extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-22 15:43:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update for 4.4.4.3, if needed

Browse Source
This commit is contained in:
Tom Eastep 2009-12-08 08:45:10 -08:00
parent b209986089
commit 305e97d154
19 changed files with 49 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall-lite/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall-lite/shorewall-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall-lite %define name shorewall-lite
%define version 4.4.4 %define version 4.4.4
%define release 2 %define release 3
Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -100,6 +100,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Tue Dec 08 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-3
* Sun Dec 06 2009 Tom Eastep tom@shorewall.net * Sun Dec 06 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-2 - Updated to 4.4.4-2
* Sat Nov 21 2009 Tom Eastep tom@shorewall.net * Sat Nov 21 2009 Tom Eastep tom@shorewall.net

2
Shorewall-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall/Perl/Shorewall/Config.pm
View File

@ -327,7 +327,7 @@ sub initialize( $ ) {
TC_SCRIPT => '', TC_SCRIPT => '',
EXPORT => 0, EXPORT => 0,
UNTRACKED => 0, UNTRACKED => 0,
VERSION => "4.4.4.2", VERSION => "4.4.4.3",
CAPVERSION => 40402 , CAPVERSION => 40402 ,
); );

20
Shorewall/changelog.txt
View File

@ -1,15 +1,23 @@
Changes in Shorewall 4.4.4.3
1) Fix DONT_LOAD vs 'reload -c'
Changes in Shorewall 4.4.4.2
1) Disallow port 0
2) Improve IPv6 address validation and range checking.
3) Correct Shorewall6 capabilities detection.
4) Correct handling of DNS names in IPv6.
Changes in Shorewall 4.4.4.1 Changes in Shorewall 4.4.4.1
1) Fix 15-port change. 1) Fix 15-port change.
2) Fix handling of interfaces with the 'bridge' option. 2) Fix handling of interfaces with the 'bridge' option.
3) Disallow port 0
4) Improve IPv6 address validation and range checking.
5) Correct Shorewall6 capabilities detection.
Changes in Shorewall 4.4.4 Changes in Shorewall 4.4.4
1) Change STARTUP_LOG and LOG_VERBOSITY in default shorewall6.conf. 1) Change STARTUP_LOG and LOG_VERBOSITY in default shorewall6.conf.

2
Shorewall/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

5
Shorewall/known_problems.txt
View File

@ -37,9 +37,8 @@
7) The command 'shorewall reload -c <host>' ignores the setting of 7) The command 'shorewall reload -c <host>' ignores the setting of
DONT_LOAD, causing unwanted modules to be loaded. DONT_LOAD, causing unwanted modules to be loaded.
This problem can be worked around on the firewall system by copying This defect is corrected in Shorewall 4.4.4.3.
/usr/share/shorewall-lite/modules to /etc/shorewall-lite/ and then
removing the unwanted modules from the copied file.

14
Shorewall/releasenotes.txt
View File

@ -169,6 +169,14 @@ Shorewall 4.4.4 Patch Release 2
now, if the zone has <interface>:0.0.0.0/0 (even with exclusions), now, if the zone has <interface>:0.0.0.0/0 (even with exclusions),
then it may have no additional members in /etc/shorewall/hosts. then it may have no additional members in /etc/shorewall/hosts.
---------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 4 . 4 . 3
----------------------------------------------------------------------------
1) The command 'shorewall reload -c <host>' ignored the DONT_LOAD
setting with the result that unwanted modules could be loaded. The
'reload' command without the '-c' option worked correctly.
--------------------------------------------------------------------------- ---------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 4 . 4 . 2 P R O B L E M S C O R R E C T E D I N 4 . 4 . 4 . 2
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
@ -183,11 +191,7 @@ Shorewall 4.4.4 Patch Release 2
that iptables-restore errors could occur. Port 0 is now flagged as that iptables-restore errors could occur. Port 0 is now flagged as
an error. an error.
---------------------------------------------------------------------------- 4) The Shorewall6-lite shorecap program was including the wrong
P R O B L E M S C O R R E C T E D I N 4 . 4 . 4 . 2
----------------------------------------------------------------------------
1) The Shorewall6-lite shorecap program was including the wrong
library. Also, Shorewall6 is determining the availablity of the library. Also, Shorewall6 is determining the availablity of the
mangle table before it ensures that ip6tables is installed. mangle table before it ensures that ip6tables is installed.

4
Shorewall/shorewall.spec
View File

@ -1,6 +1,6 @@
%define name shorewall %define name shorewall
%define version 4.4.4 %define version 4.4.4
%define release 2 %define release 3
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -106,6 +106,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples
%changelog %changelog
* Tue Dec 08 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-3
* Sun Dec 06 2009 Tom Eastep tom@shorewall.net * Sun Dec 06 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-2 - Updated to 4.4.4-2
* Sat Nov 21 2009 Tom Eastep tom@shorewall.net * Sat Nov 21 2009 Tom Eastep tom@shorewall.net

2
Shorewall/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6-lite/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6-lite/shorewall6-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6-lite %define name shorewall6-lite
%define version 4.4.4 %define version 4.4.4
%define release 2 %define release 3
Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -91,6 +91,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Tue Dec 08 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-3
* Sun Dec 06 2009 Tom Eastep tom@shorewall.net * Sun Dec 06 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-2 - Updated to 4.4.4-2
* Sat Nov 21 2009 Tom Eastep tom@shorewall.net * Sat Nov 21 2009 Tom Eastep tom@shorewall.net

2
Shorewall6-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6/shorewall6.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6 %define name shorewall6
%define version 4.4.4 %define version 4.4.4
%define release 2 %define release 3
Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -95,6 +95,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6 %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6
%changelog %changelog
* Tue Dec 08 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-3
* Sun Dec 06 2009 Tom Eastep tom@shorewall.net * Sun Dec 06 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.4-2 - Updated to 4.4.4-2
* Sat Nov 21 2009 Tom Eastep tom@shorewall.net * Sat Nov 21 2009 Tom Eastep tom@shorewall.net

2
Shorewall6/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.4.2 VERSION=4.4.4.3
usage() # $1 = exit status usage() # $1 = exit status
{ {