Release info update for 1.3.7

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@206 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-08-22 20:25:16 +00:00
parent d766536d1c
commit 95d02199f9
6 changed files with 41 additions and 19 deletions

View File

@ -1,15 +1,26 @@
Changes since 1.3.5
Changes since 1.3.6
1. REDIRECT rules are now working again.
1. Comments in the common.def file have been updated.
2. proxyarp option now works.
2. icmp.def deimplemented
3. FORWARDPING implemented.
4. Made MULTIPORT work with iptables 1.2.7
5. Corrected ADD_SNAT_ALIASES
6. Work around iptables 1.2.7 protocol match bug.
7. Remove themes from documentation and web site.
8. Comments in the interfaces file improved.
9. Typo in the policy file corrected.
10. Loopback class A added to rfc1918.
3. It is once again possible to specify a host list in an
/etc/shorewall/hosts entry.
4. The lock file is now removed when the firewall script is killed by a
signal.
5. Implemented "new not SYN" dropping.

View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall.
VERSION=1.3.6
VERSION=1.3.7
usage() # $1 = exit status
{

View File

@ -54,7 +54,7 @@
# /etc/rc.d/rc.local file is modified to start the firewall.
#
VERSION=1.3.6
VERSION=1.3.7
usage() # $1 = exit status
{

View File

@ -3,13 +3,22 @@ fixes.
New features include:
1) The new "Shorewall Setup Guide" is included in this release. This
guide is intended for users who have multiple static external IP
addresses and for users who what to learn a bit more abound
Shorewall than is described in the single-address guides.
1) The 'icmp.def' file is now empty! The rules in that file were
required in ipchains firewalls but are not required in Shorewall.
Users who have ALLOWRELATED=No in shorewall.conf should see the
Upgrade Issues.
2) A 'FORWARDPING' option has been added to shorewall.conf. The effect
of setting this variable to Yes is the same as the effect of adding
an ACCEPT rule for ICMP echo-request in
/etc/shorewall/icmpdef. Users who have such a rule in icmpdef are
encouraged to switch to FORWARDPING=Yes.
3) The loopback CLASS A Network (127.0.0.0/8) has been added to the
rfc1918 file.
4) Shorewall now works with iptables 1.2.7.
5) The documentation and Web site no longer use FrontPage themes.
2) Shorewall now drops non-SYN tcp packets that are not part of an
established connection. These packets can be optionally logged by
setting the new LOGNEWNOTSYN variable in shorewall.conf.
I would like to thank John Distler for his valuable input regarding TCP
SYN and ICMP treatment in Shorewall. That input has led to marked
improvement in Shorewall in the last two releases.

View File

@ -1,5 +1,5 @@
%define name shorewall
%define version 1.3.6
%define version 1.3.7
%define release 1
%define prefix /usr
@ -76,6 +76,8 @@ if [ $1 = 0 ]; then if [ -x /sbin/insserv ]; then /sbin/insserv -r /etc/init.d/s
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
%changelog
* Thu Aug 22 2002 Tom Eastep <tom@shorewall.net>
- Changed version to 1.3.7
* Sun Aug 04 2002 Tom Eastep <tom@shorewall.net>
- Changed version to 1.3.6
* Mon Jul 29 2002 Tom Eastep <tom@shorewall.net>

View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version
# shown below. Simply run this script to remove Seattle Firewall
VERSION=1.3.6
VERSION=1.3.7
usage() # $1 = exit status
{