Update version to 3.9.5

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-04-30 22:00:07 +00:00
parent c47adc64de
commit 0d01ff7d84
15 changed files with 48 additions and 18 deletions

View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -22,7 +22,7 @@
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
# #
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -24,8 +24,11 @@ Problems corrected in 3.9.5.
3) Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or 3) Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or
MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors. MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors.
4) Many more .... (I gave up trying to document them all; check the
SVN history if you are interested).
Other changes in Shorewall 3.9.4 Other changes in Shorewall 3.9.5
1) The Shorewall-perl compiler now validates all log levels. It also 1) The Shorewall-perl compiler now validates all log levels. It also
validates all protocol names against /etc/protocols and all service validates all protocol names against /etc/protocols and all service
@ -281,8 +284,8 @@ Migration Considerations:
configuration files. configuration files.
h) USE_ACTIONS=No is not supported. That option is intended to h) USE_ACTIONS=No is not supported. That option is intended to
minimize Shorewall's footprint in embedded applications. As a minimize Shorewall's footprint in embedded applications. As a
consequence, Default Macros are not supported. consequence, Default Macros are not supported.
i) DELAYBLACKLISTLOAD=Yes is not supported. The entire ruleset is i) DELAYBLACKLISTLOAD=Yes is not supported. The entire ruleset is
atomically loaded with one execution of iptables-restore. atomically loaded with one execution of iptables-restore.
@ -297,6 +300,25 @@ Migration Considerations:
combination doesn't work in previous versions of Shorewall so combination doesn't work in previous versions of Shorewall so
the Perl-based compiler simply rejects it. the Perl-based compiler simply rejects it.
m) Shorewall-perl has a single rule generator that is used for all
rule-oriented files. So it is important that the syntax is
consistent between files.
With shorewall-shell, there is a special syntax in the SOURCE
column of /etc/shorewall/masq to designate "all traffic entering
the firewall on this interface except...".
Example:
#INTERFACE SOURCE ADDRESSES
eth0 eth1!192.168.4.9 ...
Shorewall-perl uses syntax that is consistent with the rest of
Shorewall:
#INTERFACE SOURCE ADDRESSES
eth0 eth1:!192.168.4.9 ...
2) An 'optional' option has been added to 2) An 'optional' option has been added to
/etc/shorewall/interfaces. When 'optional' is specified for an /etc/shorewall/interfaces. When 'optional' is specified for an
interface, Shorewall will be silent when: interface, Shorewall will be silent when:
@ -449,3 +471,4 @@ Problems corrected in Shorewall 3.9.3
specified in the DEST column of /etc/shorewall/rules, then a Perl specified in the DEST column of /etc/shorewall/rules, then a Perl
run-time diagnostic was produced. run-time diagnostic was produced.

View File

@ -1,5 +1,5 @@
%define name shorewall %define name shorewall
%define version 3.9.4 %define version 3.9.5
%define release 1 %define release 1
%define prefix /usr %define prefix /usr
@ -252,6 +252,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn Samples %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn Samples
%changelog %changelog
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.5-1
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net * Mon Apr 23 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.4-1 - Updated to 3.9.4-1
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net * Wed Apr 18 2007 Tom Eastep tom@shorewall.net

View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -22,7 +22,7 @@
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
# #
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -1,5 +1,5 @@
%define name shorewall-lite %define name shorewall-lite
%define version 3.9.4 %define version 3.9.5
%define release 1 %define release 1
%define prefix /usr %define prefix /usr
@ -99,6 +99,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.5-1
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net * Mon Apr 23 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.4-1 - Updated to 3.9.4-1
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net * Wed Apr 18 2007 Tom Eastep tom@shorewall.net

View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -69,7 +69,7 @@ our %globals = ( SHAREDIR => '/usr/share/shorewall' ,
ORIGINAL_POLICY_MATCH => '', ORIGINAL_POLICY_MATCH => '',
LOGPARMS => '', LOGPARMS => '',
TC_SCRIPT => '', TC_SCRIPT => '',
VERSION => '3.9.4', VERSION => '3.9.5',
); );
# #

View File

@ -169,10 +169,9 @@ sub process_tc_rule( $$$$$$$$$$ ) {
unless ( $classid ) { unless ( $classid ) {
MARK: MARK:
{ {
PATTERN:
for my $tccmd ( @tccmd ) { for my $tccmd ( @tccmd ) {
if ( $tccmd->{match}($cmd) ) { if ( $tccmd->{match}($cmd) ) {
fatal_error "$mark not valid with :C[FP]" if $connmark; fatal_error "$mark not valid with :C[FPT]" if $connmark;
$target = "$tccmd->{target} "; $target = "$tccmd->{target} ";
my $marktype = $tccmd->{mark}; my $marktype = $tccmd->{mark};

View File

@ -22,7 +22,7 @@
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
# #
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -1,5 +1,5 @@
%define name shorewall-perl %define name shorewall-perl
%define version 3.9.4 %define version 3.9.5
%define release 1 %define release 1
%define prefix /usr %define prefix /usr
@ -80,6 +80,8 @@ rm -rf $RPM_BUILD_ROOT
%doc COPYING releasenotes.txt %doc COPYING releasenotes.txt
%changelog %changelog
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.5-1
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net * Mon Apr 23 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.4-1 - Updated to 3.9.4-1
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net * Wed Apr 18 2007 Tom Eastep tom@shorewall.net

View File

@ -22,7 +22,7 @@
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
# #
VERSION=3.9.4 VERSION=3.9.5
usage() # $1 = exit status usage() # $1 = exit status
{ {

View File

@ -1,5 +1,5 @@
%define name shorewall-shell %define name shorewall-shell
%define version 3.9.4 %define version 3.9.5
%define release 1 %define release 1
%define prefix /usr %define prefix /usr
@ -63,6 +63,8 @@ rm -rf $RPM_BUILD_ROOT
%doc COPYING INSTALL %doc COPYING INSTALL
%changelog %changelog
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.5-1
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net * Mon Apr 23 2007 Tom Eastep tom@shorewall.net
- Updated to 3.9.4-1 - Updated to 3.9.4-1
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net * Wed Apr 18 2007 Tom Eastep tom@shorewall.net