Document chain name length restriction fix

This commit is contained in:
Tom Eastep 2011-01-31 07:15:26 -08:00
parent 5fc72fc727
commit 4e19c193a1
3 changed files with 17 additions and 3 deletions

View File

@ -4,6 +4,8 @@ Changes in Shorewall 4.4.16.3
2) Correct two defects in compiler module loading.
3) Ensure that manual and accounting chains aren't too long.
Changes in Shorewall 4.4.16.2
1) Add sch_prio to modules file.

View File

@ -23,8 +23,8 @@
a) Copy /usr/share/shorewall/helpers to /etc/shorewall/
b) Add 'loadmodule sch_prio' to the copy
4) If the SOURCE column in /etc/shorewall6/rules contains [address],
a spurious error is generated:
4) If the SOURCE column in /etc/shorewall6/rules contains an address
enclosed in [...], a spurious error is generated:
Example:
@ -34,7 +34,14 @@
Workaround:
Use <address> instead. In the example above, use net:<::/0>.
Enclose the address in <...>. In the example above, use
net:<::/0>.
3) Currently, Shorewall does not check the length of the names of
accounting chains and manual chains. This can result in
errors when loading the resulting ruleset if a chain name is longer
than 29 characters.

View File

@ -27,6 +27,11 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
b) A Perl diagnostic was issued when running on a monolithic kernel
when the modutils package was installed.
3) Previously, Shorewall did not check the length of the names of
accounting chains and manual chains. This could result in
errors when loading the resulting ruleset. Now, the compiler issues
an error for chain names longer than 29 characters.
4.4.16.2
1) Startup could previously fail on a system where module autoloading