From 552d738579950c3bfd3a005b826150d89dd5ffee Mon Sep 17 00:00:00 2001 From: teastep Date: Wed, 13 Aug 2003 00:19:24 +0000 Subject: [PATCH] Allow bridge devices in /etc/shorewall/maclist git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall/changelog.txt | 2 ++ Shorewall/firewall | 2 +- Shorewall/releasenotes.txt | 9 ++++++--- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 3e6e7bb4f..e1501dd21 100755 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -41,3 +41,5 @@ Changes since 1.4.6 19) Interface-specific dynamic blacklisting chains are now displayed by "shorewall monitor". + +20) Bridge interfaces (br[0-9]) can now be used in /etc/shorewall/maclist. diff --git a/Shorewall/firewall b/Shorewall/firewall index 68acc16b7..d6143964f 100755 --- a/Shorewall/firewall +++ b/Shorewall/firewall @@ -1377,7 +1377,7 @@ setup_mac_lists() { # for interface in $maclist_interfaces; do case $interface in - eth*|wlan*) + eth*|wlan*|br[0-9]) ;; *) fatal_error "MAC verification is only supported on ethernet and 802.11b devices: $interface" diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 3be24dd87..8e494a4b1 100755 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -139,7 +139,9 @@ New Features: The first section of the file is optional and allows aggregation of counter chains into other counter chains. It does this by allowing - you to create an accounting chain hierarchy. + you to create an accounting chain hierarchy. See + http://shorewall.net/Accounting.html for a description of this + section. The second section of the file has the following columns: @@ -223,7 +225,8 @@ New Features: # This example shows how you can aggretate two counters. The # counters being aggregated are input and output counters on - # the device 'ppp0' + # the device 'ppp0'. The CHAIN declarations go in the first + # section of the /etc/shorewall/accounting file. CHAIN tunnel # Create a chain called 'tunnel' CHAIN tunnelin tunnel # Create a chain called @@ -245,4 +248,4 @@ New Features: # 'tunnelout' - +8) Bridge interfaces (br[0-9]) may now be used in /etc/shorewall/maclist.