fix stop-time set persistence; add show routing/accounting; harden nft check fallback#1
Merged
davekempe merged 2 commits intoJul 13, 2026
Conversation
…counting display - Preserve externally populated nft sets across `shorewall stop` by snapshotting and restoring their elements. - Implement `shorewall show routing` and `shorewall6 show routing` for live policy rules and route tables. - Add `shorewall show accounting` for live named counters and accounting chains. - Improve handling of large rulesets in `shorewall check` and `shorewall migrate` with chunked validation. - Update accounting parsing to support new actions: COUNT and DONE. - Enhance tests to verify preservation of dynamic sets across stop/start cycles.
… a shared aggregate
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR adds operational and robustness fixes on top of upstream 0.0.6, with local changes tracked separately in changelog as
0.0.6+local1.Changes
shorewall stopby:stop, with safe fallback to the last valid compiled artifact if current config cannot compile.shorewall show routingandshorewall6 show routingfor live policy rules and route tables.shorewall show accountingfor live named counters and accounting chains.shorewall checkandshorewall migratewith chunked validation when single-transaction nft checks fail (for example:"Message too long").COUNTandDONE) and chain-oriented accounting behavior.Validation
python3 tests/harness/hardening-unit.pypassedtests/run 0041-ipset-persistpassed