mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-22 23:53:30 +01:00
Update version to 3.9.5
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6164 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
c47adc64de
commit
0d01ff7d84
@ -28,7 +28,7 @@
|
|||||||
# shown below. Simply run this script to revert to your prior version of
|
# shown below. Simply run this script to revert to your prior version of
|
||||||
# Shoreline Firewall.
|
# Shoreline Firewall.
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -22,7 +22,7 @@
|
|||||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -24,8 +24,11 @@ Problems corrected in 3.9.5.
|
|||||||
|
|
||||||
3) Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or
|
3) Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or
|
||||||
MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors.
|
MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors.
|
||||||
|
|
||||||
|
4) Many more .... (I gave up trying to document them all; check the
|
||||||
|
SVN history if you are interested).
|
||||||
|
|
||||||
Other changes in Shorewall 3.9.4
|
Other changes in Shorewall 3.9.5
|
||||||
|
|
||||||
1) The Shorewall-perl compiler now validates all log levels. It also
|
1) The Shorewall-perl compiler now validates all log levels. It also
|
||||||
validates all protocol names against /etc/protocols and all service
|
validates all protocol names against /etc/protocols and all service
|
||||||
@ -281,8 +284,8 @@ Migration Considerations:
|
|||||||
configuration files.
|
configuration files.
|
||||||
|
|
||||||
h) USE_ACTIONS=No is not supported. That option is intended to
|
h) USE_ACTIONS=No is not supported. That option is intended to
|
||||||
minimize Shorewall's footprint in embedded applications. As a
|
minimize Shorewall's footprint in embedded applications. As a
|
||||||
consequence, Default Macros are not supported.
|
consequence, Default Macros are not supported.
|
||||||
|
|
||||||
i) DELAYBLACKLISTLOAD=Yes is not supported. The entire ruleset is
|
i) DELAYBLACKLISTLOAD=Yes is not supported. The entire ruleset is
|
||||||
atomically loaded with one execution of iptables-restore.
|
atomically loaded with one execution of iptables-restore.
|
||||||
@ -297,6 +300,25 @@ Migration Considerations:
|
|||||||
combination doesn't work in previous versions of Shorewall so
|
combination doesn't work in previous versions of Shorewall so
|
||||||
the Perl-based compiler simply rejects it.
|
the Perl-based compiler simply rejects it.
|
||||||
|
|
||||||
|
m) Shorewall-perl has a single rule generator that is used for all
|
||||||
|
rule-oriented files. So it is important that the syntax is
|
||||||
|
consistent between files.
|
||||||
|
|
||||||
|
With shorewall-shell, there is a special syntax in the SOURCE
|
||||||
|
column of /etc/shorewall/masq to designate "all traffic entering
|
||||||
|
the firewall on this interface except...".
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
#INTERFACE SOURCE ADDRESSES
|
||||||
|
eth0 eth1!192.168.4.9 ...
|
||||||
|
|
||||||
|
Shorewall-perl uses syntax that is consistent with the rest of
|
||||||
|
Shorewall:
|
||||||
|
|
||||||
|
#INTERFACE SOURCE ADDRESSES
|
||||||
|
eth0 eth1:!192.168.4.9 ...
|
||||||
|
|
||||||
2) An 'optional' option has been added to
|
2) An 'optional' option has been added to
|
||||||
/etc/shorewall/interfaces. When 'optional' is specified for an
|
/etc/shorewall/interfaces. When 'optional' is specified for an
|
||||||
interface, Shorewall will be silent when:
|
interface, Shorewall will be silent when:
|
||||||
@ -449,3 +471,4 @@ Problems corrected in Shorewall 3.9.3
|
|||||||
specified in the DEST column of /etc/shorewall/rules, then a Perl
|
specified in the DEST column of /etc/shorewall/rules, then a Perl
|
||||||
run-time diagnostic was produced.
|
run-time diagnostic was produced.
|
||||||
|
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall
|
%define name shorewall
|
||||||
%define version 3.9.4
|
%define version 3.9.5
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -252,6 +252,8 @@ fi
|
|||||||
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn Samples
|
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn Samples
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||||
|
- Updated to 3.9.5-1
|
||||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||||
- Updated to 3.9.4-1
|
- Updated to 3.9.4-1
|
||||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||||
|
@ -26,7 +26,7 @@
|
|||||||
# You may only use this script to uninstall the version
|
# You may only use this script to uninstall the version
|
||||||
# shown below. Simply run this script to remove Shorewall Firewall
|
# shown below. Simply run this script to remove Shorewall Firewall
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -28,7 +28,7 @@
|
|||||||
# shown below. Simply run this script to revert to your prior version of
|
# shown below. Simply run this script to revert to your prior version of
|
||||||
# Shoreline Firewall.
|
# Shoreline Firewall.
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -22,7 +22,7 @@
|
|||||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall-lite
|
%define name shorewall-lite
|
||||||
%define version 3.9.4
|
%define version 3.9.5
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -99,6 +99,8 @@ fi
|
|||||||
%doc COPYING changelog.txt releasenotes.txt
|
%doc COPYING changelog.txt releasenotes.txt
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||||
|
- Updated to 3.9.5-1
|
||||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||||
- Updated to 3.9.4-1
|
- Updated to 3.9.4-1
|
||||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||||
|
@ -26,7 +26,7 @@
|
|||||||
# You may only use this script to uninstall the version
|
# You may only use this script to uninstall the version
|
||||||
# shown below. Simply run this script to remove Shorewall Firewall
|
# shown below. Simply run this script to remove Shorewall Firewall
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -69,7 +69,7 @@ our %globals = ( SHAREDIR => '/usr/share/shorewall' ,
|
|||||||
ORIGINAL_POLICY_MATCH => '',
|
ORIGINAL_POLICY_MATCH => '',
|
||||||
LOGPARMS => '',
|
LOGPARMS => '',
|
||||||
TC_SCRIPT => '',
|
TC_SCRIPT => '',
|
||||||
VERSION => '3.9.4',
|
VERSION => '3.9.5',
|
||||||
);
|
);
|
||||||
|
|
||||||
#
|
#
|
||||||
|
@ -169,10 +169,9 @@ sub process_tc_rule( $$$$$$$$$$ ) {
|
|||||||
unless ( $classid ) {
|
unless ( $classid ) {
|
||||||
MARK:
|
MARK:
|
||||||
{
|
{
|
||||||
PATTERN:
|
|
||||||
for my $tccmd ( @tccmd ) {
|
for my $tccmd ( @tccmd ) {
|
||||||
if ( $tccmd->{match}($cmd) ) {
|
if ( $tccmd->{match}($cmd) ) {
|
||||||
fatal_error "$mark not valid with :C[FP]" if $connmark;
|
fatal_error "$mark not valid with :C[FPT]" if $connmark;
|
||||||
|
|
||||||
$target = "$tccmd->{target} ";
|
$target = "$tccmd->{target} ";
|
||||||
my $marktype = $tccmd->{mark};
|
my $marktype = $tccmd->{mark};
|
||||||
|
@ -22,7 +22,7 @@
|
|||||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall-perl
|
%define name shorewall-perl
|
||||||
%define version 3.9.4
|
%define version 3.9.5
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -80,6 +80,8 @@ rm -rf $RPM_BUILD_ROOT
|
|||||||
%doc COPYING releasenotes.txt
|
%doc COPYING releasenotes.txt
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||||
|
- Updated to 3.9.5-1
|
||||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||||
- Updated to 3.9.4-1
|
- Updated to 3.9.4-1
|
||||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||||
|
@ -22,7 +22,7 @@
|
|||||||
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=3.9.4
|
VERSION=3.9.5
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall-shell
|
%define name shorewall-shell
|
||||||
%define version 3.9.4
|
%define version 3.9.5
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -63,6 +63,8 @@ rm -rf $RPM_BUILD_ROOT
|
|||||||
%doc COPYING INSTALL
|
%doc COPYING INSTALL
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Apr 30 2007 Tom Eastep tom@shorewall.net
|
||||||
|
- Updated to 3.9.5-1
|
||||||
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
* Mon Apr 23 2007 Tom Eastep tom@shorewall.net
|
||||||
- Updated to 3.9.4-1
|
- Updated to 3.9.4-1
|
||||||
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
* Wed Apr 18 2007 Tom Eastep tom@shorewall.net
|
||||||
|
Loading…
Reference in New Issue
Block a user