Rest of the fix for proxy arp clearing

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5492 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-03-11 16:37:53 +00:00
parent fffe3bad21
commit 6ad67cfb80
3 changed files with 15 additions and 21 deletions

View File

@ -1,3 +1,7 @@
Changes in 3.4.1
1) Add rest of proxy arp fix.
Changes in 3.4.0 Final Changes in 3.4.0 Final
1) Add missing logic for "!" rules. 1) Add missing logic for "!" rules.

View File

@ -4627,12 +4627,12 @@ __EOF__
[ -z "\${haveroute}\${NOROUTES}" ] && qt ip route del \$address dev \$interface [ -z "\${haveroute}\${NOROUTES}" ] && qt ip route del \$address dev \$interface
done < \${VARDIR}/proxyarp done < \${VARDIR}/proxyarp
rm -f \${VARDIR}/proxyarp
fi
for f in /proc/sys/net/ipv4/conf/*; do for f in /proc/sys/net/ipv4/conf/*; do
[ -f \$f/proxy_arp ] && echo 0 > \$f/proxy_arp [ -f \$f/proxy_arp ] && echo 0 > \$f/proxy_arp
done done
fi
rm -f \${VARDIR}/proxyarp
__EOF__ __EOF__
[ -n "$CLEAR_TC" ] && save_command "delete_tc1" [ -n "$CLEAR_TC" ] && save_command "delete_tc1"

View File

@ -1,4 +1,4 @@
Shorewall 3.4.0 Shorewall 3.4.1
Release Highlights Release Highlights
@ -28,24 +28,14 @@ Release Highlights
/etc/shorewall/route_rules and reverses those changes when /etc/shorewall/route_rules and reverses those changes when
appropriate. appropriate.
Problems Corrected in 3.4.0 Final. Problems Corrected in 3.4.1
1) In the rules file, following the action with "!" is supposed to 1) The "shorewall-[lite] [re]start and stop" commands reset the
exempt the rule from being suppressed by OPTIMIZE=1. That feature
was not working.
2) If both a macro body and a macro invocation contained an entry in the
SOURCE or DEST column, then compilation failed with the error:
merge_macro_source_dest: command not found
3) An obscure bug in rule activation having to do with the new
exclusion feature in /etc/shorewall/hosts has been corrected.
4) The "shorewall-[lite] [re]start and stop" commands reset the
proxy_arp flag on all interfaces on the system making it impossible proxy_arp flag on all interfaces on the system making it impossible
to control proxy arp manually with Shorewall installed. With this to control proxy arp manually with Shorewall installed. There was a
change, shorewall will only clear proxy arp if there were entries in partial fix included in 3.4.0; unfortunately, it did not correct the
problem completely. Shorewall 3.4.1 includes the rest of the change
necessarey to only clear proxy arp if there were entries in
/etc/shorewall/proxyarp the last time that Shorewall was /etc/shorewall/proxyarp the last time that Shorewall was
[re]started. [re]started.