From 68165acd200181a5fc2eb658e7cc0007095df3b3 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Thu, 26 Aug 2010 08:48:07 -0700 Subject: [PATCH] Update known problems (exclusion with CONTINUE). Signed-off-by: Tom Eastep --- Shorewall/known_problems.txt | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt index 39085c893..857730347 100644 --- a/Shorewall/known_problems.txt +++ b/Shorewall/known_problems.txt @@ -92,7 +92,7 @@ Workaround: Don't use optimizaiton levels greater than 7. -13) Under rare circumstances unvolving exclusion, OPTIMIZE 8 through 15 +13) Under rare circumstances involving exclusion, OPTIMIZE 8 through 15 can result in invalid iptables-restore (ip6tables-restore) input. Workaround: Don't use optimizaiton levels greater than 7. @@ -101,3 +101,9 @@ optional interface defined in the interfaces file is available. Workaround: None available. + +15) The compiler erroneously allows exclusion in CONTINUE rules + (tcrules and rules files). The generated iptables (ip6tables) rules + do not work as expected. + + Workaround: Do not use exclusion with CONTINUE.