diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 18473a888..3b8f48c37 100755 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -89,4 +89,6 @@ Changes since 1.4.6 39) Fatal error if /etc/shorewall/common or /etc/shoreall/common.def do not exist. -40) Process blacklist before DHCP. \ No newline at end of file +40) Process blacklist before DHCP. + +41) Fix 'logunclean' log message disposition. \ No newline at end of file diff --git a/Shorewall/firewall b/Shorewall/firewall index d7540bfa0..2cbe645a4 100755 --- a/Shorewall/firewall +++ b/Shorewall/firewall @@ -4007,11 +4007,11 @@ add_common_rules() { LOGPARMS="$LOGPARMS --log-ip-options" - log_rule $LOGUNCLEAN logpkt DROP -p ! tcp + log_rule $LOGUNCLEAN logpkt LOG -p ! tcp LOGPARMS="$LOGPARMS --log-tcp-options" - log_rule $LOGUNCLEAN logpkt DROP -p tcp + log_rule $LOGUNCLEAN logpkt LOG -p tcp LOGPARMS="$savelogparms" diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 48880f200..26c608acd 100755 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -85,6 +85,9 @@ Problems Corrected since version 1.4.6: that blacklist entries now take precedence over the 'dhcp' interface setting. +17) The log message generated from the 'logunclean' interface option + has been changed to reflect a disposition of LOG rather than DROP. + Migration Issues: 1) IP Traffic Accounting is changed from Snapshot 20030813.