extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 17:58:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Document fix for IPSETs and ORIGINAL DEST

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-04-29 07:25:42 -07:00
parent 27f1c494a0
commit 4a4d74b52b
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -2,6 +2,8 @@ Changes in Shorewall 4.4.20 Beta 1
1) Apply Togan's patch for installation flexibility. 1) Apply Togan's patch for installation flexibility.
2) Restore use of IPSETS in the ORIGINAL DEST column.
Changes in Shorewall 4.4.19.1 Changes in Shorewall 4.4.19.1
1) Eliminate silly duplicate rule when stopped. 1) Eliminate silly duplicate rule when stopped.

13
Shorewall/releasenotes.txt
View File

@ -39,6 +39,19 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
DNAT and REDIRECT rules. That capability, inadvertently dropped in DNAT and REDIRECT rules. That capability, inadvertently dropped in
Shorewall-perl, has now been restored. Shorewall-perl, has now been restored.
Please note, however, that using an IPSET in this way will open the
server port from the SOURCE zone.
Example:
This rule:
DNAT net dmz:10.1.10.2 tcp 80 - +foo
will implicitly add this rule:
ACCEPT net dmz:10.1.10.2 tcp 80
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
I I. K N O W N P R O B L E M S R E M A I N I N G I I. K N O W N P R O B L E M S R E M A I N I N G
---------------------------------------------------------------------------- ----------------------------------------------------------------------------