diff --git a/Shorewall-lite/fallback.sh b/Shorewall-lite/fallback.sh index b97e31cf8..d016365b0 100755 --- a/Shorewall-lite/fallback.sh +++ b/Shorewall-lite/fallback.sh @@ -28,7 +28,7 @@ # shown below. Simply run this script to revert to your prior version of # Shoreline Firewall. -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall-lite/install.sh b/Shorewall-lite/install.sh index 9b636d1c9..bd562ce9e 100755 --- a/Shorewall-lite/install.sh +++ b/Shorewall-lite/install.sh @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall-lite/shorewall-lite.spec b/Shorewall-lite/shorewall-lite.spec index f9e05e90e..7982d7853 100644 --- a/Shorewall-lite/shorewall-lite.spec +++ b/Shorewall-lite/shorewall-lite.spec @@ -1,6 +1,6 @@ %define name shorewall-lite %define version 4.4.0 -%define release 0Beta4 +%define release 0RC1 Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. Name: %{name} @@ -98,6 +98,8 @@ fi %doc COPYING changelog.txt releasenotes.txt %changelog +* Sun Jul 12 2009 Tom Eastep tom@shorewall.net +- Updated to 4.4.0-0RC1 * Thu Jul 09 2009 Tom Eastep tom@shorewall.net - Updated to 4.4.0-0Beta4 * Sat Jun 27 2009 Tom Eastep tom@shorewall.net diff --git a/Shorewall-lite/uninstall.sh b/Shorewall-lite/uninstall.sh index 458dc8598..bc36b3291 100755 --- a/Shorewall-lite/uninstall.sh +++ b/Shorewall-lite/uninstall.sh @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall/Perl/Shorewall/Config.pm b/Shorewall/Perl/Shorewall/Config.pm index 1f4b54055..c1bce1020 100644 --- a/Shorewall/Perl/Shorewall/Config.pm +++ b/Shorewall/Perl/Shorewall/Config.pm @@ -327,7 +327,7 @@ sub initialize( $ ) { TC_SCRIPT => '', EXPORT => 0, UNTRACKED => 0, - VERSION => "4.4.0-Beta4", + VERSION => "4.4.0-RC1", CAPVERSION => 40310 , ); diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 844d2ab79..109538a28 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -1,7 +1,19 @@ +Changes in Shorewall 4.4.0-RC1 + +1) Delete duplicate Git macro. + Changes in Shorewall 4.4.0-Beta4 1) Add more macros. +2) Correct broadcast address detection + +3) Fix 'show dynamic' + +4) Fix BGP and OSFP macros. + +5) Change DISABLE_IPV6 default and use 'correct' ip6tables. + Changes in Shorewall 4.4.0-Beta3 1) Add new macros. diff --git a/Shorewall/install.sh b/Shorewall/install.sh index 57c221636..e5bbcaafe 100755 --- a/Shorewall/install.sh +++ b/Shorewall/install.sh @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt index a454aeef7..c1b7f871f 100644 --- a/Shorewall/known_problems.txt +++ b/Shorewall/known_problems.txt @@ -1 +1 @@ -There are no known problems in Shorewall version 4.4.0-Beta4 +There are no known problems in Shorewall version 4.4.0-RC1 diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 98977e037..f998d1ff7 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -1,4 +1,4 @@ -Shorewall 4.4.0 Beta 4 +Shorewall 4.4.0 RC1 ---------------------------------------------------------------------------- R E L E A S E 4 . 4 H I G H L I G H T S @@ -110,31 +110,10 @@ Shorewall 4.4.0 Beta 4 released. ---------------------------------------------------------------------------- - P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 Beta 3 + P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 RC1 ---------------------------------------------------------------------------- -1) The BGP and OSFP macros released in Beta 3 contained rules to allow - administrative access to the related routing daemons. Those rules - have been deleted. - -2) Previously, if Address Type Match was not available and an - interface on the firewall was (mis-)configured as shown below, then - REJECT policies in Shorewall-perl would drop packets addressed to - the interface rather than reject them. - - 3: venet0: mtu 1500 ... - inet 127.0.0.1/32 scope host venet0 - inet 206.124.146.176/32 brd 206.124.146.176 ... - - Note that a /32 should never be configured with a broadcast - address. - -3) Due to a syntax ambiguity arising from the new dynamic zone - implementation, 'shorewall show dynamic' produced no output. It now - shows the contents of the dynamic blacklist as in earlier - Shorewall releases. - -4) The 'findgw' script produced an error if VERBOSITY > 0. +1) The duplicate macro GIT has been deleted. ---------------------------------------------------------------------------- K N O W N P R O B L E M S R E M A I N I N G @@ -143,26 +122,10 @@ Shorewall 4.4.0 Beta 4 None. ---------------------------------------------------------------------------- - N E W F E A T U R E S I N 4 . 4 . 0 Beta 4 + N E W F E A T U R E S I N 4 . 4 . 0 RC1 ---------------------------------------------------------------------------- -1) Paul Gear has contributed the following macros: - - macro.Webcache (originally named macro.DG) - macro.IPPbrd - macro.NTPbi - macro.RIPbi - macro.mDNS - -2) The default value of DISABLE_IPV6 has been changed from 'Yes' to - 'No' in all sample shorewall.conf files. Shorewall6 should be - installed to restrict IPv6 traffic. - - As part of this change, the ip6tables program in the directory - specified by the IPTABLES setting will be used to disable IPv6. If - the iptables utility is discovered using the PATH setting, then - ip6tables in the same directory as the discovered iptables will be - used. +None. ---------------------------------------------------------------------------- N E W F E A T U R E S IN 4 . 4 @@ -793,3 +756,21 @@ None. 26) A new extension script, 'lib.private' has been added. This file is intended to include declarations of shell functions that will be called by the other run-time extension scripts. + +27) Paul Gear has contributed the following macros: + + macro.Webcache (originally named macro.DG) + macro.IPPbrd + macro.NTPbi + macro.RIPbi + macro.mDNS + +28) The default value of DISABLE_IPV6 has been changed from 'Yes' to + 'No' in all sample shorewall.conf files. Shorewall6 should be + installed to restrict IPv6 traffic. + + As part of this change, the ip6tables program in the directory + specified by the IPTABLES setting will be used to disable IPv6. If + the iptables utility is discovered using the PATH setting, then + ip6tables in the same directory as the discovered iptables will be + used. diff --git a/Shorewall/shorewall.spec b/Shorewall/shorewall.spec index add182bbf..dd39ccd55 100644 --- a/Shorewall/shorewall.spec +++ b/Shorewall/shorewall.spec @@ -1,6 +1,6 @@ %define name shorewall %define version 4.4.0 -%define release 0Beta4 +%define release 0RC1 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Name: %{name} @@ -104,6 +104,8 @@ fi %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %changelog +* Sun Jul 12 2009 Tom Eastep tom@shorewall.net +- Updated to 4.4.0-0RC1 * Thu Jul 09 2009 Tom Eastep tom@shorewall.net - Updated to 4.4.0-0Beta4 * Sat Jun 27 2009 Tom Eastep tom@shorewall.net diff --git a/Shorewall/uninstall.sh b/Shorewall/uninstall.sh index eeed1c188..a70644163 100755 --- a/Shorewall/uninstall.sh +++ b/Shorewall/uninstall.sh @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6-lite/fallback.sh b/Shorewall6-lite/fallback.sh index b97e31cf8..d016365b0 100755 --- a/Shorewall6-lite/fallback.sh +++ b/Shorewall6-lite/fallback.sh @@ -28,7 +28,7 @@ # shown below. Simply run this script to revert to your prior version of # Shoreline Firewall. -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6-lite/install.sh b/Shorewall6-lite/install.sh index 05a33dc2e..787056ea8 100755 --- a/Shorewall6-lite/install.sh +++ b/Shorewall6-lite/install.sh @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6-lite/shorewall6-lite.spec b/Shorewall6-lite/shorewall6-lite.spec index 394c0340e..af0c4bb71 100644 --- a/Shorewall6-lite/shorewall6-lite.spec +++ b/Shorewall6-lite/shorewall6-lite.spec @@ -1,6 +1,6 @@ %define name shorewall6-lite %define version 4.4.0 -%define release 0Beta4 +%define release 0RC1 Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems. Name: %{name} @@ -89,6 +89,8 @@ fi %doc COPYING changelog.txt releasenotes.txt %changelog +* Sun Jul 12 2009 Tom Eastep tom@shorewall.net +- Updated to 4.4.0-0RC1 * Thu Jul 09 2009 Tom Eastep tom@shorewall.net - Updated to 4.4.0-0Beta4 * Sat Jun 27 2009 Tom Eastep tom@shorewall.net diff --git a/Shorewall6-lite/uninstall.sh b/Shorewall6-lite/uninstall.sh index 656a0a21f..77b7cdd10 100755 --- a/Shorewall6-lite/uninstall.sh +++ b/Shorewall6-lite/uninstall.sh @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6/fallback.sh b/Shorewall6/fallback.sh index b4f927e2e..82ff71571 100755 --- a/Shorewall6/fallback.sh +++ b/Shorewall6/fallback.sh @@ -28,7 +28,7 @@ # shown below. Simply run this script to revert to your prior version of # Shoreline Firewall. -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6/install.sh b/Shorewall6/install.sh index 5a6cb2578..f1affb147 100755 --- a/Shorewall6/install.sh +++ b/Shorewall6/install.sh @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status { diff --git a/Shorewall6/shorewall6.spec b/Shorewall6/shorewall6.spec index bb9aaca36..725d7bbed 100644 --- a/Shorewall6/shorewall6.spec +++ b/Shorewall6/shorewall6.spec @@ -1,6 +1,6 @@ %define name shorewall6 %define version 4.4.0 -%define release 0Beta4 +%define release 0RC1 Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems. Name: %{name} @@ -93,6 +93,8 @@ fi %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6 %changelog +* Sun Jul 12 2009 Tom Eastep tom@shorewall.net +- Updated to 4.4.0-0RC1 * Thu Jul 09 2009 Tom Eastep tom@shorewall.net - Updated to 4.4.0-0Beta4 * Sat Jun 27 2009 Tom Eastep tom@shorewall.net diff --git a/Shorewall6/uninstall.sh b/Shorewall6/uninstall.sh index 945342bd9..ce553b25d 100755 --- a/Shorewall6/uninstall.sh +++ b/Shorewall6/uninstall.sh @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.4.0-Beta4 +VERSION=4.4.0-RC1 usage() # $1 = exit status {