Auke Kok
cd65e1c48a
v1
v1
2017-05-06 21:46:27 -07:00
Auke Kok
47d7bf1d1f
Link against libsystemd instead.
...
With more recent versions, these symbols are now
moved.
2017-03-25 13:00:03 -07:00
Auke Kok
b81b440495
Err, usec timeout value.
...
This was causing a very tight loop if the journal rotates.
2015-06-21 15:26:56 -07:00
Auke Kok
afe1a2663b
Fixes: Make tailing the journal way more robust.
...
This is a far more robust way of tailing the journal that seems
to work on 2 different journal versions. It's a bit more involved
and journal slowness may cause it to take several seconds to iterate
through the journal after a rotate or after startup, but it's far
more reliable than the old method.
I've also pushed all the output to stderr which makes the blocked/
unblocked messages end up in the journal itself.
2015-06-21 13:18:04 -07:00
Auke Kok
dee31e8fc2
Clean up array properly.
2015-06-20 20:24:11 -07:00
Auke Kok
54adb2f684
Print a msg if ipv6 is disabled.
2015-03-21 14:56:09 -07:00
Auke Kok
cbcb62c206
Add ipv6 support.
...
Can be disabled (ipv6=0 in conf).
Also ignores new chain errors since we assume those will fail.
2015-03-21 14:27:10 -07:00
Auke Kok
c6343259ce
Overdue fixes I've had running for a while.
2015-03-20 20:42:01 -07:00
Auke Kok
94f4e191fb
Fix journal forward issue, add dump option.
...
Adds a signal handler to gracefully shut down in case of exit
signal, while doubling as a way to quickly dump the current
state table.
A journal tailing error workaround thanks to ssh-blocker.
2013-08-20 10:44:41 -07:00
Auke Kok
4f59e7feca
Migrate normal output to stdout.
...
Only error/warnings now go to stderr, the rest of the normal
start/block/unblock messages now all go to stdout.
2012-11-05 11:10:33 -08:00
Auke Kok
e3914f7db0
Bugfix: bad option placement.
...
I messed this up implementing the configfile stuff and
never saw the mistakes I made here. This tests ok.
2012-11-04 23:28:05 -08:00
Auke Kok
dcbd79e477
Fix IP address check. Fix unblock calling iptables when not needed.
2012-11-02 18:00:56 -07:00
Auke Kok
f1a8249cea
Install config example in /usr/share/doc.
2012-10-31 14:45:07 -07:00
Auke Kok
d60d4f1a33
Make sure we don't pass garbage to system().
2012-10-31 14:18:37 -07:00
Auke Kok
67c92dbbc7
Config file -done-
2012-10-31 14:08:35 -07:00
Auke Kok
6b0d8a63e0
Install man pages.
2012-10-31 14:08:14 -07:00
Auke Kok
d281f6a8b9
Fix reference to the journal.
2012-10-31 12:14:45 -07:00
Auke Kok
7a80b95403
Adding 2 basic man pages.
2012-10-31 12:13:35 -07:00
Auke Kok
7022cf147a
Example config file.
2012-10-29 16:43:35 -07:00
Auke Kok
d55b027206
Make tallow parse /etc/tallow.conf for non-default configuration.
2012-10-29 16:41:02 -07:00
Auke Kok
94bd6f5049
Adding limits.h to the checklist.
2012-10-29 16:38:00 -07:00
Auke Kok
62475715f6
AUTHORS.
2012-10-29 15:00:55 -07:00
Auke Kok
67c388a12e
License header in the C file.
2012-10-29 14:55:09 -07:00
Auke Kok
3e3009edc5
Systemd service unit for tallow.
2012-10-29 13:22:21 -07:00
Auke Kok
b044e6cc9c
Update README with some basic info.
2012-10-29 13:21:22 -07:00
Auke Kok
5b1748b4c3
Add TODO, debug output, systemd service file installation.
2012-10-29 12:35:33 -07:00
Auke Kok
df32d6fd09
Armed!
...
- blocking and unblocking
- 1hr default timeout to unblock
- unblock pruning happens every time the queue of messages is
processed.
2012-10-26 11:57:47 -07:00
Auke Kok
1824266b1c
Someowhat working code now.
...
- Whitelist checking
- threshold counter
- store timestamps of latest attempt
2012-10-26 00:29:05 -07:00
Auke Kok
5d46bfc44e
Add basic filtering code.
2012-10-25 17:03:45 -07:00
Auke Kok
16379ff5cd
Adding remaining build files. This compiles now, and runs.
2012-10-25 15:52:58 -07:00
Auke Kok
21c622d970
tallow: a quick demo / lard replacement.
2012-10-25 15:41:58 -07:00