mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-22 15:43:30 +01:00
Update version to 3.9.5
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
c47adc64de
commit
0d01ff7d84
@ -28,7 +28,7 @@
|
||||
# shown below. Simply run this script to revert to your prior version of
|
||||
# Shoreline Firewall.
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||
#
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -24,8 +24,11 @@ Problems corrected in 3.9.5.
|
||||
|
||||
3) Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or
|
||||
MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors.
|
||||
|
||||
4) Many more .... (I gave up trying to document them all; check the
|
||||
SVN history if you are interested).
|
||||
|
||||
Other changes in Shorewall 3.9.4
|
||||
Other changes in Shorewall 3.9.5
|
||||
|
||||
1) The Shorewall-perl compiler now validates all log levels. It also
|
||||
validates all protocol names against /etc/protocols and all service
|
||||
@ -281,8 +284,8 @@ Migration Considerations:
|
||||
configuration files.
|
||||
|
||||
h) USE_ACTIONS=No is not supported. That option is intended to
|
||||
minimize Shorewall's footprint in embedded applications. As a
|
||||
consequence, Default Macros are not supported.
|
||||
minimize Shorewall's footprint in embedded applications. As a
|
||||
consequence, Default Macros are not supported.
|
||||
|
||||
i) DELAYBLACKLISTLOAD=Yes is not supported. The entire ruleset is
|
||||
atomically loaded with one execution of iptables-restore.
|
||||
@ -297,6 +300,25 @@ Migration Considerations:
|
||||
combination doesn't work in previous versions of Shorewall so
|
||||
the Perl-based compiler simply rejects it.
|
||||
|
||||
m) Shorewall-perl has a single rule generator that is used for all
|
||||
rule-oriented files. So it is important that the syntax is
|
||||
consistent between files.
|
||||
|
||||
With shorewall-shell, there is a special syntax in the SOURCE
|
||||
column of /etc/shorewall/masq to designate "all traffic entering
|
||||
the firewall on this interface except...".
|
||||
|
||||
Example:
|
||||
|
||||
#INTERFACE SOURCE ADDRESSES
|
||||
eth0 eth1!192.168.4.9 ...
|
||||
|
||||
Shorewall-perl uses syntax that is consistent with the rest of
|
||||
Shorewall:
|
||||
|
||||
#INTERFACE SOURCE ADDRESSES
|
||||
eth0 eth1:!192.168.4.9 ...
|
||||
|
||||
2) An 'optional' option has been added to
|
||||
/etc/shorewall/interfaces. When 'optional' is specified for an
|
||||
interface, Shorewall will be silent when:
|
||||
@ -449,3 +471,4 @@ Problems corrected in Shorewall 3.9.3
|
||||
specified in the DEST column of /etc/shorewall/rules, then a Perl
|
||||
run-time diagnostic was produced.
|
||||
|
||||
|
||||
|
@ -1,5 +1,5 @@
|
||||
%define name shorewall
|
||||
%define version 3.9.4
|
||||
%define version 3.9.5
|
||||
%define release 1
|
||||
%define prefix /usr
|
||||
|
||||
@ -252,6 +252,8 @@ fi
|
||||
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn Samples
|
||||
|
||||
%changelog
|
||||
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.5-1
|
||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.4-1
|
||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -28,7 +28,7 @@
|
||||
# shown below. Simply run this script to revert to your prior version of
|
||||
# Shoreline Firewall.
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||
#
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,5 +1,5 @@
|
||||
%define name shorewall-lite
|
||||
%define version 3.9.4
|
||||
%define version 3.9.5
|
||||
%define release 1
|
||||
%define prefix /usr
|
||||
|
||||
@ -99,6 +99,8 @@ fi
|
||||
%doc COPYING changelog.txt releasenotes.txt
|
||||
|
||||
%changelog
|
||||
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.5-1
|
||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.4-1
|
||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||
|
@ -26,7 +26,7 @@
|
||||
# You may only use this script to uninstall the version
|
||||
# shown below. Simply run this script to remove Shorewall Firewall
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -69,7 +69,7 @@ our %globals = ( SHAREDIR => '/usr/share/shorewall' ,
|
||||
ORIGINAL_POLICY_MATCH => '',
|
||||
LOGPARMS => '',
|
||||
TC_SCRIPT => '',
|
||||
VERSION => '3.9.4',
|
||||
VERSION => '3.9.5',
|
||||
);
|
||||
|
||||
#
|
||||
|
@ -169,10 +169,9 @@ sub process_tc_rule( $$$$$$$$$$ ) {
|
||||
unless ( $classid ) {
|
||||
MARK:
|
||||
{
|
||||
PATTERN:
|
||||
for my $tccmd ( @tccmd ) {
|
||||
if ( $tccmd->{match}($cmd) ) {
|
||||
fatal_error "$mark not valid with :C[FP]" if $connmark;
|
||||
fatal_error "$mark not valid with :C[FPT]" if $connmark;
|
||||
|
||||
$target = "$tccmd->{target} ";
|
||||
my $marktype = $tccmd->{mark};
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||
#
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,5 +1,5 @@
|
||||
%define name shorewall-perl
|
||||
%define version 3.9.4
|
||||
%define version 3.9.5
|
||||
%define release 1
|
||||
%define prefix /usr
|
||||
|
||||
@ -80,6 +80,8 @@ rm -rf $RPM_BUILD_ROOT
|
||||
%doc COPYING releasenotes.txt
|
||||
|
||||
%changelog
|
||||
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.5-1
|
||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.4-1
|
||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||
|
@ -22,7 +22,7 @@
|
||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||
#
|
||||
|
||||
VERSION=3.9.4
|
||||
VERSION=3.9.5
|
||||
|
||||
usage() # $1 = exit status
|
||||
{
|
||||
|
@ -1,5 +1,5 @@
|
||||
%define name shorewall-shell
|
||||
%define version 3.9.4
|
||||
%define version 3.9.5
|
||||
%define release 1
|
||||
%define prefix /usr
|
||||
|
||||
@ -63,6 +63,8 @@ rm -rf $RPM_BUILD_ROOT
|
||||
%doc COPYING INSTALL
|
||||
|
||||
%changelog
|
||||
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.5-1
|
||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||
- Updated to 3.9.4-1
|
||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||
|
Loading…
Reference in New Issue
Block a user