From 364cddf99b8b6ddaf088813c07a48c9074a9cb79 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 2 Jul 2010 07:40:30 -0700 Subject: [PATCH] Update release documents for find_hosts_by_option() fix Signed-off-by: Tom Eastep --- Shorewall/changelog.txt | 3 +++ Shorewall/releasenotes.txt | 13 +++++++++++++ 2 files changed, 16 insertions(+) diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 49efe1114..57c93ec9a 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -15,6 +15,9 @@ Changes in Shorewall 4.4.11 7) Implement Vserver zones. +8) Make find_hosts_by_option() work correctly where ALL_IP appears in + hosts file. + Changes in Shorewall 4.4.10 1) Fix regression with scripts. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 519d3859c..0772385b0 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -248,6 +248,19 @@ I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E 6) Under some versions of Perl, a Perl run-time diagnostic was produced when options were omitted from shorewall.conf or shorewall6.conf. +7) If the following options were specified in /etc/shorewall/interfaces + for an interface with '-' in the ZONE column, then these options + would be ignored if there was an entry in the hosts file for the + interface with an explicit or implicit 0.0.0.0/0 (0.0.0.0/0 is + implied when the host list begins with '!'). + + blacklist + maclist + nosmurfs + tcpflags + + Note: for IPv6, the network is ::/0 rather than 0.0.0.0/0. + ---------------------------------------------------------------------------- I V. K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------