From 4c75cf186ec2f609f62796164814de4b7196e54c Mon Sep 17 00:00:00 2001 From: teastep Date: Mon, 23 Apr 2007 14:23:47 +0000 Subject: [PATCH] Update release documentation git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6077 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-common/changelog.txt | 2 ++ Shorewall-common/releasenotes.txt | 11 +++++++++++ 2 files changed, 13 insertions(+) diff --git a/Shorewall-common/changelog.txt b/Shorewall-common/changelog.txt index 0948dc5e0..63ef3d697 100644 --- a/Shorewall-common/changelog.txt +++ b/Shorewall-common/changelog.txt @@ -22,6 +22,8 @@ Changes in 3.9.4 11) Fix typo in maclist validation. +12) Allow 'optional' to work with 'maclist'. + Changes in 3.9.3 1) Apply Steven Springl's patch for port checking. diff --git a/Shorewall-common/releasenotes.txt b/Shorewall-common/releasenotes.txt index 2fd6f18e8..9bd1ff53e 100644 --- a/Shorewall-common/releasenotes.txt +++ b/Shorewall-common/releasenotes.txt @@ -51,6 +51,10 @@ Other changes in Shorewall 3.9.4 option Keep - Shorewall ignores the option entirely. +2) The 'optional' interface option can now work with 'maclist'; an + optional interface that specifies 'maclist' will not prevent + Shorewall from [re]starting successfully. + Migration Considerations: 1) You cannot simply upgrade your existing Shorewall package. You must @@ -325,6 +329,13 @@ Migration Considerations: I specify 'optional' on interfaces to Xen virtual machines that may or may not be running when Shorewall is [re]started. + CAUTION: Use 'optional' at your own risk. If you [re]start + Shorewall when an 'optional' interface is not available and then do + a 'shorewall save', subsequent 'shorewall restore' and 'shorewall -f + start' operations will instantiate a ruleset that does not support + that interface, even if it is available at the time of the + restore/start. + 3) The treatment of the following interface options has changed under Shorewall-perl.