man/uruk.azm, uruk/script/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-69 2005-10-22 Joost van Baal * uruk/ChangeLog, uruk/README, uruk/man/include.zmm.in, uruk/man/uruk.azm: add quick setup guide to README, and refer to it. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-68 2005-10-21 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-67 2005-10-21 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in, uruk/script/uruk.in: init script somewhat more verbose git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-66 2005-10-21 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/script/uruk.in: poor man's connection tracking for IPv6 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-65 2005-10-20 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: more to do git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-64 2005-10-18 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/default, uruk/init/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-63 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-62 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-61 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: updated NEWS file git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-60 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/Makefile.am, uruk/doc/default, uruk/script/uruk.in: deal sane with ipv6 logging. ship /etc/default/uruk example file. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-59 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: add reload option to init script git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-58 2005-10-16 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: adjusted uruk(8) to new init script git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-57 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/rc, uruk/man/uruk-rc.azm, uruk/script/uruk.in: Implemented version variable. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-56 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: we cannot support "reload": we generally can't atomically load new rc file. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-55 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in, uruk/man/uruk-save.azm: display warning before calling uruk-save git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-54 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/init/uruk.in: reimplemented init script. Thanks to Wessel Dankers for suggestions. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-53 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/init/uruk.in: get rid of Debianism: /etc/default/uruk git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-52 2005-10-15 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/README, uruk/TODO: started thinking about init script: upgrade-plans git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-51 2005-10-14 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-50 2005-10-14 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/bootstrap: use autoreconf in bootstrap git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-49 2005-10-14 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/man/uruk-rc.azm, uruk/man/uruk-save.azm, uruk/man/uruk.azm: fixed FSF address. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-48 2005-10-14 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/man/uruk-save.azm, uruk/script/uruk-save.in: uruk-save is now IPv6 aware git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-47 2005-10-11 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO: new stuff to do git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-46 2005-10-11 Joost van Baal * uruk/ChangeLog, uruk/etc/rc_d_ipv6, uruk/etc/rc_g_ipv6, uruk/etc/rc_h_ipv6, uruk/etc/rc_i_ipv6: moved to uruk proper git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-45 2005-10-11 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: move IPv6 stuff in etc/ to uruk proper. By default, ip6tables is disabled. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-44 2005-10-10 Joost van Baal * uruk/ChangeLog, uruk/etc/rc_g_ipv6, uruk/etc/rc_h_ipv6, uruk/etc/rc_i_ipv6: this is enough to get limited ipv6 working. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-43 2005-10-10 Joost van Baal * uruk/ChangeLog, uruk/etc/rc_d_ipv6, uruk/etc/rc_i_ipv6: default reject for ipv6 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-42 2005-10-10 Joost van Baal * uruk/ChangeLog, uruk/etc/rc_d_ipv6: typo fix, some start of documentation of this ipv6 stuff git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-41 2005-10-10 Joost van Baal * uruk/ChangeLog, uruk/etc/rc_d_ipv6: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-40 2005-10-09 Joost van Baal * uruk/ChangeLog, uruk/TODO: more to do git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-39 2005-09-03 Joost van Baal * uruk/ChangeLog, uruk/NEWS: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-38 2005-09-03 Joost van Baal * uruk/ChangeLog, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk.azm: fix typo, add example for NAT git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-37 2005-08-25 Joost van Baal * uruk/ChangeLog, uruk/README: found out about yet another alternative tool git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-36 2005-08-01 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-35 2005-08-01 Joost van Baal * uruk/ChangeLog, uruk/TODO: git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-34 2005-07-26 Joost van Baal * uruk/ChangeLog, uruk/man/uruk.azm: when using uruk-save, use it atomically git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-33 2005-07-26 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: yet another way to debug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-32 2005-07-26 Joost van Baal * uruk/ChangeLog: remove some leftover cruft from manpage. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-31 2005-07-22 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: be more clear on how to set loglevel in rc file. Thanks Wessel Dankers for bugreport. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-30 2005-07-18 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: fix sh bugs git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-29 2005-07-18 Joost van Baal * uruk/ChangeLog, uruk/man/uruk-rc.azm: fix zoem bug: ui change. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-28 2005-07-18 Joost van Baal * uruk/ChangeLog, uruk/NEWS: release 20050718 release 20050718 git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-27 2005-07-18 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/doc/rc, uruk/man/uruk-rc.azm, uruk/man/uruk.azm, uruk/script/uruk.in: loglevel implemented and documented loglevel variable. Thanks to Wessel Dankers for the bugreport about uruk's too enthousiastic logging behaviour. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-26 2005-05-26 Joost van Baal * uruk/ChangeLog, uruk/TODO: another idea on how to implement better (less spammy) logging git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-25 2005-05-25 Joost van Baal * uruk/ChangeLog, uruk/TODO: plan for implementing more granular logging. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-24 2005-04-16 Joost van Baal * uruk/ChangeLog, uruk/TODO: some more pending issues git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-23 2005-04-15 Joost van Baal * uruk/ChangeLog: this stuff is moved git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-22 2005-04-15 Joost van Baal * packages/debian.log, packages/debian/README, packages/debian/TODO, packages/debian/changelog, packages/debian/conffiles, packages/debian/control, packages/debian/copyright, packages/debian/dirs, packages/debian/postinst, packages/debian/postrm, packages/debian/prerm, packages/debian/rc, packages/debian/rules, packages/rpm.log, packages/rpm/uruk-source.1.README.RPM, packages/rpm/uruk-source.2.TODO.RPM, packages/rpm/uruk.spec, uruk/ChangeLog: moved to new archive maintained in http://arch.gna.org/uruk/archive-2005-uruk-pkg/ now git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-21 2005-04-15 Joost van Baal * uruk/ChangeLog, uruk/TODO: bug fixed, bug opened git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-20 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/TODO: uruk-save could need more attention git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-19 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/Makefile.am, uruk/README, uruk/init/uruk.in, uruk/man/uruk.azm: some minor tweaks to sneak in the 20050414 release Makefile.am: ship ChangeLog.2003. README: zoem is distributed with Debian now. init/uruk.in: warn about uruk-save unsafeness. man/uruk.azm: _finally_ fix the zoem bug, so that this manpage is completely typesetted again. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-18 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/Makefile.am, uruk/NEWS: release 20050414: this is a prerelease git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-17 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/NEWS, uruk/TODO, uruk/configure.ac, uruk/doc/rc, uruk/init/uruk.in, uruk/man/Makefile.am, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk.azm, uruk/script/Makefile.am, uruk/script/uruk.in: almost ready for next release Fixed wishlist bug from 2004-05-26, Wessel Dankers (might need more testing though). Ship and install uruk-save(8) script and manpage. init script behaves more sane when saved state files are missing: we are now able to generate these on the fly. Minor improvement of uruk-rc(5) manpage. Document URUK_CONFIG and URUK_IPTABLES in uruk(8) manpage. Document one way of using uruk-save in uruk(8) manpage. In the uruk script itself, only some typos in comments have been fixed. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-16 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/script/uruk.in: don't test wether $iptables is executable: it might be set to 'echo foo' git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-15 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/script/uruk-save.in: adding a hook to save uruk's rc directly to iptables-save file: more flexibility git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-14 2005-04-14 Joost van Baal * uruk/ChangeLog, uruk/TODO: bugreports bugs submitted by Wessel Dankers git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-13 2005-03-10 Joost van Baal * packages/rpm/uruk.spec, uruk/ChangeLog, uruk/bootstrap: autoconf archive is moved. Thanks Anton Sluijtman git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-12 2004-11-20 Joost van Baal * uruk/ChangeLog, uruk/init/uruk.in: new file /etc/default/uruk can overrule variable enable_uruk_check, enable_ipv6, enable_autosave, enable_save_counters and PATH git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-11 2004-11-17 Joost van Baal * uruk/ChangeLog, uruk/TODO, uruk/script/uruk.in: uruk now honors environment variables URUK_IPTABLES and URUK_CONFIG git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-10 2004-11-02 Joost van Baal * uruk/ChangeLog, uruk/TODO: found another bug git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-9 2004-09-27 Joost van Baal * uruk/ChangeLog: hrm, would this get me an autogenerated ChangeLog? git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-8 2004-09-27 Joost van Baal * uruk/bootstrap: no longer using cvs2cl, but tla changelog git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-7 2004-09-27 Joost van Baal * uruk/doc/Makefile.am, uruk/doc/rc, uruk/init/Makefile.am, uruk/init/uruk.in, uruk/man/Makefile.am, uruk/man/include.zmm.in, uruk/man/uruk-rc.azm, uruk/man/uruk.azm, uruk/script/Makefile.am, uruk/script/uruk.in: getting rid of even more cvs id tags git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-6 2004-09-27 Joost van Baal * uruk/ChangeLog.2003: ChangeLog as build using cvs2cl: changes done via CVS git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-5 2004-09-27 Joost van Baal * uruk/AUTHORS, uruk/Makefile.am, uruk/NEWS, uruk/THANKS, uruk/TODO, uruk/bootstrap, uruk/configure.ac, uruk/setversion: get rid of CVS-style Id tags git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-4 2004-09-27 Joost van Baal * uruk/README: added note about new version control system git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-3 2004-09-27 Joost van Baal * packages/debian.log, packages/debian/README, packages/debian/TODO, packages/debian/changelog, packages/debian/conffiles, packages/debian/control, packages/debian/copyright, packages/debian/dirs, packages/debian/postinst, packages/debian/postrm, packages/debian/prerm, packages/debian/rc, packages/debian/rules, packages/rpm.log, packages/rpm/uruk-source.1.README.RPM, packages/rpm/uruk-source.2.TODO.RPM, packages/rpm/uruk.spec: importing packaging stuff from cvs rpm and .deb stuff git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-2 2004-09-27 Joost van Baal * : importing old cvs history ,v files the tar.gz is taken from old cvsroot on topaz.conuropsis.org. You might want to convert it to a GNU Arch changeset. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--patch-1 2004-09-27 Joost van Baal * initial import Importing stuff as it is in CVS on topaz.conuropsis.org today, omitting the CVS history. git-archimport-id: joostvb-arch@mdcc.cx--2004-uruk/uruk--mainline--0.1--base-0