diff --git a/STABLE2/changelog.txt b/STABLE2/changelog.txt index a0876f84c..e0916fe3f 100644 --- a/STABLE2/changelog.txt +++ b/STABLE2/changelog.txt @@ -67,3 +67,5 @@ Changes since 2.0.1 32) Correct null common action handling. 33) Create /var/lib/shorewall if it doesn't exist. + +34) Fix dynamic in chains in the nat table. diff --git a/STABLE2/firewall b/STABLE2/firewall index 1eb1dd7a8..8f87e5e58 100755 --- a/STABLE2/firewall +++ b/STABLE2/firewall @@ -5194,7 +5194,7 @@ activate_rules() # Add jumps for dynamic nat chains # [ -n "$DYNAMIC_ZONES" ] && for interface in $all_interfaces ; do - addrulejump PREROUTING $(dynamic_in $interface) + addrulejump PREROUTING $(dynamic_in $interface) -i $interface done # # Add jumps from the builtin chains to the nat chains diff --git a/STABLE2/releasenotes.txt b/STABLE2/releasenotes.txt index 0c8648a4b..94ff2cdf7 100644 --- a/STABLE2/releasenotes.txt +++ b/STABLE2/releasenotes.txt @@ -30,6 +30,10 @@ Problems Corrected since 2.0.2 4) If /var/lib/shorewall does not exist, shorewall start fails. +5) DNAT rules with a dynamic source zone don't work properly. When + used, these rules cause the rule to be checked against ALL input, + not just input from the designated zone. + ----------------------------------------------------------------------- Issues when migrating from Shorewall 2.0.1 to Shorewall 2.0.2: