mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-21 10:18:58 +02:00
Changes for 1.4.3a
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@560 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep
parent
8bf7e8e7b4
commit
11b0cead80
File diff suppressed because it is too large
Load Diff
@ -60,6 +60,7 @@
|
|||||||
<center>
|
<center>
|
||||||
<table border="0" cellpadding="0" cellspacing="0"
|
<table border="0" cellpadding="0" cellspacing="0"
|
||||||
style="border-collapse: collapse;" width="100%" id="AutoNumber4">
|
style="border-collapse: collapse;" width="100%" id="AutoNumber4">
|
||||||
|
|
||||||
<tbody>
|
<tbody>
|
||||||
<tr>
|
<tr>
|
||||||
|
|
||||||
@ -70,9 +71,9 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p>The Shoreline Firewall, more commonly known as "Shorewall", is a
|
<p>The Shoreline Firewall, more commonly known as "Shorewall", is
|
||||||
<a href="http://www.netfilter.org">Netfilter</a> (iptables) based firewall
|
a <a href="http://www.netfilter.org">Netfilter</a> (iptables) based
|
||||||
that can be used on a dedicated firewall system, a multi-function
|
firewall that can be used on a dedicated firewall system, a multi-function
|
||||||
gateway/router/server or on a standalone GNU/Linux system.</p>
|
gateway/router/server or on a standalone GNU/Linux system.</p>
|
||||||
|
|
||||||
|
|
||||||
@ -80,8 +81,8 @@
|
|||||||
<p>This program is free software; you can redistribute it and/or modify
|
<p>This program is free software; you can redistribute it and/or modify
|
||||||
it
|
it
|
||||||
under the terms of <a
|
under the terms of <a
|
||||||
href="http://www.gnu.org/licenses/gpl.html">Version 2 of the GNU
|
href="http://www.gnu.org/licenses/gpl.html">Version 2 of the
|
||||||
General Public License</a> as published by the Free Software
|
GNU General Public License</a> as published by the Free Software
|
||||||
Foundation.<br>
|
Foundation.<br>
|
||||||
|
|
||||||
<br>
|
<br>
|
||||||
@ -90,8 +91,7 @@ General Public License</a> as published by the Free Software
|
|||||||
it will be useful, but WITHOUT ANY WARRANTY;
|
it will be useful, but WITHOUT ANY WARRANTY;
|
||||||
without even the implied warranty of MERCHANTABILITY
|
without even the implied warranty of MERCHANTABILITY
|
||||||
or FITNESS FOR A PARTICULAR PURPOSE.
|
or FITNESS FOR A PARTICULAR PURPOSE.
|
||||||
See the GNU General Public License for more
|
See the GNU General Public License for more details.<br>
|
||||||
details.<br>
|
|
||||||
|
|
||||||
<br>
|
<br>
|
||||||
You
|
You
|
||||||
@ -112,9 +112,9 @@ General Public License along with
|
|||||||
|
|
||||||
|
|
||||||
<h2>Running Shorewall on Mandrake with a two-interface setup?</h2>
|
<h2>Running Shorewall on Mandrake with a two-interface setup?</h2>
|
||||||
If so, almost <b>NOTHING </b>on this site will apply directly to your setup.
|
If so, almost <b>NOTHING </b>on this site will apply directly to your
|
||||||
If you want to use the documentation that you find here, it is best if you
|
setup. If you want to use the documentation that you find here, it is best
|
||||||
uninstall what you have and install a setup that matches the documentation
|
if you uninstall what you have and install a setup that matches the documentation
|
||||||
on this site. See the <a href="two-interface.htm">Two-interface QuickStart
|
on this site. See the <a href="two-interface.htm">Two-interface QuickStart
|
||||||
Guide</a> for details.<br>
|
Guide</a> for details.<br>
|
||||||
|
|
||||||
@ -128,6 +128,29 @@ General Public License along with
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<p><b>5/20/2003 - Shorewall-1.4.3a</b><b> </b><b><img border="0"
|
||||||
|
src="images/new10.gif" width="28" height="12" alt="(New)">
|
||||||
|
</b><b> </b><br>
|
||||||
|
</p>
|
||||||
|
This version primarily corrects the documentation included in the .tgz and
|
||||||
|
in the .rpm. In addition: <br>
|
||||||
|
<ol>
|
||||||
|
<li>(This change is in 1.4.3 but is not documented) If you are running
|
||||||
|
iptables 1.2.7a and kernel 2.4.20, then Shorewall will return reject replies
|
||||||
|
as follows:<br>
|
||||||
|
a) tcp - RST<br>
|
||||||
|
b) udp - ICMP port unreachable<br>
|
||||||
|
c) icmp - ICMP host unreachable<br>
|
||||||
|
d) Otherwise - ICMP host prohibited<br>
|
||||||
|
If you are running earlier software, Shorewall will follow it's traditional
|
||||||
|
convention:<br>
|
||||||
|
a) tcp - RST<br>
|
||||||
|
b) Otherwise - ICMP port unreachable</li>
|
||||||
|
<li>UDP port 135 is now silently dropped in the common.def chain.
|
||||||
|
Remember that this chain is traversed just before a DROP or REJECT policy
|
||||||
|
is enforced.<br>
|
||||||
|
</li>
|
||||||
|
</ol>
|
||||||
<p><b>5/18/2003 - Shorewall 1.4.3 </b><b><img border="0"
|
<p><b>5/18/2003 - Shorewall 1.4.3 </b><b><img border="0"
|
||||||
src="images/new10.gif" width="28" height="12" alt="(New)">
|
src="images/new10.gif" width="28" height="12" alt="(New)">
|
||||||
</b><br>
|
</b><br>
|
||||||
@ -183,11 +206,11 @@ Note: You may not use ULOG with fireparse unless you modify fireparse. </li>
|
|||||||
|
|
||||||
|
|
||||||
<blockquote>This morning, I gave <a href="GSLUG.htm" target="_top">a
|
<blockquote>This morning, I gave <a href="GSLUG.htm" target="_top">a
|
||||||
Shorewall presentation to GSLUG</a>. The presentation is in
|
Shorewall presentation to GSLUG</a>. The presentation is
|
||||||
HTML format but was generated from Microsoft PowerPoint and is best viewed
|
in HTML format but was generated from Microsoft PowerPoint and is best
|
||||||
using Internet Explorer (although Konqueror also seems to work reasonably
|
viewed using Internet Explorer (although Konqueror also seems to work
|
||||||
well as does Opera 7.1.0). Neither Opera 6 nor Netscape work well to
|
reasonably well as does Opera 7.1.0). Neither Opera 6 nor Netscape work
|
||||||
view the presentation.<br>
|
well to view the presentation.<br>
|
||||||
</blockquote>
|
</blockquote>
|
||||||
|
|
||||||
|
|
||||||
@ -230,6 +253,7 @@ features Shorewall-1.3.14 and Kernel-2.4.20.
|
|||||||
|
|
||||||
<td width="88" bgcolor="#4b017c" valign="top" align="center">
|
<td width="88" bgcolor="#4b017c" valign="top" align="center">
|
||||||
|
|
||||||
|
|
||||||
<form method="post"
|
<form method="post"
|
||||||
action="http://lists.shorewall.net/cgi-bin/htsearch">
|
action="http://lists.shorewall.net/cgi-bin/htsearch">
|
||||||
<strong><br>
|
<strong><br>
|
||||||
@ -238,6 +262,7 @@ features Shorewall-1.3.14 and Kernel-2.4.20.
|
|||||||
Daily 0200-0330 GMT.</font><br>
|
Daily 0200-0330 GMT.</font><br>
|
||||||
<strong></strong>
|
<strong></strong>
|
||||||
|
|
||||||
|
|
||||||
<p><font color="#ffffff"><strong>Quick Search</strong></font><br>
|
<p><font color="#ffffff"><strong>Quick Search</strong></font><br>
|
||||||
<font face="Arial"
|
<font face="Arial"
|
||||||
size="-1"> <input type="text" name="words" size="15"></font><font
|
size="-1"> <input type="text" name="words" size="15"></font><font
|
||||||
@ -249,6 +274,7 @@ Daily 0200-0330 GMT.</font><br>
|
|||||||
type="hidden" name="exclude"
|
type="hidden" name="exclude"
|
||||||
value="[http://lists.shorewall.net/pipermail/*]"> </font> </form>
|
value="[http://lists.shorewall.net/pipermail/*]"> </font> </form>
|
||||||
|
|
||||||
|
|
||||||
<p><font color="#ffffff"><b><a
|
<p><font color="#ffffff"><b><a
|
||||||
href="http://lists.shorewall.net/htdig/search.html"><font
|
href="http://lists.shorewall.net/htdig/search.html"><font
|
||||||
color="#ffffff">Extended Search</font></a></b></font></p>
|
color="#ffffff">Extended Search</font></a></b></font></p>
|
||||||
@ -280,11 +306,11 @@ Daily 0200-0330 GMT.</font><br>
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="center"><font size="4" color="#ffffff">Shorewall is free but
|
<p align="center"><font size="4" color="#ffffff">Shorewall is free
|
||||||
if you try it and find it useful, please consider making a donation
|
but if you try it and find it useful, please consider making a donation
|
||||||
to
|
to
|
||||||
<a href="http://www.starlight.org"><font color="#ffffff">Starlight Children's
|
<a href="http://www.starlight.org"><font color="#ffffff">Starlight
|
||||||
Foundation.</font></a> Thanks!</font></p>
|
Children's Foundation.</font></a> Thanks!</font></p>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
|
|
||||||
@ -292,10 +318,8 @@ if you try it and find it useful, please consider making a donation
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<p><font size="2">Updated 5/18/2003 - <a href="support.htm">Tom Eastep</a></font>
|
<p><font size="2">Updated 5/19/2003 - <a href="support.htm">Tom Eastep</a></font>
|
||||||
<br>
|
|
||||||
<br>
|
<br>
|
||||||
</p>
|
</p>
|
||||||
<br>
|
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
|||||||
@ -14,6 +14,7 @@
|
|||||||
<table border="0" cellpadding="0" cellspacing="4"
|
<table border="0" cellpadding="0" cellspacing="4"
|
||||||
style="border-collapse: collapse;" width="100%" id="AutoNumber3"
|
style="border-collapse: collapse;" width="100%" id="AutoNumber3"
|
||||||
bgcolor="#4b017c">
|
bgcolor="#4b017c">
|
||||||
|
|
||||||
<tbody>
|
<tbody>
|
||||||
<tr>
|
<tr>
|
||||||
|
|
||||||
@ -66,22 +67,22 @@ a dedicated firewall system, a multi-function gateway/r
|
|||||||
<p>This program is free software; you can redistribute it and/or modify
|
<p>This program is free software; you can redistribute it and/or modify
|
||||||
it
|
it
|
||||||
under the terms of <a
|
under the terms of <a
|
||||||
href="http://www.gnu.org/licenses/gpl.html">Version 2 of the GNU
|
href="http://www.gnu.org/licenses/gpl.html">Version 2 of the
|
||||||
General Public License</a> as published by the Free Software
|
GNU General Public License</a> as published by the Free Software
|
||||||
Foundation.<br>
|
Foundation.<br>
|
||||||
|
|
||||||
<br>
|
<br>
|
||||||
This
|
|
||||||
program is distributed in the hope that
|
This program is distributed in the hope
|
||||||
it will be useful, but WITHOUT ANY WARRANTY;
|
that it will be useful, but WITHOUT ANY
|
||||||
without even the implied warranty of MERCHANTABILITY
|
WARRANTY; without even the implied warranty
|
||||||
or FITNESS FOR A PARTICULAR PURPOSE.
|
of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
||||||
See the GNU General Public License for more
|
PURPOSE. See the GNU General Public License
|
||||||
details.<br>
|
for more details.<br>
|
||||||
|
|
||||||
<br>
|
<br>
|
||||||
You
|
|
||||||
should have received a copy of the GNU
|
You should have received a copy of the GNU
|
||||||
General Public License along with
|
General Public License along with
|
||||||
this program; if not, write to the Free Software
|
this program; if not, write to the Free Software
|
||||||
Foundation, Inc., 675 Mass Ave, Cambridge,
|
Foundation, Inc., 675 Mass Ave, Cambridge,
|
||||||
@ -95,9 +96,9 @@ details.<br>
|
|||||||
|
|
||||||
|
|
||||||
<h2>Running Shorewall on Mandrake with a two-interface setup?</h2>
|
<h2>Running Shorewall on Mandrake with a two-interface setup?</h2>
|
||||||
If so, almost <b>NOTHING </b>on this site will apply directly to your setup.
|
If so, almost <b>NOTHING </b>on this site will apply directly to your
|
||||||
If you want to use the documentation that you find here, it is best if you
|
setup. If you want to use the documentation that you find here, it is best
|
||||||
uninstall what you have and install a setup that matches the documentation
|
if you uninstall what you have and install a setup that matches the documentation
|
||||||
on this site. See the <a href="two-interface.htm">Two-interface QuickStart
|
on this site. See the <a href="two-interface.htm">Two-interface QuickStart
|
||||||
Guide</a> for details.<br>
|
Guide</a> for details.<br>
|
||||||
|
|
||||||
@ -110,6 +111,30 @@ details.<br>
|
|||||||
<b> </b>
|
<b> </b>
|
||||||
|
|
||||||
|
|
||||||
|
<p><b>5/20/2003 - Shorewall-1.4.3a</b><b> </b><b><img border="0"
|
||||||
|
src="images/new10.gif" width="28" height="12" alt="(New)">
|
||||||
|
</b><b> </b><br>
|
||||||
|
</p>
|
||||||
|
This version primarily corrects the documentation included in the .tgz and
|
||||||
|
in the .rpm. In addition: <br>
|
||||||
|
|
||||||
|
<ol>
|
||||||
|
<li>(This change is in 1.4.3 but is not documented) If you are running
|
||||||
|
iptables 1.2.7a and kernel 2.4.20, then Shorewall will return reject replies
|
||||||
|
as follows:<br>
|
||||||
|
a) tcp - RST<br>
|
||||||
|
b) udp - ICMP port unreachable<br>
|
||||||
|
c) icmp - ICMP host unreachable<br>
|
||||||
|
d) Otherwise - ICMP host prohibited<br>
|
||||||
|
If you are running earlier software, Shorewall will follow it's traditional
|
||||||
|
convention:<br>
|
||||||
|
a) tcp - RST<br>
|
||||||
|
b) Otherwise - ICMP port unreachable</li>
|
||||||
|
<li>UDP port 135 is now silently dropped in the common.def chain.
|
||||||
|
Remember that this chain is traversed just before a DROP or REJECT policy
|
||||||
|
is enforced.<br>
|
||||||
|
</li>
|
||||||
|
</ol>
|
||||||
<p><b>5/18/2003 - Shorewall 1.4.3 </b><b><img border="0"
|
<p><b>5/18/2003 - Shorewall 1.4.3 </b><b><img border="0"
|
||||||
src="images/new10.gif" width="28" height="12" alt="(New)">
|
src="images/new10.gif" width="28" height="12" alt="(New)">
|
||||||
</b><br>
|
</b><br>
|
||||||
@ -148,9 +173,11 @@ Note: You may not use ULOG with fireparse unless you modify fireparse. </li>
|
|||||||
|
|
||||||
<p><b>4/26/2003 - lists.shorewall.net Downtime</b><b> </b></p>
|
<p><b>4/26/2003 - lists.shorewall.net Downtime</b><b> </b></p>
|
||||||
|
|
||||||
|
|
||||||
<p>The list server will be down this morning for upgrade to RH9.0.<br>
|
<p>The list server will be down this morning for upgrade to RH9.0.<br>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
|
||||||
<p><b>4/21/2003 - Samples updated for Shorewall version 1.4.2</b><b>
|
<p><b>4/21/2003 - Samples updated for Shorewall version 1.4.2</b><b>
|
||||||
</b></p>
|
</b></p>
|
||||||
|
|
||||||
@ -165,9 +192,9 @@ Note: You may not use ULOG with fireparse unless you modify fireparse. </li>
|
|||||||
|
|
||||||
<blockquote> This morning, I gave <a href="GSLUG.htm"
|
<blockquote> This morning, I gave <a href="GSLUG.htm"
|
||||||
target="_top">a Shorewall presentation to GSLUG</a>. The presentation
|
target="_top">a Shorewall presentation to GSLUG</a>. The presentation
|
||||||
is in HTML format but was generated from Microsoft PowerPoint and is
|
is in HTML format but was generated from Microsoft PowerPoint and
|
||||||
best viewed using Internet Explorer (although Konqueror also seems to
|
is best viewed using Internet Explorer (although Konqueror also seems
|
||||||
work reasonably well as does Opera 7.1.0). Neither Opera 6 nor Netscape
|
to work reasonably well as does Opera 7.1.0). Neither Opera 6 nor Netscape
|
||||||
work well to view the presentation.</blockquote>
|
work well to view the presentation.</blockquote>
|
||||||
|
|
||||||
|
|
||||||
@ -203,9 +230,9 @@ Note: You may not use ULOG with fireparse unless you modify fireparse. </li>
|
|||||||
a LEAF (router/firewall/gateway on a floppy,
|
a LEAF (router/firewall/gateway on a floppy,
|
||||||
CD or compact flash) distribution called
|
CD or compact flash) distribution called
|
||||||
<i>Bering</i> that features Shorewall-1.3.14
|
<i>Bering</i> that features Shorewall-1.3.14
|
||||||
and Kernel-2.4.20. You can find their
|
and Kernel-2.4.20. You can find their work
|
||||||
work at: <a
|
at: <a href="http://leaf.sourceforge.net/devel/jnilo">
|
||||||
href="http://leaf.sourceforge.net/devel/jnilo"> http://leaf.sourceforge.net/devel/jnilo</a></p>
|
http://leaf.sourceforge.net/devel/jnilo</a></p>
|
||||||
|
|
||||||
<b>Congratulations to Jacques and Eric on
|
<b>Congratulations to Jacques and Eric on
|
||||||
the recent release of Bering 1.2!!! </b><br>
|
the recent release of Bering 1.2!!! </b><br>
|
||||||
@ -232,6 +259,7 @@ work at: <a
|
|||||||
|
|
||||||
<td width="88" bgcolor="#4b017c" valign="top"
|
<td width="88" bgcolor="#4b017c" valign="top"
|
||||||
align="center">
|
align="center">
|
||||||
|
|
||||||
<form method="post"
|
<form method="post"
|
||||||
action="http://lists.shorewall.net/cgi-bin/htsearch">
|
action="http://lists.shorewall.net/cgi-bin/htsearch">
|
||||||
|
|
||||||
@ -241,6 +269,7 @@ work at: <a
|
|||||||
GMT.</font><br>
|
GMT.</font><br>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
|
||||||
<p><font color="#ffffff"><strong>Quick Search</strong></font><br>
|
<p><font color="#ffffff"><strong>Quick Search</strong></font><br>
|
||||||
<font face="Arial" size="-1"> <input
|
<font face="Arial" size="-1"> <input
|
||||||
type="text" name="words" size="15"></font><font size="-1"> </font><font
|
type="text" name="words" size="15"></font><font size="-1"> </font><font
|
||||||
@ -278,6 +307,7 @@ GMT.</font><br>
|
|||||||
<td width="100%" style="margin-top: 1px;">
|
<td width="100%" style="margin-top: 1px;">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="center"><a href="http://www.starlight.org"> <img
|
<p align="center"><a href="http://www.starlight.org"> <img
|
||||||
border="4" src="images/newlog.gif" width="57" height="100" align="left"
|
border="4" src="images/newlog.gif" width="57" height="100" align="left"
|
||||||
hspace="10">
|
hspace="10">
|
||||||
@ -286,8 +316,8 @@ GMT.</font><br>
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
<p align="center"><font size="4" color="#ffffff">Shorewall is free but
|
<p align="center"><font size="4" color="#ffffff">Shorewall is free
|
||||||
if you try it and find it useful, please consider making a donation
|
but if you try it and find it useful, please consider making a donation
|
||||||
to
|
to
|
||||||
<a href="http://www.starlight.org"><font color="#ffffff">Starlight
|
<a href="http://www.starlight.org"><font color="#ffffff">Starlight
|
||||||
Children's Foundation.</font></a> Thanks!</font></p>
|
Children's Foundation.</font></a> Thanks!</font></p>
|
||||||
@ -299,10 +329,8 @@ Children's Foundation.</font></a> Thanks!</font></p>
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<p><font size="2">Updated 5/18/2003 - <a href="support.htm">Tom Eastep</a></font>
|
<p><font size="2">Updated 5/19/2003 - <a href="support.htm">Tom Eastep</a></font>
|
||||||
<br>
|
<br>
|
||||||
</p>
|
</p>
|
||||||
<br>
|
|
||||||
<br>
|
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user