Document change to hashlimit

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-02-17 15:38:38 -08:00
parent 579f4d4698
commit 6db2c5fbe3
2 changed files with 11 additions and 0 deletions

View File

@ -4,6 +4,8 @@ Changes in Shorewall 4.4.7.5
2) Avoid duplicate SFQ class numbers.
3) Fix low per-IP rate limits.
Changes in Shorewall 4.4.7.4
1) Add $remote_fs to Required-start and Required-stop for Debian.

View File

@ -202,6 +202,15 @@ Shorewall 4.4.7 Patch Release 5.
1500 limit 127 perturb 10" Failed
Processing /etc/shorewall/stop ...
3) Previously, when per-IP rate limiting was specified with a low rate
(such as 1/hour), the effective rate was much higher (once every 10
seconds). The Shorewall compiler now configures the hashlimit table
based on the rate such that the rate is more accurately enforced.
As part of this change, a unique hash table name is assigned to
each rule that does not specify a table name in the rule. The
assigned names are of the form 'shorewallN' where N is an integer.
----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 4 . 7 . 4
----------------------------------------------------------------------------