"""
inc_stackptr is an index into an array of MAXINCLUDES elements; since
this check is done before it is increased, there needs to be room for
one more element.
"""

Forward chains should only DROP in the FORW_OUT, much the same way ACCEPT only accepts in the FORW_OUT chain, so that packets that get ACCEPTed in later blocks don't get DROPped early.

Thanks to Emmanuel for finding the bug and the test case.

Test that empty files can be included, that no-ops are parsed, that empty
files which cause a no-op are ok, and that included filenames can be suffixed
with a semicolon as if they were a rule and not include the semicolon in the
filename.

fgadm now changes to SYSCONFDIR before running filtergen so any relative
include paths in the filter rules get found.

Update the history with a new version, and changes.

Refactored the scanner file inclusion code.

The patches from the Debian package fix a stupid shell syntax bug, move the
filtergen program back to /usr/sbin, fix the section of the filter_syntax
manpage and removes a cast in probably dead code that was busting on 64 bit
systems.

Patches applied:

 * jaq@debian.org--2004/filtergen--debian--0--patch-2
   fix dumb bugs

 * jaq@debian.org--2004/filtergen--debian--0--patch-3
   fix install location of filtergen

 * jaq@debian.org--2004/filtergen--debian--0--patch-4
   Remove an ugly cast around some probably dead code.

Clean up the rpm spec file, include it in the tarball.

------------------------------------------------------------------------
r751 | jaq | 2004-01-07 22:51:11 +1100 (Wed, 07 Jan 2004) | 3 lines

- Added more copyright blurbs.
- Removed 'filtergen' name and replaced with 'pfc' where required.

Author: matthew
Date: 2003/04/02 11:07:32
Add "oneway" option

Author: matthew
Date: 2003/04/02 11:06:49
fix iptables log text

Author: matthew
Date: 2002/11/13 10:01:43
Release 0.11

Author: matthew
Date: 2002/11/11 20:51:38
Better feedback on parse errors

Author: matthew
Date: 2002/11/11 19:48:38
Merge flush patch from Jamie Wilkinson

Author: matthew
Date: 2002/11/08 01:18:30
fix 64-bit warning in filter.c netmask calculation

Author: matthew
Date: 2002/10/24 09:05:45
Fix doco bug

Author: matthew
Date: 2002/09/12 10:03:08
Rlease 0.10

Author: matthew
Date: 2002/09/12 09:29:48
add samples

Author: matthew
Date: 2002/09/02 13:18:44
Add initscript and makefile, fix RPM spec

Author: matthew
Date: 2002/09/02 12:53:06
Add RPM spec

Author: matthew
Date: 2002/09/02 11:10:42
Fix bad filter_unroll / filter_append bug

Author: matthew
Date: 2002/08/26 22:10:37
Restructure a few things internally
Implement "log text \"foo etc\""
Fix sub-group support for iptables and ipchains

Author: matthew
Date: 2002/08/23 14:41:11
release 0.9

Author: matthew
Date: 2002/08/20 22:54:38
Completely redo how port ranges and host/mask stuff is stored
and manipulated.  Some code got cleaner, some uglier.

This allowed the implementation of "-m" to force hostname and
service name lookups.

Author: matthew
Date: 2002/08/20 17:29:07
Support all defined protocols now