Thu, 18 Dec 2014 16:56:55 +0100
ipset now adds the hostname to the blocklists so that the firewall scripts works on hosts and Linux Container clients without conflicts. The ipset tables are visible on the host and in the lxc clients. Then, silently drop icmpv6 router sollicitaion and neighbour sollicitation messages that come in with the hoplimit field not set to 255. Some Windows systems do this. Version 0.0.16
0 | 1 | # Top level makefile for Slackware firewall. |
2 | # (C) 2013..2014 Michiel Broek | |
3 | # | |
4 | ||
5 | all: | |
6 | @echo "Nothing to do." | |
7 | ||
8 | ||
9 | install: | |
10 | @mkdir -p ${DESTDIR}/etc/mbse-firewall/conf.d | |
11 | @mkdir -p ${DESTDIR}/usr/sbin | |
12 | install -m 0644 etc/firewall.conf ${DESTDIR}/etc/mbse-firewall | |
13 | install -m 0644 etc/*.example ${DESTDIR}/etc/mbse-firewall/conf.d | |
14 | install -m 0755 sbin/mbse-firewall ${DESTDIR}/usr/sbin | |
15 | @mkdir -p ${DESTDIR}/etc/rc.d | |
16 | cd ${DESTDIR}/etc/rc.d ; ln -s /usr/sbin/mbse-firewall rc.firewall ; cd - | |
17 | ||
1
96a14c72b423
Added dist command to the Makefile
Michiel Broek <mbroek@mbse.eu>
parents:
0
diff
changeset
|
18 | dist: |
96a14c72b423
Added dist command to the Makefile
Michiel Broek <mbroek@mbse.eu>
parents:
0
diff
changeset
|
19 | cd .. ; tar cvfz mbse-firewall-`grep MBSEFW_VERSION= mbse-firewall/sbin/mbse-firewall | cut -d '=' -f 2 | tr -d '"'`.tar.gz mbse-firewall/* ; cd - |