diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 07537fd40..35df533f1 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -8,6 +8,8 @@ Changes in Shorewall 4.4.15 4) Fix problem of appending incorrect files. +5) Implement shared TC. + Changes in Shorewall 4.4.14 1) Support ipset lists. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index ddce261b6..3c9ebafd6 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -34,6 +34,10 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES - The file /etc/shorewall6/init was not created. +4) If an interface with physical='+' is given the 'optional' or + 'required', then invalid shell variables names were generated by the + compiler. + ---------------------------------------------------------------------------- I I. K N O W N P R O B L E M S R E M A I N I N G ---------------------------------------------------------------------------- @@ -56,6 +60,32 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES is used. If the variable does not appear in either place, an error message is generated. +2) Shared IPv4/IPv6 traffic shaping configuraiton is now + available. The device and class configuration can be included in + either the Shorewall or the Shorewall6 configuration. To place it + in the Shorewall configuration: + + a) Set TC_ENABLED=Internal in shorewall.conf + b) Set TC_ENABLED=Shared in shorewall6.conf + c) Create symbolic link /etc/shorewall6/tcdevices pointing to + /etc/shorewall/tcdevices. + d) Create symbolic link /etc/shorewall6/tcclasses pointing to + /etc/shorewall/tcclasses. + e) Entries for both IPv4 and IPv6 can be included in + /etc/shorewall/tcfilters. This file has been extended to allow + both IPv4 and IPv6 entries to be included in a single file. + f) Packet marking rules are included in both configurations' + tcrules file as needed. CLASSIFY rules in + /etc/shorewall6/tcrules are validated against the Shorewall TC + configuration. + + In this setup, the tcdevices and tcclasses will only be updated + when Shorewall is restarted. The IPv6 marking rules are updated + when Shorewall6 is restarted. + + The above configuration may be reversed to allow Shorewall6 to + control the TC configuration. + ---------------------------------------------------------------------------- I V. R E L E A S E 4 . 4 H I G H L I G H T S ----------------------------------------------------------------------------