David Snopek
2f70ffd8a2
Merge 070d8ddca05785be7b49f3576e120b58f7ee4892 into fabdd8010bad8f22576cf2c68cc4a5ad3dc8a5e6
2016-11-09 19:34:58 +00:00
David Snopek
070d8ddca0
Return the shebang to /bin/sh
2016-11-09 13:33:17 -06:00
David Snopek
4b2bdc66f0
Setup all networks, even those that don't have running containers.
2016-11-09 09:25:03 -06:00
David Snopek
1d69597f6b
Attempt to get rules matching what the docker daemon produces with regard to bridges
2016-11-09 08:46:49 -06:00
Julien Kassar
fabdd8010b
Fix order of rules
2016-11-01 17:48:40 -04:00
Julien Kassar
4c4fa1fe63
Refactor one iptables rule
2016-11-01 17:46:17 -04:00
Julien Kassar
26b38436db
Fix support of Docker Network
2016-10-25 23:08:35 -04:00
Julien Kassar
f542ba9ec1
Update condition equal
2016-10-23 23:49:21 -04:00
Julien Kassar
e30511af13
Add support of Docker Network
2016-10-23 23:46:11 -04:00
Julien Kassar
e78db14fbf
Add verification of NetworkMode setting when getting IP address value
2016-09-26 08:58:27 -04:00
Julien Kassar
7c303d7c3c
Merge pull request #6 from johnou/correct_shebang
...
Correct shebang to avoid confusion
2016-04-27 22:38:21 -04:00
Julien Kassar
350d60b1a9
Merge branch 'ian-ozzie-add-ip-binding'
2016-04-27 20:30:13 -04:00
Johno Crawford
751b5d2930
Correct shebang to avoid confusion
...
In this case the shebang isn't even used as the script is invoked with /bin/sh &syscommand(__LINE__,"/bin/sh /etc/csf/csfpost.sh"); (even with the csf-pre_post_sh project as it just sources the script).
2016-04-27 07:30:26 +02:00
Ian Oswald
f251e54859
Ensure dockers IP bindings are maintained for ip:port forwarding.
...
When exposing a port only to a particular IP address with `-p 127.0.0.1:3005:3000` after a csf restart previously this would expose port 3005 to the world. With this change, ports that aren't exposed to 0.0.0.0 are limited.
2016-04-27 14:51:40 +10:00
Julien Kassar
0a003607d8
Merge branch 'johnou-cron_update_path_fix'
2016-04-13 07:12:28 -04:00
Johno Crawford
1e18b36add
Ensure required paths are available when post script is executed.
...
I observed when csf is updated via cron [1] that the rules csfpost.sh should generate are not present, I suspect the path to the binaries invoked are not available.
[1] cat /etc/cron.d/csf_update
SHELL=/bin/sh
27 4 * * * root /usr/sbin/csf -u
2016-04-13 12:19:29 +02:00
Julien Kassar
bfb06300d5
Update README.md
2016-03-30 10:17:31 -04:00
Julien Kassar
ba316685f6
Add install script
2016-03-12 14:25:09 -05:00
Julien Kassar
3848c1e77e
Merge modifications by Frantzcy
2015-08-17 10:37:10 -04:00
Frantzcy Paisible
a9eb227755
Fixed the "iptables: Chain already exists" error
2015-08-17 07:13:50 -04:00
Julien Kassar
808685f2f1
Initial commit
2015-07-21 23:53:29 -04:00