diff --git a/STABLE/changelog.txt b/STABLE/changelog.txt index a149cc9d3..cb9fcfd02 100644 --- a/STABLE/changelog.txt +++ b/STABLE/changelog.txt @@ -119,3 +119,7 @@ Changes in 2.0.15 Changes in 2.0.16 1) Backport DROPINVALID from 2.2.0. + +Changes in 2.0.17 + +1) Fix rejNotSyn. diff --git a/STABLE/firewall b/STABLE/firewall index ae564c8f4..4018a7750 100755 --- a/STABLE/firewall +++ b/STABLE/firewall @@ -2938,7 +2938,7 @@ process_actions2() { [ "$COMMAND" != check ] && run_iptables -A dropNotSyn -p tcp ! --syn -j DROP ;; rejNotSyn) - [ "$COMMAND" != check ] && run_iptables -A rejectNotSyn -p tcp ! --syn -j REJECT --reject-with tcp-reset + [ "$COMMAND" != check ] && run_iptables -A rejNotSyn -p tcp ! --syn -j REJECT --reject-with tcp-reset ;; logNotSyn) log_action logNotSyn LOG diff --git a/STABLE/releasenotes.txt b/STABLE/releasenotes.txt index 4642131c2..cab82fe85 100644 --- a/STABLE/releasenotes.txt +++ b/STABLE/releasenotes.txt @@ -1,4 +1,4 @@ -Shorewall 2.0.16 +Shorewall 2.0.17 ---------------------------------------------------------------------- Problems Corrected in version 2.0.4 @@ -299,3 +299,8 @@ New Features in 2.0.16 If not specified or if specified as empty (e.g., DROPINVALID="") then DROPINVALID=Yes is assumed. +------------------------------------------------------------------------------- +Problems corrected in 2.0.17 + +1) Invoking the 'rejNotSyn' action results in an error at startup. +