From c07c4afde8ddfcee4a309fa6ff1306ee58f1a5f7 Mon Sep 17 00:00:00 2001 From: teastep Date: Mon, 28 Aug 2006 16:26:11 +0000 Subject: [PATCH] Update release notes for modularization git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4468 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall/releasenotes.txt | 47 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 4aa6301e4..0f54cda85 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -42,3 +42,50 @@ None. Migration Considerations: New Features: + +1) In order to accomodate small embedded applications, Shorewall 3.3 + is now modularized. In addition to the base files, there are + loadable "libraries" that may be included or omitted from an + embedded system as required. + + Loadable Shorewall libraries reside in /usr/share/shorewall/ and + have names that begin with "lib.". The following libraries are + included in Shorewall 3.3: + + - lib.accounting. Must be available if you include entries in + /etc/shorewall/accounging. + + - lib.dynamiczones. Must be available if you specify + DYNAMIC_ZONES=Yes in shorewall.conf. + + - lib.maclist. Must be available if you specify the 'maclilst' + option in /etc/shorewall/interfaces or /etc/shorewall/hosts. + + - lib.nat. Must be available if you have entries in + /etc/shorewall/masq, /etc/shorewall/nat or /etc/shorewall/netmap. + + - lib.providers. Must be available if you have entries in + /etc/shorewall/providers. + + - lib.proxyarp. Must be available if you have entries in + /etc/shorewall/proxyarp. + + - lib.tc. Must be available if you have entries in + /etc/shorewall/tcdevices and /etc/shorewall/tcclasses. + + - lib.tcrules. Must be available if you have entries in + /etc/shorewall/tcrules. + + - lib.tunnels. Must be available if you have entries in + /etc/shorewall/tunnels. + + Embedded applications can also decrease the size of the Shorewall + footprint by: + + - Omitting the macro files. + - Only including the 'modules' file appropriate for the kernel in + use. + - Omitting all unused extension scripts. + - Stripping the comments (except for copyright) from the various + files. +