diff --git a/docs/LennyToSqueeze.xml b/docs/LennyToSqueeze.xml index 0a889ab14..f9da4ee3e 100644 --- a/docs/LennyToSqueeze.xml +++ b/docs/LennyToSqueeze.xml @@ -194,7 +194,10 @@ by Shorewall 4.4.x You should not be receiving this error if you are upgrading - from Lenny since BRIDGING=Yes did not work in that release. + from Lenny since BRIDGING=Yes did not work in that release. If you + have a bridge configuration where you want to control connections + through the bridge, you will want to visit http://www.shorewall.net/bridge-Shorewall-perl.html. @@ -526,10 +529,36 @@ NONAT loc net tcp 80 # PORT PORT(S) DEST LIMIT GROUP NONAT loc - tcp 80 + +
+ /etc/shorewall/routestopped + + The 'critical' option is no longer needed and hence is no longer + supported. If you have critical hosts defined, you will receive this + warning: + + WARNING: The 'critical' option is no longer + supported (or needed) + + To suppress the warning, simply remove the option. + + Shorewall 4.4 also treats the routestopped + file differently from earlier releases. Previously, the + routestopped file was parsed during + shorewall stop processing so that changes made to the + file while Shorewall was running would be applied at the next + stop. This is no longer the case -- the + routestopped file is processed during compilation + just like the rest of the configuration files so that when + shorewall stop is issued, the firewall will pass + traffic based on the contents of the routestopped + file at the last start or + restart. +
- Additional Sources of Information + Additional Sources of Information The following articles provide additional information.