extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-03 00:15:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix blacklist loading

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4147 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-06-19 23:57:01 +00:00
parent b62c8406d7
commit 4592b58df6
3 changed files with 15 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -2,6 +2,8 @@ Changes in 3.2.0 RC 5
1) Fix DOA 'LITEDIR' problem in /sbin/shorewall. 1) Fix DOA 'LITEDIR' problem in /sbin/shorewall.
2) Stop the compiler from running iptables.
------------------------------------------------------------------------------- -------------------------------------------------------------------------------
Changes in 3.2.0 RC 4 Changes in 3.2.0 RC 4

20
Shorewall/compiler
View File

@ -6656,21 +6656,19 @@ refresh_blacklist() {
local f=$(find_file blacklist) local f=$(find_file blacklist)
local disposition=$BLACKLIST_DISPOSITION local disposition=$BLACKLIST_DISPOSITION
if qt $IPTABLES -L blacklst -n ; then progress_message2 "$DOING Black List..."
progress_message2 "$DOING Black List..." save_progress_message "Loading Black List..."
save_progress_message "Loading Black List..."
strip_file blacklist $f strip_file blacklist $f
[ "$disposition" = REJECT ] && disposition=reject [ "$disposition" = REJECT ] && disposition=reject
run_iptables -F blacklst run_iptables -F blacklst
while read networks protocol ports; do while read networks protocol ports; do
expandv networks protocol ports expandv networks protocol ports
process_blacklist_rec process_blacklist_rec
done < $TMP_DIR/blacklist done < $TMP_DIR/blacklist
fi
} }
# #

5
Shorewall/releasenotes.txt
View File

@ -40,6 +40,9 @@ Problems Corrected in 3.2.0 RC 5
ERROR: LITEDIR not defined in /usr/share/shorewall/configpath ERROR: LITEDIR not defined in /usr/share/shorewall/configpath
wifitipper: wifitipper:
2) The compiler was running iptables needlessly when DELAYBLACKLISTLOAD=Yes.
This could also result in the blacklist not being loaded in some cases.
Other changes in 3.2.0 RC 5 Other changes in 3.2.0 RC 5
None. None.
@ -589,7 +592,7 @@ New Features:
refresh". refresh".
18) "load" and "reload" commands have been added. These commands allow 18) "load" and "reload" commands have been added. These commands allow
a non-root user with ssh access to a remote system running a non-root user with ssh access to a remote system running
Shorewall Lite to compile a firewall script on the local system and Shorewall Lite to compile a firewall script on the local system and
to install that script on the remote system. to install that script on the remote system.