diff --git a/STABLE2/changelog.txt b/STABLE2/changelog.txt index 43145a364..d626aacd4 100644 --- a/STABLE2/changelog.txt +++ b/STABLE2/changelog.txt @@ -40,3 +40,5 @@ Changes in 2.0.7 2) Consult PKTTYPE when generating 'REJECT' rules. 3) Enhance IP/Routing output in "shorewall status". + +4) Correct handling of multiple 'blacklist' interfaces. \ No newline at end of file diff --git a/STABLE2/firewall b/STABLE2/firewall index 8847a00c0..820dbcb7d 100755 --- a/STABLE2/firewall +++ b/STABLE2/firewall @@ -4538,7 +4538,7 @@ process_blacklist_rec() { # Setup the Black List # setup_blacklist() { - local hosts=$(find_hosts_by_option blacklist) + local hosts="$(find_hosts_by_option blacklist)" local f=$(find_file blacklist) local disposition=$BLACKLIST_DISPOSITION diff --git a/STABLE2/releasenotes.txt b/STABLE2/releasenotes.txt index aaf29a1e8..d3fb7df6c 100644 --- a/STABLE2/releasenotes.txt +++ b/STABLE2/releasenotes.txt @@ -48,6 +48,9 @@ Problems Corrected in version 2.0.7 support are likely to see messages reporting this violation. Setting PKTTYPE=No should cause these messages to cease. +2) Multiple interfaces with the 'blacklist' option no longer result in + an error message at startup. + New Features in version 2.0.7 1) To improve supportability, the "shorewall status" command now