Allow bridge devices in /etc/shorewall/maclist

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@704 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

Shorewall/changelog.txt

@@ -41,3 +41,5 @@ Changes since 1.4.6
 
 19) Interface-specific dynamic blacklisting chains are now displayed by
     "shorewall monitor".
+
+20) Bridge interfaces (br[0-9]) can now be used in /etc/shorewall/maclist.

Shorewall/firewall

@@ -1377,7 +1377,7 @@ setup_mac_lists() {
     #
     for interface in $maclist_interfaces; do
 	case $interface in
-	    eth*|wlan*)
+	    eth*|wlan*|br[0-9])
 		;;
 	    *)
 		fatal_error "MAC verification is only supported on ethernet and 802.11b devices: $interface"

Shorewall/releasenotes.txt

@@ -139,7 +139,9 @@ New Features:
 
    The first section of the file is optional and allows aggregation of
    counter chains into other counter chains. It does this by allowing
-   you to create an accounting chain hierarchy.
+   you to create an accounting chain hierarchy. See
+   http://shorewall.net/Accounting.html for a description of this
+   section.
 
    The second section of the file has the following columns:
 
@@ -223,7 +225,8 @@ New Features:
 
         # This example shows how you can aggretate two counters. The
         # counters being aggregated are input and output counters on
-        # the device 'ppp0'
+        # the device 'ppp0'. The CHAIN declarations go in the first 
+	# section of the /etc/shorewall/accounting file.
 
 	CHAIN		tunnel		       # Create a chain called 'tunnel'
 	CHAIN		tunnelin	tunnel # Create a chain called
@@ -245,4 +248,4 @@ New Features:
 					       # 'tunnelout'
         
  
-					       
+8) Bridge interfaces (br[0-9]) may now be used in /etc/shorewall/maclist.