diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 90a7a400d..a8fa11bde 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -14,6 +14,8 @@ Changes in Shorewall 4.4.13 7) Split in and out blacklisting. +8) Correct handling of [{src|dst},...] in ipset invocation + Changes in Shorewall 4.4.12 1) Fix IPv6 shorecap program. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index a6c135b55..02e8cdb41 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -1,6 +1,6 @@ ---------------------------------------------------------------------------- S H O R E W A L L 4 . 4 . 1 3 - B E T A 4 + R C 1 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -94,6 +94,11 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES allowed to start. Previously, the firewall would never be allowed to start. +8) When a comma-separated list of 'src' and/or 'dst' was specified in + an ipset invocation (e.g., "+fooset[src,src]), all but the first 'src' + or 'dst' was previously ignored when generating the resulting + iptables rule. + ---------------------------------------------------------------------------- I I. K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------