diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index d4577d4cc..cadf42118 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -2,6 +2,10 @@ Changes in Shorewall 4.4.8 1) Correct handling of RATE LIMIT on NAT rules. +2) Don't create a logging chain for rules with '-j RETURN'. + +3) Avoid duplicate SFQ class numbers. + Changes in Shorewall 4.4.7 1) Backport optimization changes from 4.5. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 78f4053d0..c53b7ea75 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -191,6 +191,21 @@ Shorewall 4.4.8 REDIRECT and DNAT rules. The effective rate and burst were 1/2 of the values given in the rule. +2) A CONTINUE rule specifying a log level would cause the compiler to + generate an incorrect rule sequence. The packet would be logged + but the CONTINUE action would not occur. + +3) If multiple entries were present in /etc/shorewall/tcdevices and + unique class numbers were not explicitly specified in + /etc/shorewall/tc, then 'shorewall start' would fail with a + diagnostic such as: + + Setting up Traffic Control... + RTNETLINK answers: File exists + ERROR: Command "tc qdisc add dev eth1 parent 2:2 handle 2: sfq quantum + 1500 limit 127 perturb 10" Failed + Processing /etc/shorewall/stop ... + ---------------------------------------------------------------------------- K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------