extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-25 09:03:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix 'any' bug

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-08-12 07:47:52 -07:00
parent ededdc405a
commit 5a3ea48064
4 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Shorewall/Perl/Shorewall/Zones.pm
View File

@ -740,7 +740,13 @@ sub non_firewall_zones() {
}
sub all_parent_zones() {
grep ( ! @{$zones{$_}{parents}} , @zones );
#
# Although the firewall zone is a parent zone, we let the caller decide
# if it is to be included or not.
#
grep ( ! ( $zones{$_}->{type} == FIREWALL ||
$zones{$_}->{type} == VSERVER ||
@{$zones{$_}{parents}} ) , @zones );
}
sub complex_zones() {

4
Shorewall/changelog.txt
View File

@ -1,3 +1,7 @@
Changes in Shorewall 4.4.11.3
1) Fix duplicate rule generation with 'any'.
Changes in Shorewall 4.4.11.2
1) Correct typo that caused hang after executing a stop, reset or

4
Shorewall/known_problems.txt
View File

@ -66,3 +66,7 @@
8) On systems running Upstart, Shorewall-init cannot reliably close
the firewall before interfaces come up.
9) When 'any' is used in the SOURCE column of /etc/shorewall[6]/rules,
a duplicate rule is generated in all "fw2*" ("fw-* if
ZONE2ZONE="-"). If 'any' is used in the DEST column, then a
duplicate rule appears in all "*2fw" (*-fw) chains.

7
Shorewall/releasenotes.txt
View File

@ -218,6 +218,13 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
4.4.11.3
1) When 'any' was used in the rules SOURCE column, a duplicate rule
was generated in all "fw2*" ("fw-* if ZONE2ZONE="-"). If 'any' was
used in the DEST column, then a duplicate rule appeared in all "*2fw"
(*-fw) chains.
4.4.11.2
1) A typo in /sbin/shorewall6-lite version 4.4.11.1 caused the