diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt index f1a90a014..5dd22cdaf 100644 --- a/Shorewall/known_problems.txt +++ b/Shorewall/known_problems.txt @@ -24,9 +24,9 @@ 6) The fix for COMMENT and optimization in 4.4.12.1 is incomplete. - Workaround: Don't use OPTIMIZE 8-15. + Corrected in Shorewall 4.4.12.2 7) Exclusion in the blacklist file is correctly validated but is then ignored when generating iptables (ip6tables) rules. - Workaround: Don't use exclusion in the blacklist file. + Corrected in Shorewall 4.4.12.2. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index e89a4d9ea..8b09381ce 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -248,6 +248,13 @@ I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E 4) Previously, if REQUIRE_INTERFACE=Yes then start/restart would fail if the last optional interface tested was not available. +5) Previously, the interface option combination of 'optional' and + 'upnpclient' did not work correctly. + +6) Earlier releases allowed CONTINUE rules with exclusion. These rules + generated valid but incorrect iptables (ip6tables) input. Such + rules are now disallowed. + 4.4.12