From 95d02199f9aea31035d7e1680d175c1d26074573 Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 22 Aug 2002 20:25:16 +0000 Subject: [PATCH] Release info update for 1.3.7 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@206 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall/changelog.txt | 27 +++++++++++++++++++-------- Shorewall/fallback.sh | 2 +- Shorewall/install.sh | 2 +- Shorewall/releasenotes.txt | 23 ++++++++++++++++------- Shorewall/shorewall.spec | 4 +++- Shorewall/uninstall.sh | 2 +- 6 files changed, 41 insertions(+), 19 deletions(-) diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index cbd7403b1..9efc392c8 100755 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -1,15 +1,26 @@ -Changes since 1.3.5 +Changes since 1.3.6 -1. REDIRECT rules are now working again. +1. Comments in the common.def file have been updated. -2. proxyarp option now works. +2. icmp.def deimplemented + +3. FORWARDPING implemented. + +4. Made MULTIPORT work with iptables 1.2.7 + +5. Corrected ADD_SNAT_ALIASES + +6. Work around iptables 1.2.7 protocol match bug. + +7. Remove themes from documentation and web site. + +8. Comments in the interfaces file improved. + +9. Typo in the policy file corrected. + +10. Loopback class A added to rfc1918. -3. It is once again possible to specify a host list in an - /etc/shorewall/hosts entry. -4. The lock file is now removed when the firewall script is killed by a - signal. -5. Implemented "new not SYN" dropping. diff --git a/Shorewall/fallback.sh b/Shorewall/fallback.sh index 61b89b7e7..71c0e9ba4 100755 --- a/Shorewall/fallback.sh +++ b/Shorewall/fallback.sh @@ -28,7 +28,7 @@ # shown below. Simply run this script to revert to your prior version of # Shoreline Firewall. -VERSION=1.3.6 +VERSION=1.3.7 usage() # $1 = exit status { diff --git a/Shorewall/install.sh b/Shorewall/install.sh index 00a07ed22..1626089db 100755 --- a/Shorewall/install.sh +++ b/Shorewall/install.sh @@ -54,7 +54,7 @@ # /etc/rc.d/rc.local file is modified to start the firewall. # -VERSION=1.3.6 +VERSION=1.3.7 usage() # $1 = exit status { diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index d3e57380b..11eb0c2e7 100755 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -3,13 +3,22 @@ fixes. New features include: -1) The new "Shorewall Setup Guide" is included in this release. This - guide is intended for users who have multiple static external IP - addresses and for users who what to learn a bit more abound - Shorewall than is described in the single-address guides. +1) The 'icmp.def' file is now empty! The rules in that file were + required in ipchains firewalls but are not required in Shorewall. + Users who have ALLOWRELATED=No in shorewall.conf should see the + Upgrade Issues. +2) A 'FORWARDPING' option has been added to shorewall.conf. The effect + of setting this variable to Yes is the same as the effect of adding + an ACCEPT rule for ICMP echo-request in + /etc/shorewall/icmpdef. Users who have such a rule in icmpdef are + encouraged to switch to FORWARDPING=Yes. +3) The loopback CLASS A Network (127.0.0.0/8) has been added to the + rfc1918 file. +4) Shorewall now works with iptables 1.2.7. +5) The documentation and Web site no longer use FrontPage themes. -2) Shorewall now drops non-SYN tcp packets that are not part of an - established connection. These packets can be optionally logged by - setting the new LOGNEWNOTSYN variable in shorewall.conf. +I would like to thank John Distler for his valuable input regarding TCP +SYN and ICMP treatment in Shorewall. That input has led to marked +improvement in Shorewall in the last two releases. diff --git a/Shorewall/shorewall.spec b/Shorewall/shorewall.spec index 24cae25e5..aedc4cc1f 100644 --- a/Shorewall/shorewall.spec +++ b/Shorewall/shorewall.spec @@ -1,5 +1,5 @@ %define name shorewall -%define version 1.3.6 +%define version 1.3.7 %define release 1 %define prefix /usr @@ -76,6 +76,8 @@ if [ $1 = 0 ]; then if [ -x /sbin/insserv ]; then /sbin/insserv -r /etc/init.d/s %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel %changelog +* Thu Aug 22 2002 Tom Eastep +- Changed version to 1.3.7 * Sun Aug 04 2002 Tom Eastep - Changed version to 1.3.6 * Mon Jul 29 2002 Tom Eastep diff --git a/Shorewall/uninstall.sh b/Shorewall/uninstall.sh index 7e9920320..8dfcbe0e3 100755 --- a/Shorewall/uninstall.sh +++ b/Shorewall/uninstall.sh @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Seattle Firewall -VERSION=1.3.6 +VERSION=1.3.7 usage() # $1 = exit status {