From 699a4cf567ed3b59d75669e19a20d15f81b102e5 Mon Sep 17 00:00:00 2001 From: teastep Date: Fri, 12 Mar 2004 22:58:41 +0000 Subject: [PATCH] Make CONTINUE work again git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1186 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall2/changelog.txt | 2 ++ Shorewall2/firewall | 1 + Shorewall2/releasenotes.txt | 12 ++---------- 3 files changed, 5 insertions(+), 10 deletions(-) diff --git a/Shorewall2/changelog.txt b/Shorewall2/changelog.txt index ad9fc53ab..51dd8c855 100644 --- a/Shorewall2/changelog.txt +++ b/Shorewall2/changelog.txt @@ -62,3 +62,5 @@ Changes since 1.4.10 30) Remove fw->fw policy. 31) Issue clearer message if ip6tables not installed. + +32) Make 'CONTINUE' rules work again. diff --git a/Shorewall2/firewall b/Shorewall2/firewall index a1005ff62..db238fc41 100755 --- a/Shorewall2/firewall +++ b/Shorewall2/firewall @@ -3061,6 +3061,7 @@ process_rule() # $1 = target target=reject ;; CONTINUE) + target=RETURN ;; DNAT*) target=ACCEPT diff --git a/Shorewall2/releasenotes.txt b/Shorewall2/releasenotes.txt index ce876c0ae..c872e1942 100755 --- a/Shorewall2/releasenotes.txt +++ b/Shorewall2/releasenotes.txt @@ -19,18 +19,10 @@ Problems Corrected since 1.4.10 DNAT z1!z2,z3 z4... -Problems Corrected since RC1 +Problems Corrected since RC2 -1) After a "shorewall stop", traffic routed back to networks in - the /etc/shorewall/routestopped file is accepted. This is required - to allow traffic through a bridge while shorewall is stopped. +1) CONTINUE rules now work again. -2) The /usr/share/shorewall/help file has been corrected. - -3) fw->fw policy removed from /etc/shorewall/policy. - -4) If IPV6_DISABLE=Yes, a clearer diagnostic message is issued if - ip6tables is not installed. ----------------------------------------------------------------------- Issues when migrating from Shorewall 1.4.x to Shorewall 2.0.0: